Excellent article from @charleshumble.bsky.social, a must-read for all developers leaddev.com/ai/nobody-kn...

I regularly see people wondering how it's possible that there are so many musicians and writers and film makers and artists from a tiny nation like Iceland. And the answer is really simple: State funding for art education and artists. I literally get a salary from the government to write books.

I spoke with Bhavin Shah a few weeks back for the Kubernetes Bytes podcast. We covered a bunch of topics including CVEs, the different vulnerability databases, and how platform engineers can use Chainguard images to protect against CVEs. www.kubernetesbytes.com

My hot take on why the "latest" tag is sometimes the best tag to use! #containers #kubernetes #devops

I spoke with @charleshumble.bsky.social a few weeks back for @gotocon.com We dived into a wide range of security and container topics, from why containers came about and how vulnerability scanners work, to SBOMs and the evolution of Distroless into @chainguard.dev images youtu.be/9NUOiL48hbo?...

Security vs DevEx? False choice. @abangser.bsky.social, Adrian Mouat & @hollycummins.com explore how teams can build systems that are both secure and great to work on. youtu.be/EGSMP2UodKM?...

i'm torn on this. on one hand: yes, i feel this. i'm doing coding side projects again and i haven't done that for a decade. on another hand, the kind of burnout i get from overusing claude is unlike anything before. i'm learning to find a balance

For those of us struggling with feeling devalued as programmers with the rise of AI, I present the following quote from Paul Graham: "In programming, as in many fields, the hard part isn't solving problems, but deciding what problems to solve."

I've told this story on ContrabandCamp but it's worth sharing for BHM because it's one of the greatest stories ever. A thread.

Probably the most complex piece of self assembly furniture I've ever built was my kids toy kitchen.

Stockholm, I have entered your maw. I'm also talking at the cncf Meetup tonight if anyone is interested! community.cncf.io/events/detai...

@danlorenc recently wrote a blog on Gastown, which is Steve Yegge's attempt to build a "workspace manager" for coordinating AI agents. www.chainguard.dev/unchained/ga...

@chainguard.dev Assemble returns! Chainguard's flagship conference is coming to NYC. Come join us in March for talks & community events on the future of secure software (and especially secure container images). assemble.chainguard.dev/event/2991fc...

Live in LESS THAN AN HOUR Come learn you some jj 😄

I'm sure some of you use the excellent @renovatebot.com to update dependencies in repos. But if you're calling Renovate from a GitHub action, you probably had to create a Personal Access Token (PAT). And PATs are a form of long-live token, my thoughts on which are summed up by this GIF.

Apparently Dijkstra wrote: "If in physics there's something you don't understand, you can always hide behind the uncharted depths of nature. You can always blame God. You didn't make it so complex yourself."

I found a "modern unix tool" list on a blog by @billmill.org recently. Quite a few I already knew about, but it's definitely a helpful list. In particular it's good for recommending improved versions of existing utils e.g. bat vs cat, dust vs du, eza vs ls. notes.billmill.org/computer_usa...

My talk from Kubernetes Community Days is up! I go into details about what we can learn from various security incidents in recent years (yes, including Shai Hulud). www.youtube.com/watch?v=-WOT...

Been working on this one for a while — it's a little bit of history of a key foundation of internet technology, and a little bit of an explainer about how people _actually_ invent things. This is the amazing (true!) story of how Markdown took over the world. www.anildash.com/2026/01/09/h...

Evaluating risk and focusing on actual problems is key to security. Quantum risks are real, but does it matter when you leave long-lived tokens accessible? As Bruce Schneier said "More people are killed every year by pigs than by sharks, which shows you how good we are at evaluating risk."

There was a recent post that hit Hacker News about a server getting hacked and running Monero. blog.jakesaunders.dev/my-server-st... I wanted to call out a few points...

via The New Yorker, Ellis Rosen cartoon

We've just added support for "Custom Certificates" to @chainguard.dev's Custom Assembly tool. This means you can provide us with your org's public certs and we will build them into your images. Simple, but it saves a massive amount of time and resources for our customers. tinyurl.com/vkwvsjsa

If you're an AWS user, you can now get @chainguard.dev images directly from ECR. So now you can get your secure, zero CVE images faster and with less networking costs. You can try it out right away: docker pull public.ecr.aws/chainguard/wolfi-base:latest aws.amazon.com/blogs/contai...

I have found the original inspiration for space invaders

Unpopular opinion: Current code review tools just don’t make much sense for AI-generated code When reviewing code I really want to know: - The prompt made by the dev - What corrections the other dev made to the code - Clear marking of code AI-generated not changed by a human

Top networking tip: do not plug both ends of an ethernet cable into the same switch.

"Any fool can write code that a computer can understand. Good programmers write code that humans can understand." I stumbled across this quote from Refactoring by Martin Fowler when looking at dannorth.net/blog/cupid-f... by @tastapod.com .

New video on updating container images with Renovate. The demo uses the Renovate GitHub Action but pairs it with Octo-STS so you don't need to create a PAT. www.youtube.com/watch?v=I0hW...

Just finished @nealstephenson.bsky.social's Baroque Cycle. I'm not a fast reader so it was a bit of an undertaking. Worth it though. And in relation to recent news, it definitely has an ending and even goes some lengths to wrap up various story arcs. Infinite Jest it is not.

Please remember a Lewis is for life, not just Xmas.

fucking bryan is both very, very good -- again -- and also funny, again. I especially dig the fact that building a solution is about trust built into the future. It's human thing.

I fucking love memes you can understand through the language barrier, holy shit

A f*"**ng tab just broke my GitHub action. Why do we still have these invisible battles 😭

What was Matthew's job again?

At a private event last week Bogomil Balkansky shared his thoughts on what he looks for when investing and advising companies.  The quote that stuck with me was "Velocity is the primary determinate of success for a company".

Not sure if I can bear to watch this given that I nearly stopped the panel 10 minutes early 🫣

Videos for the talks I was a part of for KubeCon + CloudNativeCon NA 2025 have dropped! youtu.be/VWi105l6tzs

When I've had to explain what containers are in the past, I've often used this quote from @bcantrill.bsky.social  "Docker will do to apt what apt did to tar."

What were everyone's favourite sessions from KubeCon last week? I spent most of time on the booth and hallway track and I'm looking forward to catching up (at double speed!) when the videos come out. #kubecon

"Done right, vibe coding isn’t just about faster output, it’s about strengthening the code review muscle. " @mattmoor.dev

For a few months now, @chainguard.dev have had "catalog pricing", which gives customers access to the entire container catalog. But until recently, requesting new images was a manual process. That all with the introduction of self-serve.

Hey @strongjz.bsky.social our entire conversation was worth it for this headline...

End of an era, watch your Ingress NGINX plans! What are you replacing NGINX with?

@puerco.mx kicking off Open Source SecurityCon by demonstrating how to prevent cats messing with your training data.

MOAR

Continuing quote Friday, here's one from Werner Herzog when a journalist asks him about teaching his son "real things": ‘It’s much easier than that. Your son doesn’t need to know how to milk a cow. I’d allow him to dig a deep hole in the ground. Just let him dig a hole in the ground.’

I'm very much looking forward to KubeCon Atlanta next week. On Monday, I'll be hosting a panel "Balancing Developer Freedom and Security" with Cat Morris, @marcusforpeace.bsky.social , @alex.zenla.io  (plus A.N. Other guest) as part of Open Source SecurityCon. https://tinyurl.com/23sjsctb 1/3

Pretty sure my kids have worked out a rota system for messing with my sleep.

I've recently been reading an early access version of Refactoring English by @mtlynch.io . I have to say this is a great book, with lots of hard-won tips and advice on how to make your writing more accessible and get it in front of a relevant audience.