There was a recent post that hit Hacker News about a server getting hacked and running Monero. blog.jakesaunders.dev/my-server-st... I wanted to call out a few points...

via The New Yorker, Ellis Rosen cartoon

We've just added support for "Custom Certificates" to @chainguard.dev's Custom Assembly tool. This means you can provide us with your org's public certs and we will build them into your images. Simple, but it saves a massive amount of time and resources for our customers. tinyurl.com/vkwvsjsa

If you're an AWS user, you can now get @chainguard.dev images directly from ECR. So now you can get your secure, zero CVE images faster and with less networking costs. You can try it out right away: docker pull public.ecr.aws/chainguard/wolfi-base:latest aws.amazon.com/blogs/contai...

I have found the original inspiration for space invaders

Unpopular opinion: Current code review tools just don’t make much sense for AI-generated code When reviewing code I really want to know: - The prompt made by the dev - What corrections the other dev made to the code - Clear marking of code AI-generated not changed by a human

Top networking tip: do not plug both ends of an ethernet cable into the same switch.

"Any fool can write code that a computer can understand. Good programmers write code that humans can understand." I stumbled across this quote from Refactoring by Martin Fowler when looking at dannorth.net/blog/cupid-f... by @tastapod.com .

New video on updating container images with Renovate. The demo uses the Renovate GitHub Action but pairs it with Octo-STS so you don't need to create a PAT. www.youtube.com/watch?v=I0hW...

Just finished @nealstephenson.bsky.social's Baroque Cycle. I'm not a fast reader so it was a bit of an undertaking. Worth it though. And in relation to recent news, it definitely has an ending and even goes some lengths to wrap up various story arcs. Infinite Jest it is not.

Please remember a Lewis is for life, not just Xmas.

fucking bryan is both very, very good -- again -- and also funny, again. I especially dig the fact that building a solution is about trust built into the future. It's human thing.

I fucking love memes you can understand through the language barrier, holy shit

A f*"**ng tab just broke my GitHub action. Why do we still have these invisible battles 😭

What was Matthew's job again?

At a private event last week Bogomil Balkansky shared his thoughts on what he looks for when investing and advising companies.  The quote that stuck with me was "Velocity is the primary determinate of success for a company".

Not sure if I can bear to watch this given that I nearly stopped the panel 10 minutes early 🫣

Videos for the talks I was a part of for KubeCon + CloudNativeCon NA 2025 have dropped! youtu.be/VWi105l6tzs

When I've had to explain what containers are in the past, I've often used this quote from @bcantrill.bsky.social  "Docker will do to apt what apt did to tar."

What were everyone's favourite sessions from KubeCon last week? I spent most of time on the booth and hallway track and I'm looking forward to catching up (at double speed!) when the videos come out. #kubecon

"Done right, vibe coding isn’t just about faster output, it’s about strengthening the code review muscle. " @mattmoor.dev

For a few months now, @chainguard.dev have had "catalog pricing", which gives customers access to the entire container catalog. But until recently, requesting new images was a manual process. That all with the introduction of self-serve.

Hey @strongjz.bsky.social our entire conversation was worth it for this headline...

End of an era, watch your Ingress NGINX plans! What are you replacing NGINX with?

@puerco.mx kicking off Open Source SecurityCon by demonstrating how to prevent cats messing with your training data.

MOAR

Continuing quote Friday, here's one from Werner Herzog when a journalist asks him about teaching his son "real things": ‘It’s much easier than that. Your son doesn’t need to know how to milk a cow. I’d allow him to dig a deep hole in the ground. Just let him dig a hole in the ground.’

I'm very much looking forward to KubeCon Atlanta next week. On Monday, I'll be hosting a panel "Balancing Developer Freedom and Security" with Cat Morris, @marcusforpeace.bsky.social , @alex.zenla.io  (plus A.N. Other guest) as part of Open Source SecurityCon. https://tinyurl.com/23sjsctb 1/3

Pretty sure my kids have worked out a rota system for messing with my sleep.

I've recently been reading an early access version of Refactoring English by @mtlynch.io . I have to say this is a great book, with lots of hard-won tips and advice on how to make your writing more accessible and get it in front of a relevant audience. 

One thing I find pretty remarkable is the fact that models like Whisper for voice-to-text have gotten really good at removing stop words and pauses from speech understanding when you change your inflection to mean putting a word in quotes. It is really remarkable.

The Custom Assembly tooling at @chainguard.dev  just got some nice updates! I recorded a new video showcasing custom assembly including the improved rename/save-as functionality.

The video from my talk  on "Guarding the Supply Chain" at @cloudnativebergen.dev  is out!

If you've visited the @chainguard.dev  Images page recently you might have noticed there's a fun new calculator which estimates how much $$$ you could save by moving to our images and thereby eliminating CVE remediation tasks.

The ATmosphere is now over 40M accounts 🪿🎉🙌

I thought I'd starting posting quotes every Friday as something a little more interesting for the weekend. Hopefully it's not too cringy, but I do have a soft spot for an inspirational quote. We're starting with...

Big thanks to Anthony Hodson for doing a write-up on the recent @kcduk.bsky.social event, with short interviews from @lizrice.com , @hannahfoxwell.net and myself.

A little while back Thomas Strömberg posted (on LinkedIn) about the surprisingly lack of malware detection tooling running on platforms today.

@adrianmouat.com from @chainguard.dev teaching the attendees at #cndb2025 the secrets about Guarding the Supply Chain 🛡️🚀

If you were affected by recent changes to MinIO, check out the @chainguard.dev  MinIO image. We didn't want people to be stuck on an unmaintained image, so we've added the our version to the free tier.

If anyone is at @cloudnativebergen.dev  today, please come catch my talk at 11.45 in Hovedsalen (first floor). I'll be talking all things Supply Chain Security and going through some tools and projects that can help you improve your security posture, especially with containers.

We recently announced the GA release of @chainguard.dev  Libraries for Python. And we're working hard on Java and Node. Why should you be interested? Because you don't want to be impacted by the next Shai Hulud or similar attack.

That's no ballroom

One of my favourite movie quotes: "You, me, or nobody is gonna hit as hard as life. But it ain't about how hard ya hit. It's about how hard you can get hit and keep moving forward. How much you can take and keep moving forward. That's how winning is done!"

Thanks to everyone who came to my @kcduk.bsky.social  talk yesterday. Here's the slides:

A modern, Rust-powered Linux scanner that unmasks hidden rootkits, stealthy eBPF tricks, and ghost processes in one fast sweep (45+ scanners)

Speaking in public is a skill like any other, and it absolutely comes with practice. But it does not come naturally to most humans. Public speaking is typically people’s number one fear, even over death. Seinfeld joked that people at a funeral would rather be in the casket than giving the eulogy!

I'm not sure about @randyshoup.bsky.social (who is a great speaker!) but I really had to work at presentations and talks. It didn't come naturally. So don't worry if you're nervous or your first talks aren't amazing. It's something that definitely gets easier with practice!

Now we have @wiggitywhitney.bsky.social telling us how to trust a liar. Or creating a journal application with Claude code and open telemetry.

@mccune.org.uk is next up at @kcduk.bsky.social talking about, err, talks