As someone who has suggested using cooldowns to mitigate some attacks, I did enjoy this article arguing they are a poor solution and moral problem: calpaterson.com/deps.html Cal suggests using upload queues instead, which I would agree with.

This is tragically beautiful.

"[the AWS] control panel is a labyrinth designed to extract billing upgrades". Love this article on running lean (including LLMs) by Steve Hanov stevehanov.ca/blog/how-i-r...

For anyone that hasn't seen it yet, the For You feed is a better replacement for the default feeds. bsky.app/profile/did:...

Parenting milestone achieved: woke up and nearly screamed because the 3 year old had silently come into our room and was standing next to my head quietly staring at me

🔥 @rkatz.xyz taking no prisoners today lol

thought this comment on hacker news about the energy race was interesting

New #GOTOpodcast 👇 @adrianmouat.com & @charleshumble.bsky.social on the real state of container security. • Why containers are hard to secure • Why scanners don’t solve the problem • What’s changing now • The practices that work • Lessons from real incidents
 🎧 gotopia.tech/podcast

#GOTOpodcast: @hollycummins.com, @abangser.bsky.social & @adrianmouat.com discuss • Why security often frustrates developers • Why security fails when added late • How platform engineering can help • The next big risk area 🎧 Listen in: gotopia.tech/podcast

Mildly impressed I managed to describe the Swiss cheese model without a picture!

This months newsletter is now out! 🎉 ✨ February 2026 ✨ https://cloudnative.now/2026-february/

Excellent article from @charleshumble.bsky.social, a must-read for all developers leaddev.com/ai/nobody-kn...

I regularly see people wondering how it's possible that there are so many musicians and writers and film makers and artists from a tiny nation like Iceland. And the answer is really simple: State funding for art education and artists. I literally get a salary from the government to write books.

I spoke with Bhavin Shah a few weeks back for the Kubernetes Bytes podcast. We covered a bunch of topics including CVEs, the different vulnerability databases, and how platform engineers can use Chainguard images to protect against CVEs. www.kubernetesbytes.com

My hot take on why the "latest" tag is sometimes the best tag to use! #containers #kubernetes #devops

I spoke with @charleshumble.bsky.social a few weeks back for @gotocon.com We dived into a wide range of security and container topics, from why containers came about and how vulnerability scanners work, to SBOMs and the evolution of Distroless into @chainguard.dev images youtu.be/9NUOiL48hbo?...

Security vs DevEx? False choice. @abangser.bsky.social, Adrian Mouat & @hollycummins.com explore how teams can build systems that are both secure and great to work on. youtu.be/EGSMP2UodKM?...

i'm torn on this. on one hand: yes, i feel this. i'm doing coding side projects again and i haven't done that for a decade. on another hand, the kind of burnout i get from overusing claude is unlike anything before. i'm learning to find a balance

For those of us struggling with feeling devalued as programmers with the rise of AI, I present the following quote from Paul Graham: "In programming, as in many fields, the hard part isn't solving problems, but deciding what problems to solve."

I've told this story on ContrabandCamp but it's worth sharing for BHM because it's one of the greatest stories ever. A thread.

Probably the most complex piece of self assembly furniture I've ever built was my kids toy kitchen.

Stockholm, I have entered your maw. I'm also talking at the cncf Meetup tonight if anyone is interested! community.cncf.io/events/detai...

@danlorenc recently wrote a blog on Gastown, which is Steve Yegge's attempt to build a "workspace manager" for coordinating AI agents. www.chainguard.dev/unchained/ga...

@chainguard.dev Assemble returns! Chainguard's flagship conference is coming to NYC. Come join us in March for talks & community events on the future of secure software (and especially secure container images). assemble.chainguard.dev/event/2991fc...

Live in LESS THAN AN HOUR Come learn you some jj 😄

I'm sure some of you use the excellent @renovatebot.com to update dependencies in repos. But if you're calling Renovate from a GitHub action, you probably had to create a Personal Access Token (PAT). And PATs are a form of long-live token, my thoughts on which are summed up by this GIF.

Apparently Dijkstra wrote: "If in physics there's something you don't understand, you can always hide behind the uncharted depths of nature. You can always blame God. You didn't make it so complex yourself."

I found a "modern unix tool" list on a blog by @billmill.org recently. Quite a few I already knew about, but it's definitely a helpful list. In particular it's good for recommending improved versions of existing utils e.g. bat vs cat, dust vs du, eza vs ls. notes.billmill.org/computer_usa...

My talk from Kubernetes Community Days is up! I go into details about what we can learn from various security incidents in recent years (yes, including Shai Hulud). www.youtube.com/watch?v=-WOT...

Been working on this one for a while — it's a little bit of history of a key foundation of internet technology, and a little bit of an explainer about how people _actually_ invent things. This is the amazing (true!) story of how Markdown took over the world. www.anildash.com/2026/01/09/h...

Evaluating risk and focusing on actual problems is key to security. Quantum risks are real, but does it matter when you leave long-lived tokens accessible? As Bruce Schneier said "More people are killed every year by pigs than by sharks, which shows you how good we are at evaluating risk."

There was a recent post that hit Hacker News about a server getting hacked and running Monero. blog.jakesaunders.dev/my-server-st... I wanted to call out a few points...

via The New Yorker, Ellis Rosen cartoon

We've just added support for "Custom Certificates" to @chainguard.dev's Custom Assembly tool. This means you can provide us with your org's public certs and we will build them into your images. Simple, but it saves a massive amount of time and resources for our customers. tinyurl.com/vkwvsjsa

If you're an AWS user, you can now get @chainguard.dev images directly from ECR. So now you can get your secure, zero CVE images faster and with less networking costs. You can try it out right away: docker pull public.ecr.aws/chainguard/wolfi-base:latest aws.amazon.com/blogs/contai...

I have found the original inspiration for space invaders

Unpopular opinion: Current code review tools just don’t make much sense for AI-generated code When reviewing code I really want to know: - The prompt made by the dev - What corrections the other dev made to the code - Clear marking of code AI-generated not changed by a human

Top networking tip: do not plug both ends of an ethernet cable into the same switch.

"Any fool can write code that a computer can understand. Good programmers write code that humans can understand." I stumbled across this quote from Refactoring by Martin Fowler when looking at dannorth.net/blog/cupid-f... by @tastapod.com .

New video on updating container images with Renovate. The demo uses the Renovate GitHub Action but pairs it with Octo-STS so you don't need to create a PAT. www.youtube.com/watch?v=I0hW...

Just finished @nealstephenson.bsky.social's Baroque Cycle. I'm not a fast reader so it was a bit of an undertaking. Worth it though. And in relation to recent news, it definitely has an ending and even goes some lengths to wrap up various story arcs. Infinite Jest it is not.

Please remember a Lewis is for life, not just Xmas.

fucking bryan is both very, very good -- again -- and also funny, again. I especially dig the fact that building a solution is about trust built into the future. It's human thing.

I fucking love memes you can understand through the language barrier, holy shit

A f*"**ng tab just broke my GitHub action. Why do we still have these invisible battles 😭

What was Matthew's job again?

At a private event last week Bogomil Balkansky shared his thoughts on what he looks for when investing and advising companies.  The quote that stuck with me was "Velocity is the primary determinate of success for a company".

Not sure if I can bear to watch this given that I nearly stopped the panel 10 minutes early 🫣

Videos for the talks I was a part of for KubeCon + CloudNativeCon NA 2025 have dropped! youtu.be/VWi105l6tzs

When I've had to explain what containers are in the past, I've often used this quote from @bcantrill.bsky.social  "Docker will do to apt what apt did to tar."