Now that I can use my MCP server in my agent, I'm going to do another OWASP Top 10 series, this time focusing on MCP servers! This first article is about Preventing Token Mismanagement and Secret Exposure in MCP Servers: open.substack.com/pub/willveli...

🚨 KUBERNETES THE VERY HARD WAY IS COMPLETE! The complete course is now available on iximiuz Labs: labs.iximiuz.com/courses/kub... If you want to learn how Kubernetes works under the hood, this course is for you.

The Microsoft.Agents.AI.Anthropic 1.0.0-rc4, you can now use tools hosted in your MCP servers rather than defining local tools. In this blog, I talk about the process of migrating my agent to use MCP tools, and the various debugging adventures I went on! willvelida.substack.com/p/from-funct...

Will be interesting to see where this goes. I'm not entirely sure that they will be successful, but maybe this will refocus the conversation on quality over vibes: github.com/indutny/no-a...

Probably the best lego set I've gotten to build. Looks very cool!

they literally renamed the entire company after this

Turns out it didn't have legs

Finally got around to sorting out my substack! I do deep dives on Microsoft technologies and AI, so if you're interested in that, subscribe here: willvelida.substack.com?r=rbqyl&utm_...

I would 8-2 make fun of Chelsea right now......

Making some much need visual improvements to my chat agent:

To all the MVPs making the trip to Seattle for Summit. Safe travels, have fun, and remember your NDAs! 😁

Mate just wants a beer

The not so gold coast

Serious question. Is anyone reading blog posts anymore? I keep writing them, not just to share my knowledge but also reinforce concepts in my mind. But is anyone actually engaging with them? Or are we just relying on LLMs these days?

Hackerbot-Claw: Adversarial Agent Targets Top GitHub Repos #devopsish

I really wanted to know more about Renee Good, killed by ICE in January. Fortunately, my editor allowed me to take some time to do a deep dive into who she was before she died. Read and listen to what I found out about her from her Colorado tribe here: www.cpr.org/2026/03/11/r...

"Within 2 hours, the agent had full read and write access to the entire production database." - a story of McKinsey internal AI system being hacked by an external autonomous AI agent. codewall.ai/blog/how-we-...

I put together a piece on how I'm doing co-design with agents in some of my dev work at the moment, and how there's a very specific through line from XP and the sort of software design and intentionality I talk about often. Trying to capture my working patterns. davidwhitney.co.uk/blog/2026/03...

Kubernetes SIG-Security docs have been doing some work to refresh the OWASP Kubernetes Top 10, to help cluster operators and users have a clear idea of where to start with Kubernetes security. slightly delayed, we have our draft top 10 out now. Any feedback very welcome owasp.org/www-project-...

Wrote up how I wired Claude into the Microsoft Agent Framework to build a chat agent for my health data side project. Function tools, AG-UI streaming, system prompt design, skipping Foundry entirely. Check it out: www.willvelida.com/posts/ms-age...

It's very basic, but this a chat built with Blazor, using an agent built with the Microsoft Agent Framework using Claude Sonnet 4.6 to interact with my data from Fitbit! Not a bad way to spend a bank holiday. There will be a few blog posts coming out of this one!

In a coding session with Opus 4.6. I still have to handhold this thing. If you think that AI is going to render software engineering obsolete, you're nuts. There's no way I'd let this thing loose in my side projects, let alone enterprise environments.

If you genuinely believed you were 18 months from building a superintelligence that could cure cancer, you probably wouldn't pivot the entire company to horny chatbots. But I'm just a person with priorities. Maybe the path to solving death really does go through AI girlfriends. I don't have an MBA.

Finally built myself a basic UI for my health data. Blazor .NET 10 FE using bUnit for tests:

Honestly if you’re sending a robot to run terraform destroy, that damage is on you. Humans can’t even run that thing without disastrous consequences. That’s what you get for running with scissors

The problem is bigger than prompts in GHA. Actions might now be the biggest attack vector for OSS. We just had major repos like Trivy get deleted because of workflows using the deadly pull_request_target event. gbhackers.com/hackerbot-cl...

Another victory for the vibe-coders I guess 🦀🦀: grith.ai/blog/clineje...

Nothing like being sick on your birthday 🫠 At least I got this to keep me entertained 😊

I just completed the "Introduction to CodeQL" GitHub Skills hands-on exercise! 🎉 github.com/willvelida/s... #GitHubSkills #OpenSource #GitHubLearn

I just completed the "Introduction to Secret Scanning" GitHub Skills hands-on exercise! 🎉 github.com/willvelida/s... #GitHubSkills #OpenSource #GitHubLearn

I just completed the "Secure your Repository Supply Chain" GitHub Skills hands-on exercise! 🎉Never done one of these before. This was fun! github.com/willvelida/s... #GitHubSkills #OpenSource #GitHubLearn

New post! How to Call Azure Services from an AI Agent Using Entra Agent ID and the .NET Azure SDK. Walks through blueprints, federated identity credentials, the autonomous agent token flow, tool calling with the Agent Framework, and observability with App Insights: www.willvelida.com/posts/entra-...

Join us at TinyToolTown.com

Bit of Dutch cuisine 😋

Much longer blog post than I thought it would be, but I spent a bit of today playing around with agent blueprints and identities with Entra Agent ID, and have written up what I've learned here: www.willvelida.com/posts/entra-...

Since generative AI is based on scouring the large body of existing content for the most common patterns, relying on AI at work is a great way to be a drone who definitely doesn’t need a promotion or their own team or a project budget for their big interesting new idea they will never have

good engineering is good engineering. Know how to ship.

I've been rolling my eyes at this kind of stuff on LinkedIn. Engineering quality still, and always will, matters

Finally decided to start a YouTube channel! Would greatly appreciate if you went and checked it out 🫶 First video: how to fully customize Windows Terminal with Oh My Posh (and more!) Also let me know if you want to see any specific videos from me! 💖 youtu.be/VFnr0lwwGuQ?...

I know it's just a fundamentals cert, but I'm still happy that I've got it. Next one, GitHub Advanced Security cert! learn.microsoft.com/api/credenti...

Neat

Some photos of me having fun at @dddmelbourne.bsky.social, asking you all not to engage in vibe coding, but practice intentional, Hypervelocity Engineering instead 🙂

I like @willvelida.com's definition of AI coding as HVE (hyper velocity engineering). Important point being velocity which implies *direction* not just speed. #DDDMelb

Terrible selfie, but the talk will be better! If you're at @dddmelbourne.bsky.social, come and check out my session at 1.30 in the Swanston room, where I'll be talking at how coding agents and intentional HVE (not vibe coding!) can enable developer experience!

hello, world! The Rust Foundation is excited to join you on this new (to us!) platform. We plan to exclusively share social media content here, Mastodon, & LinkedIn for the foreseeable future. You can also follow @rustconf.com — they'll have lots of important news to share about #rustconf soon 🦀

Tomorrow I'll be speaking at DDD Melbourne for the first time, giving a talk about Platform Engineering in the age of GenAI. In this talk, we’ll explore how platform engineering and generative AI can work together to improve developer experience, if you get the foundations right. #DDDMelb

Ok, this is interesting (and better). At least there's some level of transparency in this feature.

Only 3 days? That sucks

Overseen on Threads. Interesting concept, but no faith that it will actually work