Wow! SPIFFE is becoming mainstream, finally. Well done, @anthropic.com. @h.olysh.it is proud.

Blackhats always disclose the tooling they’re highly successful with.

May the fourth be with you

Amazing experience in the Portuguese city known for port wine and resisting French siege, if you are lucky enough to get in. Strongly suggest!

Yep, this looks very bad.

mRNA technology may be THE most underrated and unfairly scrutinized (fuck you COVID antivax crew) medical breakthrough in my lifetime. Like... The things this is already showing it can do in the last 5-7 years is incredible.

Today I renamed a type in the exported API of one of my packages by writing this short diff. Then I ran “go fix”, and it updated my code. Of course, IDEs have rename. But with the type alias, all dependencies keep working. And users can run “go fix” to update their code too! go.dev/blog/gofix

A bit over two years after starting to work on it... Go is officially FIPS 140-3 certified 💥 csrc.nist.gov/projects/cry... I am pretty confident Go is now one of the most—if not the most—seamless and complete FIPS 140-3 compliance solutions... with a single env var, out of the box.

Tailscale has removed the limitation on the number of devices for personal use!

“Price data infrastructure is arguably the most critical unsolved challenge in 24/7 tokenised markets” - unsolved? Check pyth.network

Another reason for EU folks to avoid Twitter. I have to admit I lost some content but I don't miss the bots and the toxicity.

Notifications for deleted shouldn't remain in any OS notification database, and we've asked Apple to address this. In the meantime, you can prevent any preview text from your Signal messages from appearing in your notifications. Signal Settings > Notifications > Show “No Name or Content”

netns support for VSOCK? Landlock LSM network support? Yes, please 🌈

Paris-Roubaix was nerve-wracking till the last second. I don't think there will be anyone sad about the outcome. Wout absolutely deserves it for all reasons and then some.

LMAO

🚨 Adobe has released an emergency patch addressing the critical Acrobat Reader 0day vulnerability we reported on earlier. Update asap: helpx.adobe.com/security/pro...

Do I know someone who can escalate this at the IEEE? Because frankly, it's very embarrassing for the IEEE to allow such blatant plagiarism to happen at a conference that it sponsors.

The number of OS, apps and Go dependencies updates these past couple days skyrocketed. Maybe it's just all a big coincidence but could it be Anthropic's Mythos being the ethical hacker here? Something else?

**PSA Crypto: The P is for Portability** New post in which I provide an overview of the PSA Crypto API, describe how implementations differ across hardware ( e.g. @nordicsemi.com vs. Espressif), and look ahead to upcoming Post-Quantum Crypto on constrained devices. danielmangum.com/posts/psa-cr...

The year is 2026 and @github.com still doesn't support sigstore gitsign CA

Bad if true.

What separates science from a cult? A scientist is genuinely happy when proven wrong. That means progress is being made.

Spot on, @rauchg.blue

Witness all things. Don't trust, verify.

Two LLMs and me. Each in a tmux pane (same session). Told them to pair with over tmux send-keys. AMA

🚀 Podman Desktop 1.26 is out! New improvements to make container & Kubernetes workflows smoother: ✨ Cert sync to VMs 🔐 Extension auth controls 📦 Better image pulls 🔎 Env-based filtering 🛠️ Troubleshooting tools Read Blog: buff.ly/WIxjZQ4 #PodmanDesktop #Containers #Kubernetes

This week's deepdive hit a nerve. It's true: there are more and more signs that AI agents help increase *output* but they result in worse *quality.* Unless something changes. And something needs to change, clearly! The deepdive: newsletter.pragmaticengineer.com/p/are-ai-age...

Here's hoping it's as a good rendition of the book as The Martian is 🙏🏼

We all need a human being eventually. Customer support definitely requires humans. Don't take them out. Bots can filter most "noise" but there must be a red button that calls the grown-ups. Definitely should have been the case here. Thankfully, a kind soul was listening on Bluesky.

🚨🚨🚨🌈

I'm building something on top of Cilium and I'm continuously amazed how this gets to be OSS. Sure, it's also a reason why it's so successful - I believe - but still. Big kudos to every contributor but especially to the founding team for sticking to it and building an amazing project and community ❤️

That helps with the current interaction. But it doesn’t necessarily create a durable project memory that evolves with the repo. Think of it like this: Runtime context tools (beads, RAG, etc.) -> What should the model see right now ctx -> What should the project remember forever

Company Lacks Manpower To Complete Newest Round Of Layoffs https://theonion.com/company-lacks-manpower-to-complete-newest-round-of-layo-1819574660/

Kubernetes SIG-Security docs have been doing some work to refresh the OWASP Kubernetes Top 10, to help cluster operators and users have a clear idea of where to start with Kubernetes security. slightly delayed, we have our draft top 10 out now. Any feedback very welcome owasp.org/www-project-...

Introducing the #Gemara Model -- a new framework for GRC engineering. It outlines a 7-layer architecture designed to help teams standardize how security policies are defined, enforced, and measured. 📖 Blog: openssf.org/blog/2026/03... 📄 Publication: openssf.org/resources/ge...

Absolutely not. Always ask your local Facebook group. DYOR

Over the weekend, as US and Israeli strikes on Iran unfolded, decentralised crypto exchanges operating around the clock became the primary venue for real-time price discovery in oil, gold and other assets.

Wowza!!!

If you're using GCP and have enabled Gemini on any of your projects, this one is worth reading, as you may have some checking to do. trufflesecurity.com/blog/google-...

Maintainers: make your project’s security visible. Start with the #OpenSSF Baseline and earn your badge: 🔗 openssf.org/blog/2026/02...

Nice. groups.google.com/a/kubernetes...

Hot take.

In his latest blog, @vincent.bernat.ch looked at how to load balance uneven traffic flows across multiple workers all listening on the same port: vincent.bernat.ch/en/blog/2026.... And of course, eBPF can help here! As usual, very easy to follow along and with code walkthroughs.

40y ago and changes.

The second edition of Designing Data-Intensive Applications, by myself and @chris.blue, is finished and sent off to the printers! Ebooks should be available in the next week, and print books in 3–4 weeks. Sigh of relief. 😅 (BTW, this is a good opportunity to support your favourite local bookshop!)

We now have Star Trek’s universal translators, and people hate it.

Words of wisdom.

Moving away from tc to XDP for egress traffic will make your container networking go light speed at lower CPU usage 😍

Web3 once promised user-owned data and self-sovereign identity, but DeFi and crypto hype drowned it out. With AI-era data concerns and rules like the GDPR, the idea may resurface - if UX and incentives improve. Could Chia or Filecoin spark a revival?