Company Lacks Manpower To Complete Newest Round Of Layoffs https://theonion.com/company-lacks-manpower-to-complete-newest-round-of-layo-1819574660/

Kubernetes SIG-Security docs have been doing some work to refresh the OWASP Kubernetes Top 10, to help cluster operators and users have a clear idea of where to start with Kubernetes security. slightly delayed, we have our draft top 10 out now. Any feedback very welcome owasp.org/www-project-...

Introducing the #Gemara Model -- a new framework for GRC engineering. It outlines a 7-layer architecture designed to help teams standardize how security policies are defined, enforced, and measured. 📖 Blog: openssf.org/blog/2026/03... 📄 Publication: openssf.org/resources/ge...

Absolutely not. Always ask your local Facebook group. DYOR

Over the weekend, as US and Israeli strikes on Iran unfolded, decentralised crypto exchanges operating around the clock became the primary venue for real-time price discovery in oil, gold and other assets.

Wowza!!!

If you're using GCP and have enabled Gemini on any of your projects, this one is worth reading, as you may have some checking to do. trufflesecurity.com/blog/google-...

Maintainers: make your project’s security visible. Start with the #OpenSSF Baseline and earn your badge: 🔗 openssf.org/blog/2026/02...

Nice. groups.google.com/a/kubernetes...

Hot take.

In his latest blog, @vincent.bernat.ch looked at how to load balance uneven traffic flows across multiple workers all listening on the same port: vincent.bernat.ch/en/blog/2026.... And of course, eBPF can help here! As usual, very easy to follow along and with code walkthroughs.

40y ago and changes.

The second edition of Designing Data-Intensive Applications, by myself and @chris.blue, is finished and sent off to the printers! Ebooks should be available in the next week, and print books in 3–4 weeks. Sigh of relief. 😅 (BTW, this is a good opportunity to support your favourite local bookshop!)

We now have Star Trek’s universal translators, and people hate it.

Words of wisdom.

Moving away from tc to XDP for egress traffic will make your container networking go light speed at lower CPU usage 😍

Web3 once promised user-owned data and self-sovereign identity, but DeFi and crypto hype drowned it out. With AI-era data concerns and rules like the GDPR, the idea may resurface - if UX and incentives improve. Could Chia or Filecoin spark a revival?

Lots of eBPF goodies in this blog. There's a sweet XDP series too. Oh and content is available in English too. Thanks, Joseph 🙇🏻

Oopsie.

Personas, goals, behavior, skills, MCP integrations, multi-agent workflows... And it's just the early days.

sudo & other SUID tools can be tricked by less-privileged user into using the inherited (ambient) authority for malicious purpose, ie undesired privilege escalation. OCAP requires user to provide a scoped token for each request, proving intent. IIUC Ariadne proposes capsudod as a gateway to resource

A critical vuln has been found on macOS and iOS www.macrumors.com/2026/02/11/i... But Apple is only allowing the 18.7.5 update to old devices. Everyone else running iOS 18 to avoid the liquid glass fiasco is now forced to get iOS 26 to access the fix.

The reference to OpenBSD is 🌈❤️

And another one bites the dust.

Lots of work and more incoming. I have been trying incorporating LLMs in my OSS work but at this point it's like working w/ a junior high on caffeine. Likely I'm doing something wrong but that's my experience so far.

Send help.

Yet another Virtual-Kubelet provider.

Just doing my job as a Cilium fanboy.

Literally, what I wrote yesterday to a friend as he brought me up to speed on this moltbot soap opera.

Why doesn't @github.com trust gitsign CA yet?

The bane of automated infra management.

What if?

IMO this is not it. 2.0 should be an opportunity to rethink fundamentals. The framework is extremely powerful but orchestrator is growing complex & harder to operate; too tied to Pods/containers, & it lacks key functionality as part of its foundation, eg identity plane.

Europeans for the greater good. Love it. Working to contribute to it too.

By popular demand.

Incoming stable Kubernetes feature: support for User namespaces 🚀

I'm using jj more and more and it's great. Also, Git-compatible so fear not.

😍👏🏼

Funny because it's true ❤️‍🔥

1. manifests are signed + recorded in transparency log 2. verify provenance in CI/CD 3. verify during admission, eg Kyverno 4. profit

Here we go… 🤝

Unable to reproduce for obvious reasons but - Cluster of 180 storage nodes w/ 2×200Gbps IB, 16x14TiB NVMe. ~500+ clients for the read stress test, with 1x200Gbps IB. Final aggregate read throughput reached approximately 6.6 TiB/s w/ background traffic from training jobs 🥦

The thought has come across my mind too. What do you think?

"Archiving of Kubernetes Dashboard Project" groups.google.com/g/kubernetes...

More than 10y ago there was a cool company working on something like this and much more. It was called littleBits and it was awesome. Unfortunately, no longer around. Here's an insane 48h project I collaborated on, Wolverine-like claws powered by BITalino (electromyography) and littleBits.

26y is a long time to spend building someone else's vision. I’ve loved the journey, but lately, the call to build my own has become too loud to ignore. This move is born from years of "what if" moments and being invited by mentors & friends to finally turn those thoughts into a reality.

One the most solid takes I've read on the vibe coding phenomenon. Ever.

I don't know the author but I hope to never run into any of the code produced by their prompting. Not because of the prompting itself but who reviews code on a phone? 🤯

Don't know the author but found this and it resonates in me.