I've made a Kubernetes that runs in the browser, and today we're open sourcing it. The hope here is to make super interactive and visual web content about Kubernetes much easier to write, and we have a whole bunch planned this year. Repo: github.com/ngrok/webern... Demo: webernetes-demo.ngrok.app

(Some) writers appreciate LLM writing assistance but readers hate it. Survey says… writethatblog.substack.com/p/dev-reacti... If readers suspect AI, they not only stop reading, but also downvote/avoid the author.

Building a Soviet Nail Factory: how KPIs killed efficiency. A story that I often tell. It is now old enough to not upset my former colleagues. vincent.bernat.ch/en/blog/2026...

TIL: `export -f` in bash can export a function to a subshell

yes!! thank you for noticing!! :D i have been going to TOWN lately generating sticker art and slogans and learning graphic design fundamentals. maybe i will write about that today, hm. this is one of my favorite themes.. it feels very.. scandinavian? i will mail you some if you give me an address!

Blogging with an LLM assistant: vincent.bernat.ch/en/blog/2026... (grammar, copyediting, translation). This specific post is *not* modified by an LLM.

i wrote a post about the growing divide between AI skeptics and AI enthusiasts. wins and costs are both real, but too often fall on different groups of people. when you're only experiencing half the story, it's too easy to write each other off. charitydotwtf.substack.com/p/ai-enthusi...

This MT7915 card seems supported by Linux and features two radios and could advertise 16 SSIDs. Anyone knows if they work well? asiarf.com/product/wifi...

New release of Akvorado (direct from the train to Montpellier): github.com/akvorado/akv.... There is a new bidirectional option for Sankey graphs. Also, some improvements on handling the RIB. The next version is likely to ship an architecture change to pave the way to more flexible flow enrichment.

More and more people I deeply respect and have learned a lot from over the years feel like they are speaking into a void, to the point where they are losing motivation to continue making content, which got me to write my first post on my site in over a year... www.kevinpowell.co/article/tell...

Scaling Akvorado BMP RIB with sharding. Making an efficient RIB to store 10M+ routes is challenging. While writing this article, I discovered additional optimizations. That's one reason to blog! vincent.bernat.ch/en/blog/2026...

I didn't notice until recently, but Epiphany, the GNOME browser, is quite on par with Safari. Same rendering engine, same JS engine, almost the same UI. It's convenient to test "Safari" on Linux.

Don't upgrade Docker Engine to 29.5.0 if you are using Akvorado. It breaks the conntrack handling. See here for some details: github.com/akvorado/akv... 😭

Another 0-day in Linux, discovered by someone reading the commit log of the master branch. This one is more difficult to workaround as it does not rely on any module. It does not allow to read arbitrary files, "just" files read by a suid binary. github.com/0xdeadbeefne...

Just published lldpd 1.0.22, which contains some security fixes, notably CVE-2026-46433. It is evaluated to 6.5/10. I think this is a bit high, as in most cases, ASan is not enabled and you can't reliably crash the process. github.com/lldpd/lldpd/...

Bambu Lab 3D printers: never again. They're breaking the open source social contract (for the nth time...), and I'm past hoping they'll amend their ways. www.youtube.com/watch?v=eb48...

At a time of 2 local privilege escalation vulnerabilities I find a good time to finally get my blog post on nixos and its relation with secrets out. I would summarise it with the following words: PLEASE DO NOT PUT SECRETS IN THE NIX STORE. IT IS WORLD-READABLE. isabelroses.com/blog/nixos-a...

terranix is actually really enjoyable to use, you basically get the entirety of hcl but in nix, and everything boils down to a config.tf.json for diffing and applying

Swissing a Table: moving step by step from a simple hash table to a "swiss table", the design behind Go’s new map implementation - Article by Phil Pearl @philpearl.bsky.social #Programming #Golang philpearl.github.io/post/swissin...

Instead of blacklisting unused kernel modules, we can just disable kernel module loading after boot is complete with sysctl -w kernel.modules_disabled=1. At least on most servers. Example with NixOS: github.com/vincentberna...

Four Column ASCII. This explains the ASCII table uses 2 bits for modifiers including CTRL and SHIFT. This makes keyboards easier to implement without electronic logic. garbagecollected.org/2017/01/31/f...

Nginx 1.30 ships a new "add_header_inherit" that could solve a longtime pain point when handling headers. Unfortunately, it does not allow one to override an existing header with a new value (it's append only). One day, I should migrate to Caddy. nginx.org/en/docs/http...

For unknown reasons, I spent some time adding an XSLT stylesheet to the ATOM feed of my blog while I know this technology is being removed from Chromium and Firefox. 🤷‍♂️ There are some sharp edges around it (notably whitespace handling). vincent.bernat.ch/en/blog/atom...

This tool looks well designed and polished: well-specified interface, minimalist, and a use case with NixOS read-only images. I keep it in the back of my mind. ruuda.nl/2026/deptool

The IPv8 draft has been updated twice and its author is debating it on the NANOG mailing list. I noticed that too late and there are too many messages to read. My opinion: still crazy. datatracker.ietf.org/doc/draft-th...

I am not able to upload anything to Launchpad PPA since 4 days ago. I get either timeout or connection refused. Yet, status.canonical.com does not say there is an outage.

From Milliseconds to 26 Nanoseconds: How a $20 eBay SFP Module Beat My Entire NTP Setup. It's a special SFP multicasting PTP frames to the network! austinsnerdythings.com/2026/04/26/p...

Amazing post on how to optimize measuring durations on Linux.

I wrote about why I quit my job, and how weird and tiring tech feels these days.

Log analytics in a single binary. No dependencies. Lynx Flow query language #golang github.com/lynxbase/ly...

I have uploaded the latest batch of releases of HAProxy to haproxy.debian.net. Since Ubuntu Resolute was released yesterday, I have also added HAProxy 3.2 and 3.3 packages. haproxy.debian.net#distribution...

This is brilliant. > I don't need a separate service like Redis because all writers and readers of this cache are in a single process. > I store all data in sqlite. > The feed runs in my living room on my "gaming" PC attached to the TV. atproto.com/blog/serving...

I think it's important to triage failed predictions and I was wrong about this one. It looks like it's more organizational dysfunction and neglect than the "embrace, extend, extinguish" I was told to be worried about but the acquisition did not work out well for GitHub. xcancel.com/FiloSottile/...

David Crawshaw is building a new cloud. There are some interesting bits (local SSD with async replication, anycast out of the box). crawshaw.io/blog/buildin...

CSS & vertical rhythm for text, images, and tables (or how I spend way too much time fiddling with CSS when I’m supposed to be writing about my actual area of expertise) vincent.bernat.ch/en/blog/2026...

Rewrote my blog with Zine (not mine, Drew Devault). SuperMD and SuperHTML seem an interesting take for a better capable Markdown language. drewdevault.com/blog/Rewrite...

New release of Akvorado. ClickHouse is now configured with some indexes that should help making queries faster. We are also switching to Quay.io for Docker images as it is available over IPv6, unlike GitHub registry (the images are available on both). github.com/akvorado/akv...

The peril of laziness lost bcantrill.dtrace.org/2026/04/12/t...

Two papers came out last week that suggest classical asymmetric cryptography might indeed be broken by quantum computers in just a few years. That means we need to ship post-quantum crypto now, with the tools we have: ML-KEM and ML-DSA. I didn't think PQ auth was so urgent until recently.

OneUptime (a company trying to compete with DataDog with an open source product) is publishing AI slop on their blog at a very large scale. github.com/OneUptime/bl...

I built my own dial-up ISP, then connected to it over WiFi, using Apple's first AirPort base station, from the original iBook G3. A belated #MARCHintosh video, getting online like it's 1999: www.youtube.com/watch?v=GbIo...

In keeping with his tradition and to help the community, I have mirrored and expanded the site with significantly more platforms and chipsets. port-buffers.forwardingplane.net #neteng #networkengineering

2026 and GitHub (and ghcr.io) is still not available over IPv6... github.com/akvorado/akv...

Twisted is still a thing! It's an event-based framework for network applications in Python. I used it a log 15 years ago! github.com/twisted/twis...

Calculate “1/(40rods/​hogshead) → L/100km” from your Zsh prompt. A small hack to turn "=" into a calculator (most of the work is done by Numbat or Qalc). vincent.bernat.ch/en/blog/2026...

Well written and interesting article about a bug in Linux spinlock implementation. Worth the read!

Not sure how we went from plain, straightforward words to LinkedIn speak but now you can use Kagi Translate to fit right into that crowd: translate.kagi.com?from=en&to=L...

This (4-month old) bug in Claude Code is amusing. Even the best agentic LLM may trip on a file with tabs (and don't get it started with a non-breakable space). github.com/anthropics/c...

New release of Akvorado! Notably, there is performance enhancements for BMP, ability to import CSV for remote data sources, and a new heatmap visualization. github.com/akvorado/akv...

A most elegant TCP hole punching algorithm. Also a reminder that you can establish a TCP connection by initiating the connection on both sides at the same time (without a listening socket). robertsdotpm.github.io/cryptography...