#Kubernetes TIL: If you kubctl apply a secret from a file, it stores the secret values in clear text in the last-applied-configuration annotation. It’s not like base64 is secure, but I still find this funny.

I bet that 100% uptime Route 53 SLA is costing them big time this week.

FULL STORY HERE: Emails began flooding CDC inboxes late Friday night announcing dozens of layoffs. HR people brought back from furlough to oversee the RIFs. Disease detectives, entire Washington office, global health, injury prevention, MMWR staff among those hit. www.nytimes.com/2025/10/11/u...

Telling people your proposal is “the right way” to do something doesn’t actually help convince anyone.

Is there a career I can pivot to where DNS can’t haunt me?

Joining AMD in May is looking pretty clairvoyant in retrospect.

Why is it so hard to reconfigure Ubuntu to use static nameservers and not the ones supplied by DHCP?

“I’ll just deploy some DNS servers to resolve internal records. How hard can it be?”

That’s it Uber. You just lost notification privileges for spamming me with another ad as a “time sensitive” notification. I don’t even use Uber except when somewhere that doesn’t have a decent competitor. Might need to uninstall again.

Pro Tip: When applying to a new job, ask if leadership works long hours. Leadership sets cultural expectations.

All LLMs hallucinate by design. They’re designed to reproduce output similar to their training materials, but differently, using randomness. They are designed to make things up!

I wish clothing manufacturers/sellers would get the message that we don’t need or want vanity sizing when purchasing online. Vanity sizing makes your sizes different from everyone else AND the measuring tape, making it harder to order the right size the first time. This costs companies millions.

So Bilt manages rent payments… …including access to authorize payments from your bank account… …with 1-factor auth… …without a password… …using just email or phone…

Why does Open File Location on a Shortcut in Windows open the location of the shortcut? Why would I ever need that? Why isn’t there an option to go to the location of the thing it’s a shortcut to? This is dumb.

I’m pretty impressed that my passport renewal could now be done online and was shipped out in less than a week.

oh no www.lego.com/en-us/produc...

When I start my morning doomscroll

Kubernetes Pro Tip: Don’t make a “Tenant” abstraction. Nobody knows what a tenant actually is or what multi-tenancy actually means.

The entire Social Security database, dumped on a random cloud server: www.nytimes.com/2025/08/26/u...

The new tariffs are killing businesses that sell to the US. I assume that was kind of the point, to allow US labor to compete, and to force people into deals with the Dictator Tot. But it's gonna make inflation skyrocket as cheap goods become unobtainable in the short term.

Control is $4 on Steam. If you like scifi third-person action-adventures and haven't played it, you really should.

Job Requirement: Reading comprehension of long high velocity chat and email threads. Feel free to use an LLM to summarize, but if you can’t keep up, you’ll be left behind.

Modern mobile games feel like entrapment. They pay off the first few days with the dopamine drip, then make the feedback loop longer and longer, dragging you out and making you come back day after day… All so they can get you to stare at ads and/or offer to sell you gems or pay to win upgrades.

Legs to Brain after 15m running: Yo brain, got any more of that ATP? Hook me up! Brain to Stomach: Bro, got and spare calories? Stomach to Brain: Nah, bro. But I got some coffee. Imma go ahead and release some acid to digest it. WCGW?

A well designed system looks simple, is easy to understand, is cheap to maintain, and functions as expected without problems for a long time.

computer end program

I went into a LEGO store and managed to walk out without buying the Batmobile or Tie Interceptor.

Neat trick. Not much impact by itself tho. research.eye.security/how-we-roote...

Managing Kubernetes clusters on 7 different clouds makes me miss only using GKE.

What are you gonna do when you leave tech?

New standing policy: Afternoon Hot Tub Breaks

Anyone used the Puppet Kubernetes model to manage K8s on bare metal or bare metal cloud providers? Would you recommend it? Getting kind of tired of Ansible/Kubespray and not being able to manage Ansible playbooks with GitOps. But don’t really want to bootstrap an admin cluster to use Cluster API.

Anyone know if this Gateway API compatibility table is up to take for Envoy Gateway? See lots of red Xs that seems possibly out of date compared to docs. gateway-api.sigs.k8s.io/implementati...

News needs to stop newsing. I can’t take any more news.

Today’s realization: Kubernetes is for maximizing utilization. If you need to maximize isolation, for performance or security reasons, you probably need a different platform, as close to bare metal as possible.

Gemini, make me a service that can run Ansible with declarative GitOps config files.

What’s the best way to run benchmarks on Kubernetes? How do you schedule and isolate well enough to get reproducible results? Do you need to reserve a whole node? How do you minimize the impact of platform services and daemons? Dedicated CPU/GPU cores? Reserved memory? Compute priority?

Hope you’re not using 22-bit RSA keys. (You’re not. Don’t worry.) www.csoonline.com/article/3562...

Every time I hear about “vibe coding” I just replace that with “Dreamweaver” and then proceed to treat that person as if they used a WYSIWYG HTML editor for a mission critical web app.

Why can't I buy a Thermalright Royal Pretor 130 from anyone that's not a scalper?

New hood, who dis?

Tanks don’t kill people, trucks do. www.thedailybeast.com/truck-carryi...

Why is the entire internet sold out of men’s boardshorts with tunnel drawstrings? You’d think there was some sort of crazy unpredictable tariffs or something.

I’ll say it again: I don’t trust (currently available) “AI”, and neither should you. It’s “reasoning” and output are frequently wrong in unpredictable ways, making it frequently worse than predictable algorithms or even just machine learning. garymarcus.substack.com/p/seven-repl...

Now that I work at a GPU company, how do I invest in a hedge against AI, just in case?

At brunch today

Soup of the day: No Soup

I’ve spent month cleaning up Kubernetes apiserver unit tests. It’s a hassle getting these PRs reviewed and merged. They all have to be tiny in scope of they just stall. There’s a few reviewers, but they get randomly assigned. Tagging the same person every time tires them out till they ghost you

Linux Containers on Mac developer.apple.com/videos/play/...

NEW: I analyzed nearly 300 federal cases involving the Trump administration. Federal judges—across the political spectrum—are using language I’ve never seen before. One called government actions “unconscionable.” Another quoted Kafka. They’re begging us to pay attention.