Gitea went kaput. Just up and stopped working one day. I came back from the BWCA and noticed none of my automated builds had succeeded: The errors were all about “back pack header” I…

Recently, I have bene doing some upgrades and refresh to my homelab rack. Some of these updates are just getting started, but several of these are completed already. Snce we moved to the new house,…

Highlights from my conversation with David Dean Mauro on Cyber Crime Junkies about contact center fraud, insider risk, AI agents, and locking down shadow AI.

A couple days ago, the fucking crawlers ramped up their efforts to get past my 429 error page, so I finally set up a fail2ban rule that would block anything that kept on poking at things.

The core of nixpkgs-multiverse, when you strip away the Nix API and the CLI, is an index. It is a map from (attribute, version) to the revision that shipped it as a JSON file.1 There are actually a…

One of the best books on observability, it's second edition delivers the AI update that feels so neccessary since the first book came out The book has 2 parts than need to be considered in…

Introduction The purpose of this blog post is to introduce pg_shmemviz, a new tool to visualize PostgreSQL shared memory. It follows the same approach as pg_walviz, bringing physical layout and byte…

The place where I currently work is on camera all the time. It's not a great feeling.

 A Russian surface drone (USV) has been found off the coast of Romania, drifting close to the Neptun Alpha drilling platform. As the vessel began to drift away…

A GitHub Action at work goes from a Node.js action to a composite action running a single bash script. The scenario is ideal: the action only does an HTTP request, JSON parsing, and some conditions.…

S3 launched twenty years ago as a simple object store with eventual consistency. Strong consistency, conditional writes, and Express One Zone turned it into the durable source of truth for…

As the old adage goes, "when you have a hammer, everything looks like a nail." Adapting this to the past few years of my life, "when you have Go, use it for everything." So when I began my BYOC…

This post is about Windows. Last time we saw that sockets are pretty much just handles, and as such, they can be inherited. If a process creates an inheritable socket and runs CreateProcess with the…

Disclaimer: Prompt injection is an unsolved problem.

Introduction 1 Hardware background (why this is hard) 1.1 What a CPU actually does with instructions 1.2 x86 instruction encoding: JMP and NOP 1.3 Why you cannot just memcpy over live code on SMP 1.4…

I work on security detection at Datadog. The model I have been building, Mambark, reads audit logs the way a language model reads text and scores every event by how surprising it is. It is a small…

Replaced my previous o11y stack with Coroot, love it because most features work out of the box. Storage backend is Clickhouse, which means it won't break easily.…

Three months ago we had 34 microservices and 34 Grafana dashboards, each one hand-built by whoever owned that service at the time. Some had rate/error/duration panels. Some had CPU and memory but no…

I miss being an SRE in the Old Days. Here's how we do release management with agents now

amazon-ssm-agent can’t run on Haiku. So I taught Haiku to speak SSM instead — 600 lines of C++, one very confused fleet console, and a BeOS-descendant desktop in my browser.

Proprioception for the Smart Factory: A Reactive Graph for Industrial Documentation Intro In biology and robotics, proprioception is the intrinsic sensing mechanism that allows a system to…

I have been a heavy restic user for several years. In Jan of this year, I tried making restic work with AWS Glacier deep archive but it did not work out. AWS Glacier Deep Archive, for those who may…

What the Agent attempted with DNS in the Hugging Face–OpenAI Intrusion Incident of July 2026

A simple threat model that provides insight into how complex the internet is

I copied this from an obscure post by EspritLibre , it seems to be a load bearing source for most of the Claude Sonnet advice. I'm trying WiFi Explorer which shows a lot of back channel congestion on…

I2P addresses I want to talk about how to find I2P eepsites , but first a bit about how the addressing system in I2P works at a high level. An eepsite is just a cute name for a website on the I2P…

The previous post ended on a pattern: a memory hierarchy works because one component can see the whole path, and disaggregation splits that visibility across two vendors. Scheduling has the same…

For those who don't know, Proton is a company that is basically Google, but more privacy friendly. It offers services such as Mail, Drive, VPN, a password manager, and more. But is it worth paying…

AI agents can code, dig through customer data, and fire off tools faster than any person. The problem is they also get fooled. A prompt injection or a random glitch can send one of them racing to…

A timestamp records when a wiki page was written. Nothing in the format runs to keep it true. Twenty-one years after I helped build a commercial wiki, the LLM-wiki idea is back, and it dropped the…

Web Authentication Level 3 is now a W3C Recommendation! This post covers the new features in L3 to support passkeys, advanced deployment scenarios, improved developer ergonomics, and a peek at…

The last post argued that a KV cache has no interchange format. Grant one anyway. Suppose the two vendors agree on layout, dtype, block size, scale placement and every other axis in that list. The…

I just want to show you some pseudonymization ideas, and the point where they stop working.

It all started with an innocent, reasonable goal on a lazy Saturday afternoon: “I just want to test ArgoCD in my homelab.” That’s it. Just install ArgoCD, hook up a sample repo, and watch…

[Java][JVM][Tuning][Profiling][G1][JIT] Why is Arrays.fill 265 times slower on G1GC?

I spent two days on a bug where a screen-capture stream never came back after the display went to sleep. When I finally had a patch I believed in, I ran it, put the machine’s display to sleep,…

What Happened Recent operational successes by UK law enforcement have exposed sophisticated domestic carding networks and the growing threat of youth-targeted money muling syndicates. In June 2026, a…

This is a monthly newsletter about the current state of Radicle CI, what has happened recently, and near future plans. Current status Radicle CI is in production use. There are several CI nodes, and…

Separate terminal rendering, durable sessions, and remote access so a context switch, disconnect, or laptop change does not turn active engineering work into a scavenger hunt.

Sometimes you just want a simple way to look at your traces, metrics, and logs without setting up a full observability stack. Just a UI where you can see what your applications are doing, without…

eki's Home https://eki.moe/posts/shrinking-a-proxmox-ve-installation-on-zfs/ - Although I started trying to achieve what was said in the title, it seems that other actions not supported by ZFS, such…

A great how-to on moving from a Docker volume to a bind mount. That being said, I don't necessarily agree with their benefits breakdowns for each? For example, as a benefit of using Docker volumes,…

How I registered a Linux machine with Apple's private services, received an existing Find My People key over IDS, and decrypted the live location without a Mac.

A Canadian man spent eighteen months in prison because investigators mixed up two Kik usernames differing by a single underscore, a case that says as much about human negligence as about technology.

This article was originally posted on the Ubuntu Discourse, and is reposted here. I welcome comments and further discussion in that thread. I have written before about the role that Rust will play in…

How to use DYLD and Rosetta 2's characteristics to pack whatever ya want!

Since running agents in a bunch of workspaces, I've been running out of storage on my mac FAR more often. Granted, this is largely due to cargo being such a hog, and I need to run cargo clean more…

WinAPI represents most “things” as HANDLEs: files, cross-process mutexes, threads, jobs, etc. Sockets, however, are a notable exception: while on Unix systems they’re no different from files, Windows…

v0.1.1 release article for the Jellyfin Media Integrity Scanner. Covers update checker architecture, session-aware auto-restart, package bloat fixes, Playwright E2E testing, media corruption test…