Data Centers: How About an Adversarial Collaboration? I live in a state booming with data centers. They’re also a booming political issue, weirdly scrambling some of the familiar political…

Codex ships 43,591 lines of sandboxing code across four platform backends. Pi ships zero, and puts it in the README: Pi does not include a built-in permission system for restricting filesystem,…

Yesterday, I was playing some FH6 to take some break from my RE sessions, and to enjoy the relaxing Tokyo scenery. I also wanted some nostalgia by, finding the locations I visited in my Japan trip…

While I’m taking a short break from low-level programming, here’s a story by a friend of mine, Sonya, about debugging a seemingly impossible bug in ARM code. This bug hunting saga started several…

Senior data engineers quit stacks that page them at 3am, and the exit interview says “growth”. When a senior leaves, the response is usually a counter-offer or a survey. Nobody looks at…

A single RFC 9114-compliant frame type — the trailer HEADERS frame — breaks HTTP/3 state machines across two independent CDN edge implementations and the shared quiche QUIC library used in major…

Reusing database connections to cut latency and resource cost

I am extremely bad at hosting my websites, but I have a crap ton of them. They're all S3 buckets on AWS. I understand that this is stupid for someone like me... but around a decade ago I started…

I saw this post (via Dave Winer) about issues with the ability of feed readers to read feeds from websites hosted by or using Cloudflare. I ran into this problem in trying to access feeds from the…

What happens when over a thousand AI agents discover a shared message board, invent their own protocols, and coordinate an attack. The Hugging Face Incident The Hugging Face security breach incident…

I was looking at my server stats (AWStats) to see if I could identify bot traffic easily. (Spoilers: no.) Basically, I wanted to know how “big” of an issue bot traffic is on my site since…

Marketing departments are screaming that attackers are moving at "machine speed" and only AI-powered defenses can stop them. But cyberattacks have always been automated, and proactive defense beats…

I finally got around to self-hosting Home Assistant on my home server, and one of my early discoveries was that CO2 rapidly spikes into the warning zone when I’m working in my home office.…

OpenAI shipped the first model it rates Critical for cyber capability. It costs 2.5x GPT-5.6 Sol, its headline benchmark carries a harness-shaped asterisk, and most accounts cannot run it yet. What…

How I replaced NGINX and Certbot with a single Caddyfile: a Caddy reverse proxy with automatic Let's Encrypt TLS, Cloudflare DNS-01, and a hardened systemd service.

I have a homelab. It runs many services for me, each in their own little container with its own IP address. Considering none of these services are ever reachable from outside my network (apart from…

ISO/IEC JTC 1/SC 27/WG 1 is making progress on a proposed new ISO27k information security standard for Small to Mid-sized Enterprises with up to ~250 people. An initial rough draft will be…

My local paper accepts Letters To The Editor that are up to 300 words in length. My letter is 600 words ... so I emailed them to request an exception to this rule. We'll see if they publish it!…

I was reading Jason Gorman’s article “The Wall Confronting Reliable Coding Agent Autonomy” and he says: the journey from 90% to 99% reliability is just as hard as it was to get to 90%. And from 99%…

Summary: My new book, Authorization in Action, is out from Manning. It's about the question that comes after we know who you are: what are you allowed to do, under what conditions, on whose behalf,…

Paul Hammant pointed out that Google separated verification from merge coordination more than fifteen years ago. He was right. What actually changed is who owns the feedback-and-repair loop — and…

For the curious, here are my notes for an upcoming Ziti TV episode where we’ll be talking about what’s in the OpenZiti Quickstart. OpenZiti Quickstart is a single command (ziti edge quickstart) that…

A machine-learning model has been designed to predict emerging computer-network security threats with greater reported accuracy than support-vector-machine systems, according to research in the…

The details of the AI agent swarm that implemented the Hugging Face hack have a number of disturbing implications about AI alignment and the abilities of rogue agents

About a month ago, I (and many others) wrote about an incident in which two AI models from OpenAI — one that has been released publicly, called Sol, and one that was still in testing mode with…

Compare Resend, Cloudflare Email Service, Postmark, Mailgun, SendGrid, Amazon SES, Mailtrap and AgentMail for sending, receiving, and giving AI agents an inbox.

Alternate title: the privacy community hates nuance. There's a fundamental problem when it comes to the debate around privacy on the web; no one seems to know in detail what companies are really…

Yesterday I received a ping like I do each quarter from a horrible human being… Cory in IT. It said “Dalton I’m here to remind you that for the next 7 days you need to spend every…

PostgreSQL 19 Beta 3 shipped on August 13, 2026, and the release notes have been filled in as of 2026-07-18 — still marked subject to change, and the GA date isn’t announced yet, but following…

An empty update list is not evidence that everything's current. Sometimes it's evidence that nobody's looking.

Phantom capacity is the planning problem underneath Texas’s decision to freeze new data center grid connections, and the problem has less to do with megawatts than with whether the demand…

After a pretty long time not doing much except critiquing AI sentiments and complaining about Final Fantasy XIV, I’m finally back with some more comp-sci nonsense. Today’s update to the…

A console, CLI, MCP server, and macOS app for understanding a LanceDB database — schema, versions, indices, fragments and rows, with the byte cost of every read shown as you go.

The bytes a search touches and the bytes a table holds live in different files. LanceScope measures both, from Lance's own IO counters, and puts the number next to whatever you just did.

It is nice to start anew because computer OSes accumulate cruft. I prefer to do this with my home systems once every 3 to 4 years: erase the hard drive, install the current OS from scratch, restoring…

yes painful but some companies force this user to… going the flatpak way as snapd is a catastrophe that messes too much with the system (not UNIX KISS) get OS up to date su - root; # become…

You might have noticed in the past few weeks that my website and GitLab instances were not as reliable as usual. Sadly, tons of malicious actors such as Meta, Microsoft and other large conglomerates,…

When in the terminal, in project’s source code directory, and need to kick of a pipeline for this branch, simply run: 1gh workflow run "Workflow Name" --ref $(git branch --show-current)…

CSV (Comma-Separated Values) remains the most common format for exchanging data with spreadsheets and databases. Because Python is one of the most widely used languages for data work, using CSV files…

 Footage of the Ukrainian surface drone strike on Sochi, which struck the Russian Government linked special ship Nefrit, also shows a rare glimpse at something…

Navidrome and Jellyfin are servers for Audio and Video, respectively. They run on Linux (and possibly other operating systems) and have clients that can access them and stream media, provide an…

Rachel Laycock wrote a post called Maybe We Shouldn’t Be Reviewing All This Code. It is a response to Brian Houck, who worries that automating code review away will cost us everything else that…

Sovereign cloud is the hottest trend among telecom operators seeking future revenue from their national network infrastructure footprints. Nearly every tier-1 operator we recognise globally……

The beauty of SR-MPLS is that it’s a drop-in replacement for the traditional (LDP- or RSVP-based) MPLS control plane. For example, you could replace LDP with SR-MPLS in a network using MPLS to…

Note: this is a follow-up to my post on monitoring GitHub Copilot Chat with the Aspire Dashboard. Same idea, different agent. Some developers on the team have switched (part-time) from Copilot Chat…

I was pondering the future of warfare, as one does, and contemplating the use of robots in current wars and wars to come, as one does. Being a conservative both by politics and temperament, as I am,…

Bring Your Own Vulnerable Driver (BYOVD) is a familiar Windows attack technique: an attacker loads a legitimate, signed driver and abuses a flaw in it to gain kernel-level capabilities. Microsoft…

I probably wouldn't have written this post except I had a MicroSD card burn up on me (literally). What is that? That's a Nintendo Switch with a slim USB hub and an SDR plugged in that listens to…