Data centers required to fuel the ambitions of Artificial Intelligence companies have sparked a nationwide conversation. AI companies are moving quickly to build out infrastructure and local…

Part one of a field report on Microsoft's MXC: what process containers actually are (AppContainer identities, declarative policy, learn-versus-enforce), explained from the underserved platform,…

PHP 8.6 is in release candidate stage with GA planned for November 19. Here is how to run your tests against it with Docker and a CI matrix job now.

tsiam is another (small) nail in the coffin of static credentials

[Lambda Web Functions][main-post] bill for the CPU you actually use, and queue consumers spend most of their time waiting on something else. So is an SQS consumer cheaper as a Web Function than as a…

In [my notes on Lambda Web Functions][main-post-ric] I mentioned that the runtime contract is: Lambda import()s /var/task/index.js, then waits for something to accept a TCP connection on…

hi

CloudKeyVaultEvents is a table I recently discovered in Microsoft Defender Advanced Hunting. Despite being available in multiple tenants, I could find very little public documentation describing the…

I’ve been bombarded with email messages from “capital advisory” executives working for a family office. The office happens to be interested in investing in companies similar to…

Learn how to install vLLM on Debian, configure NVIDIA CUDA, run local LLMs with GPU acceleration, and integrate Open WebUI for multiple users.

Passwords are ubiquitous and have been for decades now. We're told to pick strong passwords and made to shuffle them every so often on some services, but we don't think enough about what makes a good…

I can't trust an engineer who doesn't curl.

Ukrainian strikes on Yandex data centres were followed by a sharp decline in automated network traffic. The measurements support an infrastructure disruption. They do not establish that Russian…

As the warm weather gives way to a frigid autumn, my time is being turned inward towards personal projects again. One immediate change has been a migration off my domain registrar’s DNS…

Your privacy choices affect people around you.

Ubiquiti just released UniFi Network 11, as a Release Candidate. Ubiquiti calls it their biggest release so far, and for once that is not just marketing. There is actually a lot of nice features in…

A defender-oriented tour of IoT and OT security for smart cities and critical infrastructure. Covers the architecture as deployed, the protocol footguns, the botnets and campaigns that keep showing…

Discover how the Firewalla Switch SE simplifies managed networking with device-centric rules, 2.5G ports, PoE+, VqLAN security, and easy app management.

The root KSK rollover happened on schedule. Whether your resolvers trust the new key is a separate fact, and this post shows how to prove it per resolver. The post The Root KSK Rollover Is Done. Did…

In the tradition started by Colin Percival and Thomas Ptacek, a set of “Cryptographic Right Answers” updated for the accelerated post-quantum transition timeline.

A GitHub Action for doing snapshot testing against files directly in your workflow

Stop editing paths in IIS handler mappings and scheduled tasks every time you upgrade software. Point them at a stable C:\Software\default folder, make that folder a junction with New-Item -ItemType…

iron-proxy is an egress proxy to manage traffic for untrusted workloads. It works as a MITM proxy, has a DNS server and can apply an allowlist on MCP tool calls. While trying to sandbox an agent with…

My Sendy server stopped responding with the disk at 99%. The database was 528 MB, but MySQL binary logs had grown to 41 GB. Here is how Codex walked me through finding them, purging them safely, and…

In the previous article we found out that the kernel makes all the memory feel like one single big thing, even though underneath it’s split into pieces. Today we go the other way: we’re…

Set dependency-update automation boundaries using release risk, meaningful verification, ownership, and a workable recovery path.

Continue Reading

The Industrial IoT Landscape Q4 2026 maps vendors and open source from edge to cloud in four categories, explains the Unified Namespace shift, and shows where OT meets enterprise IT. The post…

Self-hosting a model on AKS wins on paper and loses on utilization. How to compare it against Foundry's pay-per-token, provisioned and managed compute options in GPU-hours, and the short list of…

The really bad thing. In around July 2026, a REALLY bad thing happened. My home network got hacked. I had to take extensive recovery steps, including securing and changing all passwords, COMPLETELY…

For the past few years, I've been working on sprinklz.io, a customizable feed reader that can, among other things, deprioritize certain topics from your news feed. A month ago, I posted it to HN, and…

Disclaimer: The views and opinions expressed are my own and do not reflect the views, policies, or positions of my employer or any organization with which I am affiliated. --- In my last post, I…

Sheets.works : People post this comic whenever something breaks. The tower is labelled "all modern digital infrastructure" and it stands on one small block, "a project some random person in Nebraska…

The Database Safari, a practical field guide to specialized databases and hybrid data architectures, is now available.

I recently tracked down a performance problem that turned out not to be in the application, the servers, or the CDN. A corporate TLS-inspecting proxy sat between the users and the site.

Most migrations away from Linux stop at one program that ships only as a Linux binary, usually a vendor daemon with a list of distribution releases and kernel versions it will tolerate. FreeBSD has…

The old 2012 Mac Mini that was my faithful homeserver, spinning away and protecting my network and anti-cloud philosophy day after day, finally reached the end of its life. Sad times. I spent a few…

Telemetry is worth collecting well.

🦸 Community Superhero Our community superhero this week is Deanna Tran, senior software engineer at Cloudflare. Deanna has a background in software engineering and community leadership, and…

Dropbox offers a great alternative to hosting your own SAMBA server and provides a stable and user-friendly experience, but the space limitations without a subscription plan and being into vendor…

Every time I record a VPC video the same question comes back in the comments: "how did you decide on 10.0.1.0/24 for the public subnet and 10.0.2.0/24 for the private one?" The honest…

When the Seed was built on a bench on 20260928, rungs 0 to 4b ran and the edge was a design. Today every rung runs: the laptop with backups, the infrastructure box, the agent box, the core box, the…

I had an old IN X PLUS Android TV box lying around, built on the Rockchip RK3229. The goal was simple: replace Android with Armbian, run Pi-hole on it, and use it as a network-wide ad and tracker…

Up until the 1960s, telephone calls were carried as analog signals. There was a great deal of frequency division multiplexing onto open wire, and sometimes coaxial cables, but in the post-war period…

More than 30K technologists from 169 countries have shared their thoughts with us, and now it’s time to share everything we’ve learned with you. So let’s dive into this year’s Annual Developer Survey…

Inodes, hard vs soft links, and the rwx permission model — the parts of the Linux filesystem that Part 1 only walked past.

When building secure cloud infrastructure, managing secrets and connection strings is one of the most common operational overheads. Traditional application monitoring setups rely on static…

How likely are faults leading to bad states in a distributed system? Specifically, I am interested in faults causing the constituent components of the system to enter states that are inconsistent…

It turns out that a server that only answers on the LAN can still get a certificate for browsers to trust. The trick is the DNS-01 challenge: Let's Encrypt never connects to the server, it only…