1_DevOps'ish

Frontend engineer & indie developer. Building tools for developers.

The widening movement is pulling in people from all walks of life, united by a worry that Big Tech will cash in while average Americans bear the costs.

For years, NASA employees and research collaborators thought they were simply sharing software with colleagues. Instead, they were emailing sensitive defense

He created Gmail accounts, impersonated real US researchers, and convinced NASA, the military, and universities to hand over sensitive code.

Hundreds of billions in datacenter computing deals are closely tied to OpenAI

I’m excited to announce that Fedora Linux 44 is here! Keep reading to discover highlights of Fedora Linux 44, or if you are ready, just jump right in and give Fedora Linux 44 a try!

A deep dive into how email actually works — SMTP, MTAs, SPF/DKIM/DMARC authentication, spam filtering and TLS — traced step by step from Alice to Bob.

The research-plan-implement workflow I use to build software with Claude Code, and why I never let it write code until I've approved a written plan.

OWASP Autonomous Penetration Testing Standard

A field guide to why software projects fail, systems rot, and teams slow down.

Scan your website to see if it's ready for AI agents. Check for llms.txt, MCP, agent skills, and other agent-friendly standards.

Learn how Symphony, an open-source spec for Codex orchestration, turns issue trackers into always-on agent systems—boosting engineering output and reducing context switching.

Last April, I wrote a well-received article about the 13 software engineering laws - Hyrum’s, Conway’s, Zawinski’s, and 10 famous others.

Open-source infrastructure for Computer-Use Agents. Sandboxes, SDKs, and benchmarks to train and evaluate AI agents that can control full desktops (macOS, Linux, Windows). - trycua/cua

Why Data Protection and Audit Logging Belong Together

Benchmark shows V4 trailing Kimi and US frontier models, though gains raise hopes of another R1-style breakthrough.

GitGuardian analysis of the @bitwarden/cli compromise: GitHub used as C2, new Cloudflare exfiltration domain found, linked to April 22 Checkmarx KICS compromise via Dependabot.

Authorities have arrested a U.S. soldier involved in the capture of Nicolas Maduro for allegedly pocketing more than $400,000 by betting on his capture, sources say.

The multiple investigations into xAI’s creation and dissemination of sexually abusive imagery may lead the company ​to lose access to certain markets, parent company SpaceX warned in a prospectus reviewed by Reuters.

WSL9x lets you run a modern Linux kernel 6.19 inside Windows 9x without needing virtualization.

FCC defines consumer routers expansively, updates FAQ to include Wi-Fi hotspots.

Governor Janet Mills today notified the Maine Legislature that she has vetoed L.D. 307, An Act to Establish the Maine Data Center Coordination Council and Place a Temporary Limitation on Certain Data Centers.In her letter, the Governor said she supports a temporary moratorium on data center projects, and would have signed LD 307 if it included an exemption for a project now underway at the former Androscoggin Mill in Jay.

The widely circulated image had prompted authorities to move their search operation.

Plus: Spy firms tap into a global telecom weakness to track targets, 500,000 UK health records go up for sale on Alibaba, Apple patches a revealing notification bug, and more.

Shares of Intel have more than doubled this year on optimism that backing from the government will help the company's position in AI.

We caught a malicious image pushed to checkmarx/kics on Docker Hub, the image was quarantined, and we coordinated response with Socket and Checkmarx. This blog walks through what happened and why we believe open, fast collaboration is the key to responding to this new pattern of emerging supply chain attacks.

It was just days ago we reported on a proposal to drop old network drivers due to AI-driven bug reports becoming a burden on upstream kernel developers

Field report from an SSH honeypot left open for 54 days: 269K login attempts, 48K unique passwords, and a surprising cast of attackers.

Chinese AI startup DeepSeek has released a preview version of its long awaited V4 large language model.