Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,377 posts.
Docker Hub is a central repository for Docker developers to pull and push container images. We performed a detailed study on Docker Hub images to understand how vulnerable they are to security threats. Surprisingly, we found that more than 30% of images in official repositories are highly susceptible to a variety of…
There's a few reasons for this. First, the Tarsnap client-server protocol does not use TLS; instead, it uses a protocol which is about 100x simpler (in terms of the number of pages of documentation required to define it). This means there's less code and far fewer edge cases where bugs can lurk without being triggered…
Best practices for writing Go code, from the halcyon days of its youth.
How would the current internet function when you're on a native IPv6 host without any IPv4 instead of using any of the IPv4 workarounds? Find out with a few firewall rules!
Just over a year ago, we founded Tailscale with a common sense of nostalgia for the “good old days” of LANs. In our collective opinion (then and now) networking and cloud infrastructure has become too complicated. Attempts to increase team connectivity and migrate towards remote work results in a corresponding burden…
Discover how I transformed an old server into a powerful AI engine, self-hosting Llama 3.2 with GPU acceleration using Coolify. A step-by-step guide.
Container security is critical as companies use them more often for AI workloads and cloud workloads. Learn about 17 container security best practices here.
Canonical log lines are a lightweight, flexible, and technology-agnostic technique for observability that are powerful and easy to implement.
Update: 28 Nov 2023 Zen Internet and I have amicably parted ways over this matter. Their technical response has been added to this post.
A tale about misconfiguring nginx, from adventures in production
Note: If this topic has peaked your interest, you can join me for a Webinar on August 15 where I’ll dive deep into Cloud Native Operations with Kubernetes and CI/CD Pipelines. Peering into the crystal ball Kubernetes as a technology has been very important to my career this year, and will be even more so for next year…
tl;dr For several years I managed the 3rd line site reliability operation for many of the world’s busiest gambling sites, working for a little-known company that built and ran the core backen…
In this post I discuss how you can upgrade a NAS Server by adding Thunderbolt 3 for lightning fast connectivity at 20 or 40Gbps. This particular implementation is specific to an Apple Mac Mini M1 and
Visit the post for more.
“It’s always DNS” is a famous meme among network people. Name resolution is technically quite simple. It’s “just” translating a hostname like jan.wildeboer.net to an IP address. What could possibly go wrong? I am a radical optimist and detail-obsessed knowledge collector, so I decided to find out. As part of my goal…
Anubis could not load its JavaScript. The server may be overloaded. Please reload the page to try again.
In the first half of 2020 we plan to launch an AWS Region in South Africa
Our team, DeisLabs , recently released a new piece of software called Krustlet , which is a tool for running WebAssembly modules on the popular, open-source container management tool called Kubernetes . Kubernetes is used quite extensively to run cloud software across many vendors and companies and is primarily…
On March 14, 2025, Albedo's first satellite, Clarity-1, launched on SpaceX Transporter-13. We took a big swing with our pathfinder. The mission goals:
As you might already know, I’m into containers , static configuration and self-service infrastructures . Naturally, I love Kubernetes , which I consider the most promising cluster scheduler around.
Announcing Bento, the open source fork of the project formerly known as Benthos.
