Microsoft breach allowed Russia to steal Feds' emails
Affected federal agencies must comb through mails, reset API keys and passwords
1_DevOps'ish
Photographing the 2024 Total Solar Eclipse (results) | Jeff Geerling
ITOps Times Open-Source Project of the Week: Copa - ITOps Times
Copa can automatically apply the necessary patches to a container image based on the results of vulnerability scans.
Sisense breach: CISO posts guidance amid scramble to contain
"They have direct access to JDBC connections, to SSH, and to SaaS platforms... This is a worst case scenario"
Anyone ever work on an Itanium system? | GCC version 14 coming soon – and will drop Itanium support
Linux kernel cut it loose, now leading FOSS compiler lands depth-charge on Itanic
Palo Alto Networks: CVSS 10 bug in Pan-OS is being exploited in the wild
Patch? You'll need to wait until Sunday. Turn off telemetry (no, really; it's a mitigation!) and go to the pub. OK, maybe don't.
I need to kick the tires on this |GitButler | Git Branching, Refined
A Git client for simultaneous branches on top of your existing workflow..
The Space Force is planning what could be the first military exercise in orbit
"The vendors will exercise a realistic threat response scenario."
Macs to Get AI-Focused M4 Chips Starting in Late 2024
Apple will begin updating its Mac lineup with M4 chips in late 2024, according to Bloomberg's Mark Gurman. The M4 chip will be focused on...
I can vouch for these. Compact. Just works. Tons of space.| The Best Portable SSD
If you need a fast, reliable way to move files between computers, the Samsung T7 Shield (1 TB) is the portable solid-state drive for you.
Email DNS Records Cheatsheet
A quick
summary of the SMTP related DNS records together with
brief examples.
Lessons from XZ Utils: Achieving a More Sustainable Open Source Ecosystem | CISA
Lessons from XZ Utils: Achieving a More Sustainable Open Source Ecosystem | CISA
An official website of the United States government Here’s how you know Official websites use .gov A .gov website belongs to an official government organization…
April 12, 2024 at 11:35AM
via Instapaper
Hugo for fussy people
Hugo for fussy people
For the longest time I’ve wanted to love Hugo, the popular framework for generating static websites. Since 2018 I’ve had a blog that was hosted on Medium, but…
April 12, 2024 at 09:50AM
via Instapaper
Learn TLA Learn TLA
Learn TLA+ — Learn TLA+
Quick search Note Welcome to Learn TLA+! This is still a work in progress, please see What’s New for updates and please raise any questions or concerns at the…
April 12, 2024 at 08:04AM
via Instapaper
Gen Z and millennials say streaming costs them too much
Gen Z and millennials say streaming costs them too much
Apr 3, 2024 - Business Analis Bailey Data: Tubi/Harris Poll; Chart: Axios Visuals More than half of Gen Z and millennials believe they are overspending on…
April 12, 2024 at 07:19AM
via Instapaper
22 ‘hunt forward’ missions deployed overseas in 2023, Cyber Command leader says
Gen. Timothy Haugh told senators that personnel from the Cyber National Mission Force (CNMF) were assigned to watch foreign networks nearly two dozen times in 2023, with permission of the host country.
Bill would require AIs to reveal copyrighted training data
Proposed law doesn't include any ban on use of such stuff to build models, mind you
We never agreed to only buy HP ink, say printer owners
Complainants smack back after hardware giant moves to dismiss lawsuit
Are Cloudflare CAPTCHAs ruining the internet?
Who haven't met this annoying screen making us all lose our precious time? Cloudflare's challenge screen has become an almost daily routine for people working online, especially since the boom of scraping bots in the last few years. Why? The reach that internet brings is both a blessing and a
Our Response to Hashicorp's Cease and Desist Letter | OpenTofu
On April 3rd, we received a Cease and Desist letter from HashiCorp regarding our implementation of the "removed" block in OpenTofu, claiming copyright infringement on the part of one of our core developers. We were also made aware of an article posted that same day with the same accusations. We have investigated these claims and are publishing the C&D letter, our response and the source code origin document resulting from our investigation.
Apple alerts users in 92 nations to mercenary spyware attacks | TechCrunch
Apple sent threat notifications to iPhone users in 92 countries on Wednesday, warning them that they may have been targeted by mercenary spyware attacks. Apple has warned users in 92 nations of possible mercenary spyware attacks.
Using Amazon web traffic to track the eclipse
An animation that projects traffic fluctuations onto the U.S. map offers an example of how the Supply Chain Optimization Technologies team uses data visualization to glean insights.
Huawei building vast chip equipment R&D center in Shanghai
China tech company spending billions, snapping up talent in battle against U.S. crackdown
What’s going on with the National Vulnerability Database? #infosec
CVE overload and a lengthy backlog has meant the federal government’s repository of vulnerability data can’t keep up with today’s threat landscape.
This is $30 cheaper than my VPN alone. Anyone try it yet? | Meet DuckDuckGo PrivacyPro
Three powerful new protections bundled into one subscription.
Nvidia and Georgia Tech announce first AI supercomputer for students
Nvidia on Wednesday announced the first AI supercomputer designed for student use, in collaboration with the Georgia Institute of Technology.
AWS and InfluxData partner to offer managed time series database Timestream for InfluxDB
AWS and InfluxData partner to offer managed time series database Timestream for InfluxDB
April 11, 2024 at 09:26AM
via Instapaper
postmodern/chruby: Changes the current Ruby
postmodern/chruby: Changes the current Ruby
April 11, 2024 at 08:32AM
via Instapaper
Week Ending April 07 2024
Week Ending April 07, 2024
https://lwkd.info/2024/20240410
Developer News
The videos of the Kubernetes Contributor Summit EU are now available.
Arda Guclu has been nominated as a new chair for SIG CLI.
A new working group, WG Device Management, has been formed to address the need for improved support for accelerators in Kubernetes.
Release Schedule
Next Deadline: Release Day, April 17th
We’re closing in on the release of Kubernetes v1.30, which is scheduled for next Wednesday.
Featured PRs
k/website #45496: Add mechanism to retrieve API reference page link based on metadata
This PR to the Kubernetes website adds a new partial layout named api-reference-links.html to fetch the link of the API reference page based on the metadata present in the front matter of the file and adds the API reference link in the page links section. If a concept page has links to multiple API references, all of them will be listed in the links section.
KEP of the Week
KEP 4008: CRD Validation Ratcheting
This KEP proposes to allow custom resources with failing validations to pass if a patch does not alter any of the invalid fields. Currently, validation of unchanged fields stands as a barrier for both CRD authors and Kubernetes developers. This KEP proposes the CRDValidationRatcheting feature flag, which when enabled allows updates to custom resources that fail validation to succeed, if the validation errors when on unchanged keypaths. This makes it easier to change CRD validations without breaking existing workflows.
This KEP is tracked to graduate to beta in the upcoming v1.30 release
Subprojects and Dependency Updates
kustomize to v5.4.1 & 5.4.0 Fix null YAML values being replaced by “null”
containerd v1.7.15 Adds mediatype to OCI index record on export & v1.6.31
via Last Week in Kubernetes Development https://lwkd.info/
April 10, 2024 at 12:10PM
Microsoft employees exposed internal passwords in security lapse | TechCrunch
Microsoft employees exposed internal passwords in security lapse | TechCrunch
April 10, 2024 at 08:54AM
via Instapaper