CISA extends MITRE-backed CVE contract hours before its lapse
“Last night, CISA executed the option period on the contract to ensure there will be no lapse in critical CVE services,” an agency spokesperson said.
1_r/devopsish
Pentagon’s ‘SWAT team of nerds’ resigns en masse
Employees of a defense tech unit say they were sidelined by DOGE. “Either we die quickly or we die slowly,” says the director.
Real-world gen AI use cases from the world's leading organizations | Google Cloud Blog
Gen AI is everywhere, as top companies, governments, researchers, and startups showcase how they're already using Google's AI solutions to enhance their work.
Has the VIX peaked? ‘Acute phase’ of selloff in stocks may be done, says Bespoke.
Treasury Secretary Scott Bessent said in an interview this week that he thought the VIX has ‘likely peaked’
(What if we learned to) Learn and share differently by Aurélie Vache
We are about 8 billion people on Earth right now and we’re all different, but we have to get into boxes, go through the same educational program, and we all have to learn the same way.
Inoreader Browser extension privacy update
We’re pleased to announce a privacy-focused update to the Inoreader browser extension: the “Read and change all your data...
MITRE support expires for 'pillar of cybersecurity industry,' CVE program
DHS contract to operate the Common Vulnerabilities and Exposures (CVE) Program will expire on April 16.
ChatGPT's Studio Ghibli-style images are no laughing matter
Opinion: Miyazaki, copyright protection and the 'insult to life itself' of AI images
Homeland Security funding for CVE program expires
: Because vulnerability management has nothing to do with national security, right?
Don't Marry Your Podcasting Platform: Host Your Own Podcast Feed
Suppose you host your podcast on a platform like Libsyn or Podbean. What happens if you decide to switch podcast platforms? You already gave everyone a RSS URL that pointed to your old platform.
For example Libsyn gives your podcast an RSS URL like this:
https://feeds.libsyn.com/12345/rss
When you submitted your podcast to Apple Podcasts and shared your RSS URL with your listeners, you pointed them directly to your podcast platform.
SSL/TLS certificates will last 47 days max by 2029
: IT admins, get ready to grumble
Intel Sells 51% Of Its Altera Business
A decade after Intel acquired FPGA maker Altera for $16.7 billion and recently working to make Altera an independent company, Intel announced today it has sold 51% of its Altera business in a deal that values that business at $8.75 billion.
Radio Frequency 101: Can You Really Hack a Radio Signal?
Recent reports indicate the DoD is susceptible to radio frequency (RF) attacks. This post discusses common RF tools and ways malicious actors can attack systems.
Access to future AI models in OpenAI's API may require a verified ID | TechCrunch
OpenAI may soon require organizations to complete an ID verification process in order to access certain future AI models.
DevOps Toolkit - Ep18 - Ask Me Anything About Anything with Scott Rosenberg and Jon Shanks - https://www.youtube.com/watch?v=g6YL1EQnvnQ
Ep18 - Ask Me Anything About Anything with Scott Rosenberg and Jon Shanks
There are no restrictions in this AMA session. You can ask anything about DevOps, Cloud, Kubernetes, Platform Engineering, containers, or anything else. We'll have special guests Scott Rosenberg and Jon Shanks to help us out.
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ Sponsor: Codefresh 🔗 Codefresh GitOps Cloud: https://codefresh.io ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ BlueSky: https://vfarcic.bsky.social ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/
▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox
🎙️ New to streaming or looking to level up? Check out StreamYard and get $10 discount! 😍 https://streamyard.com/pal/d/5055462645956608
via YouTube https://www.youtube.com/watch?v=g6YL1EQnvnQ
DevOps Toolkit - Stop Using Docker and Local Kubernetes for Dev Environments! (feat. Okteto) - https://www.youtube.com/watch?v=Fa1VUumXqsc
Stop Using Docker and Local Kubernetes for Dev Environments! (feat. Okteto)
Learn how to create production-like remote development environments effortlessly! In this video, we demonstrate why local setups using Docker or KinD aren't optimal for complex applications. Discover how Okteto and tools like Crossplane, Contour, and External Secrets enable seamless development with real-time code updates. See the benefits of remote development environments that mimic production while keeping your local code in sync. Perfect for developers who want to ensure their code works in production-like conditions.
RemoteDevelopment #Okteto #DevEnvironment
Consider joining the channel: https://www.youtube.com/c/devopstoolkit/join
▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬ ➡ Transcript and commands: https://devopstoolkit.live/development/stop-using-docker-and-local-kubernetes-for-dev-environments-feat.-okteto 🔗 Okteto: https://okteto.com 🎬 Crossplane Tutorial: https://youtube.com/playlist?list=PLyicRj904Z99i8U5JaNW5X3AyBvfQz-16 🎬 Neon - Never Share Databases Again!: https://youtu.be/z7Nfl-u-hLI 🎬 Nix for Everyone: Unleash Devbox for Simplified Development: https://youtu.be/WiFLtcBvGMU 🎬 Remote Environments with Dev Containers and Devpod: Are They Worth It?: https://youtu.be/T_y3NTDrMHU
▬▬▬▬▬▬ 💰 Sponsorships 💰 ▬▬▬▬▬▬ If you are interested in sponsoring this channel, please visit https://devopstoolkit.live/sponsor for more information. Alternatively, feel free to contact me over Twitter or LinkedIn (see below).
▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ BlueSky: https://vfarcic.bsky.social ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/
▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox
▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬ 00:00 Introduction to Remove Dev Environments 02:02 Posthog (sponsor) 03:02 Introduction to Remove Dev Environments (cont.) 11:03 Remote Development Environments 16:17 Remote Development (The Wrong Way) 21:13 Remote Development (The Right Way with Okteto) 29:30 Wrapping It All Up 31:47 Remote Development Environments Pros and Cons
via YouTube https://www.youtube.com/watch?v=Fa1VUumXqsc
Generative AI is learning to spy for the US military
In a test run, a unit of Marines in the Pacific used generative AI not just to collect intelligence but to interpret it. Routine intel work is only the start.
The Pall Mall Pact and why it matters
The US indicated they will sign the Pall Mall Pact, an international treaty to regulate commercial spyware and surveillance tools.
Natural Language Is Now the Only No-Code Tool That Matters
The no-code movement aimed to make software accessible. But AI changed the rules. Language is now the only interface that matters. This post explores why AI-native tools have quietly replaced no-code — and what it means for how we build software.
Nakasone on Cyber Command, NSA firings and the future of the ‘dual-hat’ relationship | The Record from Recorded Future News
Nakasone said he didn’t know “what really occurred” and has not spoken to either Haugh or Noble since the presidential decisions were made, but he lauded both of them as “extraordinary leaders."
Why do AI company logos look like buttholes?
A humorous exploration of the uncanny resemblance between AI company logos and human anatomy. Discover why circular, gradient-based designs dominate the AI industry, and what this design convergence tells us about branding in tech.
Migrating from Google Workspaces to iCloud+
Google recently announced that it was getting rid of the legacy free tier for Google Apps/Workspace accounts, something I've used for 10+ years, and I don't care for that. I already pay for iCloud+ and it allows custom domains, so let the migration begin!
China Admitted to Volt Typhoon Cyberattacks on US Critical Infrastructure: Report
In a secret meeting between Chinese and US officials, the former confirmed conducting cyberattacks on US infrastructure.
Apple, Are You Okay?
I need Apple to blink once for yes and twice for no, because it's getting weird.
DevOps Toolkit - Me vs. AI - Live Match Against GitHub Copilot Agent - https://www.youtube.com/watch?v=8FWABB4V_p8
Me vs. AI - Live Match Against GitHub Copilot Agent
GitHub Copilot just released the Agent Mode, which should revolutionize development and operations. We'll put it to the test live and see whether AI can replace a (junior) developer or ops.
AI #GitHub #Copilot
Consider joining the channel: https://www.youtube.com/c/devopstoolkit/join
▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬ 🔗 GitHub Copilot: https://github.com/features/copilot
▬▬▬▬▬▬ 💰 Sponsorships 💰 ▬▬▬▬▬▬ If you are interested in sponsoring this channel, please visit https://devopstoolkit.live/sponsor for more information. Alternatively, feel free to contact me over Twitter or LinkedIn (see below).
▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ BlueSky: https://vfarcic.bsky.social ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/
▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox
via YouTube https://www.youtube.com/watch?v=8FWABB4V_p8
Leapp Open Source Project Provides In-Place Upgrades for OpenELA-Compatible Systems
Leapp Open Source Project Provides In-Place Upgrades for OpenELA-Compatible Systems
Facilitates upgrades and portability for operating systems in the Enterprise Linux ecosystem
RENO, Nev., AUSTIN, Texas, and LUXEMBOURG—April 10, 2025— OpenELA today announced a branch of the Leapp open source project which provides upgrade tooling for all Enterprise Linux variants. Leapp is an existing open source project that aims to serve as an expert advisor for moving operating systems (OS) workloads to newer Enterprise Linux OS versions by generating suggested actions, identifying risks, producing checklists, and automating steps for users.
This Famous Physics Experiment Shows Why the Government Should Support ‘Useless’ Science
Basic research often pays huge dividends—but that’s not why we do it.
Last Week in Kubernetes Development - Week Ending April 6 2025
Week Ending April 6, 2025
https://lwkd.info/2025/20250411
Developer News
KubeCon + CloudNativeCon EU took place last week in London, along with the CNCF Maintainer Summit. The recordings of the talks would be uploaded to the CNCF YouTube channel soon.
Photographs from the Maintainer Summit can be found in this Flickr album. Photographs from KubeCon + CloudNativeCon are being uploaded here.
If you haven’t done it already, do submit your feedback gfor the Maintainer Summit before April 18th!
Release Schedule
Next Deadline: Release day, April 23
Kubernetes v1.33.0-rc.0 is now available for your testing pleasure.
We are less than two weeks away from the scheduled release date for Kubernetes v1.33!
KEP of the Week
KEP 3619: Fine-grained SupplementalGroups control
This KEP adds a new way to choose correct behaviour with how container runtimes are applying SupplementalGroups to the first container process. Previous to this KEP, supplemental groups attached to containers were defined at two levels in Kubernetes - the OCI image level as well as the Kubernetes API level. The Kubernetes API level PodSecurityContext.{RunAsUser, RunAsGroup, SupplementalGroups} was designed to override the config.User configuration of OCI images. But in the current implementation, even if supplemental groups are defined at the Kubernetes API level, the group memberships defined in the container image for the UID are attached to the container process. This KEP proposes changes to both the Kubernets API and the CRI API to fix this issue.
This KEP is driven by @everpeace and is tracked to graduate to beta in the v1.33 cycle.
Shoutouts
No shoutouts this week. Want to thank someone for special efforts to improve Kubernetes? Tag them in the #shoutouts channel.
via Last Week in Kubernetes Development https://lwkd.info/
April 11, 2025 at 03:50AM
Contributing to Kubernetes blogs
There are two official Kubernetes blogs, and the CNCF has its own blog where you can cover Kubernetes too. For the main Kubernetes blog, we (the Kubernetes project) like to publish articles with different perspectives and special focuses, that have a link to Kubernetes.
With only a few special case exceptions, we only publish content that hasn't been submitted or published anywhere else.
Read the blog guidelines for more about that aspect.
OpenELA introduces Leapp project for in-place upgrades of Enterprise Linux
OpenELA is extending the functionality of the Leapp upgrade tool to all Enterprise Linux variants. The current upstream version of the open-source project