Introducing new DNS Diagnostics Tooling
In the wake of releasing a massive update of the 'domain' library, we launched DNS Investigation, aka "dnsi".
1_r/devopsish
zero-gpu-explorers (ZeroGPU Explorers)
Org profile for ZeroGPU Explorers on Hugging Face, the AI community building the future.
Not touching it with a ten foot pole but interesting | VMware's Fusion Pro and Workstation Pro are now free for personal use - here's how to access them
More than a consolation prize for ESXi users, Broadcom's surprising move makes advanced virtualization tools more accessible than ever - empowering students, hobbyists, and independent developers.
Ascension faces class action lawsuits for Black Basta ransomware attack
The cyberattack that brought down the Ascension IT Systems was "foreseeable and preventable," complaints say.
AquaSonic: Acoustic Manipulation of Underwater Data Center Operations and Resource Management
Underwater datacenters (UDCs) hold promise as next-generation data storage due to their energy efficiency and environmental sustainability benefits. While the natural cooling properties of water save power, the isolated aquatic environment and long-range sound propagation in water create unique vulnerabilities which differ from those of on-land data centers. Our research discovers the unique vulnerabilities of fault-tolerant storage devices, resource allocation software, and distributed file systems to acoustic injection attacks in UDCs. With a realistic testbed approximating UDC server operations, we empirically characterize the capabilities of acoustic injection underwater and find that an attacker can reduce fault-tolerant RAID 5 storage system throughput by 17% up to 100%. Our closed-water analyses reveal that attackers can (i) cause unresponsiveness and automatic node removal in a distributed filesystem with only 2.4 minutes of sustained acoustic injection, (ii) induce a distributed database's latency to increase by up to 92.7% to reduce system reliability, and (iii) induce load-balance managers to redirect up to 74% of resources to a target server to cause overload or force resource colocation. Furthermore, we perform open-water experiments in a lake and find that an attacker can cause controlled throughput degradation at a maximum allowable distance of 6.35 m using a commercial speaker. We also investigate and discuss the effectiveness of standard defenses against acoustic injection attacks. Finally, we formulate a novel machine learning-based detection system that reaches 0% False Positive Rate and 98.2% True Positive Rate trained on our dataset of profiled hard disk drives under 30-second FIO benchmark execution. With this work, we aim to help manufacturers proactively protect UDCs against acoustic injection attacks and ensure the security of subsea computing infrastructures.
New WiFi Vulnerability: The SSID Confusion Attack
This vulnerability exploits a design flaw in the WiFi standard, allowing attackers to trick WiFi clients on any operating system into connecting to a untrusted network.
What Do You Do When A.I. Takes Your Voice? (Gift Article)
Two voice actors say an A.I. company created clones of their voices without their permission. Now they’re suing. The company denies it did anything wrong.
I have a USB TPU on my NAS now. It’s yet another thing I need to get working. | Get ready for the AI PC
The biggest names in computing are all pouring resources into building generative AI into their devices.
Are we in Apple's post-iPad era?
The new Pro and Air only raise more questions about where the tablet fits in Apple's lineup.
This is in Bluefin and it’s lovely | Install Ptyxis on Linux | Flathub
A container oriented terminal for GNOME
Linus Torvalds Is Doing More ARM64 Linux Testing Now That He Has A More Powerful System
Linux kernel and Git creator Linus Torvalds is known for his current use of an AMD Ryzen Threadripper workstation as his main system after years of using Intel hardware
Return to office mandates saw senior employees jumping ship
More stringent rules led to staff to find more remote options
Robert Dennard, IBM Inventor Whose Chip Changed Computing, Dies at 91 (Gift Article)
He invented DRAM, the technology that allowed for the faster and higher-capacity memory storage that is the basis for modern computing.
“And if all the other hyperscalers are designing their own chips, it makes sense that Apple would as well.” 🤔🤔🤔| Why is Apple Making a Data Center Chip?
Of course Apple is designing its own AI chips for its data centers. This will give them an end-to-end, cloud-to-edge, AI system that its competitors will not be able to match any time soon.
And if all the other hyperscalers are designing their own chips, it makes sense that Apple would as well.
Oof… “there is no way to opt out” | Searchers Want To Turn Off Google AI Overviews
There are many searchers who have been using Google daily that are heading to the Google Web Search Help forums to ask how they can turn off the new AI Overviews within the Google Search results. As you know, AI Overviews started to roll out on Tuesday and some searchers simply do not want it.
there is no way to opt out
TSMC’s A16 process to run without ASML's next-gen High NA EUV machine · TechNode
TSMC will not utilize ASML's most advanced High NA EUV (high numerical aperture extreme ultraviolet) lithography machine for its latest A16 (1.6nm)
Linux maintainers were infected for 2 years by SSH-dwelling backdoor with huge reach
Ebury backdoors SSH servers in hosting providers, giving the malware extraordinary reach.
Openwashing
Openwashing
SHOP TALK Openwashing /ō-pən-wä-shĭng/ An accusation against some A.I. companies that they are using the “open source” label too loosely. Credit...Luci…
May 17, 2024 at 10:31AM
via Instapaper
OSPOs for Good 2024 | Office of the Secretary-General's Envoy on Technology
OSPOs for Good 2024 | Office of the Secretary-General's Envoy on Technology
Date 9 – 10 July 2024 Venue United Nations Headquarters, New York Mode In-person with hybrid panels Event Description The second edition of the OSPOs for Good…
May 17, 2024 at 09:53AM
via Instapaper
Proton (@protonprivacy@mastodon.social)
@ChrisShort@hachyderm.io @thisismissem@hachyderm.io The name/address of the terrorism suspect was actually given to police by Apple, not Proton. The terror suspect added their real-life Apple email as an optional recovery address in Proton Mail. Proton can't decrypt data, but in terror cases Swiss courts can obtain recovery email. Setting a recovery email is optional, and you can read about other recovery methods here: https://proton.me/support/set-account-recovery-methods
Took a full week to get my things moved. A solid week in the guillotines while trying to clean up this mess | Fallout from Ascension cyberattack continues: Michigan pharmacies can't fill prescriptions
Ascension Michigan's pharmacies cannot fill prescriptions, the health system said Wednesday. This is ongoing fallout from last week's ransomware attack.
Cyber Official Speaks Out, Reveals Mobile Network Attacks in U.S.
A CISA official breaks with the government narrative and tells the FCC that SS7 and similar networks and protocols have been used to track people in the U.S. in recent years.
‘Chaos’: Nurses, visitors describe conditions inside Ascension hospitals after cyberattack
“Pure and utter chaos from the second you walk into the door.” That’s how one nurse described what it’s like inside a local Ascension hospital following a cyber-attack.
Apple brings eye-tracking to recent iPhones and iPads
Apple is bringing eye-tracking to iPhones and iPads without the need for additional devices or hardware.
AirMessage - iMessage for Android and the web
AirMessage enables iMessage on your Android phone, Windows PC, Linux computer, or Chromebook.
Yes, it took me a week and we're almost done shifting things away from Ascension | Fallout from Ascension cyberattack continues: Michigan pharmacies can't fill prescriptions
Ascension Michigan's pharmacies cannot fill prescriptions, the health system said Wednesday. This is ongoing fallout from last week's ransomware attack.
Week Ending May 12 2024
Week Ending May 12, 2024
https://lwkd.info/2024/20240516
Developer News
The Azure File CSI Driver is affected by CVE-2024-3744; please upgrade ASAP.
The Kubernetes documentation is now available in 16 different languages. Thanks to every community member who helped on the translation and launch of the new Bengali website.
The planning for the Kubernetes Contributor Summit NA 2024 has started and the organizer team is looking for shadows and volunteers. Some roles do not require being at the KCS in person.
Do you use etcd clusters in addition to the one embedded in Kubernetes? If so, SIG-Etcd and SIG-Cluster-Lifecycle want to hear from you about a potential new etcd operator.
SIG Cloud Provider The new WG-Serving has published their workstream.
Release Schedule
Next Deadline: Production Readiness Freeze, June 6th, 2024
Angelos Kolatis, 1.31 Release Team Lead, has shared the 1.31 timeline. Important dates:
PRR Freeze: June 6
Enhancements Freeze: June 14
Code Freeze: July 10
Test & Docs Freeze: July 30
Release target: August 13
The Call for Enhancements for v1.31 is out! Make sure to opt-in well before the Production Readiness Review Freeze on June 6th so that there is enough time for reviews.
Patch releases for all supported versions are expected out this Wednesday.
Other Merges
Add kubectl logs --all-pods option to dump all pods in a set
kubectl port-forward can autocomplete
Resolve more corner cases with job finalizers
PersistentVolumeLabel admission plugin won’t support in-tree providers, which was a better fix than removing it
Count EvaluatedNodes better
Add feature gates for strict enforcement of CEL cost calculation
Filter pods before checking queueability, and make sure PreFilters return valid nodes
Warn users if they are running an Etcd version that does not support watch progress
Daemonsets include old unhealthy pods in their budget
DisableHTTP2 flag in the secure serving options
CSILimit scheduler plugin has queueing hints
Promotions
DisableNodeKubeProxyVersion to Beta
MatchLabelKeysInPodAffinity to Beta
Deprecated
Now that the Legacy Cloud Providers are removed try to remove them from staging, break the build, and replace them; legacy cloud provider staging will actually be removed once 1.30 is EOL
GA feature gate removal: ServiceNodePortStaticSubrange, CSINodeExpandSecret
CephRBD and CephFS in-tree provides are removed
Version Updates
golang to 1.22.3
Subprojects and Dependency Updates
kubernetes-csi/csi-driver-nfs to v4.7.0: add StorageClass definition in Helm charts
cri-o/ocicni to v0.4.3: added support for cni STATUS verb
prometheus/prometheus to 2.52.0: add a new metric prometheus_sd_kubernetes_failures_total to track failed requests to Kubernetes API
kops to v1.28.5: allow overlap of pod/node CIDR and service CIDR
cloud-provider-openstack to 1.30.0: add support to only run selected CSI services
via Last Week in Kubernetes Development https://lwkd.info/
May 16, 2024 at 01:00AM
Blog: From Code to Quill: Embark on a Legendary Kubernetes Quest with SIG Docs
Blog: From Code to Quill: Embark on a Legendary Kubernetes Quest with SIG Docs
https://www.kubernetes.dev/blog/2024/05/16/contribute-as-sig-docs-reviewer/
You’ve likely heard the adage, “Contributing isn’t just about writing code”, whispered in forums or seen etched into the digital walls of open source communities. But what depth of truth lies within this ancient wisdom, especially in the vast, evolving world of Kubernetes?
Today, contributing to open source extends far beyond the realm of coding. It’s an inclusive journey that welcomes the diverse skills of all who wish to be a part of it. Whether you’re a seasoned developer or someone whose strengths lie outside traditional programming, your contributions hold immense value.
Imagine yourself embarking on a journey that leverages your expertise and love for free software to enhance your capabilities and strengthen the very foundation of the Kubernetes ecosystem. This is a real opportunity for you to shine, to make an indelible mark on a project that powers some of the most critical infrastructure in the world today.
Your journey begins with a single step: joining the Special Interest Group (SIG) Docs. Here, your talent for articulating complex concepts, your keen eye for detail, and your unwavering commitment to clarity become your most powerful tools. As a contributor, you can transform dense technical landscapes into navigable pathways, making Kubernetes accessible to all.
This is your call to adventure, an invitation to expand beyond the familiar territories of code and into the rich, uncharted domains of documentation and collaboration, empowering a global community of users and contributors.
Why become a SIG Docs reviewer?
The Kubernetes project depends substantially on the SIG Docs to ensure that documentation is accurate, up to date, and easily accessible. By becoming a reviewer, you can help users and contributors navigate and understand Kubernetes more effectively. In addition, reviewing documentation provides unique opportunities for:
Expanding your Kubernetes knowledge: Engage deeply with new features and functionalities by reviewing their documentation.
Improving your technical writing skills: Develop an eye for detail and clarity in technical writing.
Strengthening the Kubernetes community: Help maintain the high quality of Kubernetes documentation, supporting both new and experienced users.
Building your network: Expanding your professional network, and getting together with contributors from around the globe.
Who are we looking for?
We’re seeking open source enthusiasts with:
Experience of Git and GitHub, comfortable with the process of reviewing pull requests and providing constructive feedback.
Familiarity with Markdown and documentation frameworks (Hugo experience is a plus but not required).
A passion for making complex technical concepts understandable and accessible.
Experience in technical writing or documentation review in open source projects is beneficial, but not mandatory. Kubernetes experience is welcome at all levels. Those less familiar with Kubernetes or containers can provide valuable fresh perspectives for beginners accessibility. We value diversity of experiences and the fresh eyes you can provide to make sure our content is clear and understandable for everyone.
How to get started
Becoming a SIG Docs reviewer is a journey that starts with familiarizing yourself with the Kubernetes documentation contribution process. Here are the steps to get you started:
Familiarize Yourself with SIG Docs: Start by reading the SIG Docs contributor guide to understand how documentation contributions are made.
Join the Kubernetes Slack: Connect with the SIG Docs community on the
sig-docs channel. It’s a great place
to ask questions, find mentorship, and get to know the community.
Start Reviewing Pull Requests: Look for open pull requests labeled with good first issue or help wanted. These are great for beginners. Leave constructive feedback and suggestions. Familiarize yourself with the content guide and the style guide to provide more effectively reviewing Pull Requests.
Attend SIG Docs Meetings: Participate in the SIG Docs meetings. These meetings are an excellent opportunity to meet fellow contributors, discuss documentation improvements, and volunteer for reviewing tasks.
Shadow an Experienced Reviewer: To better understand the review process, sign up for our official PR Wrangling shadow program where you will be able to shadow an experienced reviewer and learn best practices and tips for reviewing efficiently and effectively.
Contributor Ladder: Familiarize yourself with the CNCF contributor ladder, which guides your progression from newcomer to advanced contributor roles in the Kubernetes community.
What’s next?
After consistently contributing to documentation reviews and demonstrating your understanding of Kubernetes documentation standards, you can express your interest in becoming an official SIG Docs reviewer. Engage with the SIG Docs chairs or leads on the public Slack channel or during SIG Docs meetings to discuss the next steps.
See you in the docs!
Becoming a SIG Docs reviewer is more than contributing; it’s embracing the heart of the Kubernetes community 🚀. Enhance your knowledge and writing skills while contributing to our valuable documentation. This is your opportunity to guide others with your expertise and make a lasting impact. Welcome aboard—see you there! 🌟
via Kubernetes Contributors – Contributor Blog https://www.kubernetes.dev/blog/
May 15, 2024 at 08:00PM
Troubling iOS 17.5 Bug Reportedly Resurfacing Old Deleted Photos
Troubling iOS 17.5 Bug Reportedly Resurfacing Old Deleted Photos
There are concerning reports on Reddit that Apple's latest iOS 17.5 update has introduced a bug that causes old photos that were deleted – in some cases years…
May 15, 2024 at 03:23PM
via Instapaper
Folding for Lucy
Folding for Lucy
https://chrisshort.net/folding-for-lucy/
After the death of my niece, Lucy, I decided to donate a portion of our household compute to cancer research through Folding@Home
via ChrisShort.net https://chrisshort.net/
May 15, 2024 at 03:00AM