Pentagon turmoil deepens: Top Hegseth aide leaves post
“There is a complete meltdown in the building,” one official said.
Suggested Reads
2_News
EU OS: A European Proposal for a Public Sector Linux Desktop
There are many Linux distributions, but now there's a proposal for one that's specific to the European Union government and nongovernmental organizations.
1_r/devopsish
Judge Rules Blanket Search of Cell Tower Data Unconstitutional
Judge says tower dumps violate the 4th amendment, but will let the cops do it this one time, as a treat.
SteamOS alternative Bazzite Linux 42 brings Beta support for the MSI Claw handhelds and lots of other improvements
Building on top of the latest Fedora 42 release, Bazzite 42 is out now for this increasingly popular SteamOS-like option to put on your handhelds, desktops and more.
Frequently Asked Questions About the MITRE CVE Program Expiration and Renewal
Concerns about the future of the MITRE CVE Program continue to circulate. The Tenable Security Response Team has created this FAQ to help provide clarity and context around this developing situation.
gptscript-ai/gptscript: Build AI assistants that interact with your systems
Build AI assistants that interact with your systems - gptscript-ai/gptscript
(All) Databases Are Just Files. Postgres Too
If you invest a little time understanding how the components of your database system fit together—not even the internals, just the externals—you’ll be able to move faster, debug better, and build cleaner workflows with more confidence. It only needs some upfront investment of learning the basics and confidence that you can build along the way.
GoDaddy mistake took Zoom offline for about 90 minutes
: Manager of the .us namespace managed to block zoom.us
How Much Should I Be Spending On Observability?
In this update to her 2018 post, Charity Majors explains how much teams should spend when it comes to observability costs.
Last Week in Kubernetes Development - Week Ending April 13 2025
Week Ending April 13, 2025
https://lwkd.info/2025/20250416
Developer News
The next New Contributor Orientation will take place on Tuesday, April 22.
LFX Mentorship 2025 Term 2 is open for SIGs to submit projects for mentorship. To propose a mentoring project, PR it into project_ideas. If you have questions about LFX mentorship, ask in #sig-contribex.
All of the current SIG Scheduling leads are stepping down. They have nominated chairs Kensei Nakada and Maciej Skoczeń and TLs Kensei Nakada and Dominik Marciński to take their places.
Filip Křepinský, supported by SIG-Node, has proposed creating a Node Lifecycle Working Group.
Release Schedule
Next Deadline: Release day, 23 April
We are currently in Code Freeze.
Kubernetes v1.33.0-rc.1 is now avaliable for testing.
Due to the Release Managers’ availability and a conflict with the v1.33.0-rc.1 release, the April 2025 patch releases have been postponed to the next week (Tuesday, April 22).
KEP of the Week
KEP 1769: Memory Manager
This KEP defined the Memory Manager, which has enabled guaranteed memory and hugepages allocation for pods in the Guaranteed QoS class. It supports both single-NUMA and multi-NUMA strategies, ensuring memory is allocated from the minimal number of NUMA nodes. The component provides NUMA affinity hints to the Topology Manager to support optimal pod placement. While single-NUMA is a special case of multi-NUMA, both strategies are described to highlight different use cases.
This KEP was implemented in Kubernetes 1.32.
Shoutouts
Nina Polshakova: Shout out to the amazing v1.33 Docs team for a smooth Docs freeze this week and all your hard work this release! rayandas, Melony Q. (aka.cloudmelon ), Sreeram Venkitesh, Urvashi, Arvind Parekh, Michelle Nguyen, Shedrack Akintayo
via Last Week in Kubernetes Development https://lwkd.info/
April 16, 2025 at 06:00PM
‘Stupid and Dangerous’: CISA Funding Chaos Threatens Essential Cybersecurity Program
The CVE Program is the primary way software vulnerabilities are tracked. Its long-term future remains in limbo even after a last-minute renewal of the US government contract that funds it.
Former cyber official targeted by Trump quits company over move
Chris Krebs, who led the Cybersecurity and Infrastructure Security Agency during Trump’s first term, was targeted by the president last week with the loss of his security clearance.
CVE program gets a last-minute save, maybe a new home
: Uncertainty is the new certainty
CISA extends funding to ensure 'no lapse in critical CVE services'
CISA says the U.S. government has extended MITRE's funding to ensure no continuity issues with the critical Common Vulnerabilities and Exposures (CVE) program.
CISA extends MITRE-backed CVE contract hours before its lapse
“Last night, CISA executed the option period on the contract to ensure there will be no lapse in critical CVE services,” an agency spokesperson said.
Pentagon’s ‘SWAT team of nerds’ resigns en masse
Employees of a defense tech unit say they were sidelined by DOGE. “Either we die quickly or we die slowly,” says the director.
CVE Foundation
FOR IMMEDIATE RELEASE
April 16, 2025
CVE Foundation Launched to Secure the Future of the CVE Program
[Bremerton, Washington] – The CVE Foundation has been formally established to ensure the long-term viability, stability, and independence of the Common Vulnerabilities and Exposures (CVE) Program, a
Real-world gen AI use cases from the world's leading organizations | Google Cloud Blog
Gen AI is everywhere, as top companies, governments, researchers, and startups showcase how they're already using Google's AI solutions to enhance their work.
David DiMolfetta (@ddimolfetta) on X
The update comes just hours after a subset of the CVE Board said it plans to break off to maintain the CVE Program under a new body called the CVE Foundation. Unclear what happens next, but the new group could have a role in future contracting discussions:
https://t.co/InsiCi2RBW
Has the VIX peaked? ‘Acute phase’ of selloff in stocks may be done, says Bespoke.
Treasury Secretary Scott Bessent said in an interview this week that he thought the VIX has ‘likely peaked’
(What if we learned to) Learn and share differently by Aurélie Vache
We are about 8 billion people on Earth right now and we’re all different, but we have to get into boxes, go through the same educational program, and we all have to learn the same way.
Inoreader Browser extension privacy update
We’re pleased to announce a privacy-focused update to the Inoreader browser extension: the “Read and change all your data...
MITRE warns that funding for critical CVE program expires today
MITRE Vice President Yosry Barsoum has warned that U.S. government funding for the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE) programs expires today, which could lead to widespread disruption across the global cybersecurity industry.
MITRE support expires for 'pillar of cybersecurity industry,' CVE program
DHS contract to operate the Common Vulnerabilities and Exposures (CVE) Program will expire on April 16.
ChatGPT's Studio Ghibli-style images are no laughing matter
Opinion: Miyazaki, copyright protection and the 'insult to life itself' of AI images
Homeland Security funding for CVE program expires
: Because vulnerability management has nothing to do with national security, right?
Zack Morris Phone (feat. Bruiser Wolf) by Curren$y & Harry Fraud on Apple Music
Song · 2025 · Duration 3:09
3_Music
Don't Marry Your Podcasting Platform: Host Your Own Podcast Feed
Suppose you host your podcast on a platform like Libsyn or Podbean. What happens if you decide to switch podcast platforms? You already gave everyone a RSS URL that pointed to your old platform.
For example Libsyn gives your podcast an RSS URL like this:
https://feeds.libsyn.com/12345/rss
When you submitted your podcast to Apple Podcasts and shared your RSS URL with your listeners, you pointed them directly to your podcast platform.
SSL/TLS certificates will last 47 days max by 2029
: IT admins, get ready to grumble