Kubernetes hardening made easy: Running CIS Benchmarks with kube-bench
In today’s world, where security risks and breaches are growing daily, it is crucial to maintain our applications and infrastructure’s compliance with security standards and that is where CIS benchmarks from CIS (Center for Internet Security)… ⌘ Read more

Found means fixed: Reduce security debt at scale with GitHub security campaigns
Starting today, security campaigns are generally available for all GitHub Advanced Security and GitHub Code Security customers—helping organizations take control of their security debt and manage risk by unlocking collaboration between developers and security teams.

The post [Found means fixed: Reduce security debt at scale with GitHub security campaigns](http … ⌘ Read more

Managing multi-line logs with Fluent Bit and Python
In this blog you will learn about:  Introduction Logs are essential for monitoring and debugging applications, but not all logs are created equal. While most logs follow a simple line-by-line format, others span multiple lines to… ⌘ Read more

Kubestronaut in Orbit: Iliyan Petkov
Get to know Iliyan His fascination with computers and electronics began early, sparked by his father and fueled by various games and sci-fi movies. Over the years, he developed a passion for open-source technologies, system administration,… ⌘ Read more

Adding to this, we already tried. It didn’t go too well. Slightly related—because it is a third party “integration”—I might be a “smaller group” member, but I don’t care much about one-way feeds (mostly RSS from blogs, news articles, etc.) either.

Git turns 20: A Q&A with Linus Torvalds
To celebrate two decades of Git, we sat down with Linus Torvalds—the creator of Git and Linux—to discuss how it forever changed software development.

The post Git turns 20: A Q&A with Linus Torvalds appeared first on The GitHub Blog. ⌘ Read more

Mandated use of AI at work
Although I also use AI for some features on this blog and sometimes chat with some AI agent (whether it’s ChatGPT, Claude, Microsoft Copilot or GitHub Copilot), I have mixed feelings about its mandated use at work (Shopify is just one company doing it). ⌘ Read more

This time it’s just a station to change to another train. Another hour and a half to my new/old home station. ⌘ Read more

Getting the firmware of a VTech/LeapFrog LeapStart/Magibook
This is a very small blog post about my first reverse engineering project, in which I don’t really reverse engineer anything yet, but I am just getting started! A family member asked me to add additional book data to the LeapStart he bought for his son, this is the starting point here. ↫ leloubil’s blog We’ve all seen toy, child-focused computers like these, and I always find them deeply fascinating. I’m not buyi … ⌘ Read more

KubeCon + CloudNativeCon Europe 2025: Day Three Keynote Recap
The last day of KubeCon + CloudNativeCon Europe 2025 dawned bright and sunny again, with attendees streaming in to learn the latest about cutting edge topics including LLMs, 5G and 6G, and more. Here’s a snapshot… ⌘ Read more

On my blog: Developer Diary, 1994 Rwandan Genocide https://john.colagioia.net/blog/2025/04/07/rwanda.html #programming #project #devjournal

https://blog.guillaume-gomez.fr/Rust

FOSDEM 2025
I recently attended the large Free and Open Source Software conference
FOSDEM 2025 in Brussels, Belgium. I went there by train, of course,
via Copenhagen, Hamburg, and Cologne. The same route back.

Image

I lived in the rather expensive, allegedly fancy hotel Le Châtelain in
Brussels. It was really not that fancy, but they had a … ⌘ Read more

The Llama 4 herd
Article URL: https://ai.meta.com/blog/llama-4-multimodal-intelligence/

Comments URL: https://news.ycombinator.com/item?id=43595585

Points: 506

# Comments: 265 ⌘ Read more

I visited this place four years ago, but today my family and I went to the Todtnau Waterfall again. This time there’s a new suspension bridge from which you can see the waterfall from above and get an even better view of the valley in the black forest. ⌘ Read more

On my blog: Free Culture Book Club — Nose Ears, part 2 https://john.colagioia.net/blog/2025/04/05/nose-ears-2.html #freeculture #bookclub

On my blog: Toots 🦣 from 03/31 to 04/04 https://john.colagioia.net/blog/2025/04/04/week.html #linkdump #socialmedia #quotes #week

Run LLMs Locally with Docker: A Quickstart Guide to Model Runner
AI is quickly becoming a core part of modern applications, but running large language models (LLMs) locally can still be a pain. Between picking the right model, navigating hardware quirks, and optimizing for performance, it’s easy to get stuck before you even start building. At the same time, more and more developers want the flexibility […] ⌘ Read more

Microsoft’s 50th anniversary celebrations tainted by the company’s role in the genocide in Gaza
Microsoft is celebrating its 50th anniversary, and in honour of this milestone, Bill Gates has published a blog post about the first code the company ever wrote. In 1975, Paul Allen and I created Microsoft because we believed in our vision of a computer on every desk and in every home. Five decades later, Microsoft continues to innovate new way … ⌘ Read more

Vibe coding with GitHub Copilot: Agent mode and MCP support rolling out to all VS Code users
In celebration of MSFT’s 50th anniversary, we’re rolling out Agent Mode with MCP support to all VS code users. We are also announcing the new GitHub Copilot Pro+ plan w/ premium requests, the general availability of models from Anthropic, Google, and OpenAI, next edit suggestions for code completions & the Copilot code review agent.

The post [Vibe coding with GitHub Copilot: Agent mode and MC … ⌘ Read more

On my blog: Real Life in Star Trek, The Chase https://john.colagioia.net/blog/2025/04/03/chase.html #scifi #startrek #closereading

Master Docker and VS Code: Supercharge Your Dev Workflow
Get step-by-step instructions on how to pair VS Code and Docker to streamline your development processes. ⌘ Read more

My March ‘25 in Review
My monthly review is a few days late, but there’s so much to do that I don’t really get around to blogging. ⌘ Read more

Prosodical Thoughts: Prosody 13.0.1 released
We are pleased to announce a new minor release from our stable branch.

As is the tradition with software, here is our first patch release following
shortly behind our major 13.0.0 release announced a few weeks ago. It fixes
some important bugs that were discovered after the release.

Many thanks to everyone who reported issues and helped with testing the fixes
for this release. We appreciate it!

For those of you on 0.12.x who haven’t upgraded yet, skip 13.0.0 and jump
stra … ⌘ Read more

KubeCon + CloudNativeCon Europe 2025: Day Two Keynote Recap
Over 12,000 attendees streamed into the ExCel Arena for the second day of KubeCon + CloudNativeCon Europe 2025, enjoying yet another sunny day in London and primed to hear real world stories of cloud innovation. Here’s… ⌘ Read more

An even better Komoot alternative? – OsmAnd
After quickly trying out Outdooractive, I think I found an alternative that fits my needs a bit better and is also more inline with my values: OsmAnd. ⌘ Read more

Enjoying the nice weather, my monthly review will be a little late. 🌷 ⌘ Read more

Localhost dangers: CORS and DNS rebinding
What is CORS and how can a CORS misconfiguration lead to security issues? In this blog post, we’ll describe some common CORS issues as well as how you can find and fix them.

The post Localhost dangers: CORS and DNS rebinding appeared first on The GitHub Blog. ⌘ Read more

Erlang Solutions: Elixir Tutorials
Elixir is a functional language that combines modern syntax, broad metaprogramming capabilities and the power of BEAM – Erlang Virtual Machine. It has a vast community which is constantly growing due to its resilient concurrency model and programmer-friendly approach. Our tutorials are focused on showcasing language capabilities and helping any newcomer gain enough knowledge to start actively utilising Elixir in their projects.

In this sec … ⌘ Read more

KubeCon + CloudNativeCon Europe 2025: Day One Keynote Recap
On a bright sunny London day, attendees from all over the world flocked to the ExCel Arena for the first day of KubeCon + CloudNativeCon 2025. Here’s a quick recap of the keynotes. The crowd was… ⌘ Read more

Docker Desktop 4.40: Model Runner to run LLMs locally, more powerful Docker AI Agent, and expanded AI Tools Catalog
In Docker Desktop 4.40, we’re introducing new tools that simplify GenAI app development and support secure, scalable development. ⌘ Read more

GitHub found 39M secret leaks in 2024. Here’s what we’re doing to help
Every minute, GitHub blocks several secrets with push protection—but secret leaks still remain one of the most common causes of security incidents. Learn how GitHub is making it easier to protect yourself from exposed secrets, including today’s launches of standalone Secret Protection, org-wide scanning, and better access for teams of all sizes.

The post [GitHub found 39M secret leaks in 2024. H … ⌘ Read more

Show HN: Nue – Apps lighter than a React button
Article URL: https://nuejs.org/blog/large-scale-apps/

Comments URL: https://news.ycombinator.com/item?id=43543241

Points: 504

# Comments: 363 ⌘ Read more

The End User TAB’s top talks at KubeCon + CloudNativeCon Europe 2025
If you are attending the upcoming KubeCon + CloudNativeCon Europe 2025 conference in London, check out the CNCF End User Technical Advisory Board (TAB) member recommendations for their top talk recommendations! 🙂 Ahmed Bebars: With the… ⌘ Read more

Get to Know KubeCon + CloudNativeCon Co-Chair Faseela K.
Faseela Kundattil is one of those people who just seems to do a lot of things: Cloud Native Developer, project maintainer, CNCF Ambassador, LFX mentor, Technical Oversight Committee member, new mom, and now KubeCon + CloudNativeCon… ⌘ Read more

Announcing Two New Cloud Native Heroes Challenges
Help us defeat a patent troll claiming methods for “manipulation of complex hierarchical data” and “analysis of hierarchical data” were invented in 2005. We’re excited to launch 2 additional Cloud Native Heroes Challenge contests in which… ⌘ Read more

GitHub for Beginners: How to get LLMs to do what you want
Learn how to write effective prompts and troubleshoot results in this installment of our GitHub for Beginners series.

The post GitHub for Beginners: How to get LLMs to do what you want appeared first on The GitHub Blog. ⌘ Read more

On my blog: Developer Diary, Transgender Day of Visibility https://john.colagioia.net/blog/2025/03/31/transgender.html #programming #project #devjournal

On my blog: Hegemon and the Masters of… 🚫 https://john.colagioia.net/blog/2025/03/30/patriarchy.html #womenshistorymonth #harm #politics #rant

On my blog: Free Culture Book Club — Nose Ears, part 1 https://john.colagioia.net/blog/2025/03/29/nose-ears-1.html #freeculture #bookclub

On my blog: Toots 🦣 from 03/24 to 03/28 https://john.colagioia.net/blog/2025/03/28/week.html #linkdump #socialmedia #quotes #week

ProcessOne: ejabberd 25.03

Image

Release Highlights:

• Matrix Gateway Gets Room Support
  
• Multiple Simultaneous Password Types
  
• Execute API Commands Using XMPP Client
  

If you are upgrading from a previous version, please check the [changes in SQL schemas](https://www.process-one … ⌘ Read more

Cedar: A New Approach to Policy Management for Kubernetes
The challenges organizations face when managing access control and authorization in cloud-native environments continue to grow in complexity. Organizations scaling their Kubernetes deployments, for example, work to balance their security requirements, operational flexibility, and policy manageability…. ⌘ Read more

Ignite Realtime Blog: It’s time for real interoperability. Let’s make it happen
When I explain to others what I do for a living, I often ask why it is that we are not surprised that one can use a Gmail account to send an email to someone who uses an Outlook account, yet many people fully accept that you can’t send a message to someone using WhatsApp from a Telegram account. We’re not surprised that we can use our phone to set up a call with someone who uses a differe … ⌘ Read more

ProcessOne: Supporting XMPP Standard Foundation’s open letter to Meta for true interop

Image

The XMPP Standards Foundation (XSF) has published an open letter to Meta, asking them to support … ⌘ Read more

Mathieu Pasquet: Poezio 0.15 / 0.15.1
About three years since the last version, poezio 0.15 (and 0.15.1 to address
a small packaging mishap, version numbers are cheap) was released yesterday!

Poezio is a terminal-based XMPP client which aims to replicate the
feeling of terminal-based IRC clients such as irssi or weechat; to
this end, poezio originally only supported multi-user chats.

Not a lot this time around… Maybe next time?

• A new moderate plugin (for [XEP-0425](http://xmpp.org/ex … ⌘ Read more

On my blog: Real Life in Star Trek, Lessons https://john.colagioia.net/blog/2025/03/27/lessons.html #scifi #startrek #closereading

5 GitHub Actions every maintainer needs to know
With these actions, you can keep your open source projects organized, minimize repetitive and manual tasks, and focus more on writing code.

The post 5 GitHub Actions every maintainer needs to know appeared first on The GitHub Blog. ⌘ Read more

Istio: The Highest-Performance Solution for Network Security
Ambient mode provides more encrypted throughput than any other project in the Kubernetes ecosystem. Encryption in transit is a baseline requirement for almost all Kubernetes environments today, and forms the foundation of a zero-trust security posture…. ⌘ Read more

Erlang Solutions: My Journey from Ruby to Elixir: Lessons from a Developer

For years, Ruby was my go-to language for building everything from small prototypes to full-fledged production apps. I fell in love with its elegance and expressiveness and how Ruby on Rails could turn an idea into a working web app in record time. The community—with its focus on kindness and collaboration—only deepened my appreciation. In short, Ruby felt like home.
… ⌘ Read more