Nix is a tool that takes a unique approach to package management and system configuration. Learn how to make reproducible, declarative and reliable systems.

14 years ago, I helped break HTTP header compression, then was asked to review the fix, which became part of HTTP/2. Life has come full circle: today we're releasing an attack I missed.

A nitter-like frontend for instagram

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits. - chaitin/SafeLine

400+ Arch User Repository packages have been compromised in a massive, sophisticated supply chain attack, including a rootkit installation.

https://discourse.ifin.network/t/400-aur-packages-compromised-with-infostealer-and-rootkit/577

#ThreatIntel #ThreatIntelligence…

⚡ LFK is a lightning-fast, keyboard-focused, yazi-inspired terminal user interface for navigating and managing Kubernetes clusters. Built for speed and efficiency, it brings a three-column Miller c...

Diátaxis is a widely-adopted, pragmatic and systematic approach to thinking about and creating documentation.

Two vulnerabilities affect the libssh2 library, a prerequisite for many systems that use the SSH, SCP, and SFTP protocols.

A practical setup for a Raspberry Pi-friendly voice assistant based on Platypush.

We are happy to announce the release of Gitea Runner 2.0.0 . This release brings job summaries, improved cancellation handling, job level workflow syntax that was previously ignored, and a long list of reliability fixes since the 1.0.0 stable release. Several…

The open source Git project just released Git 2.55. Here is GitHub’s look at some of the most interesting features and changes introduced since last time.

As announced November 2025, Kubernetes will retire Ingress-NGINX in March 2026. Despite its widespread usage, Ingress-NGINX is full of surprising defaults and side effects that are probably present in your cluster today. This blog highlights these behaviors…

We benchmarked vlagent, Vector, Fluent Bit, Filebeat, Fluentd, Promtail, Grafana Alloy, and OpenTelemetry Collector on throughput, resource usage, and delivery correctness - and found correctness issues that most benchmarks overlook.

Our beloved project is 10 today. Let's look back on how we got here

Manage your dotfiles across multiple machines, securely.

By rearchitecting the Images binding, we accidentally uncovered a bug that existed in the open-source hyper library across multiple major versions.

With the retirement of ingress-nginx I've seen a lot of frustrations with Gateway API migrations due to differences in some of the resource models.
The common problem is that Ingress users are often running self-service models, where application teams fully…

In-place PVC re-binding: swap a PersistentVolume's backing disk on Kubernetes with zero downtime using only native APIs. No custom software needed.