DevOps'ish 334: Claude Code gets trojaned on Cursor, a 9.8 Linux TCP bug, OpenAI rebuilds Git, and more
A trojaned Claude Code extension lands on Cursor's marketplace under Anthropic's real ID, a 9.8 Linux TCP use-after-free gets a Claude-written root exploit, OpenAI builds Pando to keep Git up with Codex agents, and AWS says committed capacity is mostly sold through 2027.
DevOps'ish 333: Broccoli2Shell, more PHP pain, KSMBD on blast, and KubeVirt's next decade
PHP finds another session bug two days after the PHP2Shell patches, Broccoli2Shell turns a Brotli decoder bug into RCE for Node.js, Envoy, and Istio, two unauthenticated KSMBD flaws land on public lists with no kernel fix, and KubeVirt looks ahead to its next decade.
DevOps'ish 332: PHP2Shell blows the embargo, eMudhra loses its keys, the leap second dies, and more
PHP2Shell gets exploited before the patch while PHP blames Chainguard for breaking the embargo, eMudhra quits the TLS certificate business after its private keys turn out to be recoverable, the leap second is officially dead, and Meta reworks the page cache patch Linus wrote with Claude Code.
DevOps'ish 331: Linus codes with Claude, hackers cook French fridges, Docker Hub's token mixup, and more
Linus hacks the kernel with Claude Code, hackers cook French supermarket fridges, Docker Hub fixes a token handoff bug, and Kubernetes Steering Election
DevOps'ish 330: cgroup v1 gets the boot, open source closes its doors, cap your cloud bill, and more
Kubernetes stops starting the kubelet on cgroup v1 nodes by default while node swap on NVMe triples sandbox density, James Ross watches Sindre Sorhus and Hono shut the door on outside pull requests and calls open source as we know it dead, Simon Willison wants hard budget caps on everything before an agent runs up your bill overnight, and Apple puts more friction in front of Full Disk Access because of AI agents.
DevOps'ish 329: Netflix lets a robot shrink its containers, Netlify dumps V8 isolates, Terraform is the wrong tool, and more
Netflix lets an automated tuner shrink its media processing containers in production and owns up to the 50% memory cut that sent retries past 60%, Netlify swaps V8 isolates for Firecracker MicroVMs and gets Edge Functions down to about 6ms, codecentric argues Terraform has no business running your developer platform while Pinterest shows how to fence it in anyway, and Microsoft ships Linux containers on Windows with WSLC.
DevOps'ish 328: Samsung bricks its own fridges, Cantrill on the contagion of fear, Kubernetes flags unused PVCs, and more
A Samsung firmware update bricks Bespoke AI fridges across Korea days before Chuseok, Bryan Cantrill argues that technologists sowing AI extinction fear are abusing the public's trust, Kubernetes v1.37 flags unused PersistentVolumeClaims so you can finally find orphaned storage, and Archer Hume reverse engineers TypeSafe's Jev with 10,000 API calls.
DevOps'ish 327: AWS writes off Bahrain, forcing the registries to pay for open source, Kubernetes 1.37 hardening, and more
AWS tells customers that data hosted exclusively in its Bahrain region and one UAE availability zone is gone for good six months after drone strikes, Laurie Voss argues the dozen registries that meter open source should pay maintainers pro rata out of that revenue, Kubernetes v1.37 ships native histograms at beta and alpha bind mount options that finally put noexec on writable volumes, and Charity Majors admits she cannot stand AI written text in anything relational.
DevOps'ish 326: Automattic's board benches Mullenweg, 100 agents hack a guy for $210, Kubernetes 1.37, and more
Automattic's board votes Matt Mullenweg onto a paid leave of absence with no reason on the record and installs the CFO as interim CEO, Shrivu Shankar points 100 self-hosted agents at his own accounts and gets three compromises for $210 in GPU time, rootless Kubernetes graduates to beta so a container escape ends at a non-root account instead of the kernel, and Tom Limoncelli argues that offering to hit an impossible deadline by taking on technical debt is the actual ethical failure.
DevOps'ish 325: Pod certificates go GA, agent civilizations took over part of OpenAI, and more
Pod Certificates and Cluster Trust Bundles go GA in Kubernetes v1.37 and finally give workload identity a proof-of-possession story, Dwarkesh Patel reads 129 pages of incident reports so you do not have to and explains how three secret agent civilizations formed inside OpenAI, CISA confirms in-the-wild exploitation of a Linux kernel IPv6 privilege escalation bug, and Anthropic backs off the 30-day retention requirement for enterprise customers.
DevOps'ish 324: Kubernetes v1.37 lands, most leaked AWS keys still work, and more
Kubernetes v1.37 Garhwal ships 67 enhancements while declarative validation quietly absorbs a record API review load, 88% of the AWS keys leaked over the last four years still authenticate and 768 of them hold full admin, Linus Torvalds says AI enormously helped him through a debug session from hell, and GitHub shows its work on evaluating LLMs before production.
DevOps'ish 323: Go 1.27 lands generic methods, GitHub shows its work after the August 17 outage, and more
Go 1.27 finally ships generic methods and encoding/json/v2, GitHub's CTO puts numbers behind a 7 hour 47 minute outage, a peer-reviewed look at 443,000 Backblaze drives says the vendor rankings you have been quoting were never like-for-like, and engineering leaders keep walking out the door.
DevOps'ish 322: Linux wireless shuts the door on AI slop patches, KYAML fixes the Norway Bug, and more
The Linux wireless maintainer stops arguing with LLMs, KYAML gets kubectl to quit lying about Norway, Charity Majors says the skepticism window has closed, and five AI rivals agree on a plugin format that punts on permissions.
DevOps'ish 321: The OpenAI and Hugging Face postmortem, Gateway API v1.6 ships L4 routing, and more
The OpenAI agent that broke into Hugging Face gets its Black Hat postmortem, Gateway API graduates TCPRoute and UDPRoute, a researcher spends two years inside North Korean hacker infrastructure, and GitHub's alternatives still are not replacements.
DevOps'ish 320: Claude models broke into real systems during security tests, Kubernetes v1.37's deprecation list, and more
Anthropic found three of its models broke into real systems during cyber tests, Kubernetes v1.37 lines up its deprecations, open-weight AI hits its Kubernetes moment, and Google's AI is quietly starving the open web.
DevOps'ish 319: An NTP server time-traveled to 2006, an OpenAI model broke into Hugging Face, and more
A back-in-time NTP server that took down an Australian carrier, an OpenAI model that escaped its sandbox and breached Hugging Face, DoorDash's seven-nines cache, and Netflix on running LLMs in-house.
DevOps'ish 318: Linus Makes Peace With AI, the Worst Memory Shortage Yet, Deere Bows to Repair, and More
Linus tells the AI objectors they can fork the kernel, SK Hynix warns 2027 brings the worst memory shortage yet, John Deere finally bows to right-to-repair, Anubis gets picked apart, and Kimi K3 makes the case for open models.
DevOps'ish 317: Januscape Turns 16, etcd Hits 3.7, and More
A 16-year-old KVM flaw, etcd v3.7.0, Go 1.26's quiet fixes, git worktrees, and six GitHub security settings to enable this week.
DevOps'ish 316: ClickHouse Eats o11y, Vint Cerf Bows Out, Podman Breaks Things, and More
ClickHouse is winning the observability wars, Vint Cerf retires from Google with a warning for the AI age, Podman 6.0 breaks things on purpose, the BIS eyes the AI bubble, and Kepler gets a rewrite.
DevOps'ish 315: Sub-Nanometer Chips, Damn You Apple, and the Database Nobody Could Kill
Supply chain incidents, custom AI silicon, IBM sub-1nm chips, Apple price hikes, Netflix batch compute with Kueue, and the case for doing fewer things better.
