DevOps'ish 326: Automattic's board benches Mullenweg, 100 agents hack a guy for $210, Kubernetes 1.37, and more
Automattic's board votes Matt Mullenweg onto a paid leave of absence with no reason on the record and installs the CFO as interim CEO, Shrivu Shankar points 100 self-hosted agents at his own accounts and gets three compromises for $210 in GPU time, rootless Kubernetes graduates to beta so a container escape ends at a non-root account instead of the kernel, and Tom Limoncelli argues that offering to hit an impossible deadline by taking on technical debt is the actual ethical failure.
DevOps'ish 325: Pod certificates go GA, agent civilizations took over part of OpenAI, and more
Pod Certificates and Cluster Trust Bundles go GA in Kubernetes v1.37 and finally give workload identity a proof-of-possession story, Dwarkesh Patel reads 129 pages of incident reports so you do not have to and explains how three secret agent civilizations formed inside OpenAI, CISA confirms in-the-wild exploitation of a Linux kernel IPv6 privilege escalation bug, and Anthropic backs off the 30-day retention requirement for enterprise customers.
DevOps'ish 324: Kubernetes v1.37 lands, most leaked AWS keys still work, and more
Kubernetes v1.37 Garhwal ships 67 enhancements while declarative validation quietly absorbs a record API review load, 88% of the AWS keys leaked over the last four years still authenticate and 768 of them hold full admin, Linus Torvalds says AI enormously helped him through a debug session from hell, and GitHub shows its work on evaluating LLMs before production.
DevOps'ish 323: Go 1.27 lands generic methods, GitHub shows its work after the August 17 outage, and more
Go 1.27 finally ships generic methods and encoding/json/v2, GitHub's CTO puts numbers behind a 7 hour 47 minute outage, a peer-reviewed look at 443,000 Backblaze drives says the vendor rankings you have been quoting were never like-for-like, and engineering leaders keep walking out the door.
DevOps'ish 322: Linux wireless shuts the door on AI slop patches, KYAML fixes the Norway Bug, and more
The Linux wireless maintainer stops arguing with LLMs, KYAML gets kubectl to quit lying about Norway, Charity Majors says the skepticism window has closed, and five AI rivals agree on a plugin format that punts on permissions.
DevOps'ish 321: The OpenAI and Hugging Face postmortem, Gateway API v1.6 ships L4 routing, and more
The OpenAI agent that broke into Hugging Face gets its Black Hat postmortem, Gateway API graduates TCPRoute and UDPRoute, a researcher spends two years inside North Korean hacker infrastructure, and GitHub's alternatives still are not replacements.
DevOps'ish 320: Claude models broke into real systems during security tests, Kubernetes v1.37's deprecation list, and more
Anthropic found three of its models broke into real systems during cyber tests, Kubernetes v1.37 lines up its deprecations, open-weight AI hits its Kubernetes moment, and Google's AI is quietly starving the open web.
DevOps'ish 319: An NTP server time-traveled to 2006, an OpenAI model broke into Hugging Face, and more
A back-in-time NTP server that took down an Australian carrier, an OpenAI model that escaped its sandbox and breached Hugging Face, DoorDash's seven-nines cache, and Netflix on running LLMs in-house.
DevOps'ish 318: Linus Makes Peace With AI, the Worst Memory Shortage Yet, Deere Bows to Repair, and More
Linus tells the AI objectors they can fork the kernel, SK Hynix warns 2027 brings the worst memory shortage yet, John Deere finally bows to right-to-repair, Anubis gets picked apart, and Kimi K3 makes the case for open models.
DevOps'ish 317: Januscape Turns 16, etcd Hits 3.7, and More
A 16-year-old KVM flaw, etcd v3.7.0, Go 1.26's quiet fixes, git worktrees, and six GitHub security settings to enable this week.
DevOps'ish 316: ClickHouse Eats o11y, Vint Cerf Bows Out, Podman Breaks Things, and More
ClickHouse is winning the observability wars, Vint Cerf retires from Google with a warning for the AI age, Podman 6.0 breaks things on purpose, the BIS eyes the AI bubble, and Kepler gets a rewrite.
DevOps'ish 315: Sub-Nanometer Chips, Damn You Apple, and the Database Nobody Could Kill
Supply chain incidents, custom AI silicon, IBM sub-1nm chips, Apple price hikes, Netflix batch compute with Kueue, and the case for doing fewer things better.
DevOps'ish 314: GitHub Ignored the Reports, Norway Didn't, AI Needs More Discipline, and More
GitHub dismissed the bug reports. Now a supply-chain worm is loose. Norway banned AI for kids. Apple's raising prices. Local Inference.
DevOps'ish 313: Export Controlled, AUR Torched, Lawyers Disqualified, and more
Fable 5 died by export control, 1,500 AUR packages were hijacked, and AI invented case law until a judge fired everyone.
DevOps'ish 312: Nobody won the token race, rsync outrage, dev goes scorched earth on vibe coders, and more
Red Hat npm packages compromised, EU tech sovereignty, rsync outrage, measuring OSS funding impact, Florida sues OpenAI, the token race nobody won, and more.
DevOps'ish 311: Poisoned Repos, Hallucinating Executives, and More
AI is warping executive judgment in real time, supply chain attacks are hitting every ecosystem you touch, and Nvidia just committed $150 billion a year to Taiwan. DevOps'ish 311 has the week's most important DevOps, cloud native, and open source news without the hype.
DevOps'ish 310: The Breaches Are Coming From Inside the Extension Store
GitHub Confirms Internal Breach via Poisoned VS Code Extension - Official statement from GitHub confirming TeamPCP's breach of approximately 3,800 internal...
DevOps'ish 309: Dirty Pages All the Way Down, The Cloud Is Hot, and more
Linux kernel page cache exploits keep coming. Plus: Kubernetes v1.36, Meta AI morale in freefall, GitLab restructures for the agentic era, and AWS overheats in Virginia -- again.
DevOps'ish 308: Actively Exploited, Actively Litigated, Actively Dead
CopyFail is being actively exploited, Antrea's Jenkins got owned via a malicious PR, NVIDIA chips have a Rowhammer problem that bypasses IOMMU, pgBackRest lost its sole maintainer, and Meta is being sued for torrenting 267TB of pirated books to train Llama. Kubernetes v1.36 shipped a lot too.
DevOps'ish 307: Copy Fail, GitHub's bad week, Linux on PS5, and more
Critical Linux kernel privilege escalation, GitHub's bad week of reliability and RCE, Meta ditching Llama, AI writing half of Google's code, and Linux on PS5.
