DevOps'ish 298: Leslie Lamport, a Taiwan crisis looming, and more
This week, we set aside the tech drama to wish everyone safety amid a world that feels heavier than usual. The links are still good — Anthropic vs. the Pentagon, Taiwan's chip gamble, and a Kubernetes migration you've been putting off.
This week I was going to dive into the beef between Anthropic and the US government. But, in light of ongoing activites I think it is be better to wish everyone well and to stay safe no matter where you are or what you're doing. The senseless loss of life is not something any of us shouild take lightly. No one ever really wins in a war.
Secure Access to Cloud Services from Your Cluster with a Security Token Service
Securely connect your Kubernetes workloads to cloud services without long-lived credentials using a Security Token Service pattern. This post shows how OpenUnison validates ServiceAccount identity and issues short-lived, service-specific tokens to reduce credential exposure and improve authorization posture. SPONSORED
Before You Migrate: Five Surprising Ingress-NGINX Behaviors You Need to Know - Five unexpected Ingress-NGINX behaviors folks should understand before migrating to Gateway API, including regex quirks, global annotation effects, and CORS handling differences.
Anthropic Refuses Pentagon Demands on Military AI - Anthropic's CEO refused Pentagon demands to remove AI safety guardrails around mass domestic surveillance and autonomous weapons, leading to the company being designated a "supply chain risk" and losing its $200M military contract—which OpenAI quickly snapped up. I wouldn't be surprised if this was Sam Altman's idea.
The Looming Taiwan Chip Disaster That Silicon Valley Has Long Ignored - With Taiwan producing 90% of the world's high-end chips and a real warning of a potential Chinese blockade or invasion by 2027, Silicon Valley has largely looked the other way because US chip manufacturing costs 25% more. The economic impact of such action by China would be significantly worse than the 2088 financial crisis.
AI Is Not Improving Productivity: Nobel Laureate Daron Acemoglu - MIT professor and Nobel Prize winner Daron Acemoglu joins MIT Sloan Management Review's podcast to challenge the prevailing hype and argue that AI has yet to deliver meaningful productivity gains.
Turing Award Winner On Thinking Clearly, Paxos vs Raft, Working with Dijkstra | Leslie Lamport - A deep interview with Leslie Lamport on distributed systems, the Bakery Algorithm, Byzantine Generals, and why writing things down makes you think better.
Wikipedia Blacklists Archive.today, Starts Removing 695,000 Archive Links - Wikipedia banned the archive.today service after it DDoS'd a blog and was caught tampering with web snapshots, triggering the removal of hundreds of thousands of citation links.
Universal Blue Wants to Redefine the Entire Linux Ecosystem - Universal Blue introduces an image-based approach to Linux, replacing traditional distributions with versioned, purpose-built OS images that share a common foundation.
Cloud and AWS Cost Consultant Duckbill Expands to Software, Raises $7.75M for New Skyway Platform - The Duckbill Group pivots from consulting to software with its new Skyway platform, arguing that cloud cost management should focus on predictability rather than just making bills smaller.
Why Developers Keep Choosing Claude Over Every Other AI - Claude's edge in coding isn't raw intelligence but consistent, reliable execution of development workflows that other AI models struggle to replicate.
eBPF Ring Buffer vs Perf Buffer - A practical breakdown of why Ring Buffer is the modern, recommended approach for sending data from kernel eBPF programs to user space, outperforming the legacy Perf Buffer.
A $10K Bounty Awaits Anyone Who Can Hack Ring Cameras to Stop Sharing Data With Amazon - The Fulu Foundation, a nonprofit focused on user-hostile features, is offering $10,000 for a hack that prevents Ring cameras from sending data to Amazon without bricking the hardware.
Best Buy Worker Used Manager's Code to Get 99% Off MacBooks, Cops Say - An employee allegedly exploited Best Buy's discount system for months using a manager's override code to buy MacBooks at near-zero cost.
Spegel for P2P Docker Registries in k3s - A look at Spegel, the peer-to-peer registry built into k3s that uses a Kademlia DHT (similar to BitTorrent) for resolving image digests across nodes.
ing-switch: Migrate from Ingress NGINX to Traefik or Gateway API in Minutes, Not Days - With Ingress NGINX being deprecated in March 2026, ing-switch maps over 50 nginx annotations to both Traefik and Gateway API targets with clear support-status badges, making the migration far less painful.
Kubernetes - An Enterprise Guide (Books) - Tremolo Security's resource page featuring Kubernetes and Docker: An Enterprise Guide, a comprehensive book on containerizing applications and scaling Kubernetes across enterprise environments.
pgdogdev/pgdog - PostgreSQL connection pooler, load balancer, and database sharder. License: GNU AGPLv3
stan-smith/FossFLOW - Make beautiful isometric infrastructure diagrams. License: MIT
trailofbits/claude-code-config - Opinionated defaults, documentation, and workflows for Claude Code at Trail of Bits. License: Not specified
fksvs/siper - XDP-based lightweight and fast firewall. License: Apache 2.0
manaflow-ai/cmux - Ghostty-based macOS terminal with vertical tabs and notifications for AI coding agents. License: GNU AGPLv3
block/goosetown - Steampunk geese run a parallel processing commune. Surprisingly effective. License: Apache 2.0