SRE

Using conventional commits at work and someone puts everything as a ‘chore’, but like, I get it. #ConventionalCommits

Yet another example of the classic [Markdown image exfiltration attack](https://simonwillison.net/tags/exfiltration-attacks/), this time affecting GitLab Duo - GitLab's chatbot. Omer Mayraz reports on how they found and disclosed the issue. The …

SFTP, the SSH File Transfer Protocol, is a misleading name. It gives you the impression that it might be something like a secure version of FTP, perhaps something like FTPS but modeled over SSH instead of SSL. But it isn't! I think a more suitable name would've been SNFS or FSSSH. That is: networked file … Continue reading Making SFTP transfers fast →

We all edit. Contribute to microsoft/edit development by creating an account on GitHub.

🔐 Identity and Access Management (IAM) in AWS, Azure, and GCP IAM plays a critical role in securing cloud environments by defining who can access what, under which conditions, and at what scope. While AWS, Azure, and GCP all support strong IAM capabilities, each platform implements it in unique ways: ☁️ AWS IAM Uses policies written in JSON to grant permissions. Permissions are attached to users, groups, or roles. Emphasizes role assumption and cross-account access via trust relationships. ☁️ Azure IAM (RBAC) Based on Role-Based Access Control tied closely with Azure Active Directory. Access is assigned at management group, subscription, resource group, or individual resource level. Supports built-in and custom roles. ☁️ GCP IAM Organizes resources in a hierarchical structure: organization → folder → project → resource. Permissions are grouped into basic, predefined, or custom roles. IAM policies are inherited down the resource hierarchy for simplified access control. ✨ Common Best Practices: Follow the principle of least privilege. Use role-based access instead of assigning permissions directly. Enable audit logging and monitoring for IAM actions. Regularly review and clean up unused roles and permissions. IAM is the backbone of cloud security, ensuring the right people have the right access to the right resources—nothing more, nothing less. #IAM #AWS #Azure #GCP #CloudSecurity #AccessManagement #RBAC #CloudComputing #DevOps #Cybersecurity | 11 comments on LinkedIn

Greg Kroah-Hartman, a longtime Linux kernel maintainer, breaks down the inner workings of Linux development, from its unique trust model to the benefits of open-source contribution.

Here's the full workshop handout plus annotated slides from "Building software on top of Large Language Models", a three hour tutorial I presented yesterday at PyCon US #PyConUS https://simonwillison.net/2025/May/15/building-on-llms/

Trailing dots on host names in URLs is the gift that keeps on giving. Let me take you through a dwindling story of how the dot is handled differently in different places through the stack of an Internet client. The evil trailing dot. DNS When a given host name is to be resolved to an … Continue reading A tale of a trailing dot →

Attached: 1 image i enjoy this flowchart explaining how bash decides whether to use .bashrc or .bash_profile https://blog.flowblok.id.au/2013-02/shell-startup-scripts.html, mostly because it makes me understand better why I could never understand how the 2 config files worked when I used bash

I work a lot with iterators in Terraform, they always gave me bad headaches. Therefore I identified five of the most common iterator patterns (code examples are given below), which helped me constr...

Threads, TLS, a C stdlib race, and Rust: how EdgeDB hit a hidden landmine.

Validate and execute GitHub Actions workflows locally. - bahdotsh/wrkflw

A new tool to install binaries or scripts from GitHub releases with SHA-256 hashes.

List of awesome tools to tinker with containers. Contribute to iximiuz/awesome-container-tinkering development by creating an account on GitHub.

Symbolicate JavaScript stack traces with the OpenTelemetry Collector. Set up source maps, choose storage, and resolve minified stack traces for better debugging.

Android, iOS and other frontend developers struggle with gaining observability. The new cloud native standard and SDKs make it simpler.

Ever wonder what a trace from a GitHub action looks like? Well, as of this weeks release of v0.122.0 of the OpenTelemetry Collector, you can find out! The…

In this blog, we’ll share the fundamentals of frontend monitoring, including what you need to know about performance measurement.

With more and more people adopting OpenTelemetry and specifically using the tracing signal, I’ve seen an uptick in people wanting to add the entire request and response body as an attribute. This isn’t ideal, as it wasn’t when people were logging the body as text logs. In this blog post, I’ll explain why this is a bad idea, what are the pitfalls, and more importantly, what you should do instead.

Calculated Fields are useful, but they use a lisp-esque language that can be difficult to read and a pain to write. Generative AI can help!

Attached: 2 images Last week, I learned about default gems in Ruby with asdf. These are gems that you want to install whenever you install a new #ruby version. It turns out that default packages work with languages other than Ruby, too! Here's how to do it in #golang and #python.

View HTTP/HTTPS requests made by any Linux program - monasticacademy/httptap

Good evening, folks. TIL that Go 1.24.0 has updated its runtime/debug package to automatically stamp apps with a version or pseudo-version at build time based on VCS information. No need for complex build pipeline steps to inject version constants anymore. Just tag a release appropriately in Git and use 𝚍𝚎𝚋𝚞𝚐.𝙱𝚞𝚒𝚕𝚍𝙸𝚗𝚏𝚘.𝙼𝚊𝚒𝚗.𝚅𝚎𝚛𝚜𝚒𝚘𝚗 in your code. https://github.com/golang/go/issues/50603#issuecomment-2181188811 This is a great feature that many people may have missed in the release notes: https://tip.golang.org/doc/go1.24#:~:text=information.-,The,changes. #go #golang

like jq but for Markdown: find specific elements in a md doc - yshavit/mdq

jq for binary formats - tool, language and decoders for working with binary and text formats - wader/fq

Learn how to quickly set up and run Beyla to instrument a Ruby service

Attached: 1 image Old classic