ContentPosts from @eascudellari..
Link
@varbear shared a link, 2 days, 7 hours ago
FAUN.dev()

AI's 70% Problem

Google’s Addy Osmani dropped a stat: AI now writesover 30% of the codeat Google. Impressive. But the hard part - the last 30% - still needs a human brain. That’s where the bugs live:security, edge cases, production wiring. No shortcut. And while AI adoption keeps climbing in greenfield work,trust is..

AI's 70% Problem
Link
@varbear shared a link, 2 days, 7 hours ago
FAUN.dev()

A complete guide to HTTP caching

A fresh guide reframes HTTP caching as less of a tweak, more of an architectural move. It breaks caching into layers - browser memory, CDNs, reverse proxies, app stores - and shows how each one plays a part (or gets in the way). It gets granular with headers likeCache-Control,ETag, andVary, calling ..

A complete guide to HTTP caching
Link
@varbear shared a link, 2 days, 7 hours ago
FAUN.dev()

The state of the Rust dependency ecosystem

A deep dive into 200,650 Rust crates shows a brewing maintenance problem:45% are inactive, andover half of new crates never see a second update- a wild jump from just 1.4% in 2015. Zoom in on the top 1,000 crates, and it gets messier.249 dependencies have been abandoned, and158 are stuck on older ma..

Link
@varbear shared a link, 2 days, 7 hours ago
FAUN.dev()

The Green Tea Garbage Collector

Go 1.25 drops an experimental GC calledGreen Tea. It flips the script on object traversal - scanning memory pages instead of hopping from object to object. The payoff? Up to40% less GC CPU overheadon real workloads. Bonus: it taps intoAVX-512on newer x86 chips forvectorized scanning. Turns out strea..

The Green Tea Garbage Collector
Link
@kaptain shared a link, 2 days, 7 hours ago
FAUN.dev()

LinkPro: eBPF rootkit analysis

A new stealth rootkit calledLinkProjust surfaced, taking aim at AWS-hosted Linux boxes. It blends two customeBPF programsfor deep concealment and remote activation via magic packets. The path in?CVE-2024-23897—an RCE on a public Jenkins server. From there, attackers slipped into Amazon EKS clusters,..

LinkPro: eBPF rootkit analysis
Link
@kaptain shared a link, 2 days, 7 hours ago
FAUN.dev()

Manage Secrets of your Kubernetes Platform at Scale with GitOps

Learn how to manage secrets with the External Secrets Operator and plug it into Argo CD to power your Internal Developer Platform without manual management, enabling self-service secrets management and secure connections between workload clusters and the control plane. With a chain of trust between ..

Link
@kaptain shared a link, 2 days, 7 hours ago
FAUN.dev()

Kubernetes with Buildkite: faster, simpler, and ready for scale

Buildkite just added a major revamp of its Kubernetes Agent Stack. Highlights:REST-based config,leaner K8s objects, andhardened security defaults. It handlestens of thousands of concurrent jobswithout breaking a sweat. Shared environment vars cut down pod config noise. Error messages come with full ..

Kubernetes with Buildkite: faster, simpler, and ready for scale
Link
@kaptain shared a link, 2 days, 7 hours ago
FAUN.dev()

How Airbnb Runs Distributed Databases on Kubernetes at Scale

Airbnb runs distributed databases across multiple Kubernetes clusters - each tied to its own AWS Availability Zone. That setup isolates failures down to individual pods and keeps the whole system highly available. They built a custom Kubernetes operator and leaned on EBS volumes with PVCs to smooth ..

How Airbnb Runs Distributed Databases on Kubernetes at Scale
Link
@kaptain shared a link, 2 days, 7 hours ago
FAUN.dev()

AWS to Bare Metal Two Years Later: Answering Your Toughest Questions About Leaving AWS

OneUptime ditched the cloud bill and rolled their own dual-site setup. Thinkbare metal, orchestrated withMicroK8s, booted byTinkerbell, patched together withCeph,Flux, andTerraform. Result?99.993% uptimeand$1.2M/year saved—76% cheaper than even well-optimized AWS. They run it all with just~14 engine..

Link
@kaptain shared a link, 2 days, 7 hours ago
FAUN.dev()

Azure Developer CLI: Azure Container Apps Dev-to-Prod Deployment with Layered Infrastructure

Azure Developer CLI v1.20.0 leveled up Container Apps. Build and push are now split from deploy, so you can finally "build once, deploy everywhere" and mean it. It adds layered infrastructure support, lets you share anAzure Container Registryacross environments, and handles resource dependency seque..

Azure Developer CLI: Azure Container Apps Dev-to-Prod Deployment with Layered Infrastructure