Join us

heart Curated links by FAUN
Link
@faun shared a link, 6 days, 4 hours ago

5 Cloud Storage Best Practices for AI Workloads

AI teamssegment data lifecyclesto reduce costs by moving inactive datasets to cheaper storage tiers. Theycheckpoint training progressregularly andback up checkpointsto cloud storage to prevent loss from failures. Models getprotected via object locks, automated backups, andgeo-redundant storagefor di..

5 Cloud Storage Best Practices for AI Workloads
Link
@faun shared a link, 6 days, 4 hours ago

Broadcom is Bullying Enterprises with VMware Audits

Broadcom's latest move? Burying those trusty perpetual licenses. Now it's subscription time, folks, with price tags attached like parachutes packed by someone mildly annoyed. And if that wasn't enough, they're on a mission to sniff out unlicensed users like a bloodhound on a hunt, wielding audits an..

Broadcom is Bullying Enterprises with VMware Audits
Link
@faun shared a link, 6 days, 4 hours ago

Kafka in 2025: A Clean Docker Compose Setup Without ZooKeeper

KafkakickedZookeeperto the curb as of version 4.0. And by 2023, Docker images were no longer invited to the party. Want to set it up locally?Bitnami'sversion steps in, offering custom settings to play with...

Link
@faun shared a link, 6 days, 4 hours ago

Cloudflare blocks largest DDoS attack - here's how to protect yourself

Cloudflare just stared down a raging beast: a7.3 Tbps DDoS attack, like blasting 10,000 HD movies straight through your eyes in a heartbeat. This monster, 99.996%UDP floods, erupted from122,145 source IPsscattered across 161 countries. Its real claim to fame? Not sheer size, but breakneck speed. In ..

Cloudflare blocks largest DDoS attack - here's how to protect yourself
Link
@faun shared a link, 6 days, 4 hours ago

The Journey of Bypassing Ubuntu’s Unprivileged Namespace Restriction

Ubuntu's sandbox for unprivileged namespaces flops like a soggy cardboard box; one keen Twitter user blew wide open a glaring weakness.Billed as invincible, these post-exploitation defenses crumbled when a process shimmies into an unconfined AppArmor profile. Suddenly, infamous attack paths throw up..

The Journey of Bypassing Ubuntu’s Unprivileged Namespace Restriction
Link
@faun shared a link, 6 days, 4 hours ago

Sniffnet v1.4 introduces PCAP files import and it’s 2X faster than Wireshark!

Sniffnet v1.4zips through1.6 GBPCAP files in just 25 seconds on an 8-year-old MacBook Air. That's2.2x faster than Wireshark. How? It skips the encrypted payloads and goes straight for the packet headers, like a bloodhound on a scent...

Sniffnet v1.4 introduces PCAP files import and it’s 2X faster than Wireshark!
Link
@faun shared a link, 6 days, 4 hours ago

Image Compatibility In Cloud Native Environments

Kubernetes Node Feature Discoverynow gives containers a say in the conversation. They can outline and validate OS and hardware needs. Smart scheduling for demanding apps just got a boost...

Image Compatibility In Cloud Native Environments
Link
@faun shared a link, 6 days, 4 hours ago

Kubernetes NodeRestriction Flaw Lets Nodes Bypass Resource Authorization

Kuberneteshas tripped over a major flaw (CVE-2025-4563). Rogue nodes can skip past auth checks, opening a door for privilege escalation. But don’t sweat it too much; this only bites if you've enabledDynamicResourceAllocationand run static pods.AKSusers, you're safe. But only if your setup isn't a me..

Link
@faun shared a link, 6 days, 4 hours ago

CNCF saves $1 million annually by migrating to OCI

Oracle's tossing$3M a yearin Ampere Arm-based credits into the mix for CNCF's cloud-native projects, supercharging them like they just downed a can of energy drink. Over at the Linux Foundation Education, they're watching their cloud bills shrink by $1M annually. Meanwhile, OCI Kubernetes Engine sho..

Link
@faun shared a link, 6 days, 4 hours ago

Inspecting Service Traffic with mirrord dump

Withmirrord’s latest trick, monitoring incoming TCP traffic in Kubernetes feels like wielding abuilt-in tcpdump. But there’s a twist: it zeroes in on essential resources without eBPF or sidecars. Developers can filter and capture traffic in their sessions, offering a swift solution for debugging in ..

Inspecting Service Traffic with mirrord dump
loading...