Auditing user activity in pods and nodes with the Security-Profiles-Operator
Kubernetes’ native audit logs are essential for tracking control plane activities, but they fail to capture what happens inside a container or on the host node itself during kubectl debugging sessions. This creates a security and… ⌘ Read more

⤋ Read More

England’s Golden Generation ‘weren’t a team’ - Gerrard
Former England captain Steven Gerrard says he sometimes “hated” being on international duty and blames a lack of success with the Three Lions on a shortage of team spirit. ⌘ Read more

⤋ Read More

[$] Progress on defeating lifetime-end pointer zapping
Paul McKenney gave a remote presentation at
Kangrejos 2025 following up on the
talk he gave last year about the
lifetime-end-pointer-zapping problem: certain common patterns for multithreaded code are
technically undefined behavior, and changes to the C and C++ specifications
will be needed to correct that. Those changes could also impact code that uses
unsafe Rust, such as the kernel’s Rust bindings. Progress on the p … ⌘ Read more

⤋ Read More

[$] Highlights from systemd v258: part two
Systemd\
v258 was released on September 17 after more than nine months
of development. LWN has already covered some of the
features and changes being readied for v258 before it was final. Now
that the release is out, it is time to look at more of what came in
v258, including a sandbox shell, new boot options, service-level disk
quotas, and enhancements to systemd-resolved. ⌘ Read more

⤋ Read More

Managing Kubernetes Workloads Using the App of Apps Pattern in ArgoCD-2
Managing a cloud native infrastructure at scale is no longer just about deploying single applications – it’s about organizing environments, defining clear boundaries and keeping everything version-controlled, consistent, automated and easily managed within a simple and… ⌘ Read more

⤋ Read More

Research shows females carry a much higher genetic risk for major depression
In a study involving about 200,000 people diagnosed with depression, scientists have identified almost twice as many genetic red flags in the DNA of females compared with males. ⌘ Read more

⤋ Read More

German mayor stabbed outside home, Chancellor Merz condemns ‘abhorrent act’
Iris Stalzer, a Social Democrat who was elected mayor of Herdecke in the Ruhr region a week ago, is reportedly suffered life-threatening injuries. ⌘ Read more

⤋ Read More

‘Vinicius smiling again but his future has never been more uncertain’
As Vinicius Junior enjoys his best start to a season at Real Madrid, European football expert Guillem Balague believes his future remains uncertain. ⌘ Read more

⤋ Read More

Deloitte erstattet Australien Geld zurück
Das Beratungsunternehmen Deloitte muss der australischen Regierung für einen fehlerhaften Bericht Geld zurückerstatten. Das vom Arbeitsministerium für umgerechnet knapp 250.000 Euro in Auftrag gegebene Dokument wurde offenbar zumindest teilweise per KI generiert und enthielt falsche Fußnoten und Zitate. Der peinliche Vorfall verweist erneut auf die Tücken KI-generierter Texte und Bilder, die zunehmend als „KI-Gatsch“ („AI Slop“) bezeichnet werden. ⌘ Read more

⤋ Read More

Gedenken von Protest begleitet
Zwei Jahre nach dem Massaker der radikalislamischen Hamas in Israel gedenken Menschen dort der Opfer des Terrorangriffs vom 7. Oktober 2023. Rund 3.000 Radfahrerinnen und Radfahrer erinnerten in der Früh laut israelischen Medien mit einer Tour im Grenzgebiet an die noch immer im Gazastreifen festgehaltenen Geiseln. Gedenkveranstaltungen gab es im ganzen Land, an einigen Orten wurden sie von Protest gegen die Regierung Benjamin Netanjahu begleitet. Inzwischen gehen die Verhandlungen über eine Waffenruhe am … ⌘ Read more

⤋ Read More
In-reply-to » Today, I experimented with Linux Capabilities as a continuation to my Unix Domain Sockets research from a few months ago: https://lyse.isobeef.org/caller-information-via-unix-domain-sockets/#capabilities

@lyse@lyse.isobeef.org Cool! 😎 You might be interested in my own learnings and toying around with building my own container engine / tooling (whatever you wanna call it) box. I had to learn a bunch of this stuff too 😅 Control Groups, Namespaces, Process Isolation, etc.

⤋ Read More