DevSecOps

Security Breach in Stripe GitHub's Repo: How to Secure GitHub Actions Workflows? Understanding the Pwn Request Vulnerability

A severe vulnerability in Stripe’s GitHub Actions Workflow allowed a researcher to gain access to the repository's GitHub token. This vulnerability, known as "Pwn Request," exploited the trust placed in pull requests to gain unauthorized access to sensitive information and perform actions such as merging

Infrastructure

OpenTofu Registry Gets a User Interface and an API

OpenTofu, the open-source Infrastructure as Code (IaC) tool, has launched a user-friendly interface for its component registry. This visual interface, developed in collaboration with Spacelift, aims to simplify IaC adoption by providing a centralized hub for exploring and understanding OpenTofu resources. Alongside the UI, OpenTofu introduces a beta API for

News

Elastic Swims Back to Open Source: What's Behind the Unexpected Return?

Remember when Elastic decided to ditch the open-source life and go semi-proprietary with their licensing? Well, hold onto your hats, because they're back! That's right, Elasticsearch and Kibana are once again embracing the open-source ethos, this time under the trusty GNU AGPL. This unexpected U-turn comes

Web Assembly

New risks of WebAssembly (WASM): A Hidden Door for Malware?

Secure Web Gateways (SWGs) are increasingly vulnerable to 'Last Mile Reassembly Attacks' that leverage WebAssembly (WASM) to deliver malware directly to user browsers. These attacks bypass traditional SWG defenses, highlighting the need for browser-native security solutions to protect against modern web threats. What is WebAssembly (WASM)? WebAssembly (WASM)

Kubernetes

How to deploy Ghost CMS on Kubernetes

GitHub - sredevopsorg/ghost-on-kubernetes: Ghost on Kubernetes by SREDevOps.org - Deploy Ghost v5 on Kubernetes (k8s, k3s, etc) with our hardened distroless non root custom image.Ghost on Kubernetes by SREDevOps.org - Deploy Ghost v5 on Kubernetes (k8s, k3s, etc) with our hardened distroless non root custom image.

Quantum Computing

Quantum Internet is Real and it's an Underground Network in NYC, USA

Qunnect Inc., a Brooklyn-based company, has successfully operated a prototype quantum internet network under the streets of New York City for 15 continuous days. This achievement marks a significant step towards the development of a practical and stable quantum internet. The network, called GothamQ, utilizes polarization-entangled photons and features automated

DevSecOps

OpenCTI: The Open-Source Cyber Threat Intelligence Platform

TL/DR OpenCTI is an open-source platform designed to help organizations manage their cyber threat intelligence (CTI) data and observables. Developed by Filigran, it uses a knowledge schema built on the STIX2 standards and features a modern web application architecture with a GraphQL API and a user-friendly front end. OpenCTI

Opinion

The Dark Side of Open Source: Are we all just selfish? Viktor Farcic thoughts and why he is absolutely right.

We reviewed Viktor Farcic' thoughts regarding the often-misunderstood world of open source, challenging the romantic notion of pure altruism. He explore the economic realities behind open source projects, highlighting how companies and individuals alike leverage it for personal gain. The conversation dives into the motivations behind starting and contributing

Artificial Intelligence

Linux Foundation Embraces the Open-Source AI Revolution with OMI

The Linux Foundation has teamed up with the Open Model Initiative (OMI) to champion the development of open-source AI models. This collaboration aims to create a world where AI is accessible, transparent, and driven by the community, not corporate profits. They're focusing on building a solid foundation for

Kubernetes

The new Kubernetes v1.31.0 is here: what's new, and why should I care?

Kubernetes v1.31 is more than just a collection of new features and improvements; it's a testament to the project's commitment to constant evolution, improved user experience, and enhanced security. Whether you're a seasoned Kubernetes veteran or just starting your journey, v1.31 has

Kubernetes

Ingress, Gateway, Load Balancer, ClusterIP, and NodePort... What the Heck Are They? A Simplified Guide to Kubernetes Services!

TL;DR Kubernetes networking can be as confusing as... well, Kubernetes itself. Are you tired of getting distracted from your coding spree by kubernetes mess-ups? Here we offer a simple guide to Kubernetes Services, focusing on the key players: Ingress, Gateway, Load Balancer, ClusterIP, and NodePort. We'll unravel

DevSecOps

Python could have triggered global apocalypse by mistake

TL;DR: Imagine a world where your favorite social media platforms go dark, financial systems crash, and even space exploration grinds to a halt. This dystopian scenario almost became a reality thanks to a single leaked access token that could have given malicious actors the keys to the kingdom—the

DevSecOps

GitHub's Open Secret: Your Deleted and Private Repos Aren't as Private as You Think

TL;DR Have you ever committed something you shouldn't?, Because the GitHub garden has a privacy weed growing out of control. Turns out, deleting your GitHub forks or even entire repositories doesn't actually erase the data. This juicy info stays ripe for the picking, accessible to

News

Google Cloud Enhances Databases with AI Power for the Age of Data and Intelligence

TL;DR; Google Cloud is making waves at its Cloud Next conference in Tokyo by injecting its database lineup with some serious AI muscle. Spanner, their globally distributed SQL database, now boasts graph and vector search capabilities, perfect for tapping into the power of generative AI. Bigtable, their NoSQL workhorse

DevSecOps

SAPwned: Wiz Research revealed SAP AI vulnerabilities that leaked full control on cloud instances and private AI data

TL/DR Grab your black hats, fellas: Wiz Research team has been poking around AI services to see if they're really as secure as they seem. They audited SAP AI Core, a PaaS which allows to develop, train and run AI managed, scalable services. Spoiler alert: They found

Apps

Is OrbStack for you? Exploring Container Options for macOS: OrbStack, Lima and Docker Desktop

macOS users have several solid options for running containers, each with its own strengths. We review OrbStack, Lima (Linux Machines), and Docker Desktop, comparing their features, performance, and ease of use to help you choose the best fit for your development workflow. Whether you're a seasoned Kubernetes veteran

Kubernetes

How can I store and back up files and volumes in Kubernetes? Longhorn is our choice here at SREDevOps.org!

TL;DR Tired of your Kubernetes volumes disappearing like your last vacation? 😩Longhorn 1.6 is here to save your data (and your sanity)! This bad boy brings persistent volumes to your Kubernetes cluster, making sure your apps stay fed with data, no matter what chaos the internet throws at

Apps

ParadeDB: Use the power of Postgres DB for your real-time search and data analytics (and more)

ParadeDB is shaking things up in the world of search and analytics by offering a compelling Postgres-based alternative to Elasticsearch. This article dives into ParadeDB's features, how it stacks up against Elasticsearch, and why you should keep an eye on this emerging technology. ParadeDB: Riding the Postgres Wave

Business

Lemony solves AI privacy and compliance with on premises "LLM Boxes" and Zero Setup platform

Lemony presents a generative AI on premises solution designed for businesses, organizations and individuals concerned about data security, privacy, and control. Lemony offers a compelling alternative to cloud-based AI by keeping all data within an organization's network, ensuring compliance and peace of mind. We'll delve into

Events and meets

Kubeshark: Wireshark for Your Kubernetes Cluster? Find out and learn with us

TL;DR: Flying blind in your Kubernetes environment? Fight challenges of Kubernetes network observability with Kubeshark as the predator of network monitoring. Learn how this powerful tool provides real-time, protocol-level insights into your K8s cluster's API traffic, making troubleshooting a breeze and security nightmares a distant memory. Kubeshark:

RISC-V

Hardware Open Source? First RISC-V Laptop Launched, Comes with Ubuntu Linux. A Promising Duo.

TL;DR One of the key points of RISC-V is its open and free architecture. If we have evolved exponentially with open source, RISC-V bodes well. The open source RISC-V architecture is generating great interest, promising a new era of free and open hardware. We review the potential of RISC-V,

Kubernetes

Check Kubernetes with Popeye! Security, configs, problems, scores and more with an open source and lightweight CLI tool

TL/DR; Tired of manually combing through your Kubernetes cluster for issues? Popeye is like a health check-up for your cluster, finding potential problems with your configurations and resource usage. It's a command-line tool that scans your live cluster, not just static files, and points out things like

Kubernetes

Is Your Kubernetes deployment failing at startup? The minReadySeconds property can help you

The problem? Your app relies on a database connection and needs a few precious seconds to load configurations. This scenario, my friends, is a recipe for disaster, potentially leading to errors, timeouts, and a whole lot of frustration for your users.

Apps

Podman Desktop: Your Gateway to Containers and Kubernetes

TL;DR 😴 Podman Desktop is an open-source, cross-platform graphical tool designed to make working with containers and Kubernetes on your local machine a breeze. It provides a user-friendly interface for building, running, managing, inspecting, and debugging containers, as well as interacting with Kubernetes deployments. Podman Desktop is a powerful yet

SRE

Ensuring Business Continuity: Synthetic Monitoring Strategies in AWS

Discover how to use synthetic monitoring in AWS to guarantee business continuity. Learn about how it is used to proactively detect and fix problems before they affect users.

Kubernetes

Kueue: Streamlining Kubernetes Job Queueing and Resource Management

Kueue is a powerful tool designed to enhance job queueing and resource management within Kubernetes clusters. By offering a set of APIs and a controller, Kueue empowers you to efficiently manage job execution, resource allocation, and overall cluster performance. Kueue is a cloud-native job queueing system for batch, HPC, AI/

Apps

Lima: The Easiest Way to Run any Linux Distro, Kubernetes, k3s and even Docker on macOS and Linux, Apple Silicon (M1/ARM64) compatible

Lima is a versatile and user-friendly command line tool (CLI) that empowers you to seamlessly run Linux virtual machines (VMs) on your macOS or Linux system. It's compatible with any Apple Silicon Mac (M1, M2, etc) ARM64 and Intel x86_64 processors, vice versa, without anything else than

Apps

Run Apache Kafka on Kubernetes in Minutes with Strimzi

Strimzi is an open-source project that provides a simple way to run an Apache Kafka cluster on Kubernetes. With Strimzi, you can quickly set up a Kafka cluster and start producing and consuming messages, all within your local Kubernetes environment.