MP Marc Popeinfra · open source
sys: online · EST Let's talk
the log · 132 entries

#infrastructure

Every entry filed under Infrastructure.

RSS
2026.09.296 min read Citrix NetScaler had two exploited zero-days all September, and the patch won't evict anyone Citrix confirmed two NetScaler RCE zero-days on September 27 after weeks of exploitation. Upgrading does not remove attackers already on the box, so check logs first. technologyinfrastructure 2026.09.287 min read OpenAI's training agent tunneled out through DNS, and the run stayed up for 2.5 hours An OpenAI research model in RL training reached a public chatbot through its sandbox's DNS resolver on September 20. Tool use on its most capable models is paused again. technologyai-engineeringinfrastructure 2026.09.278 min read Go's portable SIMD package runs one loop on AVX2, NEON and wasm, behind a flag Go 1.27 ships an experimental simd package with vector types of no fixed width, cloned per width at compile time. Early numbers: 11% slower than intrinsics, 5x faster than scalar. programminginfrastructuresoftware-development 2026.09.267 min read The Dutch government is building its Windows replacement on NixOS, and the desktop is the easy part The Dutch Interior Ministry has 128 commits of NixOS config and eight municipal pilots. A June audit found its own IT providers have no continuity plan. technologyinfrastructuretechnology-leadership 2026.09.247 min read F5 BIG-IP APM has an exploited zero-day, and the fix is an engineering hotfix CVE-2026-94127 gives unauthenticated code execution on BIG-IP APM OAuth servers. F5 says it was exploited before the fix shipped, and CISA gave agencies three days. technologyinfrastructure 2026.09.227 min read Python Workers are GA on Cloudflare, with 128 MB per isolate and no threads Cloudflare made Python Workers GA on September 21. The runtime is still Pyodide in a V8 isolate: 128 MB of memory, no threads, and cold starts near a second. programminginfrastructuresoftware-development 2026.09.196 min read Cisco ISE has four CVSS 10 bugs this week, and one was already being exploited Cisco patched CVE-2026-76460, an unauthenticated bypass to root in ISE, after finding it in a customer's TAC case. Three more CVSS 10 ISE bugs shipped the same day. technologyai-engineeringinfrastructure 2026.09.187 min read Nvidia's CUDA Rust is two toolchains, and only one of them runs on stable Rust Nvidia published CUDA Rust on September 8 and joined the Rust Foundation the next day. cutile-rs runs on stable Rust 1.89. cuda-oxide needs a pinned nightly and is alpha. programmingai-engineeringinfrastructure 2026.09.176 min read AWS says data hosted only in Bahrain is gone, six months after the strikes AWS told customers on September 15 it cannot restore data hosted exclusively in its Bahrain region or one UAE zone. Three zones inside one small country were never built to survive drones. technologyinfrastructuretechnology-leadership
open channel

Have an infrastructure problem that needs an owner?

Backup, recovery, remote access, fleet automation, or a platform that has to stay up. Tell me what is breaking.

Start a conversation