the log · 159 entries
Log-scale notes on infrastructure.
Analysis on backup, cloud, open source, security and the companies shaping them. One entry a day, filtered through twenty-five years of running the systems involved.
all 159
ai-machine-learning 16
ai-engineering 78
infrastructure 119
machine-learning 3
programming 64
software-development 40
technology 113
technology-leadership 29
tutorials 1
2026.10.188 min read
RPKI covers 70% of routes now, and the Hetzner hijack passed validation anyway
IPinfo counts 70.3% of routed prefixes as RPKI valid, up from 54% a year ago. The August hijack of a Hetzner /24 passed validation because of one maxLength setting.
2026.10.177 min read
PostgreSQL 19 slips to November 19 after LLM code review found more bugs than committers could fix
PostgreSQL 19 GA moved from October to November 19 after eight to ten features were reverted. Peter Eisentraut says LLM code review raised the quality bar after the code was committed.
2026.10.166 min read
Leap seconds end on May 20, 2027, and the one from 2016 was the last
The 28th CGPM voted on October 15 to let UTC drift up to an hour from Earth rotation time starting May 20, 2027. No leap second has gone in since 2016, and none will again.
2026.10.157 min read
Three Ivanti zero-days got root on a fully patched VPN, and the integrity checker saw nothing
Attackers chained three Connect Secure bugs to root a current 22.8R2.4 appliance on October 3. Ivanti had fixed part of the chain in July and never finished backporting it.
2026.10.147 min read
Gemini 4 Argon went GA with a 1M output limit, and the price doubles on December 1
Google opened Gemini 4 Argon to all paid API customers on October 13 at $2 in and $10 out per million tokens. Both numbers double on December 1, and the 1M window is shared with output.
2026.10.136 min read
Someone pushed malware to Zod's main branch with a stolen SSH key, and no release shipped it
A stolen git credential put a malware loader on Zod's main branch on September 21. A release workflow that a push key cannot trigger kept it out of 346 million weekly installs.
2026.10.127 min read
Bitwarden's store apps go commercial next release, and the GPL build will lose future features
Bitwarden's next App Store and Play builds switch to its commercial license. Every current feature ships in both builds. Bitwarden says some future ones will not.
2026.10.116 min read
AhsayCBS backup consoles are being exploited, and the version NVD called fixed is vulnerable
Huntress saw AhsayCBS exploited from October 7, three days after the CVEs went public. The version the advisories called fixed, 10.3.4, is vulnerable, and there is no patch.
2026.10.108 min read
Cloudflare bought Deno for celld, and the Deno runtime has one year of patches left
Cloudflare acquired Deno on October 9. Deno Deploy shuts down in six months, the runtime gets one year of security fixes, and the team will merge celld into workerd.
Nothing on this page matches. Press Enter to search every entry.