Blog

#2026-03 765#english 592#culture 264#deep-dive 254#kubernetes 249#career 229#ai 219#llm 209#devops 196#2026-04 146#security 143#database 114#observability 113#communication 109#history 107#architecture 100#productivity 96#finance 88#economy 84#mindset 81#psychology 80#ai-papers 79#food 78#it 78#travel 78#deep-learning 77#japanese 77#networking 77#performance 72#business-travel 70#linux 70#gpu 69#ai-agent 66#cs-fundamentals 63#postgresql 61#rag 58#self-improvement 55#learning 53#mlops 53#python 52

• Platform Engineering in Banking — The Marriage of Backstage and Governance

  What platform engineering offers in a banking environment where approvals and security procedures stretch lead times to weeks. Covers Backstage golden paths with regulatory requirements built in, Scaffolder actions wired

  2026-06-13 · 16 min read #devops#platform-engineering#backstage#finance#governance

• Building an IDP with Backstage Part 1 — The Software Catalog Is Everything

  A deep dive into the software catalog, the foundation of any Backstage-based Internal Developer Portal. Covers the entity data model, practical catalog-info.yaml authoring, GitHub auto-discovery, the ownership model, met

  2026-06-13 · 15 min read #backstage#idp#platform-engineering#devops#software-catalog

• Hubble and ClusterMesh — Cilium Observability and Multi-Cluster Operations

  Covers the architecture of Hubble, the observability layer of Cilium, with practical CLI queries, Prometheus metrics, and long-term flow log retention, then walks through configuring ClusterMesh for multi-cluster service

  2026-06-13 · 13 min read #cilium#hubble#clustermesh#observability#multi-cluster

• Cilium Datapath Architecture — Inside a Cluster Without kube-proxy

  A deep dive into the eBPF datapath of Cilium, the CNCF graduated CNI, following a packet on its journey. We cover how kube-proxy replacement works, the identity-based security model, tunneling versus native routing, and

  2026-06-13 · 16 min read #cilium#ebpf#kubernetes#cni#networking

• Cilium Network Policy in Practice — Zero Trust from L3 to L7 and DNS

  A hands-on guide to going beyond the limits of Kubernetes NetworkPolicy with CiliumNetworkPolicy, controlling L3/L4/L7 and DNS-based egress. Covers a four-stage default-deny rollout roadmap, a Hubble-driven policy author

  2026-06-13 · 14 min read #cilium#network-policy#zero-trust#kubernetes#security

• How Git Actually Stores Your Data

  Most of us use Git every day without knowing what its insides look like. A ground-up tour of the object model (blob, tree, commit, tag), content addressing by SHA hash, the commit DAG, the fact that branches are just poi

  2026-06-13 · 14 min read #git#version-control#fundamentals

• A Deep Dive into apple/container — The Lightweight VM Approach to macOS Containers ♪ Listenable

  We examine the limits of Docker Desktop and its single shared Linux VM on macOS, then analyze the one-VM-per-container model adopted by apple/container. The post covers the Container Machine feature unveiled at WWDC26, a

  2026-06-12 · 19 min read #apple-container#virtualization#macos#docker#container

• Local LLM Inference Optimization — From Quantization to Breaking the VRAM Ceiling ♪ Listenable

  Privacy concerns, cost pressure, and big-tech fatigue are driving a local LLM revival. We map the entire landscape of local inference optimization: VRAM-first hardware thinking, GGUF and AWQ quantization, llama.cpp vs vL

  2026-06-12 · 16 min read #llm#inference#quantization#llama-cpp#vllm

• The Age of Mandatory Age Verification — Is Privacy-Preserving Identity Possible?

  Examining the push toward mandatory age verification on social media and the privacy concerns it raises, this post walks through privacy-preserving authentication technologies from a developer perspective: zero-knowledge

  2026-06-12 · 14 min read #privacy#identity#zero-knowledge#verifiable-credentials#security

• The Degoogle Experiment — A 2026 Guide to Switching Your Privacy Stack ♪ Listenable

  The viral Gmail exit essay and the surge in DuckDuckGo no-AI search traffic point to big tech fatigue. This guide compares alternatives for search, mail, browsers, photos, and drive, plus self-hosting options, a step-by-

  2026-06-12 · 21 min read #privacy#degoogle#email#self-hosting#duckduckgo

• Hacking the Linux Memory Hierarchy — swap, zram, and the Wild Idea of Swapping to VRAM

  The nbd-vram project, which exposes GPU VRAM as an NBD block device to use as swap, made waves on Hacker News. Starting from there, this post covers Linux memory management fundamentals, swappiness and zram/zswap tuning,

  2026-06-12 · 16 min read #linux#memory#swap#zram#kernel

• Mastering systemd Timers — Time to Graduate from cron

  Sparked by the Hacker News hit You do not love systemd timers enough, this post walks through the structural limits of cron and everything systemd timers offer. OnCalendar syntax, Persistent catch-up, failure notificatio

  2026-06-12 · 15 min read #linux#systemd#cron#scheduling#devops

• Building an LLM from Scratch — A Stanford CS336 Style Learning Roadmap

  Stanford CS336 (Language Modeling from Scratch) keeps hitting the Hacker News front page, and from-scratch LLM building is hot again. This post dissects the full curriculum — tokenizers, attention, distributed training,

  2026-06-12 · 15 min read #llm#transformer#cs336#deep-learning#tokenizer

• The Rise of Diffusion LMs — Can They Become an Alternative to Autoregression

  In June 2026 Google released DiffusionGemma, and text diffusion models are lighting up GeekNews and Hacker News. We critically analyze the structural limits of autoregressive generation, the principles of mask-based deno

  2026-06-12 · 17 min read #llm#diffusion#text-generation#gemma#inference

• JLPT N3 in 20 Days — 200 Essential Words, 30 Grammar Points, and 25 Practice Questions ♪ Listenable

  Even with only 20 days left before the exam, you can prepare for JLPT N3 strategically. This single article covers a day-by-day study plan, 200 essential words organized by topic, 30 key grammar points with comparisons o

  2026-06-12 · 65 min read #japanese#jlpt#n3#vocabulary#grammar

• The Terminal TUI Renaissance — Developers Leaving GUIs and Coming Back to the Terminal

  With the HTTP client Slumber featured on HN and GeekNews, the TUI tool renaissance is back in the spotlight. This post covers the best TUIs by category — lazygit, k9s, lazydocker, yazi, btop — plus fzf recipes, tmux-base

  2026-06-12 · 14 min read #tui#terminal#devops#productivity#tools

• From SiteMinder to Keycloak — A Legacy SSO Migration Strategy and Practical Roadmap

  A practical roadmap for migrating a SiteMinder estate to Keycloak: application inventory classification, an object mapping table, SAML brokering coexistence architecture, oauth2-proxy header translation, gradual password

  2026-06-12 · 16 min read #keycloak#siteminder#sso#iam#migration

• SCIM 2.0 Deep Dive — The Standard for Automated User Provisioning ♪ Listenable

  SSO alone cannot manage the account lifecycle. This post takes a practitioner-level deep dive into SCIM 2.0: the spec structure (RFC 7642/7643/7644), User/Group schemas, REST endpoints and PATCH semantics, support in Okt

  2026-06-12 · 18 min read #scim#iam#provisioning#sso#security

• The Evolution of Authorization Models — RBAC, ABAC, ReBAC, and OpenFGA/Zanzibar

  Once authentication is solved, the next battleground is authorization. We trace the evolution of authorization models from RBAC role explosion through ABAC policy complexity to the ReBAC paradigm introduced by Google Zan

  2026-06-12 · 15 min read #authorization#rbac#rebac#openfga#zanzibar

• OpenID Connect Deep Dive — From the Authorization Code Flow to Discovery

  A protocol-level dissection of how OIDC stacks an authentication layer on top of OAuth 2.0: the role differences between ID Token, Access Token, and Refresh Token, and the detailed Authorization Code + PKCE flow with rea

  2026-06-12 · 14 min read #oidc#oauth2#jwt#sso#security