Blog
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 3525 posts
#2026-03 765#english 592#culture 264#deep-dive 254#kubernetes 249#career 229#ai 219#llm 209#devops 196#2026-04 146#security 143#database 114#observability 113#communication 109#history 107#architecture 100#productivity 96#finance 88#economy 84#mindset 81#psychology 80#ai-papers 79#food 78#it 78#travel 78#deep-learning 77#japanese 77#networking 77#performance 72#business-travel 70#linux 70#gpu 69#ai-agent 66#cs-fundamentals 63#postgresql 61#rag 58#self-improvement 55#learning 53#mlops 53#python 52
Keycloak + Spring Security 6 Integration — Resource Server and OAuth2 Client in Practice
A practical guide to integrating Keycloak with Spring Security 6 as an OAuth2 Resource Server and Client. Covers issuer-uri auto-configuration, mapping realm and client roles with JwtAuthenticationConverter, OIDC logout,
2026-06-12 · 11 min read #keycloak#spring-security#oauth2#oidc#jwtKeycloak LDAP/Active Directory Integration — A Practical Guide to User Federation ♪ Listenable
A hands-on guide to integrating LDAP and Active Directory with Keycloak User Federation, from architecture to production settings. Covers edit modes and sync strategies, AD-specific configuration, attribute mappers, perf
2026-06-12 · 21 min read #keycloak#ldap#active-directory#sso#securityOIDC Token Validation at the API Gateway — Istio, Envoy, and Gateway API in Practice
Validate at the edge or in the service? This post covers detailed Envoy jwtauthn filter configuration, the Istio RequestAuthentication plus AuthorizationPolicy combination, JWKS caching and failure modes, audience strate
2026-06-12 · 15 min read #istio#envoy#jwt#oidc#api-gatewayAdvanced OAuth Flows — When You Need CIBA, Device Flow, and DPoP
A guide to advanced OAuth mechanisms for authentication scenarios that the standard redirect flow cannot solve. Covers the Device Authorization Grant (RFC 8628), CIBA with its poll/ping/push modes, the DPoP (RFC 9449) pr
2026-06-12 · 15 min read #oauth2#oidc#keycloak#ciba#dpopKeycloak HA on Kubernetes — Infinispan Clustering and Zero-Downtime Deployments
A hands-on guide to running Keycloak with high availability on Kubernetes. We compare the Operator and Helm, walk through Infinispan caches and JGroups DNSPING, persistent user sessions, the 26.6 zero-downtime rolling pa
2026-06-12 · 13 min read #keycloak#kubernetes#infinispan#ha#devopsMastering JWT Security — Signature Verification, Key Rotation, and Common Vulnerabilities
We dissect the structure of JWT, JWS, and JWE and cover real-world vulnerabilities such as alg confusion attacks and kid injection, along with their defenses. From JWKS-based key rotation and algorithm selection includin
2026-06-12 · 16 min read #jwt#security#oidc#keycloak#cryptographyThe Art of the S-Tier Demo — For Developers Who Build but Never Show ♪ Listenable
From why the PostHog How to demo essay struck a nerve, to the structure of an S-tier demo that opens with a 15-second hook, scenario scripting, demo-mode flags in code, and ten common failures with recovery lines. A prac
2026-06-12 · 22 min read #demo#communication#career#presentation#developer-productivityDuckDB in Practice — The Era of Embedded Analytics That Ends on Your Laptop
Why is DuckDB, often called the SQLite of OLAP, so loved? We start from the architecture and cover direct Parquet querying, hands-on examples of window functions, PIVOT, and ASOF JOIN, zero-copy integration with pandas,
2026-06-12 · 14 min read #duckdb#database#olap#analytics#parquetThe Craft of 1:1s and Feedback — A Practical Guide for Both ICs and Managers ♪ Listenable
How to turn ritualistic 1:1s into a real growth tool. Covers agenda templates, a 20-question manager library, a comparison of SBI, COIN and Radical Candor, five difficult-feedback scripts, and safe upward feedback phrasi
2026-06-12 · 18 min read #one-on-one#feedback#management#communication#cultureCut Meetings in Half — Designing Async Collaboration and Deep Work ♪ Listenable
From calculating the true cost of meeting overload to a sync/async decision matrix, a written standup template, deep work block design, notification hygiene, and a 4-week transition plan. A concrete playbook for transpla
2026-06-12 · 23 min read #async#deep-work#remote-work#productivity#meetingsThe Hands That Build Surveillance — Developer Ethics and Privacy Engineering ♪ Listenable
From the Larry Ellison remark about constant recording, to the walking tour of surveillance infrastructure in Seattle, to mandatory age verification — the 2026 surveillance debate ultimately plays out in the hands of the
2026-06-12 · 21 min read #privacy#ethics#surveillance#engineering#cultureOSS Maintainers vs AI Contributions — The Questions Raised by the jqwik Affair ♪ Listenable
The anti-AI measures taken by the maintainer of jqwik, the JVM property-based testing engine, set HN and GeekNews ablaze in June 2026. This post offers a balanced look at the asymmetric burden AI contributions place on m
2026-06-12 · 18 min read #opensource#ai#maintainer#contribution-policy#community2026 Developer Job Market Survival Guide — Resumes and Job Search Strategy in the Age of AI Screening ♪ Listenable
How to survive the 2026 hiring market, where AI screening is universal and applications have exploded. Covers an impact-driven resume formula, ATS tactics, portfolio strategy, referral scripts, and salary negotiation, al
2026-06-12 · 18 min read #career#resume#job-search#interview#networkingThe 30x AI Engineer Is Defined by Taste, Not Speed ♪ Listenable
An introduction to and expansion of the widely discussed Substack essay How to be a 30x AI engineer with taste. As AI commoditizes code production, the differentiator becomes evaluative judgment — deciding what to build
2026-06-12 · 19 min read #ai#career#engineering-culture#productivity#code-reviewThe Developer Who Works in Writing — Design Docs, ADRs, and Persuasive Technical Writing ♪ Listenable
Why writing is the senior engineer leverage skill, practical templates for design docs and ADRs, the craft of documents that survive review, bad-writing before/after fixes, and how to use AI for writing without losing yo
2026-06-12 · 22 min read #technical-writing#design-docs#adr#documentation#careerRebuilding the Second Brain — Personal Knowledge Management (PKM) in the AI Era
Designing a PKM system that turns notes into real knowledge amid information overload. Covers the essence of Zettelkasten and PARA, how AI changed the role of notes, a recipe for querying your notes with local LLMs and e
2026-06-12 · 16 min read #pkm#productivity#obsidian#zettelkasten#aiThe Revival of Hardware Hackathons — Making Things in an Era When Software Got Boring
Now that AI lets anyone build a software demo, hardware hackathons are reviving as the way to stand out. We cover the argument of the viral RIP software hackathons post, a comparison of starter hardware stacks, MicroPyth
2026-06-12 · 15 min read #hardware#hackathon#maker#raspberry-pi#esp32Artisans and Builders — Where Developers Should Stand When LLMs Erode Their Careers ♪ Listenable
Built around two essays — Artisans and builders from the Stack Overflow blog and the HN-viral LLMs are eroding my software engineering career — this post redefines developer identity in the AI era. It covers the democrat
2026-06-12 · 22 min read #career#ai#engineering-culture#llm#senior-engineerKeycloak Authorization Services — Fine-Grained Access Control with UMA 2.0
A deep dive into Keycloak Authorization Services that goes beyond the limits of RBAC. Covers the resource/scope/policy/permission model, the UMA 2.0 grant flow, policy enforcer configuration, decision strategies, and how
2026-06-12 · 16 min read #keycloak#authorization#uma#oauth2#security2026 IAM Trends — AI Agent Identity, MCP Authentication, Verifiable Credentials
The 2026 IAM landscape is being reshaped by passwordless-by-default, an explosion of non-human identities in the form of AI agents, and the OAuth 2.1-based standardization of MCP authorization. From on-behalf-of delegati
2026-06-12 · 16 min read #iam#oauth2#mcp#ai-agent#keycloak