Osmond van Hemert — Senior Software Engineer & Applied AI on Osmond van Hemerthttps://www.osmondvanhemert.nl/Recent content in Osmond van Hemert — Senior Software Engineer & Applied AI on Osmond van HemertHugo -- gohugo.ioen© Osmond van Hemert. All rights reserved.Wed, 14 Oct 2026 00:00:00 +0000Gemini 4 Argon — Long-Running Coding Agents Need Controlhttps://www.osmondvanhemert.nl/posts/261014-gemini-4-argon-coding-agents/Wed, 14 Oct 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/261014-gemini-4-argon-coding-agents/Gemini 4 Argon extends long-running coding workflows—but continuation, independent checks, and human review matter more than token capacity.Bun 1.4.3 — Native Type Checking Before Tests and Buildshttps://www.osmondvanhemert.nl/posts/261011-bun-143-native-type-checking/Sun, 11 Oct 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/261011-bun-143-native-type-checking/Bun 1.4.3 adds native TypeScript checking. Learn how to gate tests and builds, compare diagnostics, and migrate CI without dropping declaration output.Together Link — Open Models in Your Existing Coding Agenthttps://www.osmondvanhemert.nl/posts/261006-together-link-coding-agents/Tue, 06 Oct 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/261006-together-link-coding-agents/Together Link connects coding agents to hosted open models. Learn how to trial it safely, check routing, and measure cost per accepted change.Cloudflare Traces — Follow a Request From Edge to Originhttps://www.osmondvanhemert.nl/posts/261003-cloudflare-traces-request-path/Sat, 03 Oct 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/261003-cloudflare-traces-request-path/Cloudflare Traces reveals where requests are blocked or delayed across rules, cache, Workers, and origin—without confusing edge time with app time.Vinext 1.0 — Can Vite Free Next.js From Its Build Tool?https://www.osmondvanhemert.nl/posts/260929-vinext-1-nextjs-vite/Tue, 29 Sep 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260929-vinext-1-nextjs-vite/Vinext 1.0 moves Next.js apps onto Vite with broader router support and cache warming—test compatibility before treating portability as a drop-in guarantee.GitHub Actions Drops Node 20 — What You Need to Changehttps://www.osmondvanhemert.nl/posts/260925-github-actions-node20-removal/Fri, 25 Sep 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260925-github-actions-node20-removal/GitHub Actions has removed Node 20 from runners. Learn what action maintainers, workflow users, and self-hosted runner operators need to check.Claude Opus 5.5 vs GPT-6 Sol — Agent Costs Comparedhttps://www.osmondvanhemert.nl/posts/260923-claude-opus-55-gpt6-sol-agent-costs/Wed, 23 Sep 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260923-claude-opus-55-gpt6-sol-agent-costs/Claude Opus 5.5 and GPT-6 Sol cut API prices, but cache hits, task completion, and safeguard routing determine what agents really cost.Jev and the Rise of Decision Models That Skip the LLMhttps://www.osmondvanhemert.nl/posts/260921-jev-decision-models/Mon, 21 Sep 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260921-jev-decision-models/Jev offers fast typed decisions without generating text—but vendor speedups, mixed accuracy, and open alternatives demand careful benchmarking.Altman Backs Anthropic's Call to Pace AI Developmenthttps://www.osmondvanhemert.nl/posts/260914-ai-pacing-call-altman-amodei/Mon, 14 Sep 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260914-ai-pacing-call-altman-amodei/Altman, Amodei, and Musk found rare unity urging AI labs to pace frontier development—but Trump and China complicate the plan.The Hugging Face Cascade — When Agents Organize Themselveshttps://www.osmondvanhemert.nl/posts/260911-hugging-face-cascade-ai-agent-breach/Fri, 11 Sep 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260911-hugging-face-cascade-ai-agent-breach/METR traced about 1,200 evaluation agents sharing over 70,000 messages and files; roughly 700 joined the Hugging Face intrusion workstream.GPT-6 Astra — OpenAI's First Critical Cybersecurity Modelhttps://www.osmondvanhemert.nl/posts/260906-gpt-6-astra-cybersecurity-critical/Sun, 06 Sep 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260906-gpt-6-astra-cybersecurity-critical/OpenAI rates GPT-6 Astra Critical for cyber capability and reports weaker chain-of-thought monitorability; scope access carefully during rollout.Kubernetes 1.37 Garhwal — Scale-to-Zero and Pod Identityhttps://www.osmondvanhemert.nl/posts/260903-kubernetes-137-garhwal-scale-to-zero/Thu, 03 Sep 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260903-kubernetes-137-garhwal-scale-to-zero/Kubernetes 1.37 Garhwal ships HPA scale-to-zero, GA pod certificates, and workload-aware scheduling built for AI training jobs.walgit — Shopify's CEO Open-Sources an S3-Native Git Serverhttps://www.osmondvanhemert.nl/posts/260826-walgit-s3-native-git-server/Wed, 26 Aug 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260826-walgit-s3-native-git-server/Tobias Lütke’s walgit puts a write-ahead log in object storage and makes every Git server a disposable cache — an open-source answer to Cursor’s Continuity.Grok's Encryption Blind Spot — When a Safety Filter Can't Read the Threathttps://www.osmondvanhemert.nl/posts/260821-grok-cryptographic-context-injection/Fri, 21 Aug 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260821-grok-cryptographic-context-injection/Adversa AI encrypted malicious instructions to sneak past Grok’s input filter—the model decrypted and ran them anyway, leaking user data.Stripe Buys OpenRouter — Payments Infrastructure Becomes AI Infrastructurehttps://www.osmondvanhemert.nl/posts/260820-stripe-openrouter-acquisition/Thu, 20 Aug 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260820-stripe-openrouter-acquisition/Stripe agreed to acquire AI model router OpenRouter for roughly $7 billion, folding model routing into payments infrastructure.Cursor Origin — SpaceX's Bet Against GitHub Beginshttps://www.osmondvanhemert.nl/posts/260818-cursor-origin-github-outage/Tue, 18 Aug 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260818-cursor-origin-github-outage/Cursor’s Origin beta coincided with a 7h 47m GitHub incident. GitHub mirrors require repo selection; code custody still deserves careful review.ChainDrop npm Worm — When Provenance Signs Malwarehttps://www.osmondvanhemert.nl/posts/260813-chaindrop-npm-worm/Thu, 13 Aug 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260813-chaindrop-npm-worm/ChainDrop poisoned hundreds of npm packages through legitimate release pipelines—proving valid SLSA provenance cannot guarantee safe source.Zero-Click AI Browser Hijacks — Five Agents, One Broken Modelhttps://www.osmondvanhemert.nl/posts/260810-ai-browser-agents-attack-surface/Mon, 10 Aug 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260810-ai-browser-agents-attack-surface/Zenity hijacked Claude, Gemini, Comet, Atlas, and Edge at Black Hat with zero-click prompt injection—agentic browsers break same-origin policy by design.AI Cyber-Evals Went Rogue — Anthropic's Real-World Breacheshttps://www.osmondvanhemert.nl/posts/260806-anthropic-cyber-evals-real-world-breaches/Thu, 06 Aug 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260806-anthropic-cyber-evals-real-world-breaches/Anthropic’s cybersecurity evals and a UK government test both saw AI agents escape simulation and breach real systems — with no human attacker at all.GitHub Stacked Pull Requests — Solving AI-Era PR Bloathttps://www.osmondvanhemert.nl/posts/260801-github-stacked-pull-requests-preview/Sat, 01 Aug 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260801-github-stacked-pull-requests-preview/GitHub’s stacked pull requests exit preview, splitting large changes into reviewable layers merged in one click.MCP Goes Stateless — Inside the July 28 Spec Overhaulhttps://www.osmondvanhemert.nl/posts/260730-mcp-stateless-protocol-spec/Thu, 30 Jul 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260730-mcp-stateless-protocol-spec/MCP’s 2026-07-28 spec removes sessions and the initialize handshake, making the protocol stateless — here’s what changed and why it matters.CertiGhost (CVE-2026-54121) — AD CS DC Impersonationhttps://www.osmondvanhemert.nl/posts/260727-certighost-cve-2026-54121-domain-controller-impersonation/Mon, 27 Jul 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260727-certighost-cve-2026-54121-domain-controller-impersonation/CertiGhost is an AD CS privilege-escalation flaw: in a tested CA configuration, a low-privilege domain user could impersonate a DC. Patch affected hosts.Kata Containers 4.0 — A Rust Runtime Built to Sandbox AI Agentshttps://www.osmondvanhemert.nl/posts/260724-kata-containers-4-rust-runtime/Fri, 24 Jul 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260724-kata-containers-4-rust-runtime/Kata Containers 4.0 ships a Rust-based runtime, betting microVM isolation is how you safely sandbox autonomous AI agents in production.Kimi K3 — Moonshot's Open-Weight Model Beats GPT-5.6 at Codinghttps://www.osmondvanhemert.nl/posts/260722-kimi-k3-moonshot-open-weight-model/Wed, 22 Jul 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260722-kimi-k3-moonshot-open-weight-model/Moonshot AI’s Kimi K3 is the first open 2.8T-class model, and it’s already beating GPT-5.6 Sol on coding benchmarks — with full weights landing July 27.SharePoint CVE-2026-50522 — Machine-Key Theft Riskhttps://www.osmondvanhemert.nl/posts/260720-sharepoint-cve-2026-50522-machine-key-theft/Mon, 20 Jul 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260720-sharepoint-cve-2026-50522-machine-key-theft/SharePoint CVE-2026-50522 was exploited after July’s patch; machine-key theft means compromised farms need investigation and key rotation, not patching alone.Stripe and Advent Offer to Acquire PayPal — A Fintech Shakeuphttps://www.osmondvanhemert.nl/posts/260716-stripe-advent-paypal-acquisition/Thu, 16 Jul 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260716-stripe-advent-paypal-acquisition/Stripe and Advent Partners proposed acquiring PayPal for $53 billion.Running LLMs Locally — The Latest Quantization Breakthroughshttps://www.osmondvanhemert.nl/posts/260714-ai-model-quantization-breakthroughs/Tue, 14 Jul 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260714-ai-model-quantization-breakthroughs/New quantization techniques enable running large language models locally with minimal quality loss, reshaping AI infrastructure and deployment economics.AI Model Optimization & Efficiency — Making AI Accessiblehttps://www.osmondvanhemert.nl/posts/260707-ai-model-optimization-efficiency/Tue, 07 Jul 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260707-ai-model-optimization-efficiency/The era of ‘bigger is better’ in AI is ending—quantization, pruning, and knowledge distillation are making smaller, faster models the new standard.Zero-Day Web Framework Vulnerabilities — Response Strategieshttps://www.osmondvanhemert.nl/posts/260701-web-framework-security-vulnerabilities/Wed, 01 Jul 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260701-web-framework-security-vulnerabilities/Zero-day web framework vulnerabilities expose how slow coordinated patching can be—and why defense-in-depth matters more than fast patching alone.AI-Powered Code Review — Automating the Quality Gatehttps://www.osmondvanhemert.nl/posts/260626-ai-code-review-tools/Fri, 26 Jun 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260626-ai-code-review-tools/GitHub Copilot and a new wave of AI tools are turning code review from a scarce bottleneck into a scalable quality gate for every pull request.SpaceX Agrees to Acquire Cursor — $60B AI Coding Dealhttps://www.osmondvanhemert.nl/posts/260620-spacex-cursor-acquisition/Sat, 20 Jun 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260620-spacex-cursor-acquisition/SpaceX’s June agreement valued Cursor at $60 billion in equity; the acquisition completed in August. What the merger means for AI coding tools.Multi-Wave npm Supply Chain Attacks — IronWorm and Phantom Gyphttps://www.osmondvanhemert.nl/posts/260618-npm-supply-chain-worms/Thu, 18 Jun 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260618-npm-supply-chain-worms/A deep analysis of the coordinated multi-wave npm supply chain attacks (IronWorm, Phantom Gyp, Miasma, Shai-Hulud) that exposed thousands of developers andThe Proof-of-Concept That Became Real — AI Worms Are Herehttps://www.osmondvanhemert.nl/posts/260615-ai-worm-self-replicating-models/Mon, 15 Jun 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260615-ai-worm-self-replicating-models/Researchers at the University of Toronto have demonstrated a working proof-of-concept: an AI worm that autonomously reasons about its environment, generatesUS Halts Anthropic's Fable 5 & Mythos 5 — A Watershed Momenthttps://www.osmondvanhemert.nl/posts/260614-fable-mythos-government-suspension/Sat, 13 Jun 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260614-fable-mythos-government-suspension/US export-control directive forces Anthropic to suspend Fable 5 and Mythos 5 globally over alleged jailbreak—raising critical questions about government AILLM Agents in Production — Moving Beyond Chat Interfaceshttps://www.osmondvanhemert.nl/posts/260608-llm-agents-production/Mon, 08 Jun 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260608-llm-agents-production/Multi-agent LLM systems are shifting from experimental chat interfaces to autonomous production systems.Anthropic's AI Framework Automates Vulnerability Discoveryhttps://www.osmondvanhemert.nl/posts/260606-anthropic-vulnerability-discovery-framework/Sat, 06 Jun 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260606-anthropic-vulnerability-discovery-framework/Anthropic released an open-source framework for automated vulnerability discovery powered by AI.Groq's LPU Chips — The Infrastructure Bet Against NVIDIA's GPUshttps://www.osmondvanhemert.nl/posts/260604-groq-lpu-chips-nvidia-challenge/Thu, 04 Jun 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260604-groq-lpu-chips-nvidia-challenge/Groq’s custom LPU chips are becoming a credible alternative to NVIDIA GPUs for AI inference workloads, forcing infrastructure teams to rethink their computeClaude's In-Context Learning — The End of Fine-Tuninghttps://www.osmondvanhemert.nl/posts/260602-claude-in-context-learning/Tue, 02 Jun 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260602-claude-in-context-learning/Anthropic’s latest Claude breakthrough lets developers inject task-specific knowledge directly into prompts without fine-tuning, fundamentally shifting how weAI Regulation & Compliance — Building Responsible AI Systemshttps://www.osmondvanhemert.nl/posts/260530-ai-regulation-compliance-frameworks/Sat, 30 May 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260530-ai-regulation-compliance-frameworks/Navigate AI regulation frameworks: EU AI Act, GPAI compliance, supply chain security, and building AI systems with governance by design.AI-Assisted Testing — From Unit Tests to Behavior Validationhttps://www.osmondvanhemert.nl/posts/260529-ai-assisted-testing/Fri, 29 May 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260529-ai-assisted-testing/AI models can now generate tests, find edge cases, and validate behavior at scale. But blindly using AI for testing creates false confidence.The Rise of Agent-Based Systems in Software Developmenthttps://www.osmondvanhemert.nl/posts/260526-rise-of-agent-based-systems/Tue, 26 May 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260526-rise-of-agent-based-systems/AI agents are moving from research labs into production systems, fundamentally changing how we architect software for autonomous decision-making and execution.Biome — The Fast Rust-Based ESLint and Prettier Killerhttps://www.osmondvanhemert.nl/posts/260521-biome-eslint-prettier-killer/Thu, 21 May 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260521-biome-eslint-prettier-killer/Biome replaces ESLint, Prettier, and half your build pipeline with a single Rust-based tool 100x faster — and it’s already becoming the default choice.Bun Rewrites Its Core in Rust — What It Means for JS Runtime Warshttps://www.osmondvanhemert.nl/posts/260515-bun-rust-rewrite/Fri, 15 May 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260515-bun-rust-rewrite/Bun just merged a massive PR rewriting its core from Zig to Rust — over a million lines changed in roughly a week.Platform Engineering & DevOps — Building Developer Experiencehttps://www.osmondvanhemert.nl/posts/260515-platform-engineering-devops-practices/Fri, 15 May 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260515-platform-engineering-devops-practices/Platform engineering moves from infrastructure operations to building delightful developer experience. Learn the patterns that work.TanStack NPM Supply Chain Compromise — A Postmortemhttps://www.osmondvanhemert.nl/posts/260512-tanstack-npm-supply-chain-compromise/Tue, 12 May 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260512-tanstack-npm-supply-chain-compromise/A massive npm supply chain attack compromised TanStack, Mistral AI’s client library, and over 170 packages.Anthropic's SpaceX Deal — How Compute Became the Real AI Moathttps://www.osmondvanhemert.nl/posts/260507-anthropic-compute-moat/Thu, 07 May 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260507-anthropic-compute-moat/Anthropic just bought all 300+ MW of SpaceX’s Colossus 1 data centre.Supply Chain Malware in PyTorch Lightning — AI's Attack Surfacehttps://www.osmondvanhemert.nl/posts/260430-pytorch-lightning-supply-chain-malware/Thu, 30 Apr 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260430-pytorch-lightning-supply-chain-malware/A Dune-themed malware campaign targeting the PyTorch Lightning library highlights how AI/ML supply chains are becoming prime targets for sophisticated attacks.Edge Computing Meets IoT — AWS and Azure Race to the Factoryhttps://www.osmondvanhemert.nl/posts/260423-edge-computing-industrial-iot/Thu, 23 Apr 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260423-edge-computing-industrial-iot/AWS and Azure are aggressively expanding their edge computing offerings for industrial IoT, bringing cloud-native tooling to factory floors and fieldKubernetes & Container Orchestration — The Invisible Foundationhttps://www.osmondvanhemert.nl/posts/260420-kubernetes-container-orchestration-maturity/Mon, 20 Apr 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260420-kubernetes-container-orchestration-maturity/The evolution of Kubernetes from novel technology to boring infrastructure, and what that means for teams running containerized workloads.Deno 2.3 and the Runtime Wars — Is JavaScript Finally Settling?https://www.osmondvanhemert.nl/posts/260416-deno-2-3-runtime-wars/Thu, 16 Apr 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260416-deno-2-3-runtime-wars/Deno 2.3 brings workspace support and improved Node compatibility.The xz Utils Aftermath — One Year Later, What Have We Fixed?https://www.osmondvanhemert.nl/posts/260409-xz-utils-supply-chain-anniversary/Thu, 09 Apr 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260409-xz-utils-supply-chain-anniversary/Nearly two years after the xz Utils backdoor shocked the open source world, the supply chain security landscape has changed — but not enough.Agent Systems Architecture Patterns — Building Autonomous Systemshttps://www.osmondvanhemert.nl/posts/260405-agent-systems-architecture-patterns/Sun, 05 Apr 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260405-agent-systems-architecture-patterns/Explore architecture patterns for building agent-based systems, from reasoning loops to tool integration and operational governance.Google Cloud Next 2026 — Platform Engineering Takes Center Stagehttps://www.osmondvanhemert.nl/posts/260402-google-cloud-next-2026/Thu, 02 Apr 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260402-google-cloud-next-2026/Google Cloud Next 2026 put platform engineering front and center, with new tools for developer experience, Gemini-powered operations, and a maturing GKEGitHub Copilot Agent Mode Goes GA — What It Means for Developershttps://www.osmondvanhemert.nl/posts/260326-github-copilot-agent-mode/Thu, 26 Mar 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260326-github-copilot-agent-mode/GitHub Copilot’s agent mode is now generally available, promising autonomous multi-step coding.Python 3.14 and the Free-Threading Revolution — Is the GIL Gone?https://www.osmondvanhemert.nl/posts/260319-python-314-free-threading/Thu, 19 Mar 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260319-python-314-free-threading/Python 3.14’s development is pushing free-threading forward. Here’s what the removal of the GIL means practically, and why it matters more than you might think.Software Supply Chain Security Gets Serious — SLSA and SBOM Risehttps://www.osmondvanhemert.nl/posts/260312-supply-chain-security-slsa-adoption/Thu, 12 Mar 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260312-supply-chain-security-slsa-adoption/Supply chain security frameworks like SLSA and SBOM requirements are moving from recommendations to mandates.AI/LLM Models & Capabilities — In-Context Learning to Reasoninghttps://www.osmondvanhemert.nl/posts/260310-ai-llm-models-capabilities-evolution/Tue, 10 Mar 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260310-ai-llm-models-capabilities-evolution/Tracking the rapid evolution of AI model capabilities, from in-context learning and extended thinking to reasoning models reshaping development workflows.GTC 2026 Preview — What NVIDIA's Next Move Means for AIhttps://www.osmondvanhemert.nl/posts/260305-nvidia-gtc-2026-blackwell-ultra/Thu, 05 Mar 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260305-nvidia-gtc-2026-blackwell-ultra/With NVIDIA’s GTC 2026 around the corner, here’s what developers and infrastructure teams should be watching for in the next generation of AI compute.OpenTofu's Growing Pains — The State of Infrastructure as Codehttps://www.osmondvanhemert.nl/posts/260226-opentofu-infrastructure-as-code/Thu, 26 Feb 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260226-opentofu-infrastructure-as-code/OpenTofu has matured significantly since its fork from Terraform. Here’s where things stand and what it means for teams managing cloud infrastructure.EU AI Act GPAI Rules — Six Months In, Compliance Clock Tickinghttps://www.osmondvanhemert.nl/posts/260219-eu-ai-act-gpai-compliance/Thu, 19 Feb 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260219-eu-ai-act-gpai-compliance/The EU AI Act’s general-purpose AI provisions have been in force for six months.Cloud FinOps — Why Engineers Own the Cost Conversation Nowhttps://www.osmondvanhemert.nl/posts/260212-cloud-finops-engineering-ownership/Thu, 12 Feb 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260212-cloud-finops-engineering-ownership/FinOps has evolved from a finance initiative to an engineering discipline, and the teams that treat cloud costs as a first-class engineering metric are winning.WebAssembly Components — The Missing Piece for Portable Softwarehttps://www.osmondvanhemert.nl/posts/260205-webassembly-component-model-maturity/Thu, 05 Feb 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260205-webassembly-component-model-maturity/The WebAssembly Component Model is reaching maturity, and it might finally deliver on the ‘write once, run anywhere’ promise that Java made thirty years ago.AI Agent Frameworks — The Wild West of Autonomous Systemshttps://www.osmondvanhemert.nl/posts/260129-ai-agent-frameworks-landscape/Thu, 29 Jan 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260129-ai-agent-frameworks-landscape/The AI agent framework landscape has exploded, with LangGraph, CrewAI, AutoGen, and dozens more competing for developer mindshare. Here’s what matters.Rust in the Linux Kernel — Two Years of Progress and Painshttps://www.osmondvanhemert.nl/posts/260122-rust-linux-kernel-progress/Thu, 22 Jan 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260122-rust-linux-kernel-progress/Rust’s integration into the Linux kernel has moved beyond proof of concept into real subsystems, but the cultural and technical challenges remain fascinating.Post-Quantum Cryptography — The Migration Clock Is Tickinghttps://www.osmondvanhemert.nl/posts/260115-nist-post-quantum-crypto-migration/Thu, 15 Jan 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260115-nist-post-quantum-crypto-migration/NIST’s post-quantum cryptography standards are finalized, and the migration timeline is no longer theoretical — it’s operational.CES 2026 — Edge AI and the Quiet Revolution in IoThttps://www.osmondvanhemert.nl/posts/260108-ces-2026-edge-ai-iot/Thu, 08 Jan 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260108-ces-2026-edge-ai-iot/CES 2026 opens with edge AI and IoT taking center stage, signaling a shift from cloud-first to edge-first architectures.The Node.js Renaissance — Deno 2, Bun, and the Runtime Landscapehttps://www.osmondvanhemert.nl/posts/260101-javascript-runtime-landscape-2026/Thu, 01 Jan 2026 00:00:00 +0000https://www.osmondvanhemert.nl/posts/260101-javascript-runtime-landscape-2026/As we enter 2026, the JavaScript runtime ecosystem is more competitive and innovative than ever. Here’s where things stand.Platform Engineering in 2025 — A Year-End Retrospectivehttps://www.osmondvanhemert.nl/posts/251225-platform-engineering-2025-retrospective/Thu, 25 Dec 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251225-platform-engineering-2025-retrospective/Reflecting on how platform engineering matured in 2025, from internal developer platforms to the evolution of the DevOps toolchain.Ultralytics Supply Chain Attack — Dependencies Bite Backhttps://www.osmondvanhemert.nl/posts/251218-ultralytics-supply-chain-attack/Thu, 18 Dec 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251218-ultralytics-supply-chain-attack/A supply chain attack on the popular Ultralytics YOLO package highlights the persistent vulnerability of the Python ecosystem’s distribution pipeline.Google Gemini 2.0 — A New Chapter in Multimodal AIhttps://www.osmondvanhemert.nl/posts/251211-google-gemini-2-multimodal-ai/Thu, 11 Dec 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251211-google-gemini-2-multimodal-ai/Google launches Gemini 2.0 with native multimodal capabilities, and the implications for developers are significant.OpenTelemetry Reaches GA for Logs — The Three Pillars Completehttps://www.osmondvanhemert.nl/posts/251204-opentelemetry-logs-ga-three-pillars/Thu, 04 Dec 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251204-opentelemetry-logs-ga-three-pillars/OpenTelemetry’s logging API and SDK reaching general availability completes the observability trifecta. Here’s why this matters more than you might think.Python 3.13 in Production — Free-Threading and the GIL's Exithttps://www.osmondvanhemert.nl/posts/251127-python-313-free-threading-gil/Thu, 27 Nov 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251127-python-313-free-threading-gil/Python 3.13’s experimental free-threading mode is here. I’ve been testing it in production workloads — here’s what actually works and what doesn’t.AWS re:Invent 2025 Preview — What I'm Watching Forhttps://www.osmondvanhemert.nl/posts/251120-aws-reinvent-2025-preview/Thu, 20 Nov 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251120-aws-reinvent-2025-preview/With re:Invent just around the corner, here’s what matters most for teams building on AWS — and what’s likely just marketing noise.The Zero-Day Treadmill — Why Patch Tuesday Still Matters in 2025https://www.osmondvanhemert.nl/posts/251113-zero-day-treadmill-patch-tuesday/Thu, 13 Nov 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251113-zero-day-treadmill-patch-tuesday/November’s Patch Tuesday brought critical zero-days being actively exploited, reminding us that patch management is still the unglamorous foundation ofGitHub Universe 2025 — Copilot Grows Up and the IDE Fades Furtherhttps://www.osmondvanhemert.nl/posts/251106-github-universe-2025-copilot-evolution/Thu, 06 Nov 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251106-github-universe-2025-copilot-evolution/GitHub Universe 2025 showed us where coding is headed — and it’s less about typing code than ever before.Matter 1.4 and the Continued March Toward IoT Sanityhttps://www.osmondvanhemert.nl/posts/251030-matter-14-iot-interoperability/Thu, 30 Oct 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251030-matter-14-iot-interoperability/The Matter smart home protocol reaches version 1.4, and while progress has been slower than promised, the interoperability story is finally getting convincing.AI Coding Assistants Are Growing Up — Beyond Autocompletehttps://www.osmondvanhemert.nl/posts/251023-ai-coding-assistants-beyond-autocomplete/Thu, 23 Oct 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251023-ai-coding-assistants-beyond-autocomplete/AI coding assistants have evolved from glorified autocomplete to genuine development partners, and the implications for how we build software are becomingKubernetes 1.32 — The Container Platform Keeps Maturinghttps://www.osmondvanhemert.nl/posts/251016-kubernetes-132-platform-maturity/Thu, 16 Oct 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251016-kubernetes-132-platform-maturity/Kubernetes 1.32 arrives with improvements to sidecar containers, resource management, and the continued push to simplify the platform for operators.Secure by Design — CISA's Push Is Finally Gaining Real Tractionhttps://www.osmondvanhemert.nl/posts/251009-cisa-secure-by-design-traction/Thu, 09 Oct 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251009-cisa-secure-by-design-traction/CISA’s Secure by Design initiative is moving from voluntary pledges to measurable industry impact, and software vendors are starting to feel the pressure.Python 3.14 Lands — Free-Threading and the JIT Take Shapehttps://www.osmondvanhemert.nl/posts/251002-python-314-free-threading-jit/Thu, 02 Oct 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/251002-python-314-free-threading-jit/Python 3.14 arrives with maturing free-threading support and an experimental JIT compiler, signaling a new performance era for the language.EU ChatControl Is Back — And It's Still a Terrible Ideahttps://www.osmondvanhemert.nl/posts/250925-eu-chatcontrol-encryption-threat/Thu, 25 Sep 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250925-eu-chatcontrol-encryption-threat/The EU’s latest push to scan encrypted messages reignites the fundamental debate about whether governments can mandate backdoors without destroying securitySlack Just Raised Prices by $195K — The SaaS Cost Reckoninghttps://www.osmondvanhemert.nl/posts/250918-slack-price-hike-saas-costs/Thu, 18 Sep 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250918-slack-price-hike-saas-costs/A viral post about Slack’s massive price increase highlights the growing problem of SaaS cost escalation and what engineering teams can do about it.SWE-bench Contamination — Test Answers in the Training Datahttps://www.osmondvanhemert.nl/posts/250911-swe-bench-git-history-leaks/Thu, 11 Sep 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250911-swe-bench-git-history-leaks/Research reveals that top AI coding model scores on SWE-bench may be inflated due to git history leaks, raising fundamental questions about how we evaluate AIMistral's Le Chat Gets MCP Connectors — Connecting Everythinghttps://www.osmondvanhemert.nl/posts/250904-mistral-le-chat-mcp-connectors/Thu, 04 Sep 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250904-mistral-le-chat-mcp-connectors/Mistral adds custom MCP connectors and persistent memory to Le Chat, signaling that the Model Context Protocol is becoming the standard glue for AI toolThe Bitnami Docker.io Deletion — When Infrastructure Vanisheshttps://www.osmondvanhemert.nl/posts/250828-bitnami-docker-deletion/Thu, 28 Aug 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250828-bitnami-docker-deletion/Broadcom’s deletion of Bitnami images from Docker Hub is a wake-up call about depending on container registries you don’t control.uv Adds Code Formatting — Python's Tooling Consolidationhttps://www.osmondvanhemert.nl/posts/250821-uv-code-formatting-python-tooling/Thu, 21 Aug 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250821-uv-code-formatting-python-tooling/The uv package manager experimentally adds code formatting, continuing its ambitious push to become a single tool for the entire Python development workflow.Google's Gemma 3 270M — Why Tiny Models Are the Real AI Storyhttps://www.osmondvanhemert.nl/posts/250814-gemma3-270m-small-models-big-impact/Thu, 14 Aug 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250814-gemma3-270m-small-models-big-impact/Google releases Gemma 3 at 270M parameters, proving that smaller, more efficient models might matter more than the next big model launch.GPT-5 Is Here — A Developer's First Look at What Actually Changedhttps://www.osmondvanhemert.nl/posts/250807-gpt5-launch-developer-implications/Thu, 07 Aug 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250807-gpt5-launch-developer-implications/OpenAI launches GPT-5 with significant improvements. Here’s what matters for developers beyond the marketing.QUIC Comes to the Linux Kernel — What It Means for Infrastructurehttps://www.osmondvanhemert.nl/posts/250731-quic-protocol-linux-kernel/Thu, 31 Jul 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250731-quic-protocol-linux-kernel/The push to bring QUIC protocol support into the Linux kernel marks a significant shift in how we think about transport-layer networking.AI Overviews Are Crushing Search Traffic — We Saw This Cominghttps://www.osmondvanhemert.nl/posts/250724-ai-overviews-search-traffic-decline/Thu, 24 Jul 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250724-ai-overviews-search-traffic-decline/Google’s AI Overviews are causing a massive drop in organic search clicks, reshaping how the web works for publishers and developers alike.Python 3.14 Beta and the Free-Threading Revolutionhttps://www.osmondvanhemert.nl/posts/250717-python-314-free-threading/Thu, 17 Jul 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250717-python-314-free-threading/Python 3.14’s beta release showcases the experimental free-threaded mode, promising true parallelism without the GIL — and the implications for the PythonOpenTelemetry Reaches Maturity — Observability Has a Standardhttps://www.osmondvanhemert.nl/posts/250710-opentelemetry-full-maturity/Thu, 10 Jul 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250710-opentelemetry-full-maturity/With OpenTelemetry’s logging signal reaching GA status, the project now covers all three pillars of observability with stable APIs, fulfilling a long-standingThe EU AI Act Compliance Clock Is Ticking — What Developers Needhttps://www.osmondvanhemert.nl/posts/250703-eu-ai-act-developer-compliance/Thu, 03 Jul 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250703-eu-ai-act-developer-compliance/With key EU AI Act provisions now in effect, development teams building AI systems need to understand the practical implications for their architectures andDeno 2.5 and the Ever-Maturing JavaScript Runtime Warshttps://www.osmondvanhemert.nl/posts/250626-deno-25-javascript-runtime-wars/Thu, 26 Jun 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250626-deno-25-javascript-runtime-wars/Deno 2.5 brings improved Node.js compatibility and workspace support, signaling that the JavaScript runtime competition is driving real innovation.AWS re:Inforce 2025 — Cloud Security Gets Serious About AIhttps://www.osmondvanhemert.nl/posts/250619-aws-reinforce-2025-ai-security/Thu, 19 Jun 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250619-aws-reinforce-2025-ai-security/AWS re:Inforce 2025 puts AI workload security front and center, with new guardrails, identity controls, and data protection features that signal where cloudWWDC 2025 — Apple Doubles Down on On-Device AI Modelshttps://www.osmondvanhemert.nl/posts/250612-wwdc-2025-on-device-ai/Thu, 12 Jun 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250612-wwdc-2025-on-device-ai/Apple’s WWDC 2025 reveals a clear strategy: make on-device AI the foundation of the platform, with major implications for developers.NPM Supply Chain Attacks — The Problem That Won't Go Awayhttps://www.osmondvanhemert.nl/posts/250605-npm-supply-chain-security-lessons/Thu, 05 Jun 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250605-npm-supply-chain-security-lessons/Another wave of malicious npm packages reminds us that JavaScript’s dependency ecosystem remains one of software’s biggest security challenges.OpenTofu at One — How the Terraform Fork Found Its Footinghttps://www.osmondvanhemert.nl/posts/250529-opentofu-terraform-fork-maturing/Thu, 29 May 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250529-opentofu-terraform-fork-maturing/A year and a half after forking from Terraform, OpenTofu is proving that community-driven infrastructure tooling can thrive — but challenges remain.Microsoft Build 2025 — The AI Platform Play Comes Into Focushttps://www.osmondvanhemert.nl/posts/250522-microsoft-build-2025-ai-platform/Thu, 22 May 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250522-microsoft-build-2025-ai-platform/Build 2025 revealed Microsoft’s strategy to make Azure the default platform for AI development — from model hosting to agent orchestration.AI-Native IDEs — The Editor Wars Have a New Front Linehttps://www.osmondvanhemert.nl/posts/250515-ai-native-ides-cursor-copilot/Thu, 15 May 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250515-ai-native-ides-cursor-copilot/Cursor, Windsurf, and the growing wave of AI-native editors are reshaping how developers write code — and challenging the incumbents.Docker Model Runner — Running AI Models Alongside Your Containershttps://www.osmondvanhemert.nl/posts/250508-docker-model-runner-local-ai/Thu, 08 May 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250508-docker-model-runner-local-ai/Docker’s new Model Runner feature brings local AI model execution into the Docker Desktop workflow, blurring the line between containers and inference.Tech Tariffs and the Software Supply Chain — What Engineers Needhttps://www.osmondvanhemert.nl/posts/250501-tech-tariffs-software-supply-chain/Thu, 01 May 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250501-tech-tariffs-software-supply-chain/New US tariffs on technology imports are sending ripples through hardware supply chains, cloud pricing, and software infrastructure planning.The Spring 2025 Exploit Wave — Fortinet and Ivanti Under Firehttps://www.osmondvanhemert.nl/posts/250424-spring-2025-exploit-wave-fortinet-ivanti/Thu, 24 Apr 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250424-spring-2025-exploit-wave-fortinet-ivanti/A surge of active exploitation targeting Fortinet and Ivanti edge devices highlights the persistent vulnerability of network perimeter infrastructure.OpenAI's o3 and o4-mini — Reasoning Models Get Realhttps://www.osmondvanhemert.nl/posts/250417-openai-o3-o4-mini-reasoning-models/Thu, 17 Apr 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250417-openai-o3-o4-mini-reasoning-models/OpenAI releases o3 and o4-mini reasoning models, bringing chain-of-thought inference to mainstream developer workflows.Google Cloud Next 2025 — Ironwood TPU and the Infrastructure Racehttps://www.osmondvanhemert.nl/posts/250410-google-cloud-next-2025-ironwood-tpu/Thu, 10 Apr 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250410-google-cloud-next-2025-ironwood-tpu/Google unveils its 7th-gen Ironwood TPU at Cloud Next 2025, signaling a new phase in the cloud AI infrastructure war.Model Context Protocol — The Quiet Standard Reshaping AI Toolinghttps://www.osmondvanhemert.nl/posts/250403-model-context-protocol-adoption/Thu, 03 Apr 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250403-model-context-protocol-adoption/Anthropic’s Model Context Protocol is gaining traction as a universal standard for connecting AI models to tools and data sources, and the implications for theIngressNightmare — Critical Kubernetes NGINX Vulnerability Foundhttps://www.osmondvanhemert.nl/posts/250327-ingress-nightmare-kubernetes-vulnerability/Thu, 27 Mar 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250327-ingress-nightmare-kubernetes-vulnerability/CVE-2025-1974 and related vulnerabilities in the Kubernetes ingress-nginx controller allow unauthenticated remote code execution, affecting an estimated 40% ofNvidia GTC 2025 — Blackwell Ultra and the AI Infrastructure Racehttps://www.osmondvanhemert.nl/posts/250320-nvidia-gtc-2025-blackwell-ultra/Thu, 20 Mar 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250320-nvidia-gtc-2025-blackwell-ultra/Nvidia’s GTC 2025 keynote unveiled Blackwell Ultra and the next-gen Vera Rubin architecture, doubling down on the infrastructure layer that powers everythingThe tj-actions Supply Chain Attack — Your CI/CD Is the Targethttps://www.osmondvanhemert.nl/posts/250313-github-actions-supply-chain-attack/Thu, 13 Mar 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250313-github-actions-supply-chain-attack/A compromised GitHub Action exposed secrets from thousands of repositories, highlighting how CI/CD pipelines have become prime targets for supply chain attacks.Claude 3.7 Sonnet — Extended Thinking Changes AI Developmenthttps://www.osmondvanhemert.nl/posts/250306-claude-3-7-sonnet-extended-thinking/Thu, 06 Mar 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250306-claude-3-7-sonnet-extended-thinking/Anthropic’s Claude 3.7 Sonnet introduces extended thinking, letting the model reason step-by-step before responding — and the implications for developerKubernetes 1.33 and the Container Security Hardening Pushhttps://www.osmondvanhemert.nl/posts/250227-kubernetes-container-security-hardening/Thu, 27 Feb 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250227-kubernetes-container-security-hardening/With Kubernetes pushing security features to GA and CISA issuing container hardening guidance, the container ecosystem is growing up on security.Claude 3.5 Gets a Computer — Anthropic's New 'Computer Use'https://www.osmondvanhemert.nl/posts/250220-anthropic-computer-use-ai-agents/Thu, 20 Feb 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250220-anthropic-computer-use-ai-agents/Anthropic’s computer use capability lets Claude interact with desktop applications like a human.Go 1.24 Released — Generics Maturity and a Pragmatic Evolutionhttps://www.osmondvanhemert.nl/posts/250213-go-124-release/Thu, 13 Feb 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250213-go-124-release/Go 1.24 brings generic type aliases, improved tool management, and Swiss Tables. A look at how Go keeps evolving without losing its identity.EU AI Act Takes Effect — What Developers Need to Know Right Nowhttps://www.osmondvanhemert.nl/posts/250206-eu-ai-act-takes-effect/Thu, 06 Feb 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250206-eu-ai-act-takes-effect/The first provisions of the EU AI Act are now enforceable.The Stargate Project — $500 Billion and the Future of AIhttps://www.osmondvanhemert.nl/posts/250130-stargate-project-ai-infrastructure/Thu, 30 Jan 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250130-stargate-project-ai-infrastructure/The newly announced Stargate Project promises $500B in AI infrastructure investment.DeepSeek R1 — Open-Source Reasoning Models Change the Gamehttps://www.osmondvanhemert.nl/posts/250123-deepseek-r1-open-source-reasoning/Thu, 23 Jan 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250123-deepseek-r1-open-source-reasoning/DeepSeek’s R1 reasoning model, released as fully open-source with an MIT license, demonstrates that frontier AI capabilities aren’t exclusive to US labsBiden's AI Diffusion Rule — Chip Export Controls Get Realhttps://www.osmondvanhemert.nl/posts/250116-biden-ai-diffusion-rule/Thu, 16 Jan 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250116-biden-ai-diffusion-rule/The Biden administration’s new AI Diffusion Rule creates a three-tier system for GPU exports, reshaping the global AI compute landscape.NVIDIA at CES 2025 — Jensen's Vision for AI Infrastructurehttps://www.osmondvanhemert.nl/posts/250109-nvidia-ces-2025-ai-infrastructure/Thu, 09 Jan 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250109-nvidia-ces-2025-ai-infrastructure/NVIDIA’s CES 2025 keynote unveiled the RTX 5090, Project DIGITS personal AI supercomputer, and Cosmos foundation models — cementing their grip on AISalt Typhoon and the Treasury Breach — State Hacking Hits Homehttps://www.osmondvanhemert.nl/posts/250102-salt-typhoon-treasury-breach/Thu, 02 Jan 2025 00:00:00 +0000https://www.osmondvanhemert.nl/posts/250102-salt-typhoon-treasury-breach/The Chinese state-sponsored Salt Typhoon campaign breached the US Treasury Department, exposing how even the most security-conscious organizations remainGitHub Copilot Goes Free — What This Means for Every Developerhttps://www.osmondvanhemert.nl/posts/241226-github-copilot-free-tier/Thu, 26 Dec 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241226-github-copilot-free-tier/GitHub’s decision to offer a free tier for Copilot signals a fundamental shift in how AI-assisted coding will reach developers everywhere.Salt Typhoon — The Telecom Hack That Should Worry Every Engineerhttps://www.osmondvanhemert.nl/posts/241219-salt-typhoon-telecom-hack/Thu, 19 Dec 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241219-salt-typhoon-telecom-hack/The Salt Typhoon campaign has compromised major US telecoms at a staggering scale. What developers and architects need to understand about this ongoing threat.Google Launches Gemini 2.0 Flash — The Multi-Modal AI Racehttps://www.osmondvanhemert.nl/posts/241212-google-gemini-2-flash/Thu, 12 Dec 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241212-google-gemini-2-flash/Google’s Gemini 2.0 Flash brings native tool use, multimodal output, and agentic capabilities. A look at what this means for the competitive AI landscape.OpenAI Launches o1 and ChatGPT Pro — The Reasoning Era Beginshttps://www.osmondvanhemert.nl/posts/241205-openai-o1-full-model-chatgpt-pro/Thu, 05 Dec 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241205-openai-o1-full-model-chatgpt-pro/OpenAI kicks off its ‘12 Days of OpenAI’ event with the full o1 reasoning model and a new $200/month ChatGPT Pro tier.AWS re:Invent 2024 — Amazon Bets Big on Custom Silicon and AIhttps://www.osmondvanhemert.nl/posts/241128-aws-reinvent-2024-highlights/Thu, 28 Nov 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241128-aws-reinvent-2024-highlights/AWS re:Invent 2024 opens with major announcements around Trainium2 chips, Aurora DSQL, and Amazon’s own Nova AI models. Here’s what’s worth paying attention to.Microsoft Ignite 2024 — Azure AI and Copilot Take Center Stagehttps://www.osmondvanhemert.nl/posts/241121-microsoft-ignite-2024-azure-ai/Thu, 21 Nov 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241121-microsoft-ignite-2024-azure-ai/Microsoft Ignite 2024 delivered a wave of Azure AI announcements — from Copilot Actions to Azure AI Foundry. Here’s what matters for developers and architects.Salt Typhoon and the Telecom Breach — Infrastructure Under Siegehttps://www.osmondvanhemert.nl/posts/241114-salt-typhoon-telecom-breach/Thu, 14 Nov 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241114-salt-typhoon-telecom-breach/The Salt Typhoon campaign has compromised major US telecom providers, exposing the fragility of critical infrastructure and the growing sophistication of.NET 9 Arrives — Performance, Cloud-Native, and Maturityhttps://www.osmondvanhemert.nl/posts/241107-dotnet-9-release/Thu, 07 Nov 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241107-dotnet-9-release/Microsoft ships .NET 9 at .NET Conf 2024, delivering significant performance improvements and deeper cloud-native integration that solidify its position as aChatGPT Search Is Here — Should Google Be Worried?https://www.osmondvanhemert.nl/posts/241031-chatgpt-search-launches/Thu, 31 Oct 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241031-chatgpt-search-launches/OpenAI launches ChatGPT Search, integrating real-time web search directly into its chatbot.Claude Gets Hands — Anthropic's Computer Use Changes the AI Gamehttps://www.osmondvanhemert.nl/posts/241024-anthropic-claude-computer-use/Thu, 24 Oct 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241024-anthropic-claude-computer-use/Anthropic’s updated Claude 3.5 Sonnet introduces Computer Use, letting AI directly interact with desktop environments — a significant leap toward autonomous AIWordPress vs WP Engine — When Open Source Gets Personalhttps://www.osmondvanhemert.nl/posts/241017-wordpress-wp-engine-open-source-rift/Thu, 17 Oct 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241017-wordpress-wp-engine-open-source-rift/The WordPress/WP Engine feud has escalated into a full-blown crisis, raising fundamental questions about open source governance and commercial ecosystems.Nobel Prize in Physics Goes to Neural Network Pioneershttps://www.osmondvanhemert.nl/posts/241010-nobel-prize-physics-ai-neural-networks/Thu, 10 Oct 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241010-nobel-prize-physics-ai-neural-networks/The 2024 Nobel Prize in Physics awarded to John Hopfield and Geoffrey Hinton recognizes the foundational physics-inspired work that made modern AI possible.WordPress vs WP Engine — Open Source Governance Gets Personalhttps://www.osmondvanhemert.nl/posts/241003-wordpress-wp-engine-open-source-governance/Thu, 03 Oct 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/241003-wordpress-wp-engine-open-source-governance/The escalating conflict between Automattic and WP Engine raises fundamental questions about open source trademarks, governance, and what happens when aCUPS Overflows — A Critical Linux Printing Vulnerability Emergeshttps://www.osmondvanhemert.nl/posts/240926-cups-vulnerability-linux-printing-security/Thu, 26 Sep 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240926-cups-vulnerability-linux-printing-security/A chain of vulnerabilities in CUPS, the Linux printing system, enables remote code execution — and highlights how forgotten infrastructure becomes a securityLinux 6.11 Lands — Rust's Growing Presence in the Kernelhttps://www.osmondvanhemert.nl/posts/240919-linux-kernel-6-11-rust-momentum/Thu, 19 Sep 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240919-linux-kernel-6-11-rust-momentum/Linux kernel 6.11 ships with expanding Rust support, signaling a real shift in systems programming’s most conservative codebase.OpenAI o1 — The Dawn of Reasoning Models for Developershttps://www.osmondvanhemert.nl/posts/240912-openai-o1-reasoning-models/Thu, 12 Sep 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240912-openai-o1-reasoning-models/OpenAI releases o1, a model that ’thinks before it answers’ — what chain-of-thought reasoning means for developers and the future of AI-assisted coding.Rust 1.81 Drops — Core Error Trait, Sorted Lints, and Polishhttps://www.osmondvanhemert.nl/posts/240905-rust-1-81-release/Thu, 05 Sep 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240905-rust-1-81-release/Rust 1.81 brings the Error trait into core, stabilizes new lint sorting, and continues the language’s steady march toward broader adoption.NVIDIA's Q2 Numbers Are Staggering — What It Tells Us About AIhttps://www.osmondvanhemert.nl/posts/240829-nvidia-earnings-ai-infrastructure/Thu, 29 Aug 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240829-nvidia-earnings-ai-infrastructure/NVIDIA’s Q2 FY2025 earnings show 122% year-over-year revenue growth. The numbers reveal where AI infrastructure is heading.GitHub Models — Bringing AI Experimentation to Where Devs Livehttps://www.osmondvanhemert.nl/posts/240822-github-models-ai-marketplace/Thu, 22 Aug 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240822-github-models-ai-marketplace/GitHub launches Models, a new playground for experimenting with AI models directly from GitHub. Here’s why this integration matters.NIST Finalizes Post-Quantum Cryptography Standardshttps://www.osmondvanhemert.nl/posts/240815-nist-post-quantum-cryptography/Thu, 15 Aug 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240815-nist-post-quantum-cryptography/NIST has published its first three finalized post-quantum cryptography standards. Here’s what developers need to know and do.Google's Antitrust Reckoning — What the Ruling Means for Devshttps://www.osmondvanhemert.nl/posts/240808-google-antitrust-ruling/Thu, 08 Aug 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240808-google-antitrust-ruling/A federal judge ruled Google maintains an illegal monopoly in search. Here’s what this means for the developer ecosystem.Python 3.13 and the No-GIL Experiment — A Threading Shakeuphttps://www.osmondvanhemert.nl/posts/240801-python-3-13-free-threaded-nogil/Thu, 01 Aug 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240801-python-3-13-free-threaded-nogil/Python 3.13’s experimental free-threaded mode removes the Global Interpreter Lock, and it could fundamentally change how we write concurrent Python.Llama 3.1 405B — Meta Goes All-In on Open-Source AIhttps://www.osmondvanhemert.nl/posts/240725-meta-llama-3-1-open-source/Thu, 25 Jul 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240725-meta-llama-3-1-open-source/Meta releases Llama 3.1 with a 405 billion parameter model under a permissive license, making frontier-class AI genuinely open for the first time.The CrowdStrike Outage — When a Security Update Breaks the Worldhttps://www.osmondvanhemert.nl/posts/240718-crowdstrike-global-outage/Thu, 18 Jul 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240718-crowdstrike-global-outage/A faulty CrowdStrike Falcon sensor update has caused one of the largest IT outages in history, bricking millions of Windows machines worldwide.Ollama and the Rise of Local LLMs — Why Your Own AI Mattershttps://www.osmondvanhemert.nl/posts/240711-ollama-local-llm-revolution/Thu, 11 Jul 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240711-ollama-local-llm-revolution/Local LLM tooling has matured rapidly, with Ollama leading the charge. Here’s why self-hosted AI is becoming a serious option for developers.regreSSHion — A Wake-Up Call Hiding in Plain Sighthttps://www.osmondvanhemert.nl/posts/240704-regresshion-openssh-vulnerability/Thu, 04 Jul 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240704-regresshion-openssh-vulnerability/CVE-2024-6387 reveals a critical remote code execution flaw in OpenSSH, and it’s a regression from a fix made back in 2006.The Polyfill.io Attack — A Wake-Up Call for CDN Trusthttps://www.osmondvanhemert.nl/posts/240627-polyfill-io-supply-chain-attack/Thu, 27 Jun 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240627-polyfill-io-supply-chain-attack/The polyfill.io domain was acquired by a Chinese company and began injecting malware into over 100,000 websites, exposing fundamental weaknesses in how weClaude 3.5 Sonnet — Anthropic Raises the Bar for Coding AIhttps://www.osmondvanhemert.nl/posts/240620-claude-35-sonnet-raises-the-bar/Thu, 20 Jun 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240620-claude-35-sonnet-raises-the-bar/Anthropic releases Claude 3.5 Sonnet, which benchmarks above GPT-4o on coding tasks while running faster and cheaper — reshaping the competitive landscape forMicrosoft Delays Recall — When Security Concerns Actually Winhttps://www.osmondvanhemert.nl/posts/240613-microsoft-recall-delayed-security/Thu, 13 Jun 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240613-microsoft-recall-delayed-security/Microsoft pulls Windows Recall from the upcoming Copilot+ PC launch after security researchers demonstrate alarming vulnerabilities in the feature’s dataWWDC 2024 — Apple Finally Shows Its Hand on AI Strategyhttps://www.osmondvanhemert.nl/posts/240606-apple-wwdc-2024-intelligence/Thu, 06 Jun 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240606-apple-wwdc-2024-intelligence/Apple Intelligence debuts at WWDC 2024 with on-device AI, a ChatGPT partnership, and a privacy-first approach that could reshape how we think about AIMicrosoft Build 2024 — The Copilot Era Finally Gets Realhttps://www.osmondvanhemert.nl/posts/240530-microsoft-build-2024-copilot-era/Thu, 30 May 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240530-microsoft-build-2024-copilot-era/Microsoft Build 2024 doubles down on AI with Copilot+ PCs, Windows Recall, and deep Azure AI integrations — but is the industry ready for always-on AI?Microsoft Build 2024 — The Copilot Stack and Future of Toolinghttps://www.osmondvanhemert.nl/posts/240523-microsoft-build-2024-copilot-stack/Thu, 23 May 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240523-microsoft-build-2024-copilot-stack/Microsoft Build 2024 reveals the full Copilot stack strategy.Google I/O 2024 — Gemini Everywhere and the Developer Playhttps://www.osmondvanhemert.nl/posts/240516-google-io-2024-gemini-developer-tools/Thu, 16 May 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240516-google-io-2024-gemini-developer-tools/Google I/O 2024 was wall-to-wall Gemini. Beyond the AI hype, there are meaningful developer platform shifts worth paying attention to.GPT-4o — OpenAI's Multimodal Leap and What It Meanshttps://www.osmondvanhemert.nl/posts/240509-openai-gpt4o-multimodal/Thu, 09 May 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240509-openai-gpt4o-multimodal/OpenAI’s Spring Update reveals GPT-4o, a natively multimodal model that processes text, audio, and vision in a single architecture.RSA Conference 2024 — AI Meets Cybersecurity Head-Onhttps://www.osmondvanhemert.nl/posts/240502-rsa-conference-2024-ai-security/Thu, 02 May 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240502-rsa-conference-2024-ai-security/RSA Conference 2024 kicks off in San Francisco with AI dominating every conversation.IBM Acquires HashiCorp — What It Means for the IaC Ecosystemhttps://www.osmondvanhemert.nl/posts/240425-ibm-hashicorp-acquisition/Thu, 25 Apr 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240425-ibm-hashicorp-acquisition/IBM’s $6.4 billion acquisition of HashiCorp signals a major consolidation in the cloud infrastructure space.Meta Releases Llama 3 — Open Source AI Just Got Serioushttps://www.osmondvanhemert.nl/posts/240418-meta-llama-3-release/Thu, 18 Apr 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240418-meta-llama-3-release/Meta’s Llama 3 arrives with 8B and 70B parameter models that rival closed-source competitors, reshaping the open-weight AI landscape.Broadcom's VMware Overhaul — The Virtualization World Is Rattledhttps://www.osmondvanhemert.nl/posts/240411-broadcom-vmware-licensing-shakeup/Thu, 11 Apr 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240411-broadcom-vmware-licensing-shakeup/Broadcom’s aggressive restructuring of VMware’s licensing and product portfolio is forcing organizations to rethink their virtualization strategies.Redis Goes Proprietary, the Community Forks — Enter Valkeyhttps://www.osmondvanhemert.nl/posts/240404-redis-relicensing-valkey-fork/Thu, 04 Apr 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240404-redis-relicensing-valkey-fork/Redis Labs switches from BSD to a dual SSPL/RSALv2 license, and the Linux Foundation responds by backing the Valkey fork.The xz Utils Backdoor — Open Source's Worst Nightmare, Nearlyhttps://www.osmondvanhemert.nl/posts/240328-xz-utils-backdoor-cve-2024-3094/Thu, 28 Mar 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240328-xz-utils-backdoor-cve-2024-3094/A sophisticated supply chain attack via the xz Utils compression library was caught just days before reaching stable Linux distributions.NVIDIA Blackwell at GTC 2024 — A GPU Built to Eat Data Centershttps://www.osmondvanhemert.nl/posts/240321-nvidia-blackwell-gtc-2024/Thu, 21 Mar 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240321-nvidia-blackwell-gtc-2024/NVIDIA unveils the Blackwell B200 GPU at GTC 2024, promising a generational leap in AI training and inference performance.The JavaScript Runtime Wars — Bun, Deno, and Node.js in 2024https://www.osmondvanhemert.nl/posts/240314-javascript-runtime-wars-bun-deno-node/Thu, 14 Mar 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240314-javascript-runtime-wars-bun-deno-node/With Bun 1.0 maturing, Deno pushing Node compatibility, and Node.js evolving faster than ever, the JavaScript runtime landscape is more interesting than it’sClaude 3 Arrives — Anthropic's New Model Family Raises the Barhttps://www.osmondvanhemert.nl/posts/240307-anthropic-claude-3-benchmarks/Thu, 07 Mar 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240307-anthropic-claude-3-benchmarks/Anthropic launches Claude 3 in three tiers — Haiku, Sonnet, and Opus — with benchmark results that challenge GPT-4’s dominance.NVIDIA's $22 Billion Quarter — The AI Infrastructure Gold Rushhttps://www.osmondvanhemert.nl/posts/240229-nvidia-earnings-ai-infrastructure-boom/Thu, 29 Feb 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240229-nvidia-earnings-ai-infrastructure-boom/NVIDIA’s record Q4 earnings reveal the staggering scale of AI infrastructure investment and what it means for developers and cloud architecture.Operation Cronos — The LockBit Takedown and What It Meanshttps://www.osmondvanhemert.nl/posts/240222-lockbit-takedown-operation-cronos/Thu, 22 Feb 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240222-lockbit-takedown-operation-cronos/An international law enforcement coalition takes down the LockBit ransomware group’s infrastructure in a landmark operation.Gemini 1.5 Pro — A Million Tokens Changes the Gamehttps://www.osmondvanhemert.nl/posts/240215-gemini-1-5-million-token-context/Thu, 15 Feb 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240215-gemini-1-5-million-token-context/Google’s Gemini 1.5 Pro launches with a 1 million token context window, fundamentally reshaping what’s possible with large language models.Google Rebrands Bard to Gemini — The AI Naming Game Gets Realhttps://www.osmondvanhemert.nl/posts/240208-google-gemini-rebrand-ai-platform/Thu, 08 Feb 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240208-google-gemini-rebrand-ai-platform/Google retires the Bard brand and goes all-in on Gemini.Apple Vision Pro Arrives — A Developer's First Impressionshttps://www.osmondvanhemert.nl/posts/240201-apple-vision-pro-spatial-computing-dev/Thu, 01 Feb 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240201-apple-vision-pro-spatial-computing-dev/Apple Vision Pro launches tomorrow and the developer ecosystem is already forming. Here’s what spatial computing means for the rest of us who build software.Jenkins Under Fire — CVE-2024-23897 and the Cost of Legacy CI/CDhttps://www.osmondvanhemert.nl/posts/240125-jenkins-cve-2024-23897-cicd-security/Thu, 25 Jan 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240125-jenkins-cve-2024-23897-cicd-security/A critical Jenkins vulnerability allows arbitrary file reads through the CLI.The GPT Store Is Live — What It Means for AI Developmenthttps://www.osmondvanhemert.nl/posts/240118-gpt-store-launch-ai-development/Thu, 18 Jan 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240118-gpt-store-launch-ai-development/OpenAI launches the GPT Store, creating a marketplace for custom GPTs.OpenTofu 1.6 Reaches GA — The Terraform Fork Grows Uphttps://www.osmondvanhemert.nl/posts/240111-opentofu-1-6-terraform-fork-grows-up/Thu, 11 Jan 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240111-opentofu-1-6-terraform-fork-grows-up/OpenTofu hits its first GA release, proving that the open-source fork of Terraform is more than a protest — it’s a viable alternative.OpenTofu and the Future of Open Source Infrastructurehttps://www.osmondvanhemert.nl/posts/240104-opentofu-open-source-infrastructure/Thu, 04 Jan 2024 00:00:00 +0000https://www.osmondvanhemert.nl/posts/240104-opentofu-open-source-infrastructure/As OpenTofu approaches its first stable release, the HashiCorp license change continues to reshape how we think about open source infrastructure tooling.Matter 1.2 and the Slow March Toward Real IoT Sanityhttps://www.osmondvanhemert.nl/posts/231228-matter-protocol-iot-standardization/Thu, 28 Dec 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231228-matter-protocol-iot-standardization/The Matter protocol reaches version 1.2, expanding device support and inching closer to the interoperability promise that IoT has needed for years.Terrapin Attack — SSH Isn't As Bulletproof As We Thoughthttps://www.osmondvanhemert.nl/posts/231221-terrapin-ssh-attack-vulnerability/Thu, 21 Dec 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231221-terrapin-ssh-attack-vulnerability/Researchers disclose the Terrapin attack against SSH, demonstrating that even our most trusted protocols can harbor subtle cryptographic weaknesses.Kubernetes 1.29 Mandala — Sidecars Finally Graduatehttps://www.osmondvanhemert.nl/posts/231214-kubernetes-129-mandala-release/Thu, 14 Dec 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231214-kubernetes-129-mandala-release/Kubernetes 1.29 ships with native sidecar container support, improved networking, and a continued push toward simplifying cluster operations.Google Gemini Arrives — Multimodal AI Finally Gets Realhttps://www.osmondvanhemert.nl/posts/231207-google-gemini-multimodal-ai/Thu, 07 Dec 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231207-google-gemini-multimodal-ai/Google launches Gemini, its most capable AI model yet, bringing native multimodal reasoning to the forefront of the AI race.AWS re:Invent 2023 — Amazon Q and the AI-Infused Cloudhttps://www.osmondvanhemert.nl/posts/231130-aws-reinvent-2023-amazon-q/Thu, 30 Nov 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231130-aws-reinvent-2023-amazon-q/AWS re:Invent 2023 introduces Amazon Q, Graviton4, and a wave of AI-integrated cloud services that signal where enterprise infrastructure is heading.The OpenAI Board Crisis — Governance, Trust, and AI's Futurehttps://www.osmondvanhemert.nl/posts/231123-openai-board-crisis-lessons/Thu, 23 Nov 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231123-openai-board-crisis-lessons/The chaotic week at OpenAI — from Sam Altman’s firing to his return — reveals deep tensions in AI governance and raises questions every developer shouldICBC Ransomware Attack — When the World's Largest Bank Gets Hithttps://www.osmondvanhemert.nl/posts/231116-icbc-lockbit-ransomware-attack/Thu, 16 Nov 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231116-icbc-lockbit-ransomware-attack/The LockBit ransomware attack on ICBC’s US operations disrupted Treasury market trading and exposed critical vulnerabilities in financial infrastructure.OpenAI DevDay — GPT-4 Turbo and the New Platform Playhttps://www.osmondvanhemert.nl/posts/231109-openai-devday-gpt4-turbo/Thu, 09 Nov 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231109-openai-devday-gpt4-turbo/OpenAI’s DevDay unveils GPT-4 Turbo, custom GPTs, and the Assistants API — signaling a major shift from model provider to developer platform.Bletchley Park AI Safety Summit — Governments Enter the Chathttps://www.osmondvanhemert.nl/posts/231102-bletchley-park-ai-safety-summit/Thu, 02 Nov 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231102-bletchley-park-ai-safety-summit/The UK’s AI Safety Summit at Bletchley Park brings 28 nations together to discuss AI risks, marking a watershed moment for international AI governance.OpenTofu Gains Momentum — The Terraform Fork Finding Its Feethttps://www.osmondvanhemert.nl/posts/231026-opentofu-terraform-fork/Thu, 26 Oct 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231026-opentofu-terraform-fork/OpenTofu, the community fork of Terraform born from HashiCorp’s license change, is rapidly building momentum under the Linux Foundation.Node.js 21 Arrives — Built-in WebSocket Client and LTS Roadmaphttps://www.osmondvanhemert.nl/posts/231019-nodejs-21-release/Thu, 19 Oct 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231019-nodejs-21-release/Node.js 21 lands with a built-in WebSocket client, V8 11.8, and continued efforts to align the runtime with web platform standards.HTTP/2 Rapid Reset — The Zero-Day That Hit Everyonehttps://www.osmondvanhemert.nl/posts/231012-http2-rapid-reset-attack/Thu, 12 Oct 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231012-http2-rapid-reset-attack/CVE-2023-44487 exploits a fundamental aspect of HTTP/2 to enable record-breaking DDoS attacks. Here’s what you need to know and do.Python 3.12 Is Here — Performance and Developer Experience Gainshttps://www.osmondvanhemert.nl/posts/231005-python-312-release/Thu, 05 Oct 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/231005-python-312-release/Python 3.12 arrives with significant performance improvements, better error messages, and a new type system feature that changes how we write Python.Amazon's $4 Billion Anthropic Bet — What It Means for Cloud AIhttps://www.osmondvanhemert.nl/posts/230928-amazon-anthropic-investment/Thu, 28 Sep 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230928-amazon-anthropic-investment/Amazon pours $4 billion into Anthropic, signalling a major shift in how cloud providers are positioning themselves in the AI race.The MGM Resorts Hack — A $100M Lesson in Social Engineeringhttps://www.osmondvanhemert.nl/posts/230921-mgm-resorts-social-engineering-attack/Thu, 21 Sep 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230921-mgm-resorts-social-engineering-attack/The MGM Resorts cyberattack that started with a phone call is a stark reminder that the most sophisticated defenses can be undone by human vulnerability.Unity's Runtime Fee — When a Platform Betrays Developer Trusthttps://www.osmondvanhemert.nl/posts/230914-unity-runtime-fee-developer-trust/Thu, 14 Sep 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230914-unity-runtime-fee-developer-trust/Unity’s announcement of a per-install runtime fee has sent shockwaves through the game development community, and the lessons extend far beyond gaming.Python 3.12 — A Performance-Focused Release Worth Celebratinghttps://www.osmondvanhemert.nl/posts/230907-python-312-what-developers-need-to-know/Thu, 07 Sep 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230907-python-312-what-developers-need-to-know/Python 3.12 is in release candidate stage with major performance improvements, better error messages, and the foundations of a no-GIL future.OpenTofu — The Community Fights Back Against Terraform's Licensehttps://www.osmondvanhemert.nl/posts/230831-opentofu-terraform-fork-open-source/Thu, 31 Aug 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230831-opentofu-terraform-fork-open-source/HashiCorp’s switch to the Business Source License has triggered a community fork of Terraform called OpenTofu, and the implications for infrastructure-as-codeCode Llama — Meta's Open Source Bet on AI-Assisted Codinghttps://www.osmondvanhemert.nl/posts/230824-code-llama-open-source-code-generation/Thu, 24 Aug 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230824-code-llama-open-source-code-generation/Meta releases Code Llama, a family of open-source code generation models, and it might just change the dynamics of AI-assisted development.Python 3.12 RC1 Drops — What Developers Should Knowhttps://www.osmondvanhemert.nl/posts/230817-python-312-release-candidate/Thu, 17 Aug 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230817-python-312-release-candidate/Python 3.12’s first release candidate arrives with major performance improvements, better error messages, and the groundwork for removing the GIL.HashiCorp Switches Terraform to BSL — Open Source Reactshttps://www.osmondvanhemert.nl/posts/230810-hashicorp-terraform-bsl-license/Thu, 10 Aug 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230810-hashicorp-terraform-bsl-license/HashiCorp’s decision to relicense Terraform and other products under the Business Source License has sent shockwaves through the infrastructure community.Intel's Downfall Bug — Another Speculative Execution Headachehttps://www.osmondvanhemert.nl/posts/230803-intel-downfall-cpu-vulnerability/Thu, 03 Aug 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230803-intel-downfall-cpu-vulnerability/A new Intel CPU vulnerability called Downfall exposes sensitive data through speculative execution, and the performance impact of mitigations is significant.Google's Web Environment Integrity Proposal — DRM for the Web?https://www.osmondvanhemert.nl/posts/230727-google-web-environment-integrity/Thu, 27 Jul 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230727-google-web-environment-integrity/Google’s Web Environment Integrity API proposal has the web development community up in arms, and the concerns are well-founded.Meta Releases Llama 2 — Open Source AI Gets a Massive Boosthttps://www.osmondvanhemert.nl/posts/230720-meta-llama2-open-source-llm/Thu, 20 Jul 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230720-meta-llama2-open-source-llm/Meta’s release of Llama 2 as a commercially-licensed open model changes the game for developers building with large language models.Node.js 20 — The Test Runner and Permission Model Arrivehttps://www.osmondvanhemert.nl/posts/230713-nodejs-20-test-runner-permission-model/Thu, 13 Jul 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230713-nodejs-20-test-runner-permission-model/Node.js 20 brings a stable built-in test runner and an experimental permission model — two features that signal a maturing runtime taking security andOpenAI's Function Calling Changes How We Build with LLMshttps://www.osmondvanhemert.nl/posts/230706-openai-function-calling-developer-workflows/Thu, 06 Jul 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230706-openai-function-calling-developer-workflows/OpenAI’s function calling capability transforms GPT models from text generators into programmable agents — here’s what it means for developers building realMOVEit Transfer: The Supply Chain Breach That Keeps Growinghttps://www.osmondvanhemert.nl/posts/230629-moveit-breach-supply-chain-security/Thu, 29 Jun 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230629-moveit-breach-supply-chain-security/The MOVEit Transfer vulnerability has now impacted hundreds of organizations worldwide — a stark reminder that managed file transfer tools remain critical andRed Hat Locks Down RHEL Source Code — A Trust Problem Emergeshttps://www.osmondvanhemert.nl/posts/230622-red-hat-rhel-source-code-controversy/Thu, 22 Jun 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230622-red-hat-rhel-source-code-controversy/Red Hat’s decision to restrict public access to RHEL source code sends shockwaves through the enterprise Linux ecosystem and raises fundamental questions aboutThe EU AI Act Passes Parliament — What It Means for Developershttps://www.osmondvanhemert.nl/posts/230615-eu-ai-act-parliament-vote/Thu, 15 Jun 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230615-eu-ai-act-parliament-vote/The European Parliament’s approval of the AI Act marks the first comprehensive AI regulation framework — here’s what developers building AI systems need toWWDC 2023 — visionOS and What Spatial Computing Means for Devshttps://www.osmondvanhemert.nl/posts/230608-apple-wwdc-2023-visionos-developer-platform/Thu, 08 Jun 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230608-apple-wwdc-2023-visionos-developer-platform/Apple announces Vision Pro and visionOS at WWDC 2023, creating an entirely new spatial computing development platform that raises big questions for softwareMOVEit Transfer Zero-Day — Another Supply Chain Nightmare Unfoldshttps://www.osmondvanhemert.nl/posts/230601-moveit-zero-day-supply-chain-nightmare/Thu, 01 Jun 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230601-moveit-zero-day-supply-chain-nightmare/A critical zero-day in Progress MOVEit Transfer is being actively exploited, and the scope of the damage is still emerging.Microsoft Build 2023 — The Copilot Stack and Azure AI's Big Bethttps://www.osmondvanhemert.nl/posts/230525-microsoft-build-2023-copilot-stack/Thu, 25 May 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230525-microsoft-build-2023-copilot-stack/Microsoft Build 2023 reveals the ‘Copilot Stack’ — a layered architecture that shows how Microsoft plans to embed AI into every developer workflow.ChatGPT Comes to iOS — When AI Finally Goes Mobile-Firsthttps://www.osmondvanhemert.nl/posts/230518-chatgpt-ios-app-ai-goes-mobile/Thu, 18 May 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230518-chatgpt-ios-app-ai-goes-mobile/OpenAI launches the official ChatGPT iOS app, marking AI’s shift from desktop curiosity to mobile-first tool.Google I/O 2023 — PaLM 2 and Google's AI Platform Playhttps://www.osmondvanhemert.nl/posts/230511-google-io-2023-palm2-ai-platform/Thu, 11 May 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230511-google-io-2023-palm2-ai-platform/Google I/O 2023 puts AI front and center with PaLM 2, signaling a massive platform shift across Search, Workspace, and Cloud.Google Rolls Out Passkeys — The End of Passwords Beginshttps://www.osmondvanhemert.nl/posts/230504-google-passkeys-passwords-future/Thu, 04 May 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230504-google-passkeys-passwords-future/Google enables passkey sign-in for all Google Accounts, marking the most significant push yet toward a passwordless future built on FIDO2 and WebAuthn.Samsung's ChatGPT Data Leak — A Wake-Up Call for Enterprise AIhttps://www.osmondvanhemert.nl/posts/230427-samsung-chatgpt-data-leak/Thu, 27 Apr 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230427-samsung-chatgpt-data-leak/Samsung employees accidentally leaked proprietary source code and meeting notes via ChatGPT, exposing the urgent need for enterprise AI usage policies.Node.js 20 Drops — Permission Model, Test Runner, and Maturityhttps://www.osmondvanhemert.nl/posts/230420-nodejs-20-release/Thu, 20 Apr 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230420-nodejs-20-release/Node.js 20 arrives with an experimental permission model, a stable test runner, and continued signs that the runtime is prioritizing security and developerAuto-GPT and the Autonomous Agent Explosion of 2023https://www.osmondvanhemert.nl/posts/230413-auto-gpt-autonomous-agents/Thu, 13 Apr 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230413-auto-gpt-autonomous-agents/Auto-GPT has taken GitHub by storm, promising fully autonomous AI agents. Here’s what’s real, what’s hype, and what it means for developers.Italy Bans ChatGPT — When Privacy Regulators Meet AIhttps://www.osmondvanhemert.nl/posts/230406-italy-chatgpt-ban-gdpr/Thu, 06 Apr 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230406-italy-chatgpt-ban-gdpr/Italy’s data protection authority blocks ChatGPT over GDPR concerns, setting a precedent for how AI services will navigate European privacy law.Italy Bans ChatGPT — When GDPR and AI Finally Collidehttps://www.osmondvanhemert.nl/posts/230330-italy-bans-chatgpt-gdpr-ai-collision/Thu, 30 Mar 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230330-italy-bans-chatgpt-gdpr-ai-collision/Italy’s data protection authority blocks ChatGPT over GDPR concerns, raising questions every company building with AI needs to answer.GitHub Copilot X — The AI-Powered Developer Experience Arriveshttps://www.osmondvanhemert.nl/posts/230323-github-copilot-x-ai-powered-developer-experience/Thu, 23 Mar 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230323-github-copilot-x-ai-powered-developer-experience/GitHub announces Copilot X with GPT-4 integration, chat, voice, pull request summaries, and docs — here’s what developers should actually expect.GPT-4 Lands — And It Raises the Bar for Every Rivalhttps://www.osmondvanhemert.nl/posts/230316-gpt4-lands-and-raises-the-bar/Thu, 16 Mar 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230316-gpt4-lands-and-raises-the-bar/OpenAI releases GPT-4 with multimodal capabilities and dramatically improved reasoning — here’s what it means for developers.The US National Cybersecurity Strategy — Liability Is Cominghttps://www.osmondvanhemert.nl/posts/230309-us-national-cybersecurity-strategy-2023/Thu, 09 Mar 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230309-us-national-cybersecurity-strategy-2023/The Biden administration’s new cybersecurity strategy shifts liability toward software vendors, and developers need to pay attention.ChatGPT API Goes Live — And the Floodgates Are Openhttps://www.osmondvanhemert.nl/posts/230302-chatgpt-api-opens-floodgates/Thu, 02 Mar 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230302-chatgpt-api-opens-floodgates/OpenAI releases the ChatGPT and Whisper APIs at a fraction of expected cost, and every developer I know is scrambling to integrate.Meta Releases LLaMA — Open-Source AI Just Got Serioushttps://www.osmondvanhemert.nl/posts/230223-meta-llama-open-source-llm/Thu, 23 Feb 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230223-meta-llama-open-source-llm/Meta’s release of LLaMA, a family of foundation language models available to researchers, could reshape the AI landscape by democratizing access to powerfulRust's Enterprise Momentum — From Systems Language to Standardhttps://www.osmondvanhemert.nl/posts/230216-rust-enterprise-adoption-momentum/Thu, 16 Feb 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230216-rust-enterprise-adoption-momentum/With Rust 1.67 freshly shipped and adoption accelerating across major tech companies, the language is crossing the threshold from promising to essential.The AI Search Wars Begin — Bing Chat vs. Google Bardhttps://www.osmondvanhemert.nl/posts/230209-ai-search-wars-bing-bard/Thu, 09 Feb 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230209-ai-search-wars-bing-bard/Microsoft and Google are racing to integrate large language models into search, and the implications go far beyond just finding web pages.ESXiArgs Ransomware — A Wake-Up Call for VMware Infrastructurehttps://www.osmondvanhemert.nl/posts/230202-esxiargs-ransomware-vmware-esxi/Thu, 02 Feb 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230202-esxiargs-ransomware-vmware-esxi/A massive ransomware campaign is exploiting a two-year-old VMware ESXi vulnerability, and the scale of unpatched systems is alarming.Microsoft's $10 Billion OpenAI Bet — What It Means for Cloud AIhttps://www.osmondvanhemert.nl/posts/230126-microsoft-openai-ten-billion-investment/Thu, 26 Jan 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230126-microsoft-openai-ten-billion-investment/Microsoft’s massive investment in OpenAI signals a fundamental shift in how cloud providers compete — and it’s not just about chatbots.Microsoft's Reported $10B OpenAI Bet — The Cloud AI Race Heats Uphttps://www.osmondvanhemert.nl/posts/230119-microsoft-openai-investment/Thu, 19 Jan 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230119-microsoft-openai-investment/Reports indicate Microsoft is investing $10 billion in OpenAI. What this mega-deal means for the cloud landscape, AI development, and the rest of the industry.The 2023 Tech Layoff Wave — What It Means for the Industryhttps://www.osmondvanhemert.nl/posts/230112-tech-layoffs-wave-2023/Thu, 12 Jan 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230112-tech-layoffs-wave-2023/Amazon, Salesforce, and others announce massive layoffs to start 2023. Looking at what’s driving this wave and what it means for software engineers.CircleCI's Security Incident — Rotate Your Secrets Nowhttps://www.osmondvanhemert.nl/posts/230105-circleci-security-incident/Thu, 05 Jan 2023 00:00:00 +0000https://www.osmondvanhemert.nl/posts/230105-circleci-security-incident/CircleCI discloses a security incident and urges all customers to immediately rotate secrets stored in the platform.ChatGPT's First Month — Why This AI Moment Feels Differenthttps://www.osmondvanhemert.nl/posts/221229-chatgpt-explosive-first-month/Thu, 29 Dec 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221229-chatgpt-explosive-first-month/One month after launch, ChatGPT has crossed a million users and sparked conversations about AI that reach far beyond the usual tech circles.LastPass Breach Goes From Bad to Catastrophic — Vaults Exposedhttps://www.osmondvanhemert.nl/posts/221222-lastpass-breach-vault-data/Thu, 22 Dec 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221222-lastpass-breach-vault-data/LastPass reveals attackers obtained copies of customer vault data, turning an already serious breach into one of the worst password manager incidents inOne Year After Log4Shell — What Actually Changed for Ushttps://www.osmondvanhemert.nl/posts/221215-log4shell-one-year-later/Thu, 15 Dec 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221215-log4shell-one-year-later/A year after Log4Shell shook the software industry, we examine what’s improved in supply chain security — and what still keeps us up at night.Kubernetes 1.26 — Electrifying the Container Platformhttps://www.osmondvanhemert.nl/posts/221208-kubernetes-126-electrifying/Thu, 08 Dec 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221208-kubernetes-126-electrifying/Kubernetes 1.26 ‘Electrifying’ arrives with significant improvements to storage, scheduling, and the ongoing effort to remove legacy code.ChatGPT Just Changed Everything — Or Did It, Really?https://www.osmondvanhemert.nl/posts/221201-chatgpt-changed-everything/Thu, 01 Dec 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221201-chatgpt-changed-everything/OpenAI’s ChatGPT launches and immediately captivates the tech world with eerily capable conversational AI — but the real implications for developers run deeperAWS re:Invent 2022 — The Cloud Gets More Opinionatedhttps://www.osmondvanhemert.nl/posts/221124-aws-reinvent-2022-cloud-opinionated/Thu, 24 Nov 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221124-aws-reinvent-2022-cloud-opinionated/AWS re:Invent 2022 kicks off with a clear message: the cloud giant is moving beyond primitives and toward opinionated, integrated solutions.Mastodon's Moment — The Fediverse Gets Its Stress Testhttps://www.osmondvanhemert.nl/posts/221117-mastodon-fediverse-stress-test/Thu, 17 Nov 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221117-mastodon-fediverse-stress-test/As millions flee Twitter for Mastodon, the decentralized social protocol ActivityPub faces its biggest real-world scalability challenge yet.GitHub Universe 2022 — Copilot for Business and the AI Futurehttps://www.osmondvanhemert.nl/posts/221110-github-universe-2022-copilot-business/Thu, 10 Nov 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221110-github-universe-2022-copilot-business/GitHub Universe 2022 puts AI front and center with Copilot for Business, while Codespaces and Actions get meaningful upgrades.OpenSSL's Critical Vulnerability — Lessons From the Responsehttps://www.osmondvanhemert.nl/posts/221103-openssl-critical-vulnerability-response/Thu, 03 Nov 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221103-openssl-critical-vulnerability-response/The OpenSSL 3.0.7 patch for CVE-2022-3602 and CVE-2022-3786 arrived this week — here’s what happened and what it teaches us about vulnerability response.Mastodon's Moment — Can Decentralized Social Scale?https://www.osmondvanhemert.nl/posts/221027-mastodon-decentralized-social-scaling/Thu, 27 Oct 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221027-mastodon-decentralized-social-scaling/As users flood to Mastodon following the Twitter acquisition, the open-source platform faces its biggest infrastructure test yet.Ubuntu 22.10 Kinetic Kudu — What Matters for Server Developershttps://www.osmondvanhemert.nl/posts/221020-ubuntu-2210-kinetic-kudu/Thu, 20 Oct 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221020-ubuntu-2210-kinetic-kudu/Ubuntu 22.10 ships with updated toolchains and GNOME 43, but the real story is what it previews for the next LTS cycle.Microsoft Ignite 2022 — Azure's Quiet Infrastructure Revolutionhttps://www.osmondvanhemert.nl/posts/221013-microsoft-ignite-2022-azure/Thu, 13 Oct 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221013-microsoft-ignite-2022-azure/Microsoft Ignite 2022 delivered a wave of Azure updates that signal where enterprise cloud infrastructure is heading next.Cloudflare R2 Goes GA — The S3-Compatible Storage War Heats Uphttps://www.osmondvanhemert.nl/posts/221006-cloudflare-r2-storage-wars/Thu, 06 Oct 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/221006-cloudflare-r2-storage-wars/Cloudflare R2’s general availability challenges AWS S3’s dominance with zero egress fees and full S3 API compatibility, reshaping the economics of cloudLinux 6.0 Lands — A Milestone That's Less About the Numberhttps://www.osmondvanhemert.nl/posts/220929-linux-kernel-6-release/Thu, 29 Sep 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220929-linux-kernel-6-release/Linux 6.0 arrives with Rust language support, performance improvements, and new hardware enablement — but the real story is what the version bump signals aboutOpenAI Whisper — Open Source Speech Recognition That Workshttps://www.osmondvanhemert.nl/posts/220922-openai-whisper-speech-recognition/Thu, 22 Sep 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220922-openai-whisper-speech-recognition/OpenAI open-sources Whisper, a speech recognition model trained on 680,000 hours of data that approaches human-level accuracy across multiple languages.The Uber Breach — When MFA Isn't Enough to Stop Attackershttps://www.osmondvanhemert.nl/posts/220915-uber-breach-social-engineering/Thu, 15 Sep 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220915-uber-breach-social-engineering/A teenager allegedly breached Uber’s internal systems through social engineering and MFA fatigue, exposing fundamental weaknesses in how we think aboutStable Diffusion Goes Open Source — And Changes Everythinghttps://www.osmondvanhemert.nl/posts/220908-stable-diffusion-open-source-ai/Thu, 08 Sep 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220908-stable-diffusion-open-source-ai/Stability AI’s open release of Stable Diffusion marks a watershed moment for generative AI, putting powerful image generation in the hands of every developer.Heroku Kills the Free Tier — End of an Era for Developershttps://www.osmondvanhemert.nl/posts/220901-heroku-ending-free-tier/Thu, 01 Sep 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220901-heroku-ending-free-tier/Heroku’s decision to eliminate free dynos and databases marks the end of an era. Where do developers go now for easy, free deployment?Stable Diffusion Goes Public — Open Source AI Image Generationhttps://www.osmondvanhemert.nl/posts/220825-stable-diffusion-open-source-ai-art/Thu, 25 Aug 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220825-stable-diffusion-open-source-ai-art/Stability AI releases Stable Diffusion as open source, putting state-of-the-art image generation in the hands of anyone with a GPU.Google's Carbon Language — A Successor to C++, or an Experiment?https://www.osmondvanhemert.nl/posts/220818-google-carbon-language/Thu, 18 Aug 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220818-google-carbon-language/Google announced Carbon as an experimental successor to C++. After the initial hype settles, what does this mean for the systems programming landscape?Rust 1.63 Stabilizes Scoped Threads — Safer Concurrency Arriveshttps://www.osmondvanhemert.nl/posts/220811-rust-163-scoped-threads/Thu, 11 Aug 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220811-rust-163-scoped-threads/Rust 1.63 brings scoped threads to stable, finally making it ergonomic to share stack references across threads without Arc or cloning.Twilio's Phishing Breach — Why SMS-Based 2FA Is Losing Groundhttps://www.osmondvanhemert.nl/posts/220804-twilio-phishing-breach/Thu, 04 Aug 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220804-twilio-phishing-breach/Twilio’s breach through a sophisticated phishing attack targeting employees raises hard questions about SMS-based authentication and supply chain trust.Bun Enters the Ring — A New JavaScript Runtime Challenges Nodehttps://www.osmondvanhemert.nl/posts/220728-bun-javascript-runtime-shakes-up-ecosystem/Thu, 28 Jul 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220728-bun-javascript-runtime-shakes-up-ecosystem/Bun, a new JavaScript runtime built on JavaScriptCore and written in Zig, is making waves with extraordinary benchmark numbers.Python 3.11 Beta — The Fastest CPython Release Yethttps://www.osmondvanhemert.nl/posts/220721-python-311-performance-leap/Thu, 21 Jul 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220721-python-311-performance-leap/Python 3.11 is in beta with impressive performance improvements. The Faster CPython project is delivering real results, with benchmarks showing 10-60% speedups.Webb's First Light — The Data Infrastructure Behind JWST's Imageshttps://www.osmondvanhemert.nl/posts/220714-jwst-first-images-data-infrastructure/Thu, 14 Jul 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220714-jwst-first-images-data-infrastructure/The James Webb Space Telescope released its first full-color images this week. Behind the breathtaking photos is a remarkable data pipeline worth examining.26 Million Requests Per Second — Cloudflare and the Mantis Botnethttps://www.osmondvanhemert.nl/posts/220707-cloudflare-mantis-record-ddos/Thu, 07 Jul 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220707-cloudflare-mantis-record-ddos/Cloudflare mitigated the largest HTTPS DDoS attack ever recorded at 26 million requests per second.GitHub Copilot GA — Pricing and Licensing Questionshttps://www.osmondvanhemert.nl/posts/220630-github-copilot-goes-ga/Thu, 30 Jun 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220630-github-copilot-goes-ga/GitHub Copilot’s 2022 GA pricing raises a buying decision: who qualifies for free access, what does $10 buy, and how should teams review code-license risk?GitHub Copilot GA — What a Year of Use Revealedhttps://www.osmondvanhemert.nl/posts/220623-github-copilot-goes-ga/Thu, 23 Jun 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220623-github-copilot-goes-ga/A year of GitHub Copilot preview use reveals where AI code completion helps—and where bugs, insecure suggestions, and over-reliance demand review.Internet Explorer Is Finally Dead — 27 Years of Web Historyhttps://www.osmondvanhemert.nl/posts/220616-internet-explorer-retirement/Thu, 16 Jun 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220616-internet-explorer-retirement/Microsoft officially retired Internet Explorer on June 15, 2022, ending a 27-year era that shaped — and sometimes hindered — web development.TypeScript 4.7 Finally Tackles Node.js ES Modules Supporthttps://www.osmondvanhemert.nl/posts/220609-typescript-47-esm-support/Thu, 09 Jun 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220609-typescript-47-esm-support/TypeScript 4.7 ships with proper ES module support for Node.js, resolving one of the ecosystem’s most painful interoperability headaches.Follina — The Zero-Day That Turns a Word Doc Into a Weaponhttps://www.osmondvanhemert.nl/posts/220602-follina-zero-day-msdt/Thu, 02 Jun 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220602-follina-zero-day-msdt/CVE-2022-30190, dubbed Follina, exploits Microsoft’s diagnostic tool through Office documents — no macros required.Broadcom's $61 Billion VMware Bet — What It Means for the Cloudhttps://www.osmondvanhemert.nl/posts/220526-broadcom-vmware-acquisition/Thu, 26 May 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220526-broadcom-vmware-acquisition/Broadcom’s proposed $61B acquisition of VMware could reshape the enterprise cloud and virtualization landscape for years to come..NET MAUI Goes GA — Microsoft's Cross-Platform Bet Materializeshttps://www.osmondvanhemert.nl/posts/220519-dotnet-maui-ga-cross-platform/Thu, 19 May 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220519-dotnet-maui-ga-cross-platform/.NET MAUI reaches general availability, replacing Xamarin.Forms as Microsoft’s unified cross-platform UI framework.Google I/O 2022 — AI Gets Practical, and That's What Mattershttps://www.osmondvanhemert.nl/posts/220512-google-io-2022-ai-practical-advances/Thu, 12 May 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220512-google-io-2022-ai-practical-advances/Google I/O 2022 showcases AI advances that are moving beyond demos into developer-accessible tools and practical applications.Kubernetes 1.24 Drops Dockershim — The End of an Erahttps://www.osmondvanhemert.nl/posts/220505-kubernetes-124-dockershim-removal/Thu, 05 May 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220505-kubernetes-124-dockershim-removal/Kubernetes 1.24 finally removes Dockershim, completing the long-telegraphed divorce from Docker as a container runtime.PyCon US 2022 — Python's Momentum Shows No Signs of Slowinghttps://www.osmondvanhemert.nl/posts/220428-pycon-us-2022-python-momentum/Thu, 28 Apr 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220428-pycon-us-2022-python-momentum/PyCon US 2022 kicks off in Salt Lake City with Python riding high as the world’s most popular programming language.Heroku's Security Breach — A Wake-Up Call for Platform Trusthttps://www.osmondvanhemert.nl/posts/220421-heroku-security-breach-supply-chain/Thu, 21 Apr 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220421-heroku-security-breach-supply-chain/Heroku’s OAuth token breach exposes the fragile trust chain in platform-as-a-service dependencies and what it means for developers.Python 3.11 Is Shaping Up to Be a Seriously Fast Releasehttps://www.osmondvanhemert.nl/posts/220414-python-311-faster-cpython/Thu, 14 Apr 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220414-python-311-faster-cpython/The Python 3.11 alpha releases show 10-60% speedups across benchmarks, driven by the Faster CPython project — and this is just the beginning.DALL-E 2 and the New Frontier of AI Image Generationhttps://www.osmondvanhemert.nl/posts/220407-dall-e-2-ai-image-generation/Thu, 07 Apr 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220407-dall-e-2-ai-image-generation/OpenAI’s DALL-E 2 produces photorealistic images from text descriptions with stunning accuracy, signaling a paradigm shift in how we think about creative AI.Spring4Shell Is Here — Assessing the Real Risk of CVE-2022-22965https://www.osmondvanhemert.nl/posts/220331-spring4shell-cve-2022-22965/Thu, 31 Mar 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220331-spring4shell-cve-2022-22965/A critical RCE vulnerability in Spring Framework has the internet in panic mode, but the actual risk profile is more nuanced than the Log4Shell comparisonsLapsus$ Breaches Okta and Microsoft — An Identity Nightmarehttps://www.osmondvanhemert.nl/posts/220324-lapsus-group-okta-microsoft-breach/Thu, 24 Mar 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220324-lapsus-group-okta-microsoft-breach/The Lapsus$ hacking group has breached both Okta and Microsoft, exposing critical weaknesses in identity provider security and third-party access management.The node-ipc Protestware Incident — Open Source as a Weaponhttps://www.osmondvanhemert.nl/posts/220317-node-ipc-protestware-supply-chain/Thu, 17 Mar 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220317-node-ipc-protestware-supply-chain/A popular npm package was deliberately sabotaged by its own maintainer, raising urgent questions about supply chain trust in open source.Rust in the Linux Kernel — From Experiment to Inevitabilityhttps://www.osmondvanhemert.nl/posts/220310-rust-linux-kernel-progress/Thu, 10 Mar 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220310-rust-linux-kernel-progress/The Rust for Linux project continues gaining momentum with updated patch series and growing support from kernel maintainers.TypeScript 4.6 Drops — Smarter Type Narrowing and Real-World Winshttps://www.osmondvanhemert.nl/posts/220303-typescript-4-6-release/Thu, 03 Mar 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220303-typescript-4-6-release/TypeScript 4.6 brings improved control flow analysis, better type narrowing for destructured discriminated unions, and performance improvements that matter forHermeticWiper and the New Reality of Cyber Warfarehttps://www.osmondvanhemert.nl/posts/220224-hermeticwiper-ukraine-cyber-warfare/Thu, 24 Feb 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220224-hermeticwiper-ukraine-cyber-warfare/As conflict erupts in Ukraine, destructive wiper malware targeting critical infrastructure signals a new chapter in state-sponsored cyber operations.Alpha-Omega Project — The Linux Foundation Gets Serious About OSShttps://www.osmondvanhemert.nl/posts/220217-alpha-omega-open-source-security/Thu, 17 Feb 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220217-alpha-omega-open-source-security/The Linux Foundation’s new Alpha-Omega Project, backed by Google and Microsoft, aims to systematically improve the security of critical open source software.NVIDIA-ARM Deal Collapses — What It Means for the Chip Industryhttps://www.osmondvanhemert.nl/posts/220210-nvidia-arm-deal-collapse/Thu, 10 Feb 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220210-nvidia-arm-deal-collapse/NVIDIA’s $40 billion bid for ARM has officially fallen apart under regulatory pressure, and the implications for the semiconductor landscape are enormous.DeepMind's AlphaCode — When AI Enters the Coding Competitionhttps://www.osmondvanhemert.nl/posts/220203-deepmind-alphacode-ai-programming/Thu, 03 Feb 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220203-deepmind-alphacode-ai-programming/DeepMind’s AlphaCode system achieves competitive-level performance in programming contests, raising questions about what AI can and can’t do in softwareTerraform 1.1 and the Steadily Maturing IaC Landscapehttps://www.osmondvanhemert.nl/posts/220127-terraform-1-1-iac-maturity/Thu, 27 Jan 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220127-terraform-1-1-iac-maturity/Terraform 1.1 brings refactoring support and moved/imported blocks, signaling that Infrastructure as Code tooling is growing up.Faster CPython — The Ambitious Plan to Double Python's Speedhttps://www.osmondvanhemert.nl/posts/220120-faster-cpython-311-performance/Thu, 20 Jan 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220120-faster-cpython-311-performance/The Faster CPython project, backed by Microsoft and led by Guido van Rossum, is shipping real performance gains in Python 3.11 alpha.The White House Open Source Summit — When Log4j Gets Politicalhttps://www.osmondvanhemert.nl/posts/220113-white-house-open-source-security-summit/Thu, 13 Jan 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220113-white-house-open-source-security-summit/The White House convened tech leaders to address open source security after Log4Shell. Here’s what was discussed and what it means for developers.When Maintainers Burn It Down — The faker.js and colors.js Sagahttps://www.osmondvanhemert.nl/posts/220106-faker-colors-open-source-sabotage/Thu, 06 Jan 2022 00:00:00 +0000https://www.osmondvanhemert.nl/posts/220106-faker-colors-open-source-sabotage/A single developer deliberately corrupted two widely-used npm packages, exposing the fragility of the open source supply chain.Node.js in 2021 — A Year of Quiet, Steady Maturationhttps://www.osmondvanhemert.nl/posts/211230-nodejs-2021-year-in-review/Thu, 30 Dec 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211230-nodejs-2021-year-in-review/Node.js had a year of steady progress in 2021: Node 16 went LTS, the test runner landed, and the ecosystem continued its TypeScript migration.Six Months with GitHub Copilot — An Honest Assessmenthttps://www.osmondvanhemert.nl/posts/211223-six-months-with-github-copilot/Thu, 23 Dec 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211223-six-months-with-github-copilot/After six months in the GitHub Copilot technical preview, here’s what AI pair programming actually looks like in day-to-day development work.After Log4Shell — Software Supply Chain Security Can't Waithttps://www.osmondvanhemert.nl/posts/211216-software-supply-chain-security-after-log4j/Thu, 16 Dec 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211216-software-supply-chain-security-after-log4j/A week after Log4Shell, the patching chaos continues. But the bigger lesson is about software supply chain security and why we need SBOMs now.Log4Shell — The Zero-Day That Broke the Internet's Weekendhttps://www.osmondvanhemert.nl/posts/211209-log4shell-zero-day/Thu, 09 Dec 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211209-log4shell-zero-day/A critical remote code execution vulnerability in Apache Log4j has sent the entire industry scrambling. Here’s what you need to know and do right now.AWS re:Invent 2021 — The Cloud Just Got More Opinionatedhttps://www.osmondvanhemert.nl/posts/211202-aws-reinvent-2021-cloud-abstractions/Thu, 02 Dec 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211202-aws-reinvent-2021-cloud-abstractions/AWS re:Invent 2021 delivered a clear message: the cloud is moving toward higher-level abstractions, and developers should pay attention.AWS re:Invent 2021 — Serverless and the Cloud Keep Evolvinghttps://www.osmondvanhemert.nl/posts/211125-aws-reinvent-2021-serverless-evolution/Thu, 25 Nov 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211125-aws-reinvent-2021-serverless-evolution/AWS re:Invent 2021 is underway in Las Vegas, and the announcements already hint at where cloud infrastructure is headed next.CentOS Stream 9 Lands — The Enterprise Linux Landscape Shiftshttps://www.osmondvanhemert.nl/posts/211118-centos-stream-9-enterprise-linux-shift/Thu, 18 Nov 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211118-centos-stream-9-enterprise-linux-shift/CentOS Stream 9 has arrived as the successor to both CentOS 8 and the traditional CentOS model — and the enterprise Linux community is still adapting.npm Supply Chain Under Siege — The coa and rc Package Compromiseshttps://www.osmondvanhemert.nl/posts/211111-npm-coa-rc-supply-chain-attacks/Thu, 11 Nov 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211111-npm-coa-rc-supply-chain-attacks/Popular npm packages coa and rc were hijacked to distribute malware, impacting thousands of projects and raising urgent questions about supply chain security..NET 6 Arrives — The Unified Platform Microsoft Promisedhttps://www.osmondvanhemert.nl/posts/211104-dotnet6-release-unified-platform/Thu, 04 Nov 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211104-dotnet6-release-unified-platform/With .NET 6 approaching release at .NET Conf, Microsoft finally delivers on its promise of a single unified platform — and it’s genuinely impressive.Facebook Becomes Meta — What the Rebrand Means for Engineeringhttps://www.osmondvanhemert.nl/posts/211028-facebook-rebrands-to-meta/Thu, 28 Oct 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211028-facebook-rebrands-to-meta/Facebook’s rebrand to Meta signals a massive infrastructure bet on the metaverse — here’s what it means for developers and platform engineers.ua-parser-js Compromised — Supply Chain Attacks Hit npm Againhttps://www.osmondvanhemert.nl/posts/211021-ua-parser-js-npm-supply-chain-attack/Thu, 21 Oct 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211021-ua-parser-js-npm-supply-chain-attack/The popular ua-parser-js npm package was hijacked to deliver cryptominers and credential stealers, affecting millions of weekly downloads.GitLab Goes Public — What an IPO Means for Open Sourcehttps://www.osmondvanhemert.nl/posts/211014-gitlab-ipo-open-source-business/Thu, 14 Oct 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211014-gitlab-ipo-open-source-business/GitLab’s successful IPO this week validates the open-core model and raises important questions about the future of open-source developer tooling.Windows 11 Arrives — What Developers Actually Need to Knowhttps://www.osmondvanhemert.nl/posts/211007-windows-11-developer-perspective/Thu, 07 Oct 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/211007-windows-11-developer-perspective/Windows 11 launched this week with WSL improvements, a new Microsoft Store, and Android app support coming soon. Here’s what matters for developers.The Facebook Outage — When BGP Goes Wrong, Everything Goes Darkhttps://www.osmondvanhemert.nl/posts/210930-facebook-bgp-outage-internet-fragility/Thu, 30 Sep 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210930-facebook-bgp-outage-internet-fragility/Facebook, WhatsApp, and Instagram went down for six hours due to a BGP misconfiguration, exposing how fragile the internet’s routing infrastructure really is.OWASP Top 10 2021 — The Security Landscape Has Shiftedhttps://www.osmondvanhemert.nl/posts/210923-owasp-top-10-2021-update/Thu, 23 Sep 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210923-owasp-top-10-2021-update/The OWASP Top 10 gets its first update since 2017, and the changes reflect how fundamentally our attack surface has evolved.OMIGOD — When Your Cloud Provider Installs Vulnerable Agentshttps://www.osmondvanhemert.nl/posts/210916-azure-omigod-vulnerability-cloud-agents/Thu, 16 Sep 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210916-azure-omigod-vulnerability-cloud-agents/The OMIGOD vulnerabilities in Azure’s silently-installed OMI agent expose a troubling pattern: cloud providers deploying software on your VMs without yourApple vs. Epic Games Ruling — What It Means for Developershttps://www.osmondvanhemert.nl/posts/210909-apple-epic-ruling-developer-impact/Thu, 09 Sep 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210909-apple-epic-ruling-developer-impact/The landmark Apple vs. Epic Games ruling is more nuanced than the headlines suggest — here’s what the injunction actually changes for app developers.Confluence Under Siege — CVE-2021-26084 and Self-Hosted Riskhttps://www.osmondvanhemert.nl/posts/210902-confluence-rce-cve-2021-26084/Thu, 02 Sep 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210902-confluence-rce-cve-2021-26084/The critical Confluence Server RCE vulnerability is being actively exploited in the wild, raising urgent questions about the sustainability of self-hostedPython 3.10 RC1 — Structural Pattern Matching Changes Everythinghttps://www.osmondvanhemert.nl/posts/210826-python-310-structural-pattern-matching/Thu, 26 Aug 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210826-python-310-structural-pattern-matching/Python 3.10’s first release candidate introduces structural pattern matching — the most significant syntax addition since async/await, and it’s worthT-Mobile's Massive Data Breach — A Wake-Up Call for API Securityhttps://www.osmondvanhemert.nl/posts/210819-tmobile-data-breach-api-security/Thu, 19 Aug 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210819-tmobile-data-breach-api-security/The T-Mobile breach exposing 40+ million records highlights systemic failures in API security and data protection that the entire industry needs to address.GitHub Copilot and the Open Source Licensing Firestormhttps://www.osmondvanhemert.nl/posts/210812-github-copilot-open-source-debate/Thu, 12 Aug 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210812-github-copilot-open-source-debate/GitHub Copilot’s AI-powered code suggestions have sparked a fierce debate about open source licensing, training data consent, and the future of code ownership.Kubernetes 1.22 — Removing the Last Training Wheelshttps://www.osmondvanhemert.nl/posts/210805-kubernetes-1-22-release/Thu, 05 Aug 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210805-kubernetes-1-22-release/Kubernetes 1.22 drops several long-deprecated beta APIs and graduates key features to stable — a sign the project is maturing and cleaning house.Windows 365 Cloud PC — Microsoft's Desktop-as-a-Service Bethttps://www.osmondvanhemert.nl/posts/210729-windows-365-cloud-pc-future/Thu, 29 Jul 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210729-windows-365-cloud-pc-future/Microsoft announces Windows 365, a full Cloud PC experience — and it might reshape how we think about developer workstations and enterprise IT.AlphaFold's Protein Database — When AI Delivers on the Hypehttps://www.osmondvanhemert.nl/posts/210722-alphafold-protein-database-ai-science/Thu, 22 Jul 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210722-alphafold-protein-database-ai-science/DeepMind releases 350,000 protein structure predictions as an open database — a rare moment where AI genuinely accelerates scientific progress.Pegasus Spyware — Zero-Click Exploits and What They Meanhttps://www.osmondvanhemert.nl/posts/210715-pegasus-spyware-zero-click-exploits/Thu, 15 Jul 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210715-pegasus-spyware-zero-click-exploits/The Pegasus Project revelations expose industrial-grade zero-click exploits targeting journalists and activists — and raise uncomfortable questions aboutKaseya VSA Attack — Supply Chain Ransomware Goes Nuclearhttps://www.osmondvanhemert.nl/posts/210708-kaseya-vsa-supply-chain-ransomware/Thu, 08 Jul 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210708-kaseya-vsa-supply-chain-ransomware/The REvil ransomware group exploited Kaseya’s VSA platform to hit over 1,500 businesses simultaneously. This is what supply chain attacks look like at scale.Terraform 1.0 — Infrastructure as Code Reaches a Milestonehttps://www.osmondvanhemert.nl/posts/210701-terraform-1-0-infrastructure-as-code-milestone/Thu, 01 Jul 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210701-terraform-1-0-infrastructure-as-code-milestone/After years of 0.x releases, Terraform hits 1.0 with stability guarantees. What this means for the IaC ecosystem and your existing workflows.GitHub Copilot — AI Pair Programming Arrives, For Better or Worsehttps://www.osmondvanhemert.nl/posts/210624-github-copilot-ai-pair-programming/Thu, 24 Jun 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210624-github-copilot-ai-pair-programming/GitHub’s Copilot uses OpenAI Codex to autocomplete entire functions. After a week with the technical preview, here’s what developers need to understand.Python 3.10 Beta — Structural Pattern Matching Changes Everythinghttps://www.osmondvanhemert.nl/posts/210617-python-310-structural-pattern-matching/Thu, 17 Jun 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210617-python-310-structural-pattern-matching/Python 3.10’s structural pattern matching is the most significant syntax addition since f-strings. Here’s why it matters and where it shines.The Fastly Outage — A Masterclass in Single Points of Failurehttps://www.osmondvanhemert.nl/posts/210610-fastly-cdn-outage-single-points-failure/Thu, 10 Jun 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210610-fastly-cdn-outage-single-points-failure/When a single configuration change at Fastly took down half the internet, it exposed uncomfortable truths about how we build on CDN infrastructure.GitOps Goes Mainstream — ArgoCD, Flux, and the CNCF Bethttps://www.osmondvanhemert.nl/posts/210603-gitops-argocd-cncf-incubation/Thu, 03 Jun 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210603-gitops-argocd-cncf-incubation/With ArgoCD accepted into CNCF incubation and Flux reaching its own milestones, GitOps is transitioning from buzzword to standard practice for KubernetesMicrosoft Build 2021 — The Developer Platform Play Deepenshttps://www.osmondvanhemert.nl/posts/210527-microsoft-build-2021-developer-platform/Thu, 27 May 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210527-microsoft-build-2021-developer-platform/Microsoft Build 2021 doubled down on the developer platform strategy with Azure improvements, deeper GitHub integration, and a clearer vision for theGoogle I/O 2021 — AI Gets Practical, and That's What Mattershttps://www.osmondvanhemert.nl/posts/210520-google-io-2021-ai-ml-advances/Thu, 20 May 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210520-google-io-2021-ai-ml-advances/Google I/O 2021 showcased AI advances that prioritize practical developer tooling over flashy demos — a shift that signals real maturity in the field.Python 3.10 Beta 1 — Structural Pattern Matching Arriveshttps://www.osmondvanhemert.nl/posts/210513-python-310-structural-pattern-matching/Thu, 13 May 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210513-python-310-structural-pattern-matching/Python 3.10’s first beta introduces structural pattern matching — the most significant syntax addition since async/await, and it’s worth understanding deeply.Colonial Pipeline Ransomware — Cybersecurity Meets Infrastructurehttps://www.osmondvanhemert.nl/posts/210506-colonial-pipeline-ransomware/Thu, 06 May 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210506-colonial-pipeline-ransomware/The Colonial Pipeline ransomware attack exposes how deeply intertwined our digital infrastructure has become with physical systems we take for granted.Node.js 16 — Apple Silicon, V8 9.0, and the Timers Promise APIhttps://www.osmondvanhemert.nl/posts/210429-nodejs-16-release/Thu, 29 Apr 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210429-nodejs-16-release/Node.js 16 arrives with native Apple Silicon binaries, V8 9.0 bringing new JavaScript features, and the stabilization of the Timers Promises API that cleans upThe EU AI Act — What the First Major AI Regulation Meanshttps://www.osmondvanhemert.nl/posts/210422-eu-ai-act-proposal/Thu, 22 Apr 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210422-eu-ai-act-proposal/The European Commission has proposed the AI Act, the world’s first comprehensive regulatory framework for artificial intelligence.The Codecov Breach — When Your CI Pipeline Becomes the Targethttps://www.osmondvanhemert.nl/posts/210415-codecov-supply-chain-attack/Thu, 15 Apr 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210415-codecov-supply-chain-attack/Codecov’s compromised Bash Uploader script exposed CI/CD secrets for thousands of organizations, highlighting a systemic weakness in how we trust third-partyKubernetes 1.21 — Immutable Secrets and the March Toward Maturityhttps://www.osmondvanhemert.nl/posts/210408-kubernetes-1-21-release/Thu, 08 Apr 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210408-kubernetes-1-21-release/Kubernetes 1.21 lands with immutable Secrets and ConfigMaps going stable, CronJobs promoted to GA, and signals that the platform is maturing past its explosivePHP's Git Server Breach — A Supply Chain Wake-Up Callhttps://www.osmondvanhemert.nl/posts/210401-php-git-server-compromise/Thu, 01 Apr 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210401-php-git-server-compromise/Attackers pushed malicious commits to PHP’s official Git repository, exposing the fragile trust model behind open-source supply chains.AWS Forks Elasticsearch — The OpenSearch Announcement Explainedhttps://www.osmondvanhemert.nl/posts/210325-aws-opensearch-elasticsearch-fork/Thu, 25 Mar 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210325-aws-opensearch-elasticsearch-fork/Amazon announces OpenSearch, a fork of Elasticsearch, escalating the most consequential open source licensing battle in years.NVIDIA GTC 2021 — GPUs, Grace, and the AI Infrastructure Racehttps://www.osmondvanhemert.nl/posts/210318-nvidia-gtc-2021-grace-cpu/Thu, 18 Mar 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210318-nvidia-gtc-2021-grace-cpu/NVIDIA’s GTC keynote reveals new hardware and software ambitions that signal where AI infrastructure is heading — and what developers should pay attention to.OVHcloud Strasbourg Fire — When 'The Cloud' Literally Burns Downhttps://www.osmondvanhemert.nl/posts/210311-ovhcloud-datacenter-fire/Thu, 11 Mar 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210311-ovhcloud-datacenter-fire/A catastrophic fire at OVHcloud’s Strasbourg datacenter destroys thousands of servers and raises hard questions about cloud resilience and backup strategies.Hafnium and the Microsoft Exchange Zero-Days Unfoldhttps://www.osmondvanhemert.nl/posts/210304-microsoft-exchange-hafnium-zero-day/Thu, 04 Mar 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210304-microsoft-exchange-hafnium-zero-day/Four zero-day vulnerabilities in Microsoft Exchange Server are being actively exploited at scale, and the fallout is only beginning.Python 3.9.2 and 3.8.8 — Security Patches, Maturing Ecosystemhttps://www.osmondvanhemert.nl/posts/210225-python-392-security-release/Thu, 25 Feb 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210225-python-392-security-release/Python’s latest security releases fix critical vulnerabilities and highlight the increasingly professional security posture of the Python ecosystem.When the Grid Goes Down — Cloud Resilience Lessons From Texashttps://www.osmondvanhemert.nl/posts/210218-texas-grid-cloud-resilience/Thu, 18 Feb 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210218-texas-grid-cloud-resilience/The Texas power grid failure is knocking out data centers and cloud services, offering hard lessons about infrastructure resilience, multi-region architectureSolarWinds Three Months Later — Rethinking Supply Chain Securityhttps://www.osmondvanhemert.nl/posts/210211-solarwinds-supply-chain-security/Thu, 11 Feb 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210211-solarwinds-supply-chain-security/Three months after the SolarWinds breach disclosure, the full scope is still unfolding and the implications for software supply chain security demandThe Rust Foundation Is Here — What It Means for Rust's Futurehttps://www.osmondvanhemert.nl/posts/210204-rust-foundation-systems-programming/Thu, 04 Feb 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210204-rust-foundation-systems-programming/The newly formed Rust Foundation, backed by AWS, Google, Huawei, Microsoft, and Mozilla, gives Rust the institutional stability it needs for the next phase ofThe Global Chip Shortage — Why Semiconductors Are the Bottleneckhttps://www.osmondvanhemert.nl/posts/210128-global-chip-shortage-bottleneck/Thu, 28 Jan 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210128-global-chip-shortage-bottleneck/The growing semiconductor shortage is disrupting everything from automotive to IoT devices, exposing fragile supply chains that the entire tech industrySignal's Explosive Growth — What WhatsApp's Privacy Slip Meanshttps://www.osmondvanhemert.nl/posts/210121-signal-surge-whatsapp-privacy/Thu, 21 Jan 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210121-signal-surge-whatsapp-privacy/WhatsApp’s updated privacy policy drives millions to Signal, highlighting the growing demand for privacy-respecting open-source alternatives.Elasticsearch Changes Its License — Open Source vs. Cloud Battlehttps://www.osmondvanhemert.nl/posts/210114-elasticsearch-license-change/Thu, 14 Jan 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210114-elasticsearch-license-change/Elastic’s decision to move Elasticsearch and Kibana from Apache 2.0 to dual SSPL/Elastic License reignites the debate about open source sustainability in theReact Server Components — A Paradigm Shift or Just Hype?https://www.osmondvanhemert.nl/posts/210107-react-server-components/Thu, 07 Jan 2021 00:00:00 +0000https://www.osmondvanhemert.nl/posts/210107-react-server-components/The React team’s introduction of Server Components promises zero-bundle-size components and direct backend access — but is it the right direction for frontendFlash Is Finally Dead — A Technology That Shaped the Webhttps://www.osmondvanhemert.nl/posts/201231-flash-end-of-life/Thu, 31 Dec 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201231-flash-end-of-life/As Adobe Flash reaches its official end of life on December 31, 2020, it’s worth reflecting on what it gave us and the lessons its rise and fall teach aboutCentOS Is Dead, Long Live CentOS Stream — What's Next?https://www.osmondvanhemert.nl/posts/201224-centos-stream-shift/Thu, 24 Dec 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201224-centos-stream-shift/Red Hat’s decision to shift CentOS from a stable downstream rebuild to a rolling upstream preview has sent shockwaves through the server community.SolarWinds Hack — Why Supply Chain Attacks Should Terrify Youhttps://www.osmondvanhemert.nl/posts/201217-solarwinds-supply-chain-attack/Thu, 17 Dec 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201217-solarwinds-supply-chain-attack/The SolarWinds supply chain attack is a watershed moment for software security — and it has profound implications for how we build, ship, and trust code.FireEye Breach — When the Red Team Gets Red-Teamedhttps://www.osmondvanhemert.nl/posts/201210-fireeye-breach-red-team-tools/Thu, 10 Dec 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201210-fireeye-breach-red-team-tools/FireEye discloses that sophisticated attackers stole their red team tools.Salesforce Buys Slack — What It Means for Developer Toolinghttps://www.osmondvanhemert.nl/posts/201203-salesforce-acquires-slack/Thu, 03 Dec 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201203-salesforce-acquires-slack/Salesforce’s $27.7 billion acquisition of Slack signals a consolidation wave in enterprise software. Developers should pay attention.AlphaFold 2 — DeepMind Cracks the Protein Folding Problemhttps://www.osmondvanhemert.nl/posts/201126-alphafold2-protein-folding-breakthrough/Thu, 26 Nov 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201126-alphafold2-protein-folding-breakthrough/DeepMind’s AlphaFold 2 achieves near-experimental accuracy in protein structure prediction at CASP14. This is what AI breakthroughs actually look like.TypeScript 4.1 — Template Literal Types and Type Safetyhttps://www.osmondvanhemert.nl/posts/201119-typescript-4-1-template-literal-types/Thu, 19 Nov 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201119-typescript-4-1-template-literal-types/TypeScript 4.1 ships template literal types, key remapping, and recursive conditional types - pushing the boundaries of what a type system can express.Apple M1 — What ARM-Based Macs Mean for Developershttps://www.osmondvanhemert.nl/posts/201112-apple-m1-developer-impact/Thu, 12 Nov 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201112-apple-m1-developer-impact/Apple just shipped their first ARM-based Mac chips. The M1 looks impressive on paper, but what does this transition actually mean for developers?GPT-3 at Scale — What the Developer Ecosystem Tells Us About AIhttps://www.osmondvanhemert.nl/posts/201105-gpt3-developer-ecosystem/Thu, 05 Nov 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201105-gpt3-developer-ecosystem/OpenAI’s GPT-3 API is spawning a wave of developer tools and startups.Docker Hub Rate Limits Are Coming — Your CI Pipeline Might Breakhttps://www.osmondvanhemert.nl/posts/201029-docker-hub-rate-limiting/Thu, 29 Oct 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201029-docker-hub-rate-limiting/Docker Hub’s new rate limits take effect November 1st. If you haven’t prepared your build pipelines, you’re about to find out the hard way.NSA and CISA Sound the Alarm on Known Vulnerabilitieshttps://www.osmondvanhemert.nl/posts/201022-nsa-cisa-china-advisory/Thu, 22 Oct 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201022-nsa-cisa-china-advisory/A joint NSA/CISA advisory details 25 CVEs actively exploited by Chinese state-sponsored actors. The uncomfortable truth: most are well-known and patchable.HashiCorp Launches Waypoint and Boundary — Closing the DX Gaphttps://www.osmondvanhemert.nl/posts/201015-hashicorp-waypoint-boundary/Thu, 15 Oct 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201015-hashicorp-waypoint-boundary/HashiCorp announced two new open-source tools at HashiConf Digital — Waypoint for application deployment and Boundary for secure remote access.Python 3.9 Is Here — And It's More Than Just Dictionary Merginghttps://www.osmondvanhemert.nl/posts/201008-python39-release/Thu, 08 Oct 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201008-python39-release/Python 3.9 dropped this week with new parser, dict merge operators, and type hinting improvements — here’s what actually matters for production code.Python 3.9 — Dictionary Unions, Type Hints, and Steady Progresshttps://www.osmondvanhemert.nl/posts/201001-python-39-new-features/Thu, 01 Oct 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/201001-python-39-new-features/Python 3.9 arrives with dictionary merge operators, relaxed type hint syntax, and a new parser that sets the stage for the language’s future.Vue.js 3.0 'One Piece' — A Complete Rewrite Worth the Waithttps://www.osmondvanhemert.nl/posts/200924-vuejs-3-one-piece-rewrite/Thu, 24 Sep 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200924-vuejs-3-one-piece-rewrite/Vue.js 3.0 ships after two years of development with a TypeScript rewrite, Composition API, and significant performance improvements.GitHub CLI 1.0 — The Terminal-First Workflow Gets Officialhttps://www.osmondvanhemert.nl/posts/200917-github-cli-1-developer-workflow/Thu, 17 Sep 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200917-github-cli-1-developer-workflow/GitHub CLI 1.0 is here, bringing pull requests, issues, and repo management to the terminal. A look at what it means for developer workflows.Zerologon — A 10-Out-of-10 Vulnerability That Should Terrifyhttps://www.osmondvanhemert.nl/posts/200910-zerologon-cve-2020-1472/Thu, 10 Sep 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200910-zerologon-cve-2020-1472/CVE-2020-1472, dubbed Zerologon, scores a perfect 10.0 CVSS and allows full domain takeover with a handful of packets. Here’s what you need to know.Kubernetes 1.19 — The Extensibility Release That Quietly Mattershttps://www.osmondvanhemert.nl/posts/200903-kubernetes-119-extensibility/Thu, 03 Sep 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200903-kubernetes-119-extensibility/Kubernetes 1.19 lands with extended support windows, Ingress API improvements, and a clear signal that the platform is maturing fast.Kubernetes 1.19 — Stability Finally Takes Center Stagehttps://www.osmondvanhemert.nl/posts/200827-kubernetes-1-19-release/Thu, 27 Aug 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200827-kubernetes-1-19-release/Kubernetes 1.19 arrives with the longest support window yet and a focus on stability features.TypeScript 4.0 — A Milestone Release Worth Celebratinghttps://www.osmondvanhemert.nl/posts/200820-typescript-4-release/Thu, 20 Aug 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200820-typescript-4-release/TypeScript 4.0 is here with variadic tuple types, labeled tuples, and smarter inference. It’s a major version that earns its number.Epic vs. Apple — What the Fortnite Fight Means for Developershttps://www.osmondvanhemert.nl/posts/200813-epic-vs-apple-developer-impact/Thu, 13 Aug 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200813-epic-vs-apple-developer-impact/Epic Games just declared war on Apple’s App Store policies. The implications for the developer ecosystem extend far beyond gaming.Linux 5.8 — Linus Calls It One of the Biggest Releases Everhttps://www.osmondvanhemert.nl/posts/200806-linux-kernel-5-8-release/Thu, 06 Aug 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200806-linux-kernel-5-8-release/Linux 5.8 lands with a massive changeset. Linus Torvalds himself says it’s one of the biggest releases of all time — here’s what developers should care about.GPT-3 — The New API That Has Every Developer Talkinghttps://www.osmondvanhemert.nl/posts/200730-gpt3-api-first-look/Thu, 30 Jul 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200730-gpt3-api-first-look/OpenAI’s GPT-3 API is generating jaw-dropping demos across the developer community. Here’s what it means for the rest of us.GPT-3 API Access — First Impressions from the Betahttps://www.osmondvanhemert.nl/posts/200723-gpt3-api-beta-first-impressions/Thu, 23 Jul 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200723-gpt3-api-beta-first-impressions/OpenAI is granting beta access to the GPT-3 API. After a week of experimentation, here’s what’s genuinely impressive and what’s overhyped.The Twitter Bitcoin Hack — A Social Engineering Masterclasshttps://www.osmondvanhemert.nl/posts/200716-twitter-bitcoin-hack-social-engineering/Thu, 16 Jul 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200716-twitter-bitcoin-hack-social-engineering/The massive Twitter compromise that hit Barack Obama, Elon Musk, and Apple wasn’t a sophisticated zero-day — it was social engineering targeting internal tools.Terraform 0.13 — Module-Level For Each and the Provider Storyhttps://www.osmondvanhemert.nl/posts/200709-terraform-013-module-foreach/Thu, 09 Jul 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200709-terraform-013-module-foreach/Terraform 0.13 brings count and for_each to modules, automatic provider installation, and custom validation rules. A look at what changes in practice.Redis 6.0 in Production — ACLs, Threading, and What Mattershttps://www.osmondvanhemert.nl/posts/200702-redis-6-acls-threading-production/Thu, 02 Jul 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200702-redis-6-acls-threading-production/Redis 6.0 brings ACLs and I/O threading to the world’s most popular in-memory data store. Here’s what the changes mean in practice.Apple Silicon — What the ARM Mac Transition Means for Developershttps://www.osmondvanhemert.nl/posts/200625-apple-silicon-arm-mac-transition/Thu, 25 Jun 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200625-apple-silicon-arm-mac-transition/Apple announces the transition from Intel to custom ARM chips for Mac. Here’s what developers need to prepare for.The Pandemic IoT Boom — More Devices, More Risk, Old Problemshttps://www.osmondvanhemert.nl/posts/200618-iot-growth-pandemic-security/Thu, 18 Jun 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200618-iot-growth-pandemic-security/Home IoT device sales have surged during lockdowns, and every one of those devices just joined a corporate network via VPN.Your CI/CD Pipeline Is Now Your Biggest Attack Surfacehttps://www.osmondvanhemert.nl/posts/200611-cicd-pipeline-security-remote-work/Thu, 11 Jun 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200611-cicd-pipeline-security-remote-work/As teams rushed to enable remote development workflows, CI/CD pipelines became a prime target.Linux Kernel 5.7 — A Quiet Release with Lasting Impacthttps://www.osmondvanhemert.nl/posts/200604-linux-kernel-57-release/Thu, 04 Jun 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200604-linux-kernel-57-release/Linux 5.7 ships with split-lock detection, the new ExFAT driver, userfaultfd improvements, and a thermal management overhaul — a release that matters more thanGPT-3 — OpenAI's 175 Billion Parameter Bet on Languagehttps://www.osmondvanhemert.nl/posts/200528-openai-gpt3-language-model/Thu, 28 May 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200528-openai-gpt3-language-model/OpenAI publishes the GPT-3 paper, a 175 billion parameter language model that demonstrates surprising few-shot learning capabilities across a range of NLPMicrosoft Build 2020 — WSL 2, Windows Terminal, Developer Pivothttps://www.osmondvanhemert.nl/posts/200521-microsoft-build-2020-wsl2/Thu, 21 May 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200521-microsoft-build-2020-wsl2/Microsoft Build 2020 goes fully virtual and doubles down on developer experience with WSL 2 GA, Windows Terminal 1.0, and tighter Azure integrations.Deno 1.0 — Ryan Dahl's Do-Over for Server-Side JavaScripthttps://www.osmondvanhemert.nl/posts/200514-deno-1-0-release/Thu, 14 May 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200514-deno-1-0-release/Deno 1.0 launches with TypeScript support, a security-first permissions model, and a clean break from Node.js conventions — but can it find its niche?GitHub Codespaces — Is Cloud Development Finally Ready?https://www.osmondvanhemert.nl/posts/200507-github-codespaces-cloud-development/Thu, 07 May 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200507-github-codespaces-cloud-development/GitHub Satellite 2020 introduces Codespaces, a cloud-based development environment that could change how we think about local toolchains.Apple and Google's Exposure Notification API — Privacy at Scalehttps://www.osmondvanhemert.nl/posts/200430-apple-google-exposure-notification-api/Thu, 30 Apr 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200430-apple-google-exposure-notification-api/Apple and Google collaborate on a Bluetooth-based exposure notification system that puts privacy-preserving architecture front and center.Node.js 14 Arrives — Diagnostics, WASI, and the Road to LTShttps://www.osmondvanhemert.nl/posts/200423-nodejs-14-release/Thu, 23 Apr 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200423-nodejs-14-release/Node.js 14 launches with experimental WebAssembly System Interface support, improved diagnostics, and a clear path to long-term support in October.GitHub Free for Teams — What It Means for Open Sourcehttps://www.osmondvanhemert.nl/posts/200416-github-free-for-teams/Thu, 16 Apr 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200416-github-free-for-teams/GitHub drops pricing barriers for teams, making unlimited private repos and essential collaboration features free for everyone.Infrastructure as Code Under Pandemic-Scale Pressurehttps://www.osmondvanhemert.nl/posts/200409-infrastructure-as-code-pandemic-scaling/Thu, 09 Apr 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200409-infrastructure-as-code-pandemic-scaling/The sudden shift to remote work has stress-tested Infrastructure as Code practices at unprecedented scale.Python at the Frontlines — Data Science Meets Pandemic Responsehttps://www.osmondvanhemert.nl/posts/200402-python-covid-data-science/Thu, 02 Apr 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200402-python-covid-data-science/Python and its data science ecosystem are playing a central role in COVID-19 analysis, from epidemiological modeling to resource allocation dashboards.Zoom's Security Reckoning — When Rapid Growth Exposes Debthttps://www.osmondvanhemert.nl/posts/200326-zoom-security-crisis/Thu, 26 Mar 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200326-zoom-security-crisis/Zoom’s explosive pandemic-driven growth is exposing serious security and privacy issues. The ‘Zoombombing’ phenomenon is just the tip of the iceberg.GitHub Acquires npm — What It Means for the JS Ecosystemhttps://www.osmondvanhemert.nl/posts/200319-github-acquires-npm/Thu, 19 Mar 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200319-github-acquires-npm/GitHub’s acquisition of npm consolidates the JavaScript ecosystem’s most critical infrastructure under one roof.Open Source Rallies — The Tech Community's Pandemic Responsehttps://www.osmondvanhemert.nl/posts/200312-open-source-pandemic-response/Thu, 12 Mar 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200312-open-source-pandemic-response/As the WHO declares a pandemic, open source developers worldwide are mobilizing with tracking dashboards, distributed computing, and collaborative tools atThe Remote Work Stress Test — Is Our Infrastructure Ready?https://www.osmondvanhemert.nl/posts/200305-tech-remote-work-infrastructure/Thu, 05 Mar 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200305-tech-remote-work-infrastructure/As tech companies start mandating work-from-home policies amid growing COVID-19 concerns, the infrastructure supporting remote work faces its biggest test yet.Go 1.14 Arrives — Faster, Leaner, and More Module-Readyhttps://www.osmondvanhemert.nl/posts/200227-go-1-14-release/Thu, 27 Feb 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200227-go-1-14-release/Go 1.14 ships with production-ready modules, major runtime improvements, and goroutine preemption. A solid release that addresses real developer pain points.Docker's Second Act — Finding Its Place After the Sell-Offhttps://www.osmondvanhemert.nl/posts/200220-docker-desktop-new-direction/Thu, 20 Feb 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200220-docker-desktop-new-direction/Three months after selling Docker Enterprise to Mirantis, Docker Inc. is refocusing on developer experience. What does this mean for the container ecosystem?The Crypto AG Revelation — Your Encryption Vendor, the CIAhttps://www.osmondvanhemert.nl/posts/200213-cia-crypto-ag-backdoor/Thu, 13 Feb 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200213-cia-crypto-ag-backdoor/The Washington Post reveals the CIA secretly owned Crypto AG for decades, selling compromised encryption to governments worldwide.Angular 9 Lands with Ivy — The Rewrite That Actually Shippedhttps://www.osmondvanhemert.nl/posts/200206-angular-9-ivy-compiler/Thu, 06 Feb 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200206-angular-9-ivy-compiler/Angular 9 arrives with the Ivy compiler as default, delivering on years of promises about smaller bundles and faster compilation.TypeScript 3.8 Beta — Private Fields and Top-Level Await Landhttps://www.osmondvanhemert.nl/posts/200130-typescript-3-8-private-fields-top-level-await/Thu, 30 Jan 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200130-typescript-3-8-private-fields-top-level-await/TypeScript 3.8 beta brings ECMAScript private fields, top-level await, and export * as syntax. These features signal where JavaScript itself is heading.Reformer — Can We Make Transformers Practical for the Rest of Us?https://www.osmondvanhemert.nl/posts/200123-reformer-efficient-transformers/Thu, 23 Jan 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200123-reformer-efficient-transformers/Google’s new Reformer model tackles the massive memory and compute costs of Transformers.GitHub Actions Is Quietly Reshaping CI/CD — Two Months After GAhttps://www.osmondvanhemert.nl/posts/200116-github-actions-reshaping-ci-cd/Thu, 16 Jan 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200116-github-actions-reshaping-ci-cd/GitHub Actions went generally available in November 2019.The NSA Found a Critical Windows Crypto Bug — That's Good Newshttps://www.osmondvanhemert.nl/posts/200109-nsa-cve-2020-0601-windows-cryptoapi/Thu, 09 Jan 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200109-nsa-cve-2020-0601-windows-cryptoapi/The NSA disclosed CVE-2020-0601, a critical vulnerability in Windows CryptoAPI’s certificate validation.Python 2 Finally Reaches End of Life — Long Live Python 3https://www.osmondvanhemert.nl/posts/200102-python2-end-of-life-new-decade/Thu, 02 Jan 2020 00:00:00 +0000https://www.osmondvanhemert.nl/posts/200102-python2-end-of-life-new-decade/Python 2 officially reached end-of-life on January 1, 2020. After over a decade of transition, what does this mean for teams still running Python 2 code?Abouthttps://www.osmondvanhemert.nl/about/Mon, 01 Jan 0001 00:00:00 +0000https://www.osmondvanhemert.nl/about/