https://osmondvanhemert.nl/posts/Recent content in Blog on Osmond van HemertHugo -- gohugo.ioen© Osmond van Hemert. All rights reserved.Thu, 30 Apr 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260430-pytorch-lightning-supply-chain-malware/Thu, 30 Apr 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260430-pytorch-lightning-supply-chain-malware/A Dune-themed malware campaign targeting the PyTorch Lightning library highlights how AI/ML supply chains are becoming prime targets for sophisticated attacks.https://osmondvanhemert.nl/posts/260423-edge-computing-industrial-iot/Thu, 23 Apr 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260423-edge-computing-industrial-iot/AWS and Azure are aggressively expanding their edge computing offerings for industrial IoT, bringing cloud-native tooling to factory floors and field operations.https://osmondvanhemert.nl/posts/260416-deno-2-3-runtime-wars/Thu, 16 Apr 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260416-deno-2-3-runtime-wars/Deno 2.3 brings workspace support and improved Node compatibility. With Bun maturing and Node.js evolving, the JavaScript runtime landscape is reaching an interesting equilibrium.https://osmondvanhemert.nl/posts/260409-xz-utils-supply-chain-anniversary/Thu, 09 Apr 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260409-xz-utils-supply-chain-anniversary/Nearly two years after the xz Utils backdoor shocked the open source world, the supply chain security landscape has changed — but not enough.https://osmondvanhemert.nl/posts/260402-google-cloud-next-2026/Thu, 02 Apr 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260402-google-cloud-next-2026/Google Cloud Next 2026 put platform engineering front and center, with new tools for developer experience, Gemini-powered operations, and a maturing GKE ecosystem.https://osmondvanhemert.nl/posts/260326-github-copilot-agent-mode/Thu, 26 Mar 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260326-github-copilot-agent-mode/GitHub Copilot’s agent mode is now generally available, promising autonomous multi-step coding. Here’s what works, what doesn’t, and what it means for how we build software.https://osmondvanhemert.nl/posts/260319-python-314-free-threading/Thu, 19 Mar 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260319-python-314-free-threading/Python 3.14’s development is pushing free-threading forward. Here’s what the removal of the GIL means practically, and why it matters more than you might think.https://osmondvanhemert.nl/posts/260312-supply-chain-security-slsa-adoption/Thu, 12 Mar 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260312-supply-chain-security-slsa-adoption/Supply chain security frameworks like SLSA and SBOM requirements are moving from recommendations to mandates. Here’s what developers need to know about the shifting landscape.https://osmondvanhemert.nl/posts/260305-nvidia-gtc-2026-blackwell-ultra/Thu, 05 Mar 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260305-nvidia-gtc-2026-blackwell-ultra/With NVIDIA’s GTC 2026 around the corner, here’s what developers and infrastructure teams should be watching for in the next generation of AI compute.https://osmondvanhemert.nl/posts/260226-opentofu-infrastructure-as-code/Thu, 26 Feb 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260226-opentofu-infrastructure-as-code/OpenTofu has matured significantly since its fork from Terraform. Here’s where things stand and what it means for teams managing cloud infrastructure.https://osmondvanhemert.nl/posts/260219-eu-ai-act-gpai-compliance/Thu, 19 Feb 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260219-eu-ai-act-gpai-compliance/The EU AI Act’s general-purpose AI provisions have been in force for six months. Here’s what’s actually changed for developers and organizations building with foundation models.https://osmondvanhemert.nl/posts/260212-cloud-finops-engineering-ownership/Thu, 12 Feb 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260212-cloud-finops-engineering-ownership/FinOps has evolved from a finance initiative to an engineering discipline, and the teams that treat cloud costs as a first-class engineering metric are winning.https://osmondvanhemert.nl/posts/260205-webassembly-component-model-maturity/Thu, 05 Feb 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260205-webassembly-component-model-maturity/The WebAssembly Component Model is reaching maturity, and it might finally deliver on the ‘write once, run anywhere’ promise that Java made thirty years ago.https://osmondvanhemert.nl/posts/260129-ai-agent-frameworks-landscape/Thu, 29 Jan 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260129-ai-agent-frameworks-landscape/The AI agent framework landscape has exploded, with LangGraph, CrewAI, AutoGen, and dozens more competing for developer mindshare. Here’s what matters.https://osmondvanhemert.nl/posts/260122-rust-linux-kernel-progress/Thu, 22 Jan 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260122-rust-linux-kernel-progress/Rust’s integration into the Linux kernel has moved beyond proof of concept into real subsystems, but the cultural and technical challenges remain fascinating.https://osmondvanhemert.nl/posts/260115-nist-post-quantum-crypto-migration/Thu, 15 Jan 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260115-nist-post-quantum-crypto-migration/NIST’s post-quantum cryptography standards are finalized, and the migration timeline is no longer theoretical — it’s operational.https://osmondvanhemert.nl/posts/260108-ces-2026-edge-ai-iot/Thu, 08 Jan 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260108-ces-2026-edge-ai-iot/CES 2026 opens with edge AI and IoT taking center stage, signaling a shift from cloud-first to edge-first architectures.https://osmondvanhemert.nl/posts/260101-javascript-runtime-landscape-2026/Thu, 01 Jan 2026 00:00:00 +0000https://osmondvanhemert.nl/posts/260101-javascript-runtime-landscape-2026/As we enter 2026, the JavaScript runtime ecosystem is more competitive and innovative than ever. Here’s where things stand.https://osmondvanhemert.nl/posts/251225-platform-engineering-2025-retrospective/Thu, 25 Dec 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251225-platform-engineering-2025-retrospective/Reflecting on how platform engineering matured in 2025, from internal developer platforms to the evolution of the DevOps toolchain.https://osmondvanhemert.nl/posts/251218-ultralytics-supply-chain-attack/Thu, 18 Dec 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251218-ultralytics-supply-chain-attack/A supply chain attack on the popular Ultralytics YOLO package highlights the persistent vulnerability of the Python ecosystem’s distribution pipeline.https://osmondvanhemert.nl/posts/251211-google-gemini-2-multimodal-ai/Thu, 11 Dec 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251211-google-gemini-2-multimodal-ai/Google launches Gemini 2.0 with native multimodal capabilities, and the implications for developers are significant.https://osmondvanhemert.nl/posts/251204-opentelemetry-logs-ga-three-pillars/Thu, 04 Dec 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251204-opentelemetry-logs-ga-three-pillars/OpenTelemetry’s logging API and SDK reaching general availability completes the observability trifecta. Here’s why this matters more than you might think.https://osmondvanhemert.nl/posts/251127-python-313-free-threading-gil/Thu, 27 Nov 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251127-python-313-free-threading-gil/Python 3.13’s experimental free-threading mode is here. I’ve been testing it in production workloads — here’s what actually works and what doesn’t.https://osmondvanhemert.nl/posts/251120-aws-reinvent-2025-preview/Thu, 20 Nov 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251120-aws-reinvent-2025-preview/With re:Invent just around the corner, here’s what matters most for teams building on AWS — and what’s likely just marketing noise.https://osmondvanhemert.nl/posts/251113-zero-day-treadmill-patch-tuesday/Thu, 13 Nov 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251113-zero-day-treadmill-patch-tuesday/November’s Patch Tuesday brought critical zero-days being actively exploited, reminding us that patch management is still the unglamorous foundation of security.https://osmondvanhemert.nl/posts/251106-github-universe-2025-copilot-evolution/Thu, 06 Nov 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251106-github-universe-2025-copilot-evolution/GitHub Universe 2025 showed us where coding is headed — and it’s less about typing code than ever before.https://osmondvanhemert.nl/posts/251030-matter-14-iot-interoperability/Thu, 30 Oct 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251030-matter-14-iot-interoperability/The Matter smart home protocol reaches version 1.4, and while progress has been slower than promised, the interoperability story is finally getting convincing.https://osmondvanhemert.nl/posts/251023-ai-coding-assistants-beyond-autocomplete/Thu, 23 Oct 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251023-ai-coding-assistants-beyond-autocomplete/AI coding assistants have evolved from glorified autocomplete to genuine development partners, and the implications for how we build software are becoming clearer.https://osmondvanhemert.nl/posts/251016-kubernetes-132-platform-maturity/Thu, 16 Oct 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251016-kubernetes-132-platform-maturity/Kubernetes 1.32 arrives with improvements to sidecar containers, resource management, and the continued push to simplify the platform for operators.https://osmondvanhemert.nl/posts/251009-cisa-secure-by-design-traction/Thu, 09 Oct 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251009-cisa-secure-by-design-traction/CISA’s Secure by Design initiative is moving from voluntary pledges to measurable industry impact, and software vendors are starting to feel the pressure.https://osmondvanhemert.nl/posts/251002-python-314-free-threading-jit/Thu, 02 Oct 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/251002-python-314-free-threading-jit/Python 3.14 arrives with maturing free-threading support and an experimental JIT compiler, signaling a new performance era for the language.https://osmondvanhemert.nl/posts/250925-eu-chatcontrol-encryption-threat/Thu, 25 Sep 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250925-eu-chatcontrol-encryption-threat/The EU’s latest push to scan encrypted messages reignites the fundamental debate about whether governments can mandate backdoors without destroying security for everyone.https://osmondvanhemert.nl/posts/250918-slack-price-hike-saas-costs/Thu, 18 Sep 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250918-slack-price-hike-saas-costs/A viral post about Slack’s massive price increase highlights the growing problem of SaaS cost escalation and what engineering teams can do about it.https://osmondvanhemert.nl/posts/250911-swe-bench-git-history-leaks/Thu, 11 Sep 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250911-swe-bench-git-history-leaks/Research reveals that top AI coding model scores on SWE-bench may be inflated due to git history leaks, raising fundamental questions about how we evaluate AI coding capabilities.https://osmondvanhemert.nl/posts/250904-mistral-le-chat-mcp-connectors/Thu, 04 Sep 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250904-mistral-le-chat-mcp-connectors/Mistral adds custom MCP connectors and persistent memory to Le Chat, signaling that the Model Context Protocol is becoming the standard glue for AI tool integration.https://osmondvanhemert.nl/posts/250828-bitnami-docker-deletion/Thu, 28 Aug 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250828-bitnami-docker-deletion/Broadcom’s deletion of Bitnami images from Docker Hub is a wake-up call about depending on container registries you don’t control.https://osmondvanhemert.nl/posts/250821-uv-code-formatting-python-tooling/Thu, 21 Aug 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250821-uv-code-formatting-python-tooling/The uv package manager experimentally adds code formatting, continuing its ambitious push to become a single tool for the entire Python development workflow.https://osmondvanhemert.nl/posts/250814-gemma3-270m-small-models-big-impact/Thu, 14 Aug 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250814-gemma3-270m-small-models-big-impact/Google releases Gemma 3 at 270M parameters, proving that smaller, more efficient models might matter more than the next big model launch.https://osmondvanhemert.nl/posts/250807-gpt5-launch-developer-implications/Thu, 07 Aug 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250807-gpt5-launch-developer-implications/OpenAI launches GPT-5 with significant improvements. Here’s what matters for developers beyond the marketing.https://osmondvanhemert.nl/posts/250731-quic-protocol-linux-kernel/Thu, 31 Jul 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250731-quic-protocol-linux-kernel/The push to bring QUIC protocol support into the Linux kernel marks a significant shift in how we think about transport-layer networking.https://osmondvanhemert.nl/posts/250724-ai-overviews-search-traffic-decline/Thu, 24 Jul 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250724-ai-overviews-search-traffic-decline/Google’s AI Overviews are causing a massive drop in organic search clicks, reshaping how the web works for publishers and developers alike.https://osmondvanhemert.nl/posts/250717-python-314-free-threading/Thu, 17 Jul 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250717-python-314-free-threading/Python 3.14’s beta release showcases the experimental free-threaded mode, promising true parallelism without the GIL — and the implications for the Python ecosystem are enormous.https://osmondvanhemert.nl/posts/250710-opentelemetry-full-maturity/Thu, 10 Jul 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250710-opentelemetry-full-maturity/With OpenTelemetry’s logging signal reaching GA status, the project now covers all three pillars of observability with stable APIs, fulfilling a long-standing promise to the industry.https://osmondvanhemert.nl/posts/250703-eu-ai-act-developer-compliance/Thu, 03 Jul 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250703-eu-ai-act-developer-compliance/With key EU AI Act provisions now in effect, development teams building AI systems need to understand the practical implications for their architectures and workflows.https://osmondvanhemert.nl/posts/250626-deno-25-javascript-runtime-wars/Thu, 26 Jun 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250626-deno-25-javascript-runtime-wars/Deno 2.5 brings improved Node.js compatibility and workspace support, signaling that the JavaScript runtime competition is driving real innovation.https://osmondvanhemert.nl/posts/250619-aws-reinforce-2025-ai-security/Thu, 19 Jun 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250619-aws-reinforce-2025-ai-security/AWS re:Inforce 2025 puts AI workload security front and center, with new guardrails, identity controls, and data protection features that signal where cloud security is headed.https://osmondvanhemert.nl/posts/250612-wwdc-2025-on-device-ai/Thu, 12 Jun 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250612-wwdc-2025-on-device-ai/Apple’s WWDC 2025 reveals a clear strategy: make on-device AI the foundation of the platform, with major implications for developers.https://osmondvanhemert.nl/posts/250605-npm-supply-chain-security-lessons/Thu, 05 Jun 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250605-npm-supply-chain-security-lessons/Another wave of malicious npm packages reminds us that JavaScript’s dependency ecosystem remains one of software’s biggest security challenges.https://osmondvanhemert.nl/posts/250529-opentofu-terraform-fork-maturing/Thu, 29 May 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250529-opentofu-terraform-fork-maturing/A year and a half after forking from Terraform, OpenTofu is proving that community-driven infrastructure tooling can thrive — but challenges remain.https://osmondvanhemert.nl/posts/250522-microsoft-build-2025-ai-platform/Thu, 22 May 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250522-microsoft-build-2025-ai-platform/Build 2025 revealed Microsoft’s strategy to make Azure the default platform for AI development — from model hosting to agent orchestration.https://osmondvanhemert.nl/posts/250515-ai-native-ides-cursor-copilot/Thu, 15 May 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250515-ai-native-ides-cursor-copilot/Cursor, Windsurf, and the growing wave of AI-native editors are reshaping how developers write code — and challenging the incumbents.https://osmondvanhemert.nl/posts/250508-docker-model-runner-local-ai/Thu, 08 May 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250508-docker-model-runner-local-ai/Docker’s new Model Runner feature brings local AI model execution into the Docker Desktop workflow, blurring the line between containers and inference.https://osmondvanhemert.nl/posts/250501-tech-tariffs-software-supply-chain/Thu, 01 May 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250501-tech-tariffs-software-supply-chain/New US tariffs on technology imports are sending ripples through hardware supply chains, cloud pricing, and software infrastructure planning.https://osmondvanhemert.nl/posts/250424-spring-2025-exploit-wave-fortinet-ivanti/Thu, 24 Apr 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250424-spring-2025-exploit-wave-fortinet-ivanti/A surge of active exploitation targeting Fortinet and Ivanti edge devices highlights the persistent vulnerability of network perimeter infrastructure.https://osmondvanhemert.nl/posts/250417-openai-o3-o4-mini-reasoning-models/Thu, 17 Apr 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250417-openai-o3-o4-mini-reasoning-models/OpenAI releases o3 and o4-mini reasoning models, bringing chain-of-thought inference to mainstream developer workflows.https://osmondvanhemert.nl/posts/250410-google-cloud-next-2025-ironwood-tpu/Thu, 10 Apr 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250410-google-cloud-next-2025-ironwood-tpu/Google unveils its 7th-gen Ironwood TPU at Cloud Next 2025, signaling a new phase in the cloud AI infrastructure war.https://osmondvanhemert.nl/posts/250403-model-context-protocol-adoption/Thu, 03 Apr 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250403-model-context-protocol-adoption/Anthropic’s Model Context Protocol is gaining traction as a universal standard for connecting AI models to tools and data sources, and the implications for the developer ecosystem are worth watching.https://osmondvanhemert.nl/posts/250327-ingress-nightmare-kubernetes-vulnerability/Thu, 27 Mar 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250327-ingress-nightmare-kubernetes-vulnerability/CVE-2025-1974 and related vulnerabilities in the Kubernetes ingress-nginx controller allow unauthenticated remote code execution, affecting an estimated 40% of Kubernetes clusters.https://osmondvanhemert.nl/posts/250320-nvidia-gtc-2025-blackwell-ultra/Thu, 20 Mar 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250320-nvidia-gtc-2025-blackwell-ultra/Nvidia’s GTC 2025 keynote unveiled Blackwell Ultra and the next-gen Vera Rubin architecture, doubling down on the infrastructure layer that powers everything in AI.https://osmondvanhemert.nl/posts/250313-github-actions-supply-chain-attack/Thu, 13 Mar 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250313-github-actions-supply-chain-attack/A compromised GitHub Action exposed secrets from thousands of repositories, highlighting how CI/CD pipelines have become prime targets for supply chain attacks.https://osmondvanhemert.nl/posts/250306-claude-3-7-sonnet-extended-thinking/Thu, 06 Mar 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250306-claude-3-7-sonnet-extended-thinking/Anthropic’s Claude 3.7 Sonnet introduces extended thinking, letting the model reason step-by-step before responding — and the implications for developer workflows are significant.https://osmondvanhemert.nl/posts/250227-kubernetes-container-security-hardening/Thu, 27 Feb 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250227-kubernetes-container-security-hardening/With Kubernetes pushing security features to GA and CISA issuing container hardening guidance, the container ecosystem is growing up on security. Here’s what matters for platform teams.https://osmondvanhemert.nl/posts/250220-anthropic-computer-use-ai-agents/Thu, 20 Feb 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250220-anthropic-computer-use-ai-agents/Anthropic’s computer use capability lets Claude interact with desktop applications like a human. What does this mean for automation, testing, and the future of AI agents?https://osmondvanhemert.nl/posts/250213-go-124-release/Thu, 13 Feb 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250213-go-124-release/Go 1.24 brings generic type aliases, improved tool management, and Swiss Tables. A look at how Go keeps evolving without losing its identity.https://osmondvanhemert.nl/posts/250206-eu-ai-act-takes-effect/Thu, 06 Feb 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250206-eu-ai-act-takes-effect/The first provisions of the EU AI Act are now enforceable. Here’s what the regulation means for developers building AI systems, and why you should care even if you’re not in Europe.https://osmondvanhemert.nl/posts/250130-stargate-project-ai-infrastructure/Thu, 30 Jan 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250130-stargate-project-ai-infrastructure/The newly announced Stargate Project promises $500B in AI infrastructure investment. What does this mean for the cloud landscape and developers building on top of it?https://osmondvanhemert.nl/posts/250123-deepseek-r1-open-source-reasoning/Thu, 23 Jan 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250123-deepseek-r1-open-source-reasoning/DeepSeek’s R1 reasoning model, released as fully open-source with an MIT license, demonstrates that frontier AI capabilities aren’t exclusive to US labs anymore.https://osmondvanhemert.nl/posts/250116-biden-ai-diffusion-rule/Thu, 16 Jan 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250116-biden-ai-diffusion-rule/The Biden administration’s new AI Diffusion Rule creates a three-tier system for GPU exports, reshaping the global AI compute landscape.https://osmondvanhemert.nl/posts/250109-nvidia-ces-2025-ai-infrastructure/Thu, 09 Jan 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250109-nvidia-ces-2025-ai-infrastructure/NVIDIA’s CES 2025 keynote unveiled the RTX 5090, Project DIGITS personal AI supercomputer, and Cosmos foundation models — cementing their grip on AI infrastructure.https://osmondvanhemert.nl/posts/250102-salt-typhoon-treasury-breach/Thu, 02 Jan 2025 00:00:00 +0000https://osmondvanhemert.nl/posts/250102-salt-typhoon-treasury-breach/The Chinese state-sponsored Salt Typhoon campaign breached the US Treasury Department, exposing how even the most security-conscious organizations remain vulnerable.https://osmondvanhemert.nl/posts/241226-github-copilot-free-tier/Thu, 26 Dec 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241226-github-copilot-free-tier/GitHub’s decision to offer a free tier for Copilot signals a fundamental shift in how AI-assisted coding will reach developers everywhere.https://osmondvanhemert.nl/posts/241219-salt-typhoon-telecom-hack/Thu, 19 Dec 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241219-salt-typhoon-telecom-hack/The Salt Typhoon campaign has compromised major US telecoms at a staggering scale. What developers and architects need to understand about this ongoing threat.https://osmondvanhemert.nl/posts/241212-google-gemini-2-flash/Thu, 12 Dec 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241212-google-gemini-2-flash/Google’s Gemini 2.0 Flash brings native tool use, multimodal output, and agentic capabilities. A look at what this means for the competitive AI landscape.https://osmondvanhemert.nl/posts/241205-openai-o1-full-model-chatgpt-pro/Thu, 05 Dec 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241205-openai-o1-full-model-chatgpt-pro/OpenAI kicks off its ‘12 Days of OpenAI’ event with the full o1 reasoning model and a new $200/month ChatGPT Pro tier. What this means for developers building with AI.https://osmondvanhemert.nl/posts/241128-aws-reinvent-2024-highlights/Thu, 28 Nov 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241128-aws-reinvent-2024-highlights/AWS re:Invent 2024 opens with major announcements around Trainium2 chips, Aurora DSQL, and Amazon’s own Nova AI models. Here’s what’s worth paying attention to.https://osmondvanhemert.nl/posts/241121-microsoft-ignite-2024-azure-ai/Thu, 21 Nov 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241121-microsoft-ignite-2024-azure-ai/Microsoft Ignite 2024 delivered a wave of Azure AI announcements — from Copilot Actions to Azure AI Foundry. Here’s what matters for developers and architects.https://osmondvanhemert.nl/posts/241114-salt-typhoon-telecom-breach/Thu, 14 Nov 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241114-salt-typhoon-telecom-breach/The Salt Typhoon campaign has compromised major US telecom providers, exposing the fragility of critical infrastructure and the growing sophistication of state-sponsored cyber operations.https://osmondvanhemert.nl/posts/241107-dotnet-9-release/Thu, 07 Nov 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241107-dotnet-9-release/Microsoft ships .NET 9 at .NET Conf 2024, delivering significant performance improvements and deeper cloud-native integration that solidify its position as a top-tier platform.https://osmondvanhemert.nl/posts/241031-chatgpt-search-launches/Thu, 31 Oct 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241031-chatgpt-search-launches/OpenAI launches ChatGPT Search, integrating real-time web search directly into its chatbot. The implications for search, SEO, and how we find information are enormous.https://osmondvanhemert.nl/posts/241024-anthropic-claude-computer-use/Thu, 24 Oct 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241024-anthropic-claude-computer-use/Anthropic’s updated Claude 3.5 Sonnet introduces Computer Use, letting AI directly interact with desktop environments — a significant leap toward autonomous AI agents.https://osmondvanhemert.nl/posts/241017-wordpress-wp-engine-open-source-rift/Thu, 17 Oct 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241017-wordpress-wp-engine-open-source-rift/The WordPress/WP Engine feud has escalated into a full-blown crisis, raising fundamental questions about open source governance and commercial ecosystems.https://osmondvanhemert.nl/posts/241010-nobel-prize-physics-ai-neural-networks/Thu, 10 Oct 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241010-nobel-prize-physics-ai-neural-networks/The 2024 Nobel Prize in Physics awarded to John Hopfield and Geoffrey Hinton recognizes the foundational physics-inspired work that made modern AI possible.https://osmondvanhemert.nl/posts/241003-wordpress-wp-engine-open-source-governance/Thu, 03 Oct 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/241003-wordpress-wp-engine-open-source-governance/The escalating conflict between Automattic and WP Engine raises fundamental questions about open source trademarks, governance, and what happens when a project’s founder picks a fight.https://osmondvanhemert.nl/posts/240926-cups-vulnerability-linux-printing-security/Thu, 26 Sep 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240926-cups-vulnerability-linux-printing-security/A chain of vulnerabilities in CUPS, the Linux printing system, enables remote code execution — and highlights how forgotten infrastructure becomes a security liability.https://osmondvanhemert.nl/posts/240919-linux-kernel-6-11-rust-momentum/Thu, 19 Sep 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240919-linux-kernel-6-11-rust-momentum/Linux kernel 6.11 ships with expanding Rust support, signaling a real shift in systems programming’s most conservative codebase.https://osmondvanhemert.nl/posts/240912-openai-o1-reasoning-models/Thu, 12 Sep 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240912-openai-o1-reasoning-models/OpenAI releases o1, a model that ’thinks before it answers’ — what chain-of-thought reasoning means for developers and the future of AI-assisted coding.https://osmondvanhemert.nl/posts/240905-rust-1-81-release/Thu, 05 Sep 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240905-rust-1-81-release/Rust 1.81 brings the Error trait into core, stabilizes new lint sorting, and continues the language’s steady march toward broader adoption.https://osmondvanhemert.nl/posts/240829-nvidia-earnings-ai-infrastructure/Thu, 29 Aug 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240829-nvidia-earnings-ai-infrastructure/NVIDIA’s Q2 FY2025 earnings show 122% year-over-year revenue growth. The numbers reveal where AI infrastructure is heading.https://osmondvanhemert.nl/posts/240822-github-models-ai-marketplace/Thu, 22 Aug 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240822-github-models-ai-marketplace/GitHub launches Models, a new playground for experimenting with AI models directly from GitHub. Here’s why this integration matters.https://osmondvanhemert.nl/posts/240815-nist-post-quantum-cryptography/Thu, 15 Aug 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240815-nist-post-quantum-cryptography/NIST has published its first three finalized post-quantum cryptography standards. Here’s what developers need to know and do.https://osmondvanhemert.nl/posts/240808-google-antitrust-ruling/Thu, 08 Aug 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240808-google-antitrust-ruling/A federal judge ruled Google maintains an illegal monopoly in search. Here’s what this means for the developer ecosystem.https://osmondvanhemert.nl/posts/240801-python-3-13-free-threaded-nogil/Thu, 01 Aug 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240801-python-3-13-free-threaded-nogil/Python 3.13’s experimental free-threaded mode removes the Global Interpreter Lock, and it could fundamentally change how we write concurrent Python.https://osmondvanhemert.nl/posts/240725-meta-llama-3-1-open-source/Thu, 25 Jul 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240725-meta-llama-3-1-open-source/Meta releases Llama 3.1 with a 405 billion parameter model under a permissive license, making frontier-class AI genuinely open for the first time.https://osmondvanhemert.nl/posts/240718-crowdstrike-global-outage/Thu, 18 Jul 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240718-crowdstrike-global-outage/A faulty CrowdStrike Falcon sensor update has caused one of the largest IT outages in history, bricking millions of Windows machines worldwide.https://osmondvanhemert.nl/posts/240711-ollama-local-llm-revolution/Thu, 11 Jul 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240711-ollama-local-llm-revolution/Local LLM tooling has matured rapidly, with Ollama leading the charge. Here’s why self-hosted AI is becoming a serious option for developers.https://osmondvanhemert.nl/posts/240704-regresshion-openssh-vulnerability/Thu, 04 Jul 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240704-regresshion-openssh-vulnerability/CVE-2024-6387 reveals a critical remote code execution flaw in OpenSSH, and it’s a regression from a fix made back in 2006.https://osmondvanhemert.nl/posts/240627-polyfill-io-supply-chain-attack/Thu, 27 Jun 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240627-polyfill-io-supply-chain-attack/The polyfill.io domain was acquired by a Chinese company and began injecting malware into over 100,000 websites, exposing fundamental weaknesses in how we trust third-party CDN dependencies.https://osmondvanhemert.nl/posts/240620-claude-35-sonnet-raises-the-bar/Thu, 20 Jun 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240620-claude-35-sonnet-raises-the-bar/Anthropic releases Claude 3.5 Sonnet, which benchmarks above GPT-4o on coding tasks while running faster and cheaper — reshaping the competitive landscape for AI-assisted development.https://osmondvanhemert.nl/posts/240613-microsoft-recall-delayed-security/Thu, 13 Jun 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240613-microsoft-recall-delayed-security/Microsoft pulls Windows Recall from the upcoming Copilot+ PC launch after security researchers demonstrate alarming vulnerabilities in the feature’s data storage.https://osmondvanhemert.nl/posts/240606-apple-wwdc-2024-intelligence/Thu, 06 Jun 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240606-apple-wwdc-2024-intelligence/Apple Intelligence debuts at WWDC 2024 with on-device AI, a ChatGPT partnership, and a privacy-first approach that could reshape how we think about AI integration.https://osmondvanhemert.nl/posts/240530-microsoft-build-2024-copilot-era/Thu, 30 May 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240530-microsoft-build-2024-copilot-era/Microsoft Build 2024 doubles down on AI with Copilot+ PCs, Windows Recall, and deep Azure AI integrations — but is the industry ready for always-on AI?https://osmondvanhemert.nl/posts/240523-microsoft-build-2024-copilot-stack/Thu, 23 May 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240523-microsoft-build-2024-copilot-stack/Microsoft Build 2024 reveals the full Copilot stack strategy. From custom copilots to Team Copilot, here’s what developers need to know about building on Microsoft’s AI platform.https://osmondvanhemert.nl/posts/240516-google-io-2024-gemini-developer-tools/Thu, 16 May 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240516-google-io-2024-gemini-developer-tools/Google I/O 2024 was wall-to-wall Gemini. Beyond the AI hype, there are meaningful developer platform shifts worth paying attention to.https://osmondvanhemert.nl/posts/240509-openai-gpt4o-multimodal/Thu, 09 May 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240509-openai-gpt4o-multimodal/OpenAI’s Spring Update reveals GPT-4o, a natively multimodal model that processes text, audio, and vision in a single architecture. The developer implications are significant.https://osmondvanhemert.nl/posts/240502-rsa-conference-2024-ai-security/Thu, 02 May 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240502-rsa-conference-2024-ai-security/RSA Conference 2024 kicks off in San Francisco with AI dominating every conversation. But beneath the marketing buzz, there are real security challenges emerging that practitioners need to face.https://osmondvanhemert.nl/posts/240425-ibm-hashicorp-acquisition/Thu, 25 Apr 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240425-ibm-hashicorp-acquisition/IBM’s $6.4 billion acquisition of HashiCorp signals a major consolidation in the cloud infrastructure space. Here’s what it means for Terraform users and the broader IaC community.https://osmondvanhemert.nl/posts/240418-meta-llama-3-release/Thu, 18 Apr 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240418-meta-llama-3-release/Meta’s Llama 3 arrives with 8B and 70B parameter models that rival closed-source competitors, reshaping the open-weight AI landscape.https://osmondvanhemert.nl/posts/240411-broadcom-vmware-licensing-shakeup/Thu, 11 Apr 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240411-broadcom-vmware-licensing-shakeup/Broadcom’s aggressive restructuring of VMware’s licensing and product portfolio is forcing organizations to rethink their virtualization strategies.https://osmondvanhemert.nl/posts/240404-redis-relicensing-valkey-fork/Thu, 04 Apr 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240404-redis-relicensing-valkey-fork/Redis Labs switches from BSD to a dual SSPL/RSALv2 license, and the Linux Foundation responds by backing the Valkey fork.https://osmondvanhemert.nl/posts/240328-xz-utils-backdoor-cve-2024-3094/Thu, 28 Mar 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240328-xz-utils-backdoor-cve-2024-3094/A sophisticated supply chain attack via the xz Utils compression library was caught just days before reaching stable Linux distributions.https://osmondvanhemert.nl/posts/240321-nvidia-blackwell-gtc-2024/Thu, 21 Mar 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240321-nvidia-blackwell-gtc-2024/NVIDIA unveils the Blackwell B200 GPU at GTC 2024, promising a generational leap in AI training and inference performance.https://osmondvanhemert.nl/posts/240314-javascript-runtime-wars-bun-deno-node/Thu, 14 Mar 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240314-javascript-runtime-wars-bun-deno-node/With Bun 1.0 maturing, Deno pushing Node compatibility, and Node.js evolving faster than ever, the JavaScript runtime landscape is more interesting than it’s been in years.https://osmondvanhemert.nl/posts/240307-anthropic-claude-3-benchmarks/Thu, 07 Mar 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240307-anthropic-claude-3-benchmarks/Anthropic launches Claude 3 in three tiers — Haiku, Sonnet, and Opus — with benchmark results that challenge GPT-4’s dominance.https://osmondvanhemert.nl/posts/240229-nvidia-earnings-ai-infrastructure-boom/Thu, 29 Feb 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240229-nvidia-earnings-ai-infrastructure-boom/NVIDIA’s record Q4 earnings reveal the staggering scale of AI infrastructure investment and what it means for developers and cloud architecture.https://osmondvanhemert.nl/posts/240222-lockbit-takedown-operation-cronos/Thu, 22 Feb 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240222-lockbit-takedown-operation-cronos/An international law enforcement coalition takes down the LockBit ransomware group’s infrastructure in a landmark operation.https://osmondvanhemert.nl/posts/240215-gemini-1-5-million-token-context/Thu, 15 Feb 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240215-gemini-1-5-million-token-context/Google’s Gemini 1.5 Pro launches with a 1 million token context window, fundamentally reshaping what’s possible with large language models.https://osmondvanhemert.nl/posts/240208-google-gemini-rebrand-ai-platform/Thu, 08 Feb 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240208-google-gemini-rebrand-ai-platform/Google retires the Bard brand and goes all-in on Gemini. Behind the marketing refresh is a real technical shift with implications for developers building on Google’s AI stack.https://osmondvanhemert.nl/posts/240201-apple-vision-pro-spatial-computing-dev/Thu, 01 Feb 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240201-apple-vision-pro-spatial-computing-dev/Apple Vision Pro launches tomorrow and the developer ecosystem is already forming. Here’s what spatial computing means for the rest of us who build software.https://osmondvanhemert.nl/posts/240125-jenkins-cve-2024-23897-cicd-security/Thu, 25 Jan 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240125-jenkins-cve-2024-23897-cicd-security/A critical Jenkins vulnerability allows arbitrary file reads through the CLI. Here’s why this matters more than your typical CVE and what it reveals about CI/CD security.https://osmondvanhemert.nl/posts/240118-gpt-store-launch-ai-development/Thu, 18 Jan 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240118-gpt-store-launch-ai-development/OpenAI launches the GPT Store, creating a marketplace for custom GPTs. Here’s what it means for developers and why the platform play matters more than the individual bots.https://osmondvanhemert.nl/posts/240111-opentofu-1-6-terraform-fork-grows-up/Thu, 11 Jan 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240111-opentofu-1-6-terraform-fork-grows-up/OpenTofu hits its first GA release, proving that the open-source fork of Terraform is more than a protest — it’s a viable alternative.https://osmondvanhemert.nl/posts/240104-opentofu-open-source-infrastructure/Thu, 04 Jan 2024 00:00:00 +0000https://osmondvanhemert.nl/posts/240104-opentofu-open-source-infrastructure/As OpenTofu approaches its first stable release, the HashiCorp license change continues to reshape how we think about open source infrastructure tooling.https://osmondvanhemert.nl/posts/231228-matter-protocol-iot-standardization/Thu, 28 Dec 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231228-matter-protocol-iot-standardization/The Matter protocol reaches version 1.2, expanding device support and inching closer to the interoperability promise that IoT has needed for years.https://osmondvanhemert.nl/posts/231221-terrapin-ssh-attack-vulnerability/Thu, 21 Dec 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231221-terrapin-ssh-attack-vulnerability/Researchers disclose the Terrapin attack against SSH, demonstrating that even our most trusted protocols can harbor subtle cryptographic weaknesses.https://osmondvanhemert.nl/posts/231214-kubernetes-129-mandala-release/Thu, 14 Dec 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231214-kubernetes-129-mandala-release/Kubernetes 1.29 ships with native sidecar container support, improved networking, and a continued push toward simplifying cluster operations.https://osmondvanhemert.nl/posts/231207-google-gemini-multimodal-ai/Thu, 07 Dec 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231207-google-gemini-multimodal-ai/Google launches Gemini, its most capable AI model yet, bringing native multimodal reasoning to the forefront of the AI race.https://osmondvanhemert.nl/posts/231130-aws-reinvent-2023-amazon-q/Thu, 30 Nov 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231130-aws-reinvent-2023-amazon-q/AWS re:Invent 2023 introduces Amazon Q, Graviton4, and a wave of AI-integrated cloud services that signal where enterprise infrastructure is heading.https://osmondvanhemert.nl/posts/231123-openai-board-crisis-lessons/Thu, 23 Nov 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231123-openai-board-crisis-lessons/The chaotic week at OpenAI — from Sam Altman’s firing to his return — reveals deep tensions in AI governance and raises questions every developer should consider.https://osmondvanhemert.nl/posts/231116-icbc-lockbit-ransomware-attack/Thu, 16 Nov 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231116-icbc-lockbit-ransomware-attack/The LockBit ransomware attack on ICBC’s US operations disrupted Treasury market trading and exposed critical vulnerabilities in financial infrastructure.https://osmondvanhemert.nl/posts/231109-openai-devday-gpt4-turbo/Thu, 09 Nov 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231109-openai-devday-gpt4-turbo/OpenAI’s DevDay unveils GPT-4 Turbo, custom GPTs, and the Assistants API — signaling a major shift from model provider to developer platform.https://osmondvanhemert.nl/posts/231102-bletchley-park-ai-safety-summit/Thu, 02 Nov 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231102-bletchley-park-ai-safety-summit/The UK’s AI Safety Summit at Bletchley Park brings 28 nations together to discuss AI risks, marking a watershed moment for international AI governance.https://osmondvanhemert.nl/posts/231026-opentofu-terraform-fork/Thu, 26 Oct 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231026-opentofu-terraform-fork/OpenTofu, the community fork of Terraform born from HashiCorp’s license change, is rapidly building momentum under the Linux Foundation.https://osmondvanhemert.nl/posts/231019-nodejs-21-release/Thu, 19 Oct 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231019-nodejs-21-release/Node.js 21 lands with a built-in WebSocket client, V8 11.8, and continued efforts to align the runtime with web platform standards.https://osmondvanhemert.nl/posts/231012-http2-rapid-reset-attack/Thu, 12 Oct 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231012-http2-rapid-reset-attack/CVE-2023-44487 exploits a fundamental aspect of HTTP/2 to enable record-breaking DDoS attacks. Here’s what you need to know and do.https://osmondvanhemert.nl/posts/231005-python-312-release/Thu, 05 Oct 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/231005-python-312-release/Python 3.12 arrives with significant performance improvements, better error messages, and a new type system feature that changes how we write Python.https://osmondvanhemert.nl/posts/230928-amazon-anthropic-investment/Thu, 28 Sep 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230928-amazon-anthropic-investment/Amazon pours $4 billion into Anthropic, signalling a major shift in how cloud providers are positioning themselves in the AI race.https://osmondvanhemert.nl/posts/230921-mgm-resorts-social-engineering-attack/Thu, 21 Sep 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230921-mgm-resorts-social-engineering-attack/The MGM Resorts cyberattack that started with a phone call is a stark reminder that the most sophisticated defenses can be undone by human vulnerability.https://osmondvanhemert.nl/posts/230914-unity-runtime-fee-developer-trust/Thu, 14 Sep 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230914-unity-runtime-fee-developer-trust/Unity’s announcement of a per-install runtime fee has sent shockwaves through the game development community, and the lessons extend far beyond gaming.https://osmondvanhemert.nl/posts/230907-python-312-what-developers-need-to-know/Thu, 07 Sep 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230907-python-312-what-developers-need-to-know/Python 3.12 is in release candidate stage with major performance improvements, better error messages, and the foundations of a no-GIL future.https://osmondvanhemert.nl/posts/230831-opentofu-terraform-fork-open-source/Thu, 31 Aug 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230831-opentofu-terraform-fork-open-source/HashiCorp’s switch to the Business Source License has triggered a community fork of Terraform called OpenTofu, and the implications for infrastructure-as-code are enormous.https://osmondvanhemert.nl/posts/230824-code-llama-open-source-code-generation/Thu, 24 Aug 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230824-code-llama-open-source-code-generation/Meta releases Code Llama, a family of open-source code generation models, and it might just change the dynamics of AI-assisted development.https://osmondvanhemert.nl/posts/230817-python-312-release-candidate/Thu, 17 Aug 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230817-python-312-release-candidate/Python 3.12’s first release candidate arrives with major performance improvements, better error messages, and the groundwork for removing the GIL.https://osmondvanhemert.nl/posts/230810-hashicorp-terraform-bsl-license/Thu, 10 Aug 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230810-hashicorp-terraform-bsl-license/HashiCorp’s decision to relicense Terraform and other products under the Business Source License has sent shockwaves through the infrastructure community.https://osmondvanhemert.nl/posts/230803-intel-downfall-cpu-vulnerability/Thu, 03 Aug 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230803-intel-downfall-cpu-vulnerability/A new Intel CPU vulnerability called Downfall exposes sensitive data through speculative execution, and the performance impact of mitigations is significant.https://osmondvanhemert.nl/posts/230727-google-web-environment-integrity/Thu, 27 Jul 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230727-google-web-environment-integrity/Google’s Web Environment Integrity API proposal has the web development community up in arms, and the concerns are well-founded.https://osmondvanhemert.nl/posts/230720-meta-llama2-open-source-llm/Thu, 20 Jul 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230720-meta-llama2-open-source-llm/Meta’s release of Llama 2 as a commercially-licensed open model changes the game for developers building with large language models.https://osmondvanhemert.nl/posts/230713-nodejs-20-test-runner-permission-model/Thu, 13 Jul 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230713-nodejs-20-test-runner-permission-model/Node.js 20 brings a stable built-in test runner and an experimental permission model — two features that signal a maturing runtime taking security and developer experience seriously.https://osmondvanhemert.nl/posts/230706-openai-function-calling-developer-workflows/Thu, 06 Jul 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230706-openai-function-calling-developer-workflows/OpenAI’s function calling capability transforms GPT models from text generators into programmable agents — here’s what it means for developers building real applications.https://osmondvanhemert.nl/posts/230629-moveit-breach-supply-chain-security/Thu, 29 Jun 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230629-moveit-breach-supply-chain-security/The MOVEit Transfer vulnerability has now impacted hundreds of organizations worldwide — a stark reminder that managed file transfer tools remain critical and under-secured attack surfaces.https://osmondvanhemert.nl/posts/230622-red-hat-rhel-source-code-controversy/Thu, 22 Jun 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230622-red-hat-rhel-source-code-controversy/Red Hat’s decision to restrict public access to RHEL source code sends shockwaves through the enterprise Linux ecosystem and raises fundamental questions about open source sustainability.https://osmondvanhemert.nl/posts/230615-eu-ai-act-parliament-vote/Thu, 15 Jun 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230615-eu-ai-act-parliament-vote/The European Parliament’s approval of the AI Act marks the first comprehensive AI regulation framework — here’s what developers building AI systems need to know.https://osmondvanhemert.nl/posts/230608-apple-wwdc-2023-visionos-developer-platform/Thu, 08 Jun 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230608-apple-wwdc-2023-visionos-developer-platform/Apple announces Vision Pro and visionOS at WWDC 2023, creating an entirely new spatial computing development platform that raises big questions for software teams.https://osmondvanhemert.nl/posts/230601-moveit-zero-day-supply-chain-nightmare/Thu, 01 Jun 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230601-moveit-zero-day-supply-chain-nightmare/A critical zero-day in Progress MOVEit Transfer is being actively exploited, and the scope of the damage is still emerging.https://osmondvanhemert.nl/posts/230525-microsoft-build-2023-copilot-stack/Thu, 25 May 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230525-microsoft-build-2023-copilot-stack/Microsoft Build 2023 reveals the ‘Copilot Stack’ — a layered architecture that shows how Microsoft plans to embed AI into every developer workflow.https://osmondvanhemert.nl/posts/230518-chatgpt-ios-app-ai-goes-mobile/Thu, 18 May 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230518-chatgpt-ios-app-ai-goes-mobile/OpenAI launches the official ChatGPT iOS app, marking AI’s shift from desktop curiosity to mobile-first tool.https://osmondvanhemert.nl/posts/230511-google-io-2023-palm2-ai-platform/Thu, 11 May 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230511-google-io-2023-palm2-ai-platform/Google I/O 2023 puts AI front and center with PaLM 2, signaling a massive platform shift across Search, Workspace, and Cloud.https://osmondvanhemert.nl/posts/230504-google-passkeys-passwords-future/Thu, 04 May 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230504-google-passkeys-passwords-future/Google enables passkey sign-in for all Google Accounts, marking the most significant push yet toward a passwordless future built on FIDO2 and WebAuthn.https://osmondvanhemert.nl/posts/230427-samsung-chatgpt-data-leak/Thu, 27 Apr 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230427-samsung-chatgpt-data-leak/Samsung employees accidentally leaked proprietary source code and meeting notes via ChatGPT, exposing the urgent need for enterprise AI usage policies.https://osmondvanhemert.nl/posts/230420-nodejs-20-release/Thu, 20 Apr 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230420-nodejs-20-release/Node.js 20 arrives with an experimental permission model, a stable test runner, and continued signs that the runtime is prioritizing security and developer experience over flashy features.https://osmondvanhemert.nl/posts/230413-auto-gpt-autonomous-agents/Thu, 13 Apr 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230413-auto-gpt-autonomous-agents/Auto-GPT has taken GitHub by storm, promising fully autonomous AI agents. Here’s what’s real, what’s hype, and what it means for developers.https://osmondvanhemert.nl/posts/230406-italy-chatgpt-ban-gdpr/Thu, 06 Apr 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230406-italy-chatgpt-ban-gdpr/Italy’s data protection authority blocks ChatGPT over GDPR concerns, setting a precedent for how AI services will navigate European privacy law.https://osmondvanhemert.nl/posts/230330-italy-bans-chatgpt-gdpr-ai-collision/Thu, 30 Mar 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230330-italy-bans-chatgpt-gdpr-ai-collision/Italy’s data protection authority blocks ChatGPT over GDPR concerns, raising questions every company building with AI needs to answer.https://osmondvanhemert.nl/posts/230323-github-copilot-x-ai-powered-developer-experience/Thu, 23 Mar 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230323-github-copilot-x-ai-powered-developer-experience/GitHub announces Copilot X with GPT-4 integration, chat, voice, pull request summaries, and docs — here’s what developers should actually expect.https://osmondvanhemert.nl/posts/230316-gpt4-lands-and-raises-the-bar/Thu, 16 Mar 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230316-gpt4-lands-and-raises-the-bar/OpenAI releases GPT-4 with multimodal capabilities and dramatically improved reasoning — here’s what it means for developers.https://osmondvanhemert.nl/posts/230309-us-national-cybersecurity-strategy-2023/Thu, 09 Mar 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230309-us-national-cybersecurity-strategy-2023/The Biden administration’s new cybersecurity strategy shifts liability toward software vendors, and developers need to pay attention.https://osmondvanhemert.nl/posts/230302-chatgpt-api-opens-floodgates/Thu, 02 Mar 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230302-chatgpt-api-opens-floodgates/OpenAI releases the ChatGPT and Whisper APIs at a fraction of expected cost, and every developer I know is scrambling to integrate.https://osmondvanhemert.nl/posts/230223-meta-llama-open-source-llm/Thu, 23 Feb 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230223-meta-llama-open-source-llm/Meta’s release of LLaMA, a family of foundation language models available to researchers, could reshape the AI landscape by democratizing access to powerful LLMs.https://osmondvanhemert.nl/posts/230216-rust-enterprise-adoption-momentum/Thu, 16 Feb 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230216-rust-enterprise-adoption-momentum/With Rust 1.67 freshly shipped and adoption accelerating across major tech companies, the language is crossing the threshold from promising to essential.https://osmondvanhemert.nl/posts/230209-ai-search-wars-bing-bard/Thu, 09 Feb 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230209-ai-search-wars-bing-bard/Microsoft and Google are racing to integrate large language models into search, and the implications go far beyond just finding web pages.https://osmondvanhemert.nl/posts/230202-esxiargs-ransomware-vmware-esxi/Thu, 02 Feb 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230202-esxiargs-ransomware-vmware-esxi/A massive ransomware campaign is exploiting a two-year-old VMware ESXi vulnerability, and the scale of unpatched systems is alarming.https://osmondvanhemert.nl/posts/230126-microsoft-openai-ten-billion-investment/Thu, 26 Jan 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230126-microsoft-openai-ten-billion-investment/Microsoft’s massive investment in OpenAI signals a fundamental shift in how cloud providers compete — and it’s not just about chatbots.https://osmondvanhemert.nl/posts/230119-microsoft-openai-investment/Thu, 19 Jan 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230119-microsoft-openai-investment/Reports indicate Microsoft is investing $10 billion in OpenAI. What this mega-deal means for the cloud landscape, AI development, and the rest of the industry.https://osmondvanhemert.nl/posts/230112-tech-layoffs-wave-2023/Thu, 12 Jan 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230112-tech-layoffs-wave-2023/Amazon, Salesforce, and others announce massive layoffs to start 2023. Looking at what’s driving this wave and what it means for software engineers.https://osmondvanhemert.nl/posts/230105-circleci-security-incident/Thu, 05 Jan 2023 00:00:00 +0000https://osmondvanhemert.nl/posts/230105-circleci-security-incident/CircleCI discloses a security incident and urges all customers to immediately rotate secrets stored in the platform. A reminder of the risks in our CI/CD supply chain.https://osmondvanhemert.nl/posts/221229-chatgpt-explosive-first-month/Thu, 29 Dec 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221229-chatgpt-explosive-first-month/One month after launch, ChatGPT has crossed a million users and sparked conversations about AI that reach far beyond the usual tech circles. Here’s why this one matters.https://osmondvanhemert.nl/posts/221222-lastpass-breach-vault-data/Thu, 22 Dec 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221222-lastpass-breach-vault-data/LastPass reveals attackers obtained copies of customer vault data, turning an already serious breach into one of the worst password manager incidents in history.https://osmondvanhemert.nl/posts/221215-log4shell-one-year-later/Thu, 15 Dec 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221215-log4shell-one-year-later/A year after Log4Shell shook the software industry, we examine what’s improved in supply chain security — and what still keeps us up at night.https://osmondvanhemert.nl/posts/221208-kubernetes-126-electrifying/Thu, 08 Dec 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221208-kubernetes-126-electrifying/Kubernetes 1.26 ‘Electrifying’ arrives with significant improvements to storage, scheduling, and the ongoing effort to remove legacy code.https://osmondvanhemert.nl/posts/221201-chatgpt-changed-everything/Thu, 01 Dec 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221201-chatgpt-changed-everything/OpenAI’s ChatGPT launches and immediately captivates the tech world with eerily capable conversational AI — but the real implications for developers run deeper than the hype.https://osmondvanhemert.nl/posts/221124-aws-reinvent-2022-cloud-opinionated/Thu, 24 Nov 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221124-aws-reinvent-2022-cloud-opinionated/AWS re:Invent 2022 kicks off with a clear message: the cloud giant is moving beyond primitives and toward opinionated, integrated solutions.https://osmondvanhemert.nl/posts/221117-mastodon-fediverse-stress-test/Thu, 17 Nov 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221117-mastodon-fediverse-stress-test/As millions flee Twitter for Mastodon, the decentralized social protocol ActivityPub faces its biggest real-world scalability challenge yet.https://osmondvanhemert.nl/posts/221110-github-universe-2022-copilot-business/Thu, 10 Nov 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221110-github-universe-2022-copilot-business/GitHub Universe 2022 puts AI front and center with Copilot for Business, while Codespaces and Actions get meaningful upgrades.https://osmondvanhemert.nl/posts/221103-openssl-critical-vulnerability-response/Thu, 03 Nov 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221103-openssl-critical-vulnerability-response/The OpenSSL 3.0.7 patch for CVE-2022-3602 and CVE-2022-3786 arrived this week — here’s what happened and what it teaches us about vulnerability response.https://osmondvanhemert.nl/posts/221027-mastodon-decentralized-social-scaling/Thu, 27 Oct 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221027-mastodon-decentralized-social-scaling/As users flood to Mastodon following the Twitter acquisition, the open-source platform faces its biggest infrastructure test yet.https://osmondvanhemert.nl/posts/221020-ubuntu-2210-kinetic-kudu/Thu, 20 Oct 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221020-ubuntu-2210-kinetic-kudu/Ubuntu 22.10 ships with updated toolchains and GNOME 43, but the real story is what it previews for the next LTS cycle.https://osmondvanhemert.nl/posts/221013-microsoft-ignite-2022-azure/Thu, 13 Oct 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221013-microsoft-ignite-2022-azure/Microsoft Ignite 2022 delivered a wave of Azure updates that signal where enterprise cloud infrastructure is heading next.https://osmondvanhemert.nl/posts/221006-cloudflare-r2-storage-wars/Thu, 06 Oct 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/221006-cloudflare-r2-storage-wars/Cloudflare R2’s general availability challenges AWS S3’s dominance with zero egress fees and full S3 API compatibility, reshaping the economics of cloud storage.https://osmondvanhemert.nl/posts/220929-linux-kernel-6-release/Thu, 29 Sep 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220929-linux-kernel-6-release/Linux 6.0 arrives with Rust language support, performance improvements, and new hardware enablement — but the real story is what the version bump signals about the kernel’s evolution.https://osmondvanhemert.nl/posts/220922-openai-whisper-speech-recognition/Thu, 22 Sep 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220922-openai-whisper-speech-recognition/OpenAI open-sources Whisper, a speech recognition model trained on 680,000 hours of data that approaches human-level accuracy across multiple languages.https://osmondvanhemert.nl/posts/220915-uber-breach-social-engineering/Thu, 15 Sep 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220915-uber-breach-social-engineering/A teenager allegedly breached Uber’s internal systems through social engineering and MFA fatigue, exposing fundamental weaknesses in how we think about authentication.https://osmondvanhemert.nl/posts/220908-stable-diffusion-open-source-ai/Thu, 08 Sep 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220908-stable-diffusion-open-source-ai/Stability AI’s open release of Stable Diffusion marks a watershed moment for generative AI, putting powerful image generation in the hands of every developer.https://osmondvanhemert.nl/posts/220901-heroku-ending-free-tier/Thu, 01 Sep 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220901-heroku-ending-free-tier/Heroku’s decision to eliminate free dynos and databases marks the end of an era. Where do developers go now for easy, free deployment?https://osmondvanhemert.nl/posts/220825-stable-diffusion-open-source-ai-art/Thu, 25 Aug 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220825-stable-diffusion-open-source-ai-art/Stability AI releases Stable Diffusion as open source, putting state-of-the-art image generation in the hands of anyone with a GPU. The implications are enormous.https://osmondvanhemert.nl/posts/220818-google-carbon-language/Thu, 18 Aug 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220818-google-carbon-language/Google announced Carbon as an experimental successor to C++. After the initial hype settles, what does this mean for the systems programming landscape?https://osmondvanhemert.nl/posts/220811-rust-163-scoped-threads/Thu, 11 Aug 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220811-rust-163-scoped-threads/Rust 1.63 brings scoped threads to stable, finally making it ergonomic to share stack references across threads without Arc or cloning.https://osmondvanhemert.nl/posts/220804-twilio-phishing-breach/Thu, 04 Aug 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220804-twilio-phishing-breach/Twilio’s breach through a sophisticated phishing attack targeting employees raises hard questions about SMS-based authentication and supply chain trust.https://osmondvanhemert.nl/posts/220728-bun-javascript-runtime-shakes-up-ecosystem/Thu, 28 Jul 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220728-bun-javascript-runtime-shakes-up-ecosystem/Bun, a new JavaScript runtime built on JavaScriptCore and written in Zig, is making waves with extraordinary benchmark numbers. Is it the Node.js challenger we’ve been waiting for?https://osmondvanhemert.nl/posts/220721-python-311-performance-leap/Thu, 21 Jul 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220721-python-311-performance-leap/Python 3.11 is in beta with impressive performance improvements. The Faster CPython project is delivering real results, with benchmarks showing 10-60% speedups.https://osmondvanhemert.nl/posts/220714-jwst-first-images-data-infrastructure/Thu, 14 Jul 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220714-jwst-first-images-data-infrastructure/The James Webb Space Telescope released its first full-color images this week. Behind the breathtaking photos is a remarkable data pipeline worth examining.https://osmondvanhemert.nl/posts/220707-cloudflare-mantis-record-ddos/Thu, 07 Jul 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220707-cloudflare-mantis-record-ddos/Cloudflare mitigated the largest HTTPS DDoS attack ever recorded at 26 million requests per second. The Mantis botnet represents a new generation of volumetric threats.https://osmondvanhemert.nl/posts/220630-github-copilot-goes-ga/Thu, 30 Jun 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220630-github-copilot-goes-ga/GitHub Copilot is now generally available as a paid product. After a year of technical preview, AI-assisted coding moves from experiment to everyday tool.https://osmondvanhemert.nl/posts/220623-github-copilot-goes-ga/Thu, 23 Jun 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220623-github-copilot-goes-ga/GitHub Copilot exits technical preview and becomes generally available at $10/month, marking the first mainstream AI coding assistant.https://osmondvanhemert.nl/posts/220616-internet-explorer-retirement/Thu, 16 Jun 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220616-internet-explorer-retirement/Microsoft officially retired Internet Explorer on June 15, 2022, ending a 27-year era that shaped — and sometimes hindered — web development.https://osmondvanhemert.nl/posts/220609-typescript-47-esm-support/Thu, 09 Jun 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220609-typescript-47-esm-support/TypeScript 4.7 ships with proper ES module support for Node.js, resolving one of the ecosystem’s most painful interoperability headaches.https://osmondvanhemert.nl/posts/220602-follina-zero-day-msdt/Thu, 02 Jun 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220602-follina-zero-day-msdt/CVE-2022-30190, dubbed Follina, exploits Microsoft’s diagnostic tool through Office documents — no macros required.https://osmondvanhemert.nl/posts/220526-broadcom-vmware-acquisition/Thu, 26 May 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220526-broadcom-vmware-acquisition/Broadcom’s proposed $61B acquisition of VMware could reshape the enterprise cloud and virtualization landscape for years to come.https://osmondvanhemert.nl/posts/220519-dotnet-maui-ga-cross-platform/Thu, 19 May 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220519-dotnet-maui-ga-cross-platform/.NET MAUI reaches general availability, replacing Xamarin.Forms as Microsoft’s unified cross-platform UI framework.https://osmondvanhemert.nl/posts/220512-google-io-2022-ai-practical-advances/Thu, 12 May 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220512-google-io-2022-ai-practical-advances/Google I/O 2022 showcases AI advances that are moving beyond demos into developer-accessible tools and practical applications.https://osmondvanhemert.nl/posts/220505-kubernetes-124-dockershim-removal/Thu, 05 May 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220505-kubernetes-124-dockershim-removal/Kubernetes 1.24 finally removes Dockershim, completing the long-telegraphed divorce from Docker as a container runtime.https://osmondvanhemert.nl/posts/220428-pycon-us-2022-python-momentum/Thu, 28 Apr 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220428-pycon-us-2022-python-momentum/PyCon US 2022 kicks off in Salt Lake City with Python riding high as the world’s most popular programming language.https://osmondvanhemert.nl/posts/220421-heroku-security-breach-supply-chain/Thu, 21 Apr 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220421-heroku-security-breach-supply-chain/Heroku’s OAuth token breach exposes the fragile trust chain in platform-as-a-service dependencies and what it means for developers.https://osmondvanhemert.nl/posts/220414-python-311-faster-cpython/Thu, 14 Apr 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220414-python-311-faster-cpython/The Python 3.11 alpha releases show 10-60% speedups across benchmarks, driven by the Faster CPython project — and this is just the beginning.https://osmondvanhemert.nl/posts/220407-dall-e-2-ai-image-generation/Thu, 07 Apr 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220407-dall-e-2-ai-image-generation/OpenAI’s DALL-E 2 produces photorealistic images from text descriptions with stunning accuracy, signaling a paradigm shift in how we think about creative AI.https://osmondvanhemert.nl/posts/220331-spring4shell-cve-2022-22965/Thu, 31 Mar 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220331-spring4shell-cve-2022-22965/A critical RCE vulnerability in Spring Framework has the internet in panic mode, but the actual risk profile is more nuanced than the Log4Shell comparisons suggest.https://osmondvanhemert.nl/posts/220324-lapsus-group-okta-microsoft-breach/Thu, 24 Mar 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220324-lapsus-group-okta-microsoft-breach/The Lapsus$ hacking group has breached both Okta and Microsoft, exposing critical weaknesses in identity provider security and third-party access management.https://osmondvanhemert.nl/posts/220317-node-ipc-protestware-supply-chain/Thu, 17 Mar 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220317-node-ipc-protestware-supply-chain/A popular npm package was deliberately sabotaged by its own maintainer, raising urgent questions about supply chain trust in open source.https://osmondvanhemert.nl/posts/220310-rust-linux-kernel-progress/Thu, 10 Mar 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220310-rust-linux-kernel-progress/The Rust for Linux project continues gaining momentum with updated patch series and growing support from kernel maintainers. Memory safety in the kernel is getting real.https://osmondvanhemert.nl/posts/220303-typescript-4-6-release/Thu, 03 Mar 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220303-typescript-4-6-release/TypeScript 4.6 brings improved control flow analysis, better type narrowing for destructured discriminated unions, and performance improvements that matter for large codebases.https://osmondvanhemert.nl/posts/220224-hermeticwiper-ukraine-cyber-warfare/Thu, 24 Feb 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220224-hermeticwiper-ukraine-cyber-warfare/As conflict erupts in Ukraine, destructive wiper malware targeting critical infrastructure signals a new chapter in state-sponsored cyber operations.https://osmondvanhemert.nl/posts/220217-alpha-omega-open-source-security/Thu, 17 Feb 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220217-alpha-omega-open-source-security/The Linux Foundation’s new Alpha-Omega Project, backed by Google and Microsoft, aims to systematically improve the security of critical open source software.https://osmondvanhemert.nl/posts/220210-nvidia-arm-deal-collapse/Thu, 10 Feb 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220210-nvidia-arm-deal-collapse/NVIDIA’s $40 billion bid for ARM has officially fallen apart under regulatory pressure, and the implications for the semiconductor landscape are enormous.https://osmondvanhemert.nl/posts/220203-deepmind-alphacode-ai-programming/Thu, 03 Feb 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220203-deepmind-alphacode-ai-programming/DeepMind’s AlphaCode system achieves competitive-level performance in programming contests, raising questions about what AI can and can’t do in software engineering.https://osmondvanhemert.nl/posts/220127-terraform-1-1-iac-maturity/Thu, 27 Jan 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220127-terraform-1-1-iac-maturity/Terraform 1.1 brings refactoring support and moved/imported blocks, signaling that Infrastructure as Code tooling is growing up.https://osmondvanhemert.nl/posts/220120-faster-cpython-311-performance/Thu, 20 Jan 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220120-faster-cpython-311-performance/The Faster CPython project, backed by Microsoft and led by Guido van Rossum, is shipping real performance gains in Python 3.11 alpha.https://osmondvanhemert.nl/posts/220113-white-house-open-source-security-summit/Thu, 13 Jan 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220113-white-house-open-source-security-summit/The White House convened tech leaders to address open source security after Log4Shell. Here’s what was discussed and what it means for developers.https://osmondvanhemert.nl/posts/220106-faker-colors-open-source-sabotage/Thu, 06 Jan 2022 00:00:00 +0000https://osmondvanhemert.nl/posts/220106-faker-colors-open-source-sabotage/A single developer deliberately corrupted two widely-used npm packages, exposing the fragility of the open source supply chain.https://osmondvanhemert.nl/posts/211230-nodejs-2021-year-in-review/Thu, 30 Dec 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211230-nodejs-2021-year-in-review/Node.js had a year of steady progress in 2021: Node 16 went LTS, the test runner landed, and the ecosystem continued its TypeScript migration.https://osmondvanhemert.nl/posts/211223-six-months-with-github-copilot/Thu, 23 Dec 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211223-six-months-with-github-copilot/After six months in the GitHub Copilot technical preview, here’s what AI pair programming actually looks like in day-to-day development work.https://osmondvanhemert.nl/posts/211216-software-supply-chain-security-after-log4j/Thu, 16 Dec 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211216-software-supply-chain-security-after-log4j/A week after Log4Shell, the patching chaos continues. But the bigger lesson is about software supply chain security and why we need SBOMs now.https://osmondvanhemert.nl/posts/211209-log4shell-zero-day/Thu, 09 Dec 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211209-log4shell-zero-day/A critical remote code execution vulnerability in Apache Log4j has sent the entire industry scrambling. Here’s what you need to know and do right now.https://osmondvanhemert.nl/posts/211202-aws-reinvent-2021-cloud-abstractions/Thu, 02 Dec 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211202-aws-reinvent-2021-cloud-abstractions/AWS re:Invent 2021 delivered a clear message: the cloud is moving toward higher-level abstractions, and developers should pay attention.https://osmondvanhemert.nl/posts/211125-aws-reinvent-2021-serverless-evolution/Thu, 25 Nov 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211125-aws-reinvent-2021-serverless-evolution/AWS re:Invent 2021 is underway in Las Vegas, and the announcements already hint at where cloud infrastructure is headed next.https://osmondvanhemert.nl/posts/211118-centos-stream-9-enterprise-linux-shift/Thu, 18 Nov 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211118-centos-stream-9-enterprise-linux-shift/CentOS Stream 9 has arrived as the successor to both CentOS 8 and the traditional CentOS model — and the enterprise Linux community is still adapting.https://osmondvanhemert.nl/posts/211111-npm-coa-rc-supply-chain-attacks/Thu, 11 Nov 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211111-npm-coa-rc-supply-chain-attacks/Popular npm packages coa and rc were hijacked to distribute malware, impacting thousands of projects and raising urgent questions about supply chain security.https://osmondvanhemert.nl/posts/211104-dotnet6-release-unified-platform/Thu, 04 Nov 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211104-dotnet6-release-unified-platform/With .NET 6 approaching release at .NET Conf, Microsoft finally delivers on its promise of a single unified platform — and it’s genuinely impressive.https://osmondvanhemert.nl/posts/211028-facebook-rebrands-to-meta/Thu, 28 Oct 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211028-facebook-rebrands-to-meta/Facebook’s rebrand to Meta signals a massive infrastructure bet on the metaverse — here’s what it means for developers and platform engineers.https://osmondvanhemert.nl/posts/211021-ua-parser-js-npm-supply-chain-attack/Thu, 21 Oct 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211021-ua-parser-js-npm-supply-chain-attack/The popular ua-parser-js npm package was hijacked to deliver cryptominers and credential stealers, affecting millions of weekly downloads.https://osmondvanhemert.nl/posts/211014-gitlab-ipo-open-source-business/Thu, 14 Oct 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211014-gitlab-ipo-open-source-business/GitLab’s successful IPO this week validates the open-core model and raises important questions about the future of open-source developer tooling.https://osmondvanhemert.nl/posts/211007-windows-11-developer-perspective/Thu, 07 Oct 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/211007-windows-11-developer-perspective/Windows 11 launched this week with WSL improvements, a new Microsoft Store, and Android app support coming soon. Here’s what matters for developers.https://osmondvanhemert.nl/posts/210930-facebook-bgp-outage-internet-fragility/Thu, 30 Sep 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210930-facebook-bgp-outage-internet-fragility/Facebook, WhatsApp, and Instagram went down for six hours due to a BGP misconfiguration, exposing how fragile the internet’s routing infrastructure really is.https://osmondvanhemert.nl/posts/210923-owasp-top-10-2021-update/Thu, 23 Sep 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210923-owasp-top-10-2021-update/The OWASP Top 10 gets its first update since 2017, and the changes reflect how fundamentally our attack surface has evolved.https://osmondvanhemert.nl/posts/210916-azure-omigod-vulnerability-cloud-agents/Thu, 16 Sep 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210916-azure-omigod-vulnerability-cloud-agents/The OMIGOD vulnerabilities in Azure’s silently-installed OMI agent expose a troubling pattern: cloud providers deploying software on your VMs without your knowledge or consent.https://osmondvanhemert.nl/posts/210909-apple-epic-ruling-developer-impact/Thu, 09 Sep 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210909-apple-epic-ruling-developer-impact/The landmark Apple vs. Epic Games ruling is more nuanced than the headlines suggest — here’s what the injunction actually changes for app developers.https://osmondvanhemert.nl/posts/210902-confluence-rce-cve-2021-26084/Thu, 02 Sep 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210902-confluence-rce-cve-2021-26084/The critical Confluence Server RCE vulnerability is being actively exploited in the wild, raising urgent questions about the sustainability of self-hosted enterprise software.https://osmondvanhemert.nl/posts/210826-python-310-structural-pattern-matching/Thu, 26 Aug 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210826-python-310-structural-pattern-matching/Python 3.10’s first release candidate introduces structural pattern matching — the most significant syntax addition since async/await, and it’s worth understanding deeply.https://osmondvanhemert.nl/posts/210819-tmobile-data-breach-api-security/Thu, 19 Aug 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210819-tmobile-data-breach-api-security/The T-Mobile breach exposing 40+ million records highlights systemic failures in API security and data protection that the entire industry needs to address.https://osmondvanhemert.nl/posts/210812-github-copilot-open-source-debate/Thu, 12 Aug 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210812-github-copilot-open-source-debate/GitHub Copilot’s AI-powered code suggestions have sparked a fierce debate about open source licensing, training data consent, and the future of code ownership.https://osmondvanhemert.nl/posts/210805-kubernetes-1-22-release/Thu, 05 Aug 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210805-kubernetes-1-22-release/Kubernetes 1.22 drops several long-deprecated beta APIs and graduates key features to stable — a sign the project is maturing and cleaning house.https://osmondvanhemert.nl/posts/210729-windows-365-cloud-pc-future/Thu, 29 Jul 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210729-windows-365-cloud-pc-future/Microsoft announces Windows 365, a full Cloud PC experience — and it might reshape how we think about developer workstations and enterprise IT.https://osmondvanhemert.nl/posts/210722-alphafold-protein-database-ai-science/Thu, 22 Jul 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210722-alphafold-protein-database-ai-science/DeepMind releases 350,000 protein structure predictions as an open database — a rare moment where AI genuinely accelerates scientific progress.https://osmondvanhemert.nl/posts/210715-pegasus-spyware-zero-click-exploits/Thu, 15 Jul 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210715-pegasus-spyware-zero-click-exploits/The Pegasus Project revelations expose industrial-grade zero-click exploits targeting journalists and activists — and raise uncomfortable questions about software supply chains.https://osmondvanhemert.nl/posts/210708-kaseya-vsa-supply-chain-ransomware/Thu, 08 Jul 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210708-kaseya-vsa-supply-chain-ransomware/The REvil ransomware group exploited Kaseya’s VSA platform to hit over 1,500 businesses simultaneously. This is what supply chain attacks look like at scale.https://osmondvanhemert.nl/posts/210701-terraform-1-0-infrastructure-as-code-milestone/Thu, 01 Jul 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210701-terraform-1-0-infrastructure-as-code-milestone/After years of 0.x releases, Terraform hits 1.0 with stability guarantees. What this means for the IaC ecosystem and your existing workflows.https://osmondvanhemert.nl/posts/210624-github-copilot-ai-pair-programming/Thu, 24 Jun 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210624-github-copilot-ai-pair-programming/GitHub’s Copilot uses OpenAI Codex to autocomplete entire functions. After a week with the technical preview, here’s what developers need to understand.https://osmondvanhemert.nl/posts/210617-python-310-structural-pattern-matching/Thu, 17 Jun 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210617-python-310-structural-pattern-matching/Python 3.10’s structural pattern matching is the most significant syntax addition since f-strings. Here’s why it matters and where it shines.https://osmondvanhemert.nl/posts/210610-fastly-cdn-outage-single-points-failure/Thu, 10 Jun 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210610-fastly-cdn-outage-single-points-failure/When a single configuration change at Fastly took down half the internet, it exposed uncomfortable truths about how we build on CDN infrastructure.https://osmondvanhemert.nl/posts/210603-gitops-argocd-cncf-incubation/Thu, 03 Jun 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210603-gitops-argocd-cncf-incubation/With ArgoCD accepted into CNCF incubation and Flux reaching its own milestones, GitOps is transitioning from buzzword to standard practice for Kubernetes deployments.https://osmondvanhemert.nl/posts/210527-microsoft-build-2021-developer-platform/Thu, 27 May 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210527-microsoft-build-2021-developer-platform/Microsoft Build 2021 doubled down on the developer platform strategy with Azure improvements, deeper GitHub integration, and a clearer vision for the cloud-native developer workflow.https://osmondvanhemert.nl/posts/210520-google-io-2021-ai-ml-advances/Thu, 20 May 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210520-google-io-2021-ai-ml-advances/Google I/O 2021 showcased AI advances that prioritize practical developer tooling over flashy demos — a shift that signals real maturity in the field.https://osmondvanhemert.nl/posts/210513-python-310-structural-pattern-matching/Thu, 13 May 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210513-python-310-structural-pattern-matching/Python 3.10’s first beta introduces structural pattern matching — the most significant syntax addition since async/await, and it’s worth understanding deeply.https://osmondvanhemert.nl/posts/210506-colonial-pipeline-ransomware/Thu, 06 May 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210506-colonial-pipeline-ransomware/The Colonial Pipeline ransomware attack exposes how deeply intertwined our digital infrastructure has become with physical systems we take for granted.https://osmondvanhemert.nl/posts/210429-nodejs-16-release/Thu, 29 Apr 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210429-nodejs-16-release/Node.js 16 arrives with native Apple Silicon binaries, V8 9.0 bringing new JavaScript features, and the stabilization of the Timers Promises API that cleans up async timer patterns.https://osmondvanhemert.nl/posts/210422-eu-ai-act-proposal/Thu, 22 Apr 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210422-eu-ai-act-proposal/The European Commission has proposed the AI Act, the world’s first comprehensive regulatory framework for artificial intelligence. Here’s what developers and engineering teams need to know.https://osmondvanhemert.nl/posts/210415-codecov-supply-chain-attack/Thu, 15 Apr 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210415-codecov-supply-chain-attack/Codecov’s compromised Bash Uploader script exposed CI/CD secrets for thousands of organizations, highlighting a systemic weakness in how we trust third-party tools in our build pipelines.https://osmondvanhemert.nl/posts/210408-kubernetes-1-21-release/Thu, 08 Apr 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210408-kubernetes-1-21-release/Kubernetes 1.21 lands with immutable Secrets and ConfigMaps going stable, CronJobs promoted to GA, and signals that the platform is maturing past its explosive growth phase.https://osmondvanhemert.nl/posts/210401-php-git-server-compromise/Thu, 01 Apr 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210401-php-git-server-compromise/Attackers pushed malicious commits to PHP’s official Git repository, exposing the fragile trust model behind open-source supply chains.https://osmondvanhemert.nl/posts/210325-aws-opensearch-elasticsearch-fork/Thu, 25 Mar 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210325-aws-opensearch-elasticsearch-fork/Amazon announces OpenSearch, a fork of Elasticsearch, escalating the most consequential open source licensing battle in years.https://osmondvanhemert.nl/posts/210318-nvidia-gtc-2021-grace-cpu/Thu, 18 Mar 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210318-nvidia-gtc-2021-grace-cpu/NVIDIA’s GTC keynote reveals new hardware and software ambitions that signal where AI infrastructure is heading — and what developers should pay attention to.https://osmondvanhemert.nl/posts/210311-ovhcloud-datacenter-fire/Thu, 11 Mar 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210311-ovhcloud-datacenter-fire/A catastrophic fire at OVHcloud’s Strasbourg datacenter destroys thousands of servers and raises hard questions about cloud resilience and backup strategies.https://osmondvanhemert.nl/posts/210304-microsoft-exchange-hafnium-zero-day/Thu, 04 Mar 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210304-microsoft-exchange-hafnium-zero-day/Four zero-day vulnerabilities in Microsoft Exchange Server are being actively exploited at scale, and the fallout is only beginning.https://osmondvanhemert.nl/posts/210225-python-392-security-release/Thu, 25 Feb 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210225-python-392-security-release/Python’s latest security releases fix critical vulnerabilities and highlight the increasingly professional security posture of the Python ecosystem.https://osmondvanhemert.nl/posts/210218-texas-grid-cloud-resilience/Thu, 18 Feb 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210218-texas-grid-cloud-resilience/The Texas power grid failure is knocking out data centers and cloud services, offering hard lessons about infrastructure resilience, multi-region architecture, and the physical realities underlying our digital systems.https://osmondvanhemert.nl/posts/210211-solarwinds-supply-chain-security/Thu, 11 Feb 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210211-solarwinds-supply-chain-security/Three months after the SolarWinds breach disclosure, the full scope is still unfolding and the implications for software supply chain security demand fundamental changes in how we build and deploy software.https://osmondvanhemert.nl/posts/210204-rust-foundation-systems-programming/Thu, 04 Feb 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210204-rust-foundation-systems-programming/The newly formed Rust Foundation, backed by AWS, Google, Huawei, Microsoft, and Mozilla, gives Rust the institutional stability it needs for the next phase of growth.https://osmondvanhemert.nl/posts/210128-global-chip-shortage-bottleneck/Thu, 28 Jan 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210128-global-chip-shortage-bottleneck/The growing semiconductor shortage is disrupting everything from automotive to IoT devices, exposing fragile supply chains that the entire tech industry depends on.https://osmondvanhemert.nl/posts/210121-signal-surge-whatsapp-privacy/Thu, 21 Jan 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210121-signal-surge-whatsapp-privacy/WhatsApp’s updated privacy policy drives millions to Signal, highlighting the growing demand for privacy-respecting open-source alternatives.https://osmondvanhemert.nl/posts/210114-elasticsearch-license-change/Thu, 14 Jan 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210114-elasticsearch-license-change/Elastic’s decision to move Elasticsearch and Kibana from Apache 2.0 to dual SSPL/Elastic License reignites the debate about open source sustainability in the cloud era.https://osmondvanhemert.nl/posts/210107-react-server-components/Thu, 07 Jan 2021 00:00:00 +0000https://osmondvanhemert.nl/posts/210107-react-server-components/The React team’s introduction of Server Components promises zero-bundle-size components and direct backend access — but is it the right direction for frontend development?https://osmondvanhemert.nl/posts/201231-flash-end-of-life/Thu, 31 Dec 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201231-flash-end-of-life/As Adobe Flash reaches its official end of life on December 31, 2020, it’s worth reflecting on what it gave us and the lessons its rise and fall teach about web standards.https://osmondvanhemert.nl/posts/201224-centos-stream-shift/Thu, 24 Dec 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201224-centos-stream-shift/Red Hat’s decision to shift CentOS from a stable downstream rebuild to a rolling upstream preview has sent shockwaves through the server community.https://osmondvanhemert.nl/posts/201217-solarwinds-supply-chain-attack/Thu, 17 Dec 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201217-solarwinds-supply-chain-attack/The SolarWinds supply chain attack is a watershed moment for software security — and it has profound implications for how we build, ship, and trust code.https://osmondvanhemert.nl/posts/201210-fireeye-breach-red-team-tools/Thu, 10 Dec 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201210-fireeye-breach-red-team-tools/FireEye discloses that sophisticated attackers stole their red team tools. The implications for the security industry — and every organization using those tools — are serious.https://osmondvanhemert.nl/posts/201203-salesforce-acquires-slack/Thu, 03 Dec 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201203-salesforce-acquires-slack/Salesforce’s $27.7 billion acquisition of Slack signals a consolidation wave in enterprise software. Developers should pay attention.https://osmondvanhemert.nl/posts/201126-alphafold2-protein-folding-breakthrough/Thu, 26 Nov 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201126-alphafold2-protein-folding-breakthrough/DeepMind’s AlphaFold 2 achieves near-experimental accuracy in protein structure prediction at CASP14. This is what AI breakthroughs actually look like.https://osmondvanhemert.nl/posts/201119-typescript-4-1-template-literal-types/Thu, 19 Nov 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201119-typescript-4-1-template-literal-types/TypeScript 4.1 ships template literal types, key remapping, and recursive conditional types — pushing the boundaries of what a type system can express.https://osmondvanhemert.nl/posts/201112-apple-m1-developer-impact/Thu, 12 Nov 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201112-apple-m1-developer-impact/Apple just shipped their first ARM-based Mac chips. The M1 looks impressive on paper, but what does this transition actually mean for developers?https://osmondvanhemert.nl/posts/201105-gpt3-developer-ecosystem/Thu, 05 Nov 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201105-gpt3-developer-ecosystem/OpenAI’s GPT-3 API is spawning a wave of developer tools and startups. The implications for software development are becoming clearer — and more nuanced — than the initial hype suggested.https://osmondvanhemert.nl/posts/201029-docker-hub-rate-limiting/Thu, 29 Oct 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201029-docker-hub-rate-limiting/Docker Hub’s new rate limits take effect November 1st. If you haven’t prepared your build pipelines, you’re about to find out the hard way.https://osmondvanhemert.nl/posts/201022-nsa-cisa-china-advisory/Thu, 22 Oct 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201022-nsa-cisa-china-advisory/A joint NSA/CISA advisory details 25 CVEs actively exploited by Chinese state-sponsored actors. The uncomfortable truth: most are well-known and patchable.https://osmondvanhemert.nl/posts/201015-hashicorp-waypoint-boundary/Thu, 15 Oct 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201015-hashicorp-waypoint-boundary/HashiCorp announced two new open-source tools at HashiConf Digital — Waypoint for application deployment and Boundary for secure remote access. Here’s why they matter.https://osmondvanhemert.nl/posts/201008-python39-release/Thu, 08 Oct 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201008-python39-release/Python 3.9 dropped this week with new parser, dict merge operators, and type hinting improvements — here’s what actually matters for production code.https://osmondvanhemert.nl/posts/201001-python-39-new-features/Thu, 01 Oct 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/201001-python-39-new-features/Python 3.9 arrives with dictionary merge operators, relaxed type hint syntax, and a new parser that sets the stage for the language’s future.https://osmondvanhemert.nl/posts/200924-vuejs-3-one-piece-rewrite/Thu, 24 Sep 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200924-vuejs-3-one-piece-rewrite/Vue.js 3.0 ships after two years of development with a TypeScript rewrite, Composition API, and significant performance improvements.https://osmondvanhemert.nl/posts/200917-github-cli-1-developer-workflow/Thu, 17 Sep 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200917-github-cli-1-developer-workflow/GitHub CLI 1.0 is here, bringing pull requests, issues, and repo management to the terminal. A look at what it means for developer workflows.https://osmondvanhemert.nl/posts/200910-zerologon-cve-2020-1472/Thu, 10 Sep 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200910-zerologon-cve-2020-1472/CVE-2020-1472, dubbed Zerologon, scores a perfect 10.0 CVSS and allows full domain takeover with a handful of packets. Here’s what you need to know.https://osmondvanhemert.nl/posts/200903-kubernetes-119-extensibility/Thu, 03 Sep 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200903-kubernetes-119-extensibility/Kubernetes 1.19 lands with extended support windows, Ingress API improvements, and a clear signal that the platform is maturing fast.https://osmondvanhemert.nl/posts/200827-kubernetes-1-19-release/Thu, 27 Aug 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200827-kubernetes-1-19-release/Kubernetes 1.19 arrives with the longest support window yet and a focus on stability features. For production operators, this is the release we’ve been asking for.https://osmondvanhemert.nl/posts/200820-typescript-4-release/Thu, 20 Aug 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200820-typescript-4-release/TypeScript 4.0 is here with variadic tuple types, labeled tuples, and smarter inference. It’s a major version that earns its number.https://osmondvanhemert.nl/posts/200813-epic-vs-apple-developer-impact/Thu, 13 Aug 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200813-epic-vs-apple-developer-impact/Epic Games just declared war on Apple’s App Store policies. The implications for the developer ecosystem extend far beyond gaming.https://osmondvanhemert.nl/posts/200806-linux-kernel-5-8-release/Thu, 06 Aug 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200806-linux-kernel-5-8-release/Linux 5.8 lands with a massive changeset. Linus Torvalds himself says it’s one of the biggest releases of all time — here’s what developers should care about.https://osmondvanhemert.nl/posts/200730-gpt3-api-first-look/Thu, 30 Jul 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200730-gpt3-api-first-look/OpenAI’s GPT-3 API is generating jaw-dropping demos across the developer community. Here’s what it means for the rest of us.https://osmondvanhemert.nl/posts/200723-gpt3-api-beta-first-impressions/Thu, 23 Jul 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200723-gpt3-api-beta-first-impressions/OpenAI is granting beta access to the GPT-3 API. After a week of experimentation, here’s what’s genuinely impressive and what’s overhyped.https://osmondvanhemert.nl/posts/200716-twitter-bitcoin-hack-social-engineering/Thu, 16 Jul 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200716-twitter-bitcoin-hack-social-engineering/The massive Twitter compromise that hit Barack Obama, Elon Musk, and Apple wasn’t a sophisticated zero-day — it was social engineering targeting internal tools. That’s the scary part.https://osmondvanhemert.nl/posts/200709-terraform-013-module-foreach/Thu, 09 Jul 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200709-terraform-013-module-foreach/Terraform 0.13 brings count and for_each to modules, automatic provider installation, and custom validation rules. A look at what changes in practice.https://osmondvanhemert.nl/posts/200702-redis-6-acls-threading-production/Thu, 02 Jul 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200702-redis-6-acls-threading-production/Redis 6.0 brings ACLs and I/O threading to the world’s most popular in-memory data store. Here’s what the changes mean in practice.https://osmondvanhemert.nl/posts/200625-apple-silicon-arm-mac-transition/Thu, 25 Jun 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200625-apple-silicon-arm-mac-transition/Apple announces the transition from Intel to custom ARM chips for Mac. Here’s what developers need to prepare for.https://osmondvanhemert.nl/posts/200618-iot-growth-pandemic-security/Thu, 18 Jun 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200618-iot-growth-pandemic-security/Home IoT device sales have surged during lockdowns, and every one of those devices just joined a corporate network via VPN. The security implications are significant.https://osmondvanhemert.nl/posts/200611-cicd-pipeline-security-remote-work/Thu, 11 Jun 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200611-cicd-pipeline-security-remote-work/As teams rushed to enable remote development workflows, CI/CD pipelines became a prime target. Here’s what’s going wrong and how to harden your build infrastructure.https://osmondvanhemert.nl/posts/200604-linux-kernel-57-release/Thu, 04 Jun 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200604-linux-kernel-57-release/Linux 5.7 ships with split-lock detection, the new ExFAT driver, userfaultfd improvements, and a thermal management overhaul — a release that matters more than its headlines suggest.https://osmondvanhemert.nl/posts/200528-openai-gpt3-language-model/Thu, 28 May 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200528-openai-gpt3-language-model/OpenAI publishes the GPT-3 paper, a 175 billion parameter language model that demonstrates surprising few-shot learning capabilities across a range of NLP tasks.https://osmondvanhemert.nl/posts/200521-microsoft-build-2020-wsl2/Thu, 21 May 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200521-microsoft-build-2020-wsl2/Microsoft Build 2020 goes fully virtual and doubles down on developer experience with WSL 2 GA, Windows Terminal 1.0, and tighter Azure integrations.https://osmondvanhemert.nl/posts/200514-deno-1-0-release/Thu, 14 May 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200514-deno-1-0-release/Deno 1.0 launches with TypeScript support, a security-first permissions model, and a clean break from Node.js conventions — but can it find its niche?https://osmondvanhemert.nl/posts/200507-github-codespaces-cloud-development/Thu, 07 May 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200507-github-codespaces-cloud-development/GitHub Satellite 2020 introduces Codespaces, a cloud-based development environment that could change how we think about local toolchains.https://osmondvanhemert.nl/posts/200430-apple-google-exposure-notification-api/Thu, 30 Apr 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200430-apple-google-exposure-notification-api/Apple and Google collaborate on a Bluetooth-based exposure notification system that puts privacy-preserving architecture front and center.https://osmondvanhemert.nl/posts/200423-nodejs-14-release/Thu, 23 Apr 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200423-nodejs-14-release/Node.js 14 launches with experimental WebAssembly System Interface support, improved diagnostics, and a clear path to long-term support in October.https://osmondvanhemert.nl/posts/200416-github-free-for-teams/Thu, 16 Apr 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200416-github-free-for-teams/GitHub drops pricing barriers for teams, making unlimited private repos and essential collaboration features free for everyone.https://osmondvanhemert.nl/posts/200409-infrastructure-as-code-pandemic-scaling/Thu, 09 Apr 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200409-infrastructure-as-code-pandemic-scaling/The sudden shift to remote work has stress-tested Infrastructure as Code practices at unprecedented scale. Here’s what’s working, what’s breaking, and what we should learn.https://osmondvanhemert.nl/posts/200402-python-covid-data-science/Thu, 02 Apr 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200402-python-covid-data-science/Python and its data science ecosystem are playing a central role in COVID-19 analysis, from epidemiological modeling to resource allocation dashboards.https://osmondvanhemert.nl/posts/200326-zoom-security-crisis/Thu, 26 Mar 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200326-zoom-security-crisis/Zoom’s explosive pandemic-driven growth is exposing serious security and privacy issues. The ‘Zoombombing’ phenomenon is just the tip of the iceberg.https://osmondvanhemert.nl/posts/200319-github-acquires-npm/Thu, 19 Mar 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200319-github-acquires-npm/GitHub’s acquisition of npm consolidates the JavaScript ecosystem’s most critical infrastructure under one roof. Here’s why that matters — and what could go wrong.https://osmondvanhemert.nl/posts/200312-open-source-pandemic-response/Thu, 12 Mar 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200312-open-source-pandemic-response/As the WHO declares a pandemic, open source developers worldwide are mobilizing with tracking dashboards, distributed computing, and collaborative tools at unprecedented speed.https://osmondvanhemert.nl/posts/200305-tech-remote-work-infrastructure/Thu, 05 Mar 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200305-tech-remote-work-infrastructure/As tech companies start mandating work-from-home policies amid growing COVID-19 concerns, the infrastructure supporting remote work faces its biggest test yet.https://osmondvanhemert.nl/posts/200227-go-1-14-release/Thu, 27 Feb 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200227-go-1-14-release/Go 1.14 ships with production-ready modules, major runtime improvements, and goroutine preemption. A solid release that addresses real developer pain points.https://osmondvanhemert.nl/posts/200220-docker-desktop-new-direction/Thu, 20 Feb 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200220-docker-desktop-new-direction/Three months after selling Docker Enterprise to Mirantis, Docker Inc. is refocusing on developer experience. What does this mean for the container ecosystem?https://osmondvanhemert.nl/posts/200213-cia-crypto-ag-backdoor/Thu, 13 Feb 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200213-cia-crypto-ag-backdoor/The Washington Post reveals the CIA secretly owned Crypto AG for decades, selling compromised encryption to governments worldwide. The supply chain trust implications are staggering.https://osmondvanhemert.nl/posts/200206-angular-9-ivy-compiler/Thu, 06 Feb 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200206-angular-9-ivy-compiler/Angular 9 arrives with the Ivy compiler as default, delivering on years of promises about smaller bundles and faster compilation.https://osmondvanhemert.nl/posts/200130-typescript-3-8-private-fields-top-level-await/Thu, 30 Jan 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200130-typescript-3-8-private-fields-top-level-await/TypeScript 3.8 beta brings ECMAScript private fields, top-level await, and export * as syntax. These features signal where JavaScript itself is heading.https://osmondvanhemert.nl/posts/200123-reformer-efficient-transformers/Thu, 23 Jan 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200123-reformer-efficient-transformers/Google’s new Reformer model tackles the massive memory and compute costs of Transformers. For engineers building AI-powered features, this matters more than another benchmark score.https://osmondvanhemert.nl/posts/200116-github-actions-reshaping-ci-cd/Thu, 16 Jan 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200116-github-actions-reshaping-ci-cd/GitHub Actions went generally available in November 2019. Two months in, the migration patterns are becoming clear — and the implications for the CI/CD landscape are significant.https://osmondvanhemert.nl/posts/200109-nsa-cve-2020-0601-windows-cryptoapi/Thu, 09 Jan 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200109-nsa-cve-2020-0601-windows-cryptoapi/The NSA disclosed CVE-2020-0601, a critical vulnerability in Windows CryptoAPI’s certificate validation. The fact that they reported it instead of hoarding it marks a notable shift.https://osmondvanhemert.nl/posts/200102-python2-end-of-life-new-decade/Thu, 02 Jan 2020 00:00:00 +0000https://osmondvanhemert.nl/posts/200102-python2-end-of-life-new-decade/Python 2 officially reached end-of-life on January 1, 2020. After over a decade of transition, what does this mean for teams still running Python 2 code?