The memory crisis is getting so bad that even retro RAM prices are going to the Moon
DRAM buyers are switching to DDR2 as suppliers run short of mainstream memory, and some device makers are redesigning products around the legacy chip... read more ย
Updates and recent posts about Sigstore.. Link
Link
@devopslinks shared a link, 1ย day, 5ย hours ago
FAUN.dev()
The database that refused to die: How Postgres survived its own creators
Postgres was developed by Michael Stonebraker and based on the Ingres database system, following ideas from Ted Codd for relational databases. Postgres introduced support for abstract data types, leading to its widespread adoption and compatibility with modern cloud infrastructure. Despite its succe.. read more ย
Link
@devopslinks shared a link, 1ย day, 5ย hours ago
FAUN.dev()
Some notes on Lambda MicroVMs
AWS would give developers a middle tier between Lambda functions and ECS or EC2. You get per-VM identity, network addressability, and stronger process isolation while keeping Lambda's burst model. The runtime would fit workloads that need warm state, longer-lived workers, per-tenant sandboxes, proto.. read more ย
Link
@devopslinks shared a link, 1ย day, 5ย hours ago
FAUN.dev()
Local AI for Penetration Testing & Research
Model intelligence and tradecraft have progressed a lot in the year that's passed since I last tried something similar. There's a lot of hype around the research Anthropic is publishing; however, cost and privacy are still problems. When there's no guarantee that a thorough job was performed, this t.. read more ย
Link
@devopslinks shared a link, 1ย day, 5ย hours ago
FAUN.dev()
.self: A new Top-Level Domain built from theground up to support self-hosting
Operated as a public good, .self TLD will be designed and implemented according to human-centered principles to enable anyone to take full ownership of their data... read more ย
Story
@laura_garcia shared a post, 1ย day, 12ย hours ago
Software Developer, RELIANOID
๐ฅ๐๐๐๐๐ก๐ข๐๐ ๐ฎ๐น๐ถ๐ด๐ป๐ ๐๐ถ๐๐ต ๐๐ต๐ฒ ๐ฝ๐ฟ๐ถ๐ป๐ฐ๐ถ๐ฝ๐น๐ฒ๐ ๐ผ๐ณ ๐๐ฆ๐ข/๐๐๐ ๐ฒ๐ฎ๐ฐ๐ฐ๐ฏ
๐จ ๐๐ป๐ฑ๐๐๐๐ฟ๐ถ๐ฎ๐น ๐ฐ๐๐ฏ๐ฒ๐ฟ๐๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ ๐ถ๐ ๐ป๐ผ ๐น๐ผ๐ป๐ด๐ฒ๐ฟ ๐ผ๐ฝ๐๐ถ๐ผ๐ป๐ฎ๐น โ ๐ถ๐'๐ ๐ณ๐ผ๐๐ป๐ฑ๐ฎ๐๐ถ๐ผ๐ป๐ฎ๐น. We're proud to share that ๐ฅ๐๐๐๐๐ก๐ข๐๐ ๐ฎ๐น๐ถ๐ด๐ป๐ ๐๐ถ๐๐ต ๐๐ต๐ฒ ๐ฝ๐ฟ๐ถ๐ป๐ฐ๐ถ๐ฝ๐น๐ฒ๐ ๐ผ๐ณ ๐๐ฆ๐ข/๐๐๐ ๐ฒ๐ฎ๐ฐ๐ฐ๐ฏ, the ๐ช๐ฏ๐ต๐ฆ๐ณ๐ฏ๐ข๐ต๐ช๐ฐ๐ฏ๐ข๐ญ๐ญ๐บ ๐ณ๐ฆ๐ค๐ฐ๐จ๐ฏ๐ช๐ป๐ฆ๐ฅ ๐ด๐ต๐ข๐ฏ๐ฅ๐ข๐ณ๐ฅ ๐ง๐ฐ๐ณ ๐ด๐ฆ๐ค๐ถ๐ณ๐ช๐ฏ๐จ ๐๐ฏ๐ฅ๐ถ๐ด๐ต๐ณ๐ช๐ข๐ญ ๐๐ถ๐ต๐ฐ๐ฎ๐ข๐ต๐ช๐ฐ๐ฏ ๐ข๐ฏ๐ฅ ๐๐ฐ๐ฏ๐ต๐ณ๐ฐ๐ญ ๐๐บ๐ด๐ต๐ฆ๐ฎ๐ด (๐๐๐๐). From manufacturing and energy to utilities, go..
ย Activity
@david6983 started using tool Kubernetes , 2ย days, 11ย hours ago.
ย Activity
@david6983 started using tool Helm , 2ย days, 11ย hours ago.
ย Activity
@david6983 started using tool Google Kubernetes Engine (GKE) , 2ย days, 11ย hours ago.
ย Activity
@david6983 started using tool Flux , 2ย days, 11ย hours ago.
At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.
The sigstore ecosystem is composed of several key components:
- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.
- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.
- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.
Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).
sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.
The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.
