Bala (@bala.bsky.social)

Bala

@bala.bsky.social

A Linux ,container k8s security, SRE enthusiast,. Avid runner and cyclist #CKA #kubestronaut. Looking for next role in SRE/platform engineering

1.2K followers 2.3K following1.4K posts

Pinned

Bala

@bala.bsky.social

Finally got it ,

www.bitdefender.com/en-us/blog/b...

bitdefender.comTechnical Advisory: PHP2Shell Pre-Auth RCE (CVE-2026-109618, CVE-2026-109619)[CRITICAL] | CVSS v4.

blog.cloudflare.com/emudhra-cert...

blog.cloudflare.com8 eMudhra certificates are compromised. Here's what you need to knowFollowing the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what cust...

johnlokerse.dev/2026/10/06/e...

johnlokerse.devExploring GitHub Copilot Code Review for Azure DevOpsGitHub Copilot code review is now available in Azure DevOps (public preview), bringing AI-assisted pull request reviews to teams that use Azure Repos. Instead of relying only on manual reviews, you…

Bala

@bala.bsky.social

kubernetes.io/blog/2026/08...

kubernetes.ioHow to Pretty-Print Your Kubernetes YAML as KYAML and Why You'd Want ToYAML has been the standard way to write Kubernetes manifests for years. Every example, tutorial, and configuration file you come across is written in it. The problem isn't that YAML is a bad format. I...

Bala

@bala.bsky.social

Store and query Prometheus metrics in ClickHouse Cloud without rewriting the PromQL queries clickhouse.com/blog/introdu...

Bala

@bala.bsky.social

control-plane.io/posts/unauth...

control-plane.ioA Realistic Code Execution Exploit Chain in OpenBao and VaultControlPlane and the OpenBao community recently patched a full exploit chain from unauthenticated access to full remote code execution that also affects IBM's HashiCorp Vault.

Bala

@bala.bsky.social

presidio.dataprivacystack.org nice 1

presidio.dataprivacystack.orgIndex - PresidioPII anonymization for text, images, and structured data.

Bala

@bala.bsky.social

blog.bitdrift.io/post/blob-st... 👀

blog.bitdrift.ioAnnouncing blob-stream: a Kafka alternative for no fuss, low cost high volume streaming - bitdrift Blog

krebsonsecurity.com/2026/09/micr...

krebsonsecurity.comMicrosoft Plugs Nearly 1,000 Security Holes – Krebs on Security

training.linuxfoundation.org/certificatio... CKNE Beta is out

training.linuxfoundation.orgCertified Kubernetes Network Engineer (CKNE) | Linux Foundation EducationCKNE validates hands-on skills in designing, securing, and troubleshooting Kubernetes networking for platform, network, and SRE roles.

😱

github.com/smol-machine...

github.comGitHub - smol-machines/smolvm: Branchable computing by using a portable, lightweight, self-contained virtual machineBranchable computing by using a portable, lightweight, self-contained virtual machine - smol-machines/smolvm

Bala

@bala.bsky.social

31 Aug

blog.google/products-and...

blog.google3 new ways to plan and book travel in SearchBook hotels and track airfares, plus view miles and rewards with AI Mode in Google Search.

nice

xn--gckvb8fzb.com/the-cables-t...

xn--gckvb8fzb.comThe Cables that Connect the WorldWe treat the internet as if it were air, ambient and ownerless, when in reality, however, it is the exact opposite. This is a look at what connects the world, and who builds and owns that infrastructu...

aws.amazon.com/blogs/networ...

aws.amazon.comGain visibility into client-side network failures with NEL | Amazon Web ServicesWhen your user experiences a connectivity issue visiting your website, it’s unlikely that you’ll see a trace of it in your server logs. DNS resolution failures happen before your user ever connects to...

github.com/mlflow/mlflo...

github.comUnauthenticated full-read SSRF in MLflow webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)### Summary The default MLflow Tracking Server (`mlflow server`, no authentication, default SQLite backend) exposes the model-registry webhooks API unauthenticated, including a synchronous `POST /...

Bala

@bala.bsky.social

19 Aug

azure-samples.github.io/postgres-hub/ cool

azure-samples.github.ioazure-samples.github.io

Bala

@bala.bsky.social

19 Aug

www.youtube.com/playlist?lis... Posette recording

youtube.comPOSETTE: An Event for Postgres 2026 Talks - YouTubePlaylist of all 44 talks from POSETTE: An Event for Postgres 2026—the 5th annual free and virtual developer event for PostgreSQL. Organized by the Postgres t...

hackers-arise.com/digital-fore...

hackers-arise.comDigital Forensics: Attacking SAM and Extracting Hashes With 7z - Hackers Arise7z can be used to copy system hives, bypassing EDR. We extracted NTLM hashes from the SAM hive.

Bala

@bala.bsky.social

12 Aug

www.aipotluck.org/map interesting

aipotluck.orgOpen Source AI Gap Map - AI PotluckWe are building a public option for AI that is open, auditable, and in service of people over profit. However, the open source AI stack has gaps. Now, together, we can close them.

github.com/Project-HAMi... 👀

github.comGitHub - Project-HAMi/HAMi-DRA: Fast migration from Device Plugin to DRA for HAMi users.Fast migration from Device Plugin to DRA for HAMi users. - Project-HAMi/HAMi-DRA

vllm.ai/blog/2026-07...

vllm.aiOptimizing vLLM on Arm CPUsAn overview of Arm CPU enablement and inference performance optimizations in vLLM.

Bala

@bala.bsky.social

8 Aug

back to basics about agents

Bala

@bala.bsky.social

7 Aug

aws.amazon.com/blogs/openso...

aws.amazon.comIntroducing Dogwood: runtime verification for AI agents | Amazon Web ServicesPart of what makes AI agents so useful is their ability to interact with the external world by running tools. But these tool calls are also the source of the biggest risks when it comes to making agen...

Bala

@bala.bsky.social

6 Aug