Ian Lewis

TIL: March 2, 2026 - Weekly Reading: Veritasium does XZ, Anthropic vs. DoW, Block layoffs

www.ianlewis.org/til/2026/03/...

Esto es algo que digo ya abiertamente: creo que la IA es un paywall del conocimiento. Ahora estamos en la fase de enganche (si, como la droga), accesible y a precios razonables o gratis. En poco tiempo se tirará la carta de los rentabilidad y empezará la enshitificacion. Precios 🔺, prestaciones 🔻🔻🔻

I zoomed in and noticed I'm really close to this cluster of Go team members. It's nice to be in such good company. 😆

This is really cool. My follows are mostly
- Cloud Native/Open Source
- Web Dev
- Japanese Dev
- Progressive Commentary

TIL: February 23, 2016 - Weekly Reading: Staff+ engineer career growth

Lots of stuff from Will Larsen and related folks

www.ianlewis.org/til/2026/02/...

Pooping on AI daily. What's not to like?

TIL: February 16, 2026 - Weekly Reading: The (ir)responsibility of AI agents and Go 1.26

www.ianlewis.org/til/2026/02/...

TIL: February 9, 2026 - Weekly Reading: AI Agents & Empathy, More Moltbook

A couple days bit late posting this, but this week's post on empathy for agents on social media was particularly thoughtful.

www.ianlewis.org/til/2026/02/...

ジンジャーハイボールなかなかよかった

Yeah, I have seen their owner (operator?) say something to that effect. I think it runs on a desktop in their home so perhaps not surprising that it would go offline sometimes ;)

"We can't tax billionaires because I want to be one!"

明らかにあるキャラの絵だよねぇ

I'm becoming more interested in AI mostly due to experiments like @penny.hailey.at. But I'm still highly skeptical of big companies running the AI models. I'd be much opener to agents that use models locally.

hailey.at/posts/3mear2...

今日は寒いから、薪ストーブを焚きますわ

Los Angeles Homeless Services CEO Charged with Defrauding Taxpayers to Pay for Luxury Lifestyle The CEO of a Los Angeles homeless services charity faces federal and state fraud charges after prosecutors said he lived a luxury lifestyle that included lavish vacations and designer clothes paid for...

One thing I hope everyone can agree on is that folks like this should have the book thrown at them and go away for a good long time.

ground.news/article/ca6f...

Together at last, Megadeth and Harry Styles rule the Billboard charts These wildly different artists both reach the top of the pop charts this week.

These wildly different artists both rule the charts this week. n.pr/3O0jtlV

I think it's best for everyone to understand that the unified class project of billionaires right now is to do to white collar workers what globalization and neoliberalism did to blue collar workers.

JetBrains GoLand IDE showing sqlite3 bindings written in Go.

I'm still writing code the hard way. I'm slow. I like to think critically about every line of code and fiddle with variable names until everything looks right. I treat code as a liability and try to ship only what's necessary.

It's hard to imagine writing code any other way.

Official CVE Feed FEATURE STATE: Kubernetes v1.27 [beta] This is a community maintained list of official CVEs announced by the Kubernetes Security Response Committee. See Kubernetes Security and Disclosure Information ...

There are 4 total. kubernetes.io/docs/referen...

CVE-2026-24512: ingress-nginx rules.http.paths.path nginx configuration injection · Issue #136678 · kubernetes/kubernetes CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H A security issue was discovered in ingress-nginx where the rules.http.paths.path Ingress field can be used to inject configuration into ngi...

Also perhaps even worse is this one since many setups might already not allow the annotation. You can't really not allow rules paths.

github.com/kubernetes/k...

CVE-2026-1580: ingress-nginx auth-method nginx configuration injection · Issue #136677 · kubernetes/kubernetes CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/auth-method Ingress annotation can be used to inject...

Oh no. If you haven't migrated yet, be sure to upgrade to >= v1.14.3 ASAP.

github.com/kubernetes/k...

Vulcan Salute Spock GIF ALT: Vulcan Salute Spock GIF

Stay warm and stay safe

Who wants to learn shell scripting when you can give all your private days and credentials to an LLM owned by someone else?

TIL: February 2, 2026 - Weekly Reading: AI and Security

OpenClaw, LLM-based exploits, and Kubertetes nodes/proxy

www.ianlewis.org/til/2026/02/...

This goes doubly for a Docker container that isn't hardened and is run with just a good ol' `docker run`.

a picture of a girl with glasses and the words are you sure this is safe ALT: a picture of a girl with glasses and the words are you sure this is safe

I've got news for folks who aren't comfortable running something on their machine, so they run it in a Docker container.

a bunch of drawings on a white background one of which says ' a ' on it ALT: a bunch of drawings on a white background one of which says ' a ' on it

The only LLM I need is one that examines an applications code and tells me what Kubernetes RBAC permissions it needs and why.