Blog

A new home for shorter, less formal writing on server-side topics — Linux, networking, containers, Kubernetes, agent sandboxing, security, and more. Posts for exploring ideas rather than teaching them step by step.

Looking for older posts?

Check the iximiuz.com blog archive.

Category
Blog post

Thoughts on OpenAI's accidental attack against Hugging Face

OpenAI gave a presentation about "the Hugging Face Incident", and Simon Willison, my favorite AI journalist, reconstructed the incident's timeline from the video. I recommend reading it in full, and here are my thoughts pertaining to the domain I'm working in - Linux, containers, and security.

#ai-agent#vulnerability#attack
Blog post

Are user namespaces good for your health?

At last, I ran into a take on user namespaces that resonates with my own view of the problem: Kubernetes Finally Has User Namespace Support. The Shared Kernel Problem Remains (and its spinoff on The New Stack) by Kaylin Trychon of Edera.

#userns#vulnerability#hypervisor