This is Part 5 of our AI Coding Agent Horror Stories series, a look at real security incidents involving AI coding agents, and how Docker Sandboxes contain agent execution at the boundary rather than at the command line. In Part 1, we walked through six categories of AI coding agent failures and why they keep happening. The agent runs as you, with your filesystem permissions and your credentials, and nothing sits between the model’s decision and the shell’s execution. Part 2 went deep on the rm -rf ~/ incident. Part 3 moved the same problem into a production cloud environment.…
Author: drweb
Telnet is missing from almost every modern Linux install, but you can still test TCP or UDP ports with nc, nmap, ss, curl, or even a single line of built-in Bash. You SSH into a fresh server, type telnet 443 out of habit, and the shell tells you the command doesn’t exist. Now you’re about to install a client for a decades-old protocol just to check whether a port is reachable. But modern Linux systems already have several faster ways to do the same thing, and some of them give you much more information than Telnet ever did. Tested on…
Our service worker is precaching pages, but the offline view still falls apart in development when Vite…
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience.Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers.Of course, the pool of available DevOps talent is still relatively constrained, so when one DevOps professional takes on a new role, it tends to create opportunities for others.The ten job postings shared this week are selected based on the company looking to hire, the vertical industry segment and naturally, the pay…
Security belongs in the software delivery pipeline. The harder question is where, how often and at what cost.Many pipeline teams eventually add security scanning to CI/CD, and relatively few go back afterward to measure what it actually cost the delivery process. Security coverage went up. Something else changed too, and it is rarely measured with the same rigor.“Shift left” gets treated as a free upgrade: catch problems earlier, at lower cost, with no real downside. That is true for the cost of fixing a vulnerability. It is not automatically true for the cost of running your pipeline. A security control…
Your second skill was never a parachute, and the proof is six hundred years old. In 1349, with the Black Death tearing through England, the king’s council passed an emergency law to freeze wages, then spent the next forty years trying to outlaw basic supply and demand. Understanding why that effort failed is the clearest way to understand what is happening to our own careers today.The same balance, drawn twice. Labour outweighs capital above. Below, it does not.The Black Death reached England in 1348 and killed somewhere between a third and a half of the population within roughly two years.…
A major technical outage struck GitHub on Monday morning, disrupting workflows for millions of developers worldwide for several hours as critical services, automated testing pipelines, and artificial intelligence (AI) coding tools suffered high error rates.The hosting platform — a subsidiary of Microsoft Corp. that supports roughly 180 million users — first reported performance issues around 9:40 a.m. EDT. The disruption quickly escalated as thousands of users flooded outage-tracking platforms like Downdetector to report failing repositories, broken downloads, and degraded performance.At the peak of the incident, GitHub confirmed error rates of approximately 20% across its web interface and API traffic. Core…
Now in Docker AI Governance: a single searchable record of every policy decision your agents trigger, streamed to the SIEM your security team already runs, so you can show what your agents did and what your policy stopped. Today, Docker AI Governance now streams every policy decision in your organization into the SIEM your security team already runs, with a searchable record of all of it in Docker Cloud. You can see what your agents did, and what your policy stopped them from doing. Enforcement is step one Somewhere in the past year, supply-chain attacks stopped being isolated incidents. The…
TL;DR — Key Takeaways GitHub’s latest Copilot release points toward a future where developers routinely switch between AI models rather than relying on one. Kimi K3 and MAI-Code-1.1-Flash expand model choice, while VS Code adds per-turn model switching. Agent Plugins 1.0 brings a shared plugin system across Copilot surfaces, and Copilot CLI gains subagent management, queued prompts, headless autopilot, and /rewind. JetBrains adds Copilot Memory and Ollama support. The bigger issue for enterprise teams is governance: Copilot still doesn’t record which model contributed to which code. Most development teams don’t pick one AI model and stick with it anymore. They…
AI writes genuinely beautiful T-SQL queries. Aligned, aliased, commented, indented like a textbook. Beautiful has never meant correct, but we have spent thirty years treating it as a signed affidavit.Here is a thing I only noticed recently, having relied on it my entire career without ever saying it out loud.Bad code used to look bad. It dressed for the occasion.Not always. But usually. The query written at midnight by somebody who had stopped caring looked like it had been written at midnight by somebody who had stopped caring. Ragged indentation. Aliases called a, b and aa. A comment that said — fix later dated 2017. The…