Over the past several weeks, many of you have probably noticed subtle hints throughout my blog. A few references to new technologies. A growing interest in AWS and PostgreSQL. Discussions around new automation ideas. Even a few comments about learning new systems.If you picked up on those clues, you were right.Today, I’m excited to officially share that I’ve joined ESO as a Senior Database Administrator.Changing employers is certainly news, but that’s not really what this post is about.This post is about growth.It’s about continuing to challenge myself as a database professional and embracing opportunities to learn, build, and solve new…
Author: drweb
Docker Captain Jul 1, 2026 Why AI Agents Need Isolation Learn why AI agent isolation matters, how Docker SBX enables safer AI workflows, and how Sandbox Kits help. Written by Docker Captain Karan Verma. Read now
Learn Python with a Book Designed for Beginners Hello! I’m Michael Driscoll, and I’m excited to announce the third edition of Python 101. For years, Python 101 has helped readers take their first steps into programming. Whether you’re a complete beginner, a student, or someone looking to learn Python for work or personal projects, the goal has always been the same: make learning Python approachable, practical, and enjoyable. Python has continued to evolve, and it’s time for the book to evolve with it. This Kickstarter will help fund the writing, editing, production, and publication of the fully updated third edition.…
Node.js is a JavaScript runtime used to build fast and scalable network applications. It uses an event-driven, non-blocking I/O model with single-threaded asynchronous programming, allowing it to handle many requests efficiently. A web application framework provides a set of libraries, tools, and helpers that make it easier to build web applications without writing everything from scratch. When choosing a framework, the most important things to consider are its architecture, ease of customization, extensibility, built-in security features, and how well it integrates with the rest of your technology stack. We first published this roundup in 2023, but the Node.js framework ecosystem…
TL;DR — Key TakeawaysCoordinated threat campaigns are quietly targeting GitHub organizations using the platform’s API and dormant “ghost” accounts to map developers, repositories, and projects.Most activity looks legitimate, making it difficult to detect. Attackers often use public API endpoints, clean authentication, or no authentication at all.Ghost accounts help attackers blend in. More than 50 long-dormant GitHub accounts were reactivated after 2–5 years to evade suspicion while conducting reconnaissance.A cluster of coordinated and overlapping campaigns that have been running for several months is abusing GitHub’s API and leveraging dozens of “ghost” accounts that have been dormant for years to map organizations…
If you’ve ever watched an AI coding agent mess up your Obsidian vault, this can help. I keep my second brain in Obsidian on the same Rocky Linux system I use for everything else. For months, I let Claude Code work with my notes without telling it how Obsidian actually works. It would create regular Markdown links instead of wikilinks, ignore callout blocks, and have no idea what a .base file was when it came across one. The notes still opened in Obsidian, but they lost the features that make Obsidian so useful. Then I found obsidian-skills, a small repository…
I had a question the other day that constantly pops up on my feed whether it’s on social media or people asking Q&A at a conference etc. And that question is “What is the best tool I should be using for my database management and app development?”And it’s fair to say I generally get a fair bit of pushback when the reply I give is “All of them!“. I get accusations like “You’re just being politically correct and you are towing the Oracle line“, “You’re never going to criticize any of the tools” and so on. But that is definitely…
Hallucinations have been an ongoing problem since OpenAI first introduced its ChatGPT chatbot in November 2022, highlighting generative AI’s tendency to generate plausible but false or misleading information and its inability to just say “I don’t know.”They can lead to embarrassing or uncomfortable moments. However, security researchers in Israel have found that the large language model (LLMs) hallucinations can be weaponized by threat actors to compromise systems and create large botnets.In a paper issued this week, researchers from Tel Aviv University, Technion, and Intuit outlined a technique they call “HalluSquatting,” or adversarial hallucination squatting, in which hackers exploit the predictable…
NO AI was used to generate this content. Grammarly was used to check and correct language and sentences in parts.I just managed to get a post in for this landmark T-SQL Tuesday, hosted by Brent Ozar. Brent was kind enough to keep the submission window open for two weeks instead of the usual one, and I was able to sneak a post in last – minute.His invitation is to write about the things that immediately stand out as “bad signs” when reviewing a SQL query.The list below covers a few things that catch my attention. It is far from comprehensive…
Someone once handed me a data project with a single line of guidance. “Just make sure the data is clean before it hits the report.” I nodded like it meant something. It meant nothing. But nodding felt professional, so I nodded. What that project needed, and never got, was a set of data quality rules anyone could actually test.Two weeks later the report was wrong and we were in a meeting arguing about whether cleaning the data had ever been my job. Nobody could win that argument. “Clean” was never defined, so it could not be met, measured, or tested.…