Category
Technology with judgment: what actually moves the needle, no passing fads.
Signing images and artifacts with Sigstore has stopped being a rare experiment: projects like Kubernetes already use it. The keyless model in cosign, Fulcio, and Rekor removes private-key management, but it only protects you if deployment verifies who signed, not just whether a signature exists.
containerd is the runtime that runs containers in most modern Kubernetes clusters, and almost nobody notices. It manages the full container lifecycle: pulling the image, starting it, networking, and mounting the filesystem. It became the default runtime after Kubernetes 1.24 removed dockershim in May 2022.
eBPF is a Linux kernel technology that lets you load and run verified, high-performance programs without recompiling the kernel or rebooting the system. It runs safely inside a virtual machine in the kernel and underpins tools such as Cilium, Pixie, Falco, and Tetragon for real-time tracing, networking, and security.
PostgreSQL 16, released in September 2023, adds logical replication from a standby, the pg_stat_io view for breaking down I/O by operation type and context, and parallel FULL OUTER JOIN support. Upgrading from 15 is straightforward; 13 loses support in November 2025, so plan the update soon.
Trivy and Grype are the two leading open-source tools for container image scanning in CI/CD pipelines. Both detect CVEs in OS packages and language dependencies with less than 5% coverage difference. Trivy stands out for IaC scanning; Grype natively integrates the SBOM workflow with Syft.
In 2023, software supply chains became attackers' favourite target: MOVEit exposed data from hundreds of organisations through a zero-day flaw, 3CX shipped a trojanised installer to millions of users, and npm and PyPI kept receiving malicious typosquatted packages. The practical defence combines SBOM, artefact signing with Sigstore, SLSA maturity levels, and continuous dependency scanning.
The Grafana stack combines three open source projects: Loki for logs, Tempo for traces, and Mimir for metrics. All three keep data in object storage (S3/GCS) with a minimal index instead of indexing everything like Elasticsearch, which cuts cost sharply at high volume and lets you correlate metric, log, and trace from a single Grafana panel.
WebAssembly is moving beyond the browser through WASI, the standard system interface, and the component model, which defines declarative WIT interfaces so modules written in different languages can compose with each other. Cold start lands around 1 ms versus roughly 500 ms for a container, a key difference for serverless and edge computing teams.
Vault centraliza secretos con rotación, auditoría y políticas granulares. Guía práctica para equipos que pasan de .env a gestión seria.
nerdctl is a Docker-compatible CLI that talks directly to containerd, the standard Kubernetes runtime since dockershim was removed in 2022. It adds rootless support by default, encrypted images with ocicrypt, lazy-pulling, and native CNI. It fits best where containerd already runs, though Docker Engine still wins on advanced Compose and Swarm.
The NIS2 Directive expands European cybersecurity from 7 to 18 sectors, mandates 10 minimum technical measures and 24-hour incident notification, and imposes fines of up to 10 million euros or 2% of global turnover, with personal liability for management bodies that fail to comply.
To write Prometheus alerts that won't get ignored, alert on customer-observable symptoms (latency, error rate, saturation) instead of internal causes like CPU or memory, define SLOs with multi-window burn rate to scale severity, add a watchdog alert that confirms the system is still alive, and review the signal-to-noise ratio every quarter.
A practical guide for development teams who need to meet WCAG 2.1 without turning accessibility into an endless project. Three layers, a set of proven tools, and 2-3 months of disciplined work are enough for most teams.
eBPF (Extended Berkeley Packet Filter) is a Linux kernel technology that runs verified programs directly inside the kernel, with no modules and no source-code changes. The kernel verifier rejects any unsafe program before it runs, letting teams monitor system calls, network traffic, and I/O at a much lower CPU cost than traditional external probes.
Migrating from monolith to microservices means splitting a single system into independent services that deploy and scale on their own. It gains granular scalability and team autonomy, but adds real operational complexity: stable interfaces, Kubernetes orchestration, and a mature DevOps culture are conditions, not optional extras, for the migration to pay off.
3D printing, or additive manufacturing, has moved beyond the lab to become a real production technology: it builds medical prostheses, aircraft parts and entire houses layer by layer from a digital file. This guide explains FDM, SLA and SLS technologies, which industries already use them, and today's limits on speed and material certification.
Augmented reality (AR) overlays digital information onto the physical world in real time, anchors virtual objects in space using computer vision and position sensors, and is already used in industrial maintenance, guided surgery, educational labs and e-commerce product try-on, with battery life and glasses field of view as the main open challenges.
The Internet of Things (IoT) is a network of sensors, actuators, and internet-connected devices that collect data from the physical world, transmit it through protocols like MQTT or Zigbee, and trigger automatic actions. It already transforms industrial maintenance, precision irrigation, and the smart home.
Cybersecurity combines technical controls (encryption, MFA, network segmentation), team training and an incident response plan to reduce the risk of ransomware, phishing, malware and identity theft. No single measure is enough: effectiveness depends on applying every layer at once and auditing the system regularly.
Modern artificial intelligence rests on three pillars: machine learning, deep neural networks, and natural language processing. These techniques have pushed image recognition and machine translation past human-level precision on specific tasks, though the overall system still depends on quality data and constant human oversight.
Technical analysis uses Japanese candlestick charts, indicators such as RSI and MACD, and support and resistance levels to read the historical behaviour of price. It does not eliminate risk, but it helps separate impulsive decisions from informed ones in a market as volatile as cryptocurrency.
GitHub Codespaces brings the complete development environment to the cloud: editor, dependencies, extensions, and project configuration live in a remote container. It eliminates environment divergence between developers, reduces onboarding from days to minutes, and lets you work from any device without installing anything locally.
Microsoft 365 Copilot integrates large language models into Word, Excel, Teams, and Outlook to draft, summarise, and analyse data without leaving the usual workflow. It operates inside the tenant's data graph, respects the organisation's existing permissions, and never uses that data to train the base OpenAI or Anthropic model.
