Blog
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 3517 posts
#2026-03 765#english 592#culture 264#deep-dive 254#kubernetes 247#career 229#ai 216#llm 208#devops 193#2026-04 146#security 141#database 114#observability 113#communication 109#history 107#architecture 100#productivity 96#finance 88#economy 84#mindset 81#psychology 80#ai-papers 79#food 78#it 78#travel 78#deep-learning 77#japanese 77#networking 77#performance 72#business-travel 70#linux 70#gpu 69#ai-agent 66#cs-fundamentals 63#postgresql 60#rag 58#self-improvement 55#learning 53#mlops 53#ai-platform 51
The Age of Mandatory Age Verification — Is Privacy-Preserving Identity Possible?
Examining the push toward mandatory age verification on social media and the privacy concerns it raises, this post walks through privacy-preserving authentication technologies from a developer perspective: zero-knowledge
2026-06-12 · 14 min read #privacy#identity#zero-knowledge#verifiable-credentials#securityThe Degoogle Experiment — A 2026 Guide to Switching Your Privacy Stack
The viral Gmail exit essay and the surge in DuckDuckGo no-AI search traffic point to big tech fatigue. This guide compares alternatives for search, mail, browsers, photos, and drive, plus self-hosting options, a step-by-
2026-06-12 · 21 min read #privacy#degoogle#email#self-hosting#duckduckgoHacking the Linux Memory Hierarchy — swap, zram, and the Wild Idea of Swapping to VRAM
The nbd-vram project, which exposes GPU VRAM as an NBD block device to use as swap, made waves on Hacker News. Starting from there, this post covers Linux memory management fundamentals, swappiness and zram/zswap tuning,
2026-06-12 · 16 min read #linux#memory#swap#zram#kernelMastering systemd Timers — Time to Graduate from cron
Sparked by the Hacker News hit You do not love systemd timers enough, this post walks through the structural limits of cron and everything systemd timers offer. OnCalendar syntax, Persistent catch-up, failure notificatio
2026-06-12 · 15 min read #linux#systemd#cron#scheduling#devopsBuilding an LLM from Scratch — A Stanford CS336 Style Learning Roadmap
Stanford CS336 (Language Modeling from Scratch) keeps hitting the Hacker News front page, and from-scratch LLM building is hot again. This post dissects the full curriculum — tokenizers, attention, distributed training,
2026-06-12 · 15 min read #llm#transformer#cs336#deep-learning#tokenizerThe Rise of Diffusion LMs — Can They Become an Alternative to Autoregression
In June 2026 Google released DiffusionGemma, and text diffusion models are lighting up GeekNews and Hacker News. We critically analyze the structural limits of autoregressive generation, the principles of mask-based deno
2026-06-12 · 17 min read #llm#diffusion#text-generation#gemma#inferenceJLPT N3 in 20 Days — 200 Essential Words, 30 Grammar Points, and 25 Practice Questions
Even with only 20 days left before the exam, you can prepare for JLPT N3 strategically. This single article covers a day-by-day study plan, 200 essential words organized by topic, 30 key grammar points with comparisons o
2026-06-12 · 65 min read #japanese#jlpt#n3#vocabulary#grammarThe Terminal TUI Renaissance — Developers Leaving GUIs and Coming Back to the Terminal
With the HTTP client Slumber featured on HN and GeekNews, the TUI tool renaissance is back in the spotlight. This post covers the best TUIs by category — lazygit, k9s, lazydocker, yazi, btop — plus fzf recipes, tmux-base
2026-06-12 · 14 min read #tui#terminal#devops#productivity#toolsFrom SiteMinder to Keycloak — A Legacy SSO Migration Strategy and Practical Roadmap
A practical roadmap for migrating a SiteMinder estate to Keycloak: application inventory classification, an object mapping table, SAML brokering coexistence architecture, oauth2-proxy header translation, gradual password
2026-06-12 · 16 min read #keycloak#siteminder#sso#iam#migrationSCIM 2.0 Deep Dive — The Standard for Automated User Provisioning
SSO alone cannot manage the account lifecycle. This post takes a practitioner-level deep dive into SCIM 2.0: the spec structure (RFC 7642/7643/7644), User/Group schemas, REST endpoints and PATCH semantics, support in Okt
2026-06-12 · 18 min read #scim#iam#provisioning#sso#securityThe Evolution of Authorization Models — RBAC, ABAC, ReBAC, and OpenFGA/Zanzibar
Once authentication is solved, the next battleground is authorization. We trace the evolution of authorization models from RBAC role explosion through ABAC policy complexity to the ReBAC paradigm introduced by Google Zan
2026-06-12 · 15 min read #authorization#rbac#rebac#openfga#zanzibarOpenID Connect Deep Dive — From the Authorization Code Flow to Discovery
A protocol-level dissection of how OIDC stacks an authentication layer on top of OAuth 2.0: the role differences between ID Token, Access Token, and Refresh Token, and the detailed Authorization Code + PKCE flow with rea
2026-06-12 · 14 min read #oidc#oauth2#jwt#sso#securityAnatomy of npm Supply Chain Attacks — Defense Strategies for the Era When Even Red Hat Got Hit
Triggered by the June 2026 incident in which even official Red Hat Cloud Services npm packages were exposed to malicious code, this post dissects the types of npm supply chain attacks and lays out the defense stack organ
2026-06-12 · 17 min read #npm#supply-chain#security#devops#sigstoreCustomizing Keycloak Tokens — Protocol Mappers and Claims Design in Practice
A hands-on guide to designing JWT claims with Keycloak Protocol Mappers and Client Scopes. Covers built-in mappers, a custom ProtocolMapper SPI implementation, audience validation pitfalls, token bloat diet strategies, a
2026-06-12 · 15 min read #keycloak#oidc#jwt#sso#securityKeycloak Observability — Metrics, Audit Logs, and Event-Driven Monitoring
A comprehensive guide to Keycloak observability: the event system and metrics endpoint, shipping events externally with the EventListener SPI, building Prometheus and Grafana dashboards, OpenTelemetry tracing, anomaly de
2026-06-12 · 13 min read #keycloak#observability#monitoring#prometheus#securityKeycloak 26 Architecture Deep Dive — Understanding Realms, Clients, and the Quarkus Runtime
A deep dive into the internal architecture of Keycloak 26.x. We cover the WildFly-to-Quarkus transition, the realm/client/role domain model, the authentication flow engine, kc.sh build optimization, and the new features
2026-06-12 · 16 min read #keycloak#sso#oidc#security#devopsFAPI 2.0 — A Complete Guide to the Financial-grade API Security Profile
A thorough walkthrough of FAPI 2.0 Security Profile, the standard of the open banking and open data era. Covers the simplification from FAPI 1.0 to 2.0, the core requirements of PAR, PKCE, and sender-constrained tokens,
2026-06-12 · 15 min read #fapi#oauth2#oidc#keycloak#securityZero Trust and Identity-Aware Proxy — Building the BeyondCorp Model Yourself
The perimeter is dead and identity-first security is the new default. This post walks through the core of the Google BeyondCorp papers and builds an Identity-Aware Proxy from scratch with oauth2-proxy and Keycloak. We co
2026-06-12 · 18 min read #zero-trust#iap#beyondcorp#oauth2-proxy#keycloakSPIFFE/SPIRE Workload Identity — Service-to-Service Authentication Without Secrets
SPIFFE/SPIRE is the answer to secret sprawl in the age of non-human identity. We cover SPIFFE IDs and SVIDs, the SPIRE server/agent architecture and attestation, hands-on Kubernetes deployment YAML, and automatic mTLS vi
2026-06-12 · 16 min read #spiffe#spire#mtls#workload-identity#kubernetesThe Hard Problem of Single Logout (SLO) — Designing Front-Channel and Back-Channel Logout
In SSO, logout is harder than login. This post covers the three-layer session model, how OIDC RP-Initiated/Front-Channel/Back-Channel Logout work and where they fail, the logout token JWT structure, the realistic failure
2026-06-12 · 17 min read #sso#oidc#saml#keycloak#logout