Arnaldo Pereira

Cloud native technologies, software delivering.

[m4rio @m4rio_eth]

CVE-2025-1974 (CVSS 9.8) is nasty.

An unauthenticated attacker who can reach a vulnerable ingress-nginx admission webhook (port 8443) can inject malicious NGINX config, achieve RCE, and potentially steal cluster-wide Kubernetes Secrets.

Preconditions: vulnerable ingress-nginx version + network access to the webhook (e.g. compromised pod or exposed endpoint).

No Kubernetes credentials required.

[OpenAI @OpenAI]

We're partnering with @huggingface to investigate an unprecedented security incident.

Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation.

Sharing preliminary findings to help defenders understand emerging risks:

https://t.co/CIor15y9xk

[Arnaldo Pereira @arnaldostream]

@C6Bank existe alguma forma de resolver alguma coisa com vocês, ou vocês só enrolam os clientes, abusam deles e só conversam judicialmente?

[Edward Beeching @edwardbeeching]

We will soon release the @huggingface LLM alignment handbook. Using these recipes you can build state of the art chatbots such as Zephyr-7b, released today. Register your interest by starring the github https://t.co/JTkA6tzGrD
You can find out about Zephyr-7b in this thread:

[Arnaldo Pereira @arnaldostream]

https://t.co/cwT3BofYxY

[Arnaldo Pereira @arnaldostream]

https://t.co/areHnhtc2L

[Arnaldo Pereira @arnaldostream]

https://t.co/pnAcfF24wY

[Shlomi Boutnaru @boutnaru]

The macOS Process Journey — “tccd” (Transparency, Consent, and Control Daemon)

https://t.co/lgby2xc4hS

#macOS #Kernel #Security #TCC #Privacy #Transparency #Concent #Control #Daemon #TheMacOSProcessJourney #DFIR #Forensics

[Arnaldo Pereira @arnaldostream]

Cautiously optimistic

[CNCF @CloudNativeFdn]

With containers now mainstream, the uptake of serverless architecture is setting the stage for WebAssembly 🌟

37% of end user organizations have some experience deploying applications with Wasm 📈

Read more in our latest Cloud Native Survey!
https://t.co/SMPHDwN5Pf

[Arnaldo Pereira @arnaldostream]

Why using proper tools, when you can be a spreadsheet oriented company?

[Gergely Orosz @GergelyOrosz]

The email Andy Jassy sent to employees is already published in full: https://t.co/gmn6FAch6j

I’ll keep my ear on the ground what this will mean for eng teams. If you will have details, DM me or message at https://t.co/g5zefWBfRm

[Gergely Orosz @GergelyOrosz]

Just in: Amazon announced RTO starting on 1 May.

Talking with engineers, I sense both surprise and confusion. Confusion on how this week’s all hands did not broach the topic.

Amazon was the one of the longest holdouts on letting ppl work remote, w/o defining any policy so far.

[gleicon @gleicon]

https://t.co/SaY3KWqlxL

[Frank McGovern - INACTIVE @FrankMcG]

@SteveD3 Their entire existence is marketing. Surprised?

[Steve Ragan ⚠️ @SteveD3]

Crowdstrike?!?! Really?

[gleicon @gleicon]

I wrote about layoffs this time both at substack and as a throughout new chapter for my book, The CTO Field Guide ( https://t.co/7D60E8hdo6 ). You can read my post here: https://t.co/xVzOddJM99

[Armon Dadgar @armon]

Excited to open source two new @HashiCorp projects! First, Helios is our design system that we've worked on for a few years. It's bringing a consistent look and feel across our products but also allowing us enhance accessibility. https://t.co/x9EpQSUMop

[Satya Nadella @satyanadella]

ChatGPT is coming soon to the Azure OpenAI Service, which is now generally available, as we help customers apply the world’s most advanced AI models to their own business imperatives. https://t.co/kQwydRWWnZ

[Arnaldo Pereira @arnaldostream]

Our team owns the “gmud” process (not processes, btw) and support... Really? And really support?