Scott Mcintyre

I laugh at your small startup running k8s, scaling for users you don't have. I also edit with vim in prod.

[Jeremy Olson @jerols]

You are right, I should have never posted this in a public forum — and that mistake is genuinely mine.

[Jared Palmer @jaredpalmer]

“self-host clickhouse, make no mistakes”

[Elon Musk @elonmusk]

Interesting.

Grok 4.6 releases around August 7. This will be the 1.5T model with significantly improved SFT & RL.

Grok 4.7 will be the 2.1T model released a few weeks later. This will be better than 4.6 in every way, except slightly slower to serve, albeit with even better token efficiency.

[Scott Mcintyre @Infralead]

@JeromySonne Funnily enough around this time we had some customers get all their traffic via just one or two cloudflare edge ips when it used to average ~300. Assume they changed something.

[Austin @IamAroke]

Adding Kubernetes to a three-person startup is an engineering crime

[Lazy IT Guy @lazy_IT_guy]

My automated ticket-approval scripts were running so efficiently that management started questioning why they were paying me $200k a year.

I realized that if the network runs flawlessly, executives start to view IT as a redundant expense rather than a vital shield.

I wrote a new background script that intentionally drops the CEO's home Wi-Fi connection for exactly 14 seconds every hour.

Whenever he complains about his smart-thermostat disconnecting, I barge into his office looking completely exhausted and covered in thermal paste.

I tell him I was up all night manually wrestling an aggressive 0-day trojan that was specifically targeting his personal IP address.

I vividly describe how the hackers tried to route a ransomware payload through his smart-fridge to liquidate his 401k.

I explain that I had to temporarily shut down the local power grid's routing table just to quarantine the malicious packets.

He is now convinced that an international syndicate of cyber-terrorists is obsessed with destroying his life.

He treats me like a personal bodyguard, routinely buying me $80 prime rib lunches to thank me for keeping his family safe from the dark web.

The secret to job security is fabricating an invisible, terrifying enemy that only you possess the power to defeat.

[Scott Mcintyre @Infralead]

I still see customers who had their data, instances and databases disappear when Iran hit Bahrain the first time who have never received a postmortem and been ghosted by AWS support , months with no reply.

[Gergely Orosz @GergelyOrosz]

Given how embarrassing this outage was for AWS (and every one of their customers), the least I’d expect is a *public* postmortem

AWS HATES making postmortems public, even for global service outages like this one would be considered (only 3 public postmortems the last 4 years!)

[Scott Ullrich @sullrich]

I co-founded pfSense. For the last year I've been building its successor.

If you run pfSense today, you already know the reasons to look around: development you can't influence, a CE edition that feels like an afterthought, FreeBSD driver roulette on modern hardware, and a config workflow where one bad apply on a remote box means a drive.

nfSensei is my answer. Built from scratch in Rust, on Linux, and designed around the things pfSense users actually complain about.

Your config.xml imports. There's an importer that reads your pfSense config, shows you exactly what maps over and what needs attention, then applies it. You don't start from zero.

You can't brick it from the couch. Changes stage as a candidate, diff before apply, validate through the real engines before anything is written, and auto-roll-back if you don't confirm in time. If a config ever fails at boot, the box falls back to the last good one on its own.

The hardware works. Linux base means modern NICs and drivers just work — and the fast path compiles your rules to XDP at 40Gbps.

Automation is native, not scraped. Everything the UI does is a documented API call — about 1,140 of them, with a built-in explorer. Your Ansible finally gets a real interface.

The VPNs are current. WireGuard, IPsec, Tailscale, and self-hosted mesh — your own control plane, your keys — plus post-quantum key exchange where it counts.

The experimental stuff has its own wing. Thirty-plus Labs features behind toggles: WAN bonding that fuses multiple cheap uplinks through a $5 VPS into one resilient pipe, per-flow SLA telemetry with tamper-evident audit chains, GeoDNS that steers traffic by live RTT and load, application-aware QoS, config push to a whole fleet of remote nodes, and an AI assistant on the box that reads your actual interfaces and logs using local models. Toggles are per-browser and can't touch your running config — flip things on, break them, tell me about it. Oh, and there is much more to mention here!

Self-hosted, on your hardware, no cloud account, no subscription.

It's NOW IN ACTIVE BETA (previously alpha) with about 40 testers, and bug reports typically get fixed in days. I want more people who know what pfSense does well and can tell me exactly where nfSensei falls short.

If you are interested in testing please email me: [email protected]. Tell me about your pfSense setup and I'll get you access.

Note: Affiliates and employees of Netgate are not invited.

[Graham Christensen @grhmc]

@spendergrsec

[Mike Gardner @mikegardner_wb]

BREAKING NEWS

“Furious” Starmer was not told local elections had taken place yesterday.

The PM claims civil servants kept him in the dark until this morning.

He has ordered an enquiry into why the elections had gone ahead without his knowledge.

“I thought we’d cancelled them” he told Sky News.

[DENIC eG @denic_de]

Press Release regarding the technical incident --> https://t.co/U3OkABAXtU #denic #de #dnssec

[Brad Spengler @spendergrsec]

Upstream's covering up of security information they're aware of at time of commit is directly related to why your distros have no fixes for the https://t.co/OSvuOIxZ0Z vuln. Completely irresponsible.

[Brad Spengler @spendergrsec]

People are now going to assume coordination happened that didn't, that releases were planned that weren't, and all kinds of other dreamed up scenarios. Reality is Eric Biggers stepped in after the blog post to save your day & make this look less terrible for Linux.

[Scott Mcintyre @Infralead]

@eurofounder Twitter needs more of this content

[Nik Samokhvalov @samokhvalov]

this is not ok

implement budget limit feature already

Anthropic has it
OpenAI has it

Google still doesn't?

[Tibo @thsottiaux]

Three million people are now using Codex weekly - up from two million a little under a month ago. Incredible to see the growth. Thank you to all of you and to the ecosystem we’re part of. To celebrate, we’re resetting rate limits so you can keep building, and we’ll reset them every additional 1M users until we reach 10M, so we can keep celebrating along the way.

Enjoy and thank you!

[Scott Mcintyre @Infralead]

@Skylex____ @levelsio This was one of the things I wanted to check before getting a Tesla, but it was fine. I've had a few hire cars were I felt the touch screen for the thermostat was actually dangerous and distracting.

[Scott Mcintyre @Infralead]

It's sad but you can see the difference in the majority of "tablet babies" vs the minority that don't allow their kids excessive screen time or short form content with how they behave and what they find engaging.

[Scott Mcintyre @Infralead]

Kids being constantly stimulated every 20 seconds from early years but apparently there is no relation to that and the massive increase in attention and behaviour issues. Of course it has negative consequences and anyone pretending otherwise needs to check their morals.

[Angel Eduardo @StrangelEdweird]

"At this point, I really have to question the seriousness of anyone who claims that the evidence shows that social media is bad for kids. We’re now reaching a point where the research is increasingly overwhelmingly pointing in the other direction."
https://t.co/22ThsStnCu

[Christoffer Bjelke @chribjel]

remember when Andres Freund basically saved the entire internet because he noticed a 200ms delay for his SSH login?