Tim Retout

My hobby: following GOV.UK to look for interesting announcements.

When you pass an AWS certification exam, sometimes it can extend the life of related lesser AWS certifications.

“You are what you eat” – but perhaps this is even more true of our information diet.

I am somewhat jet-lagged, having returned from Washington DC just before the 250th anniversary celebrations which will be happening today.

The seL4 organisation on GitHub uses git-repo to manage multiple source repositories, and so there are a large number of projects to get your head around when figuring out the ecosystem.

I have proposed the deletion of an obsolete script, but it makes me feel complicated feelings so I’m going to try and express those.

I have been looking at seL4 some more recently, and had a small patch merged today to remove a legacy Python module from a helper script.

While watching the Vienna New Year’s Concert today, reading about its perhaps somewhat problematic origins, I was struck by the observation that the Strauss family’s polkas were seen as pop music during their lifetime, not as serious as proper classical c…

Recently I revisited my previous interest in seL4 - a fast, highly assured operating system microkernel for building secure systems.

It can be incredibly easy for a frontend developer to accidentally write a client-side cross-site-scripting (DOM-XSS) security issue, and yet these are hard for security teams to detect.

This post was possibly inspired by my daughter’s homework assignment to interview an old person about technology change.

At ArgoCon today, Thomas Fricke gave a nice talk on Cloud Native Deployments in Air Gapped Environments describing container vulnerability scanning in the German energy sector… and since he didn’t mention data diodes, and since some of my colleagues at Oa…

At CentOS Connect yesterday, Jack Aboutboul and Javier Hernandez presented a talk about AlmaLinux and SBOMs [video], where they are exploring a novel supply-chain security effort in the RHEL ecosystem.

LWN reminds us that Git still uses SHA-1 by default.

At the end of March, the source code to StackRox was released, following the 2021 acquisition by Red Hat.

On Tuesday I attended the Open Source Strategy Forum in London, which is a meeting of the Fintech Open Source Foundation (FinOS), part of the Linux Foundation.

Last month, Google Cloud published Planning for the Worst: Reliability, Resilience, Exit and Stressed Exit in Financial Services.

Maglev is the codename of Google’s Layer 4 network load balancer, which is referred to in GCP as External TCP/UDP Network Load Balancing.

I recently had cause to remind myself of Google Workspace administrator account best practices.

After writing a trie I wanted to better understand its performance, so I wrote some benchmarks against various other Go implementations for storing UK postcodes.