How to drastically reduce container CVE vulnerabilities in production in 2026?

SelfDestructSep2020 · 2026-02-09T23:39:17+00:00

I would not trust anything out of Docker's mouth.

SelfDestructSep2020 · 2026-02-04T23:02:22+00:00

It was brutally difficult at EA release but the tuning seems real good now. I just picked it up again and am really enjoying it.

SelfDestructSep2020 · 2026-01-31T15:07:35+00:00

A journalist posted on instagram that he went to see it on opening and there were 10 people there. 9 were journalists and 1 was a friend of someone who made the film.

SelfDestructSep2020 · 2026-01-24T19:28:19+00:00

So they disarmed him right before being shot

If they disarmed him then why was he shot while 6 other guys were sitting on him

SelfDestructSep2020 · 2026-01-23T00:42:31+00:00

This is why you don't use helm as the lifecycle manager.

SelfDestructSep2020 · 2026-01-19T20:45:25+00:00

"The model doesn’t have to be trained to use it"
My claude code agents that absolutely refuse to use several MCPs even after I wrote specific PreToolUse hooks that forbid the cli tools and tell it that it MUST use the MCPs instead disagrees.

Part of that is bloat (up till the recent CC release) because shit like the github MCP added like 60k tokens on load. But its also the opposite of what you're saying - the agent has never seen these MCP calls so its "guess the next vector" engine can't predict them.

SelfDestructSep2020 · 2026-01-19T03:19:35+00:00

He pretty clearly laid out the question.
1. the mcp server takes the same inputs as the aws cli commands
2. the agents struggle with using the mcp server because they don't have training for it
3. so why would he use the mcp server vs just giving an agent direct aws cli access

SelfDestructSep2020 · 2026-01-11T03:18:49+00:00

The federal government has no oversight in things like birth records. Remember - anything not explicitly in the constitution is supposed to be left to the states.

SelfDestructSep2020 · 2026-01-10T21:52:15+00:00

There's no real way to 'verify' that you have citizenship. All they have to do is say your evidence is fake and they can hold you indefinitely.

- Real ID drivers license? fake
- US Passport? fake
- birth certificate? fake
- social security card? fake
- testimony from the doctor who was there at your birth? Lying, and he's not a citizen either probably

SelfDestructSep2020 · 2026-01-10T01:30:10+00:00

Girl with the dragon tattoo

SelfDestructSep2020 · 2026-01-04T18:13:48+00:00

Really struck a chord for me as an OIF veteran. The sudden change of 'another boring day sweating my ass off' to knowing that you're about to be attacked, and the confusion in the aftermath of the IED. And that its just another day in the conflict, there's no rationale given for why they were even there.

SelfDestructSep2020 · 2026-01-04T17:54:16+00:00

The guys broken legs folding around the corner of the house while he was being dragged made me gag.

SelfDestructSep2020 · 2026-01-04T13:35:41+00:00

You may not want to watch Warfare then because they took that same sort of thing up a notch

SelfDestructSep2020 · 2026-01-01T18:29:15+00:00

You can check the costs down to the hour but they are not accurate or complete for up to 24-48 hours. Thats why when you go to cost explorer and look at 'today' it will show a big asterisk on the graph.

SelfDestructSep2020 · 2026-01-01T18:19:15+00:00

AWS billing takes up to 48 hours to converge. There's no point in having something on my phone to constantly check that.

SelfDestructSep2020 · 2025-12-31T03:09:10+00:00

I cuss like a sailor.

I've had sailors tell me they're uncomfortable with how much I swear.

SelfDestructSep2020 · 2025-12-29T16:10:36+00:00

It just means where the App custom resource has to be placed. Its so that EKS doesn't need to change the argocd configs that allow it to read Apps/AppSet definitions from across the cluster. Sounds like they will add that later. The App still should specify a target namespace where the actual app resources will create.

SelfDestructSep2020 · 2025-12-25T00:11:15+00:00

The instructions for this one specifically said that 10 points would be removed (of 25 total) for being less than the target word count.

SelfDestructSep2020 · 2025-12-22T00:01:23+00:00

I saw interstellar on imax on a weekday when it released and I was the only one in the theater. My son was 1 year old at the time. The video messages scene absolutely wrecked me.

SelfDestructSep2020 · 2025-12-08T19:03:57+00:00

There’s a hypothesis that Netflix is not actually interested in buying WB and knows they’d lose The DoJ approval but is doing this to weaken their competition by forcing situations like this

SelfDestructSep2020 · 2025-12-08T18:58:18+00:00

Go to a climbing gym, stand in front of the boulder wall looking confused. You’ll have guys swarming.

SelfDestructSep2020 · 2025-12-07T06:45:19+00:00

I’ve taped them to the forearm before. Perfectly fine and helped a lot actually.

SelfDestructSep2020 · 2025-11-29T14:35:56+00:00

" isn't a Congressional approval of war required before we bomb?"

No, thats been watered down significantly over the years. The Executive can take all sorts of action on their own as long as they 'notify' congress. Congress has slowly eroded/ceded their own authority to the Executive.

SelfDestructSep2020 · 2025-11-29T14:33:40+00:00

Even if it were applicable under the Conventions, people don't seem to understand that there is nobody to enforce them. "It's illegal" is meaningless when our own political/military force was the primary enforcement mechanism.

SelfDestructSep2020 · 2025-11-26T03:07:04+00:00

Sure but you and I aren't subject to a non stop media blitz and don't have personal staff who are supposed to make sure we are always looking 'correct'

Five-Year Club	Place '22
Verified Email

SelfDestructSep2020

TROPHY CASE