Explore weekly curated summaries and expert analyses highlighting the latest trends in cloud technology.

  • Signing TLS Handshakes Inside a TPM: Hardware-Bound Keys in Go

    A recent post by Christian Bshaatsbergen walks through a technique more Go developers should know: terminating TLS with a private key that exists only inside a TPM and never touches process memory. The post, Signing TLS handshakes inside a TPM, demonstrates the whole chain with a small library, and the mechanics are worth unpacking. Why…

  • Asahi Linux Reaches Official M3 Support

    Asahi Linux, the project that reverse engineers Apple silicon for Linux, now officially supports Macs built on the M3, M3 Pro, and M3 Max. The announcement landed on the project blog this week under the title M2 Episode 1, and it carries both good news and the usual honest list of caveats. What works The…

  • OpenAI’s Chief Scientist Says No Lab Is Ready to Scale at Full Speed

    OpenAI chief scientist Jakub Pachocki published an essay on September 6 called An Alien Mind, and the timing is hard to ignore. Three days earlier, the company shipped GPT-6 Astra, its most capable model yet and the first to cross a Critical threshold on cybersecurity evaluations. Days after that launch, the person who runs research…

  • Visualizing Rust’s Vtables: What dyn Trait Really Looks Like in Memory

    What is actually inside a trait object? Rust’s dyn Trait is one of those features most developers use daily and few have fully visualised. Sofia Belen’s write-up, Visualizing Rust’s Vtables, does the dissection, and it is a good read for anyone coming to Rust from C++ who keeps trying to map one language onto the…

  • Azure Firewall Auto-Learn SNAT Routes Is Generally Available

    The SNAT problem that needed solving Here is a scenario that plays out in half the hybrid networks I have seen: traffic from Azure toward an on-premises range that is not one of the standard private ranges silently gets source-NATted by Azure Firewall. The on-prem firewall sees an unexpected source IP, a policy match fails,…

  • AKS Artifact Streaming Reaches General Availability

    Pulling images is the slow part nobody budgets for If you have ever watched a scale-out event on AKS with one eye on the pod list, you know the pattern: the scheduler places pods in seconds, then everything sits in ContainerCreating while each node drags a multi-gigabyte image out of Azure Container Registry. Your autoscaler…

See All