The post emphasizes the necessity of a 'secure by default' approach for AI agents, advocating for sandboxing and isolation over traditional security measures based on deterministic behavior.
About:
Tuan-Anh Tran is a tech leader at VPBank, passionate about containers and cloud, with interests in programming and mechanical keyboards.
Website:
Specializations:
Interests:
Subscribe to RSS:
BuildKit is a powerful, pluggable build framework that enables the creation of diverse outputs beyond Docker images, utilizing efficient caching and custom frontends.
Achieving zero known CVEs in VMs is possible through RHEL image mode, which offers immutable OS images and simplifies updates, enhancing security and user confidence.
The post explores the legal challenges of relicensing open source software, particularly through AI-assisted rewrites, and their implications for copyright and Copyleft licensing.
The post argues for a shift from traditional CVSS-based patching to a bootable container model that enhances security and reduces update fatigue.
6.2Shifting Left of CI
2026-02-05 • automation software development devops ci ai
The shift in Continuous Integration emphasizes faster verification processes for AI coding agents, requiring local execution and efficient tools to enhance productivity.
The blog post highlights the shift to a 'Post-Agentic' era where multiple AI agents enhance code generation efficiency through collaboration and orchestration, prioritizing outcomes over individual agent performance.
The emergence of disposable software is transforming development practices, requiring a focus on durable architecture and immutable contracts to manage temporary code effectively.
5.7What has Docker become?
2026-01-20 • open source strategy docker containerization ai
Docker Inc is navigating an identity crisis as it pivots from developer tools to AI infrastructure while facing challenges in monetizing its successful containerization technology.
The author critiques his previous over-engineered approaches to AI agent security, advocating for simpler, more effective solutions like git worktrees and lightweight sandboxes.
5.6Phần mềm gõ tay
2026-01-17 • developer code software quality ai handmade software
Bài viết nhấn mạnh rằng trong ngành phần mềm, giá trị thực sự nằm ở chất lượng và trải nghiệm người dùng, không chỉ ở việc viết code thủ công.
The blog post highlights the urgent need for individuals to take control of their digital privacy in the AI era through self-hosting and open-source tools.
5.5All Flash NAS Upgrade
2026-01-18 • linux storage management home server truenas nas
An exploration of upgrading to an all-flash NAS setup, focusing on hardware choices and evaluating various operating systems, ultimately favoring TrueNAS Scale for its features.
The text discusses a common issue with Blizzard games where the update agent stops working, preventing people from playing. The author shares their experience with the issue and provides a workaround for fixing it.
0Execution is cheap(er)
2025-04-12 • innovation execution ai
The text discusses how the saying 'ideas are cheap and execution is everything' is no longer true due to the rise of AI, making execution cheaper and easier. It emphasizes the importance of good ideas and how AI is giving more peo...
The text discusses the security concerns related to MCP, particularly the tool poisoning attack, and proposes solutions such as using structured schemas for tool descriptions and proper sandboxing. The author also introduces hyper...
The integration of AI no longer creates a significant difference for products, as AI is now too common. Focusing on having AI as a differentiating factor is risky, as competitors can quickly find more creative ways to use AI. The ...
The text explains how to download view-only Google Sheets using the htmlview feature, which allows the spreadsheet to be rendered as a static HTML page and then downloaded in other formats such as CSV or Markdown.
The text provides a guide on how to write your first Arch Linux package, including creating an account with ArchLinux AUR, generating an SSH key pair, writing the package, and publishing the package.
0Lite Youtube Embed for Hugo
2025-02-13 • web development youtube hugo themes
The post discusses how to embed YouTube videos in Hugo for a blog. It compares the traditional method of embedding videos with a new solution that only loads the video thumbnail at page load and then loads and plays the video upon...
0OBS - Fedora fiasco
2025-02-13 • software packaging linux flatpak fedora obs studio
The open-source streaming software OBS Studio has been at the center of a packaging controversy within the Fedora Linux community. The situation has escalated, with a detailed discussion unfolding in this Fedora Workstation issue....
0In market for a new TV in 2025
2025-02-05 • technology review tv
The author is looking to buy a new TV, with specific criteria such as 65 inch++ 4K, OLED, 120Hz++, and 1000 nits. After researching, the author has narrowed down to 4 models: LG C4, LG G4, Samsung S95D, and Samsung S90D. The LG C4...
0How to install Cursor CLI on Linux
2025-01-16 •
The text provides a workaround to install Cursor CLI on Linux, as the CLI integration is currently broken on Linux. It includes a script to launch Cursor IDE and instructions to make it executable and move it to the PATH.
00x0.st - temporary file hoster
2024-12-26 •
0x0.st is a simple and open-source solution for temporary file hosting. It allows users to upload files for free and keep them for at least 30 days. The author shares a script to upload files or data directly to 0x0.st and explain...