Security

Two things launched at Summit, not one. And the reason anybody cares has less to do with containers than with how fast a vulnerability turns into an exploit now.

Bitwarden’s Kasey Babcock and I get into open source trust, managing secrets as code, and the road to passwordless.

I wrote this for the CIQ blog: an honest look at when community Rocky Linux support covers you and when a production environment needs the vendor support RLC Pro adds.

I wrote this for the CIQ blog: how to choose between RLC Pro AI and RLC Pro Hardened depending on whether you are running AI infrastructure or working under strict compliance.

I wrote this for Rocky Linux: Microsoft is rolling out new Secure Boot CAs and a KEK. Here is what changes and how to check your systems.

I wrote this for Rocky Linux: an opt-in security repository that bridges the gap when a public exploit lands before upstream has a fix.

I put this out for Rocky Linux: patched kernels are available for 8.10, 9.7, and 10.1 addressing CopyFail. Update and reboot now.

I wrote this deployment guide for CIQ, walking through how to get RLC Pro up and running on Google Cloud Marketplace from start to a live VM.

I wrote this guide for CIQ covering how to get RLC Pro running on AWS, from the Marketplace listing to a live EC2 instance with LTS and FIPS available.

I co-wrote this recap with Michael Young and R. Leigh Hennig covering CIQ’s presence at SCaLE 23x in Pasadena, and I was there in person as a speaker.

I wrote this for TuxCare to explain, step by step, how KernelCare applies kernel patches to running memory so teams stay secure without rebooting.

I wrote this for TuxCare on how the end of CentOS Linux pushed enterprise Linux toward collaboration, transparency, and community-led stability.