gammatron - the weblog


the utter uselessness of job interviews (ny times)
big database of command line examples and howtos (via warp) [devsecops]
DevOps/SRE Exercises (github) [devops] [devsecops]
How to Read the Room (Fatherly)
Understanding Software Suppliers (Resilient Cyber) [devsecops]
Become a More Effective Leader at Work (lifehacker) [Careers] [Management]
William Blake on What We Keep In Loss (The Marginalian)
The Greatest Commencement Addresses of All Time (The Marginalian)
Three years all-remote at GitLab: Know the unknown unknowns (Michael Friedrich) [Careers]


build recorder (records interactions between files and tools during compilation) (github) [devsecops]
my distaste for your solution does not mean disregard for the problem (techdirt)
cryptography bill of materials (IBM github)

JULY 2023

just-in-time theory of user behavior (jeff atwood/coding horror) [psych]
side-channel attack via power LED (ars via schneier)
turn command-line scripts into gifs for demo/docs (charmbracelet/vhs)
advanced macOS commands (saurabhs)
Dirty Martini Pasta (delish) [cooking]
Pasta With 15-Minute Burst Cherry Tomato Sauce (epicurious) [cooking]
40-minute interview with PJ Harvey (npr)
acura tsx wagon tonneau cover part # 84400TL4G12ZA (amayama)
acura tsx wagon tonneau cover part # 84400-TL4-G12ZA (ahparts) [diy]
bill watterson on creativity, inspiration, rejection, drudgery, grit, and being interesting (the marginalian)
monster gravitational waves "detected" (sort of) (nature)

JUNE 2023

the church of the clocked screws (lost art press)
the day the lake took the edmund fitzgerald (orion nature and culture) [longreads]
how the best leadership teams navigate uncertain times (hbr) [comms][management]
How to Write Email with Military Precision (hbr) [comms]
is cybersecurity unsolvable? [scott shapiro profile] (ars technica)
seiko dial logo dictonary (thewatchsite)
list of seiko movements (quartz and mechanical) (watchwiki)
is cybersecurity unsolvable? (ars technica) [longreads][infosec]

MAY 2023

disable smb1 and netbios in macos (performance improvements) (apple)
climate and average weather year round for given locations (global) (weatherspark) [wx]
how artists have gotten shadows wrong through history (mit press)
Jorge Luis Borges on preferring english to spanish (instagram)
add remotes to any garage door opener (how to wire up external RF relay) (Rick's Tech Tips) [diy]
prefab, reconfigurable plastic housing (cellophane house) (cf. loblolly house)
bio-based 3d-printed house (umaine)
amsterdam gardens guide (vogue) [travel]
three day trips from amsterdam (conde nast) [travel]
hunting russian "snake" malware (cisa) [devsecops]
experiences of seven homeowners living in frank lloyd wright houses (Architectural Digest)
How To: LG/Kenmore Ice Chute Door 5007JA3006R (youtube) [diy]
yet another solarwinds postmortem (wired) [devsecops]
roundup of new coffee brewers at SCA 2023 (daily coffee news) [coffee]

APRIL 2023

the running conversation in your head - inner voice (atlantic) [longreads]
how ai could write our laws (schneier/sanders via crypto-gram)
inner voice - "We are all in pieces, struggling to create the illusion of a coherent 'me' from moment to moment." (atlantic)
what bobby mcilvaine left behind (two decades since 9/11) (atlantic) [longreads]
design lover's guide to amsterdam (architectural digest) [travel]
nyc's most beautiful public bathroom (atlas obscura) [podcasts]
brad delong on intellectual and technical progress (conversations with tyler) [podcasts]
devops metrics often capture the wrong data (acm via john willis) [devsecops]
software supply chain practices are maturing (reversinglabs) [devsecops]
bipartisan bill for open source security (fedscoop) [devsecops]
roland griffiths inteverview - psychedelics, regrets, terminal diagnoses (nytimes)
sbom type definitions finalized (cisa) [devsecops]
column mini-dripper for pour-over coffee (indiegogo) [coffee]
boom times for used office chair dealers (vice)
emily dickinson's electric love letters to susan gilbert (the marginalian) [poetry]
me from myself to banish (emily dickinson via internetpoem) [poetry]
tips for collecting houseplants on the cheap (wirecutter)
seven questions to explore your core values (fatherly)
rick steves on traveling light, spontaneity (travel and leisure) [travel]
map of upcoming 2023 and 2024 solar eclipses (

MARCH 2023

classic literature featureing the figurative "literally" (mental floss)
examination of glen canyon/lake powell, western reseviors (incredible pictures) (high country) [longreads]
searchable database of public hiking trails (with maps) (alltrails)
Deep dive on Apple M2 Pro performance compared to AMD 3950X (via
Create SBOMs from github dependency graph data (gh-sbom) [devsecops]
Command Line Interface Guidelines (
Unsafe at Any CPU Speed (Jen Easterly remarks at CMU) ( [devsecops]


soviet-era analog/mechanical computer for astronavigation (mastodon)
"venting anger is like using gasoline to put out a fire" (slate)
train yourself to trust your gut more (hbr)
six alternatives to most popular national parks (wapo/pocket) [travel]
we've always been distracted (aeon) [longreads]
how to ask good questions (beside) [comms]
regular expression playground (regex101)
git checkout authentication for supply chain security (Ludovic Court├Ęs @ FOSDEM)
bit-for-bit reproducible container builds (akihiro suda @ FOSDEM) cf. [source date epoch][repro-get]
open source client for container development (finch via estesp/aws) [devops]


the perverse incentive of vulnerability scanning (josh bressers) [devsecops]
super easy pasta pomodoro (allrecipes) [cooking]
quality of random number generator significantly influences monte carlo simulations (more than imagined) (pubmed) [via matthew green]
america's culture warriors are going after librarians (coda) [longreads]
add sbom to containers with github actions (alex ellis) [devsecops]
buildkit dockerfile frontend (qnib) [devsecops]
crawl your mastodon graph for additional accounts to follow (followgraph)
crawl your twitter follows for mastodon handles (fedifinder)
reimagine the 2nd half of your career (continuous improvement &c) (hbr)
how to be a better friend (insider) [comms]
move old raspberry pi root filesystem to USB (instructables)
unleashed firmware for flipper zero (github)
fun things to try with flipper zero (
banished words for 2022 (npr)
long-bloom immersion/percolation technique with hario switch (kaldis coffee) [coffee]
hario swith comparison with clever dripper (Acquired Coffee) [coffee]
docker image for feeding ADSB data to (github)
docker image for feeding ADSB data to (github)
docker image for deconding ADSB (&c) from software-defined radios (github)
fascinating and infuriating intervew w/ retired defense investigator (radley balko) [longreads]


protons are weird (quanta) [longreads]
stocism in the post-pandemic world (esquire) [longreads]
collection of houseplant articles for non-gardeners (pocket)
best indoor plants for small spaces (apartment therapy)
13 indoor plants that don't need sun (gardening chores)
handmade travelers notebook alternative in multiple sizes (etsy)
thread with lots of details on Seiko 9T82 chronograph movement, including a lot of good pics of SBCG003 (watchprosite)
vulnerability scanner written in go (osv-scanner via google) [devsecops]
webapp for checking other website's TLS/encyrption algorithms (ssltest via qualys)
teaching kids about risks, making better choices (bbc)
fixing ux for one-off kubernetes tasks (alex ellis) [devops]
devops conferences/agendas/cfps (github)
Do not say, "Why were the old days better than these?" For it is not wise to ask such questions. (Ecclesiastes 7:10)
quick and dirty regenerate expired k3s certs (one year expiration) (ibm)
quick tutorial on using existing images to seed midjourney v4 (medium) [ai]
3d-printed panel converts ATX power supply to benchtop use (hackster)
fusion XIAO mechanical keyboard contest results (seedstudio) [keebs]
timings and other details for moon/mars occultation on December 7th (via amsci) [more]
free stock images (unsplash)
bypass news paywalls (12ft)


custom cases for small-run keyboard projects (p3dstore) [keebs]
ai-generated jodorowski/tron fantasy (via midjourney) [more] [fb]
open source dependency mapping tool from lyft (cartography) [devsecops]
lessons from the best mentors (hbr) [comms]
review of pentiment, video game where player is an artist in 16th-century Bavaria (wired)
mastodon server bootstrapping journal (blogs via linkedin)
casino card-shuffling machines are non-random (new sci via crypto-gram)
walk around world cities (citywalks)
drive around world cities and hear local radio (driveandlisten)


pi-esque multimeter/tool for RFID/NFC/BT and more (flipper)
trackball module for diy keyboards (github) [keebs]
reverse dall-e takes an image and provides a plausible text prompt (clip interrogator) [ai/ml]
OWASP kube top ten risks #2: supply chain vulnerabilities (owasp via github) [devsecops]
remove your personal data from aggregators (usa today)
the surreal case of a cia hacker's revenge (new yorker)
how democracies spy on citizens (ronan farrow/new yorker)
incredibly misguided critique of open source security (lawfare)
pleasure is good: how french children acquire a taste for life (conversation)
electric horology forum (nawcc)
flipclock restoration/repair forums (flipclockfans)
23 of the world's best hiking trails (cnn)
best and worst public transit seat covers (citylab)
how to have better arguments (psyche)
a close reading of the best opening paragraph of all time (lithub)
friendship ghosting: how to reach back out (stylist)
Michael Heizer's desert megasculpture (nytimes)
NSA Kubernetes Hardening Guide (icnews) [devsecops]
bowie biopic moonage daydream review (michigan daily)


json diff webapp ( [devops]
prediction that ukraine's military momentum will continue to increase (francis fukuyama)
commercial-grade automated aeropress-style infusion coffee brewer (~$5k?) (bunn trifecta) [coffee]
seven safest mushrooms to forage and eat (field and stream)
five open source security tools all devs should know (devopsdays dfw) [devsecops]
full screencaps from all star trek films (movie-screencaps) [memes]


sherlock holmes deductive interview technique (lou adler) [hiring]
the most important interview question of all time (lou adler via linkedin) [hiring]
AC frequecy converter (for running 50hz clocks on 60hz and vice versa) (kcc scientific) [horology]
Wintering, wisdom, and weathering life's darkest times (vox conversations podcast)
$75/cup panama gesha from klatch coffee (youtube) [coffee]
underrated alternative travel destinations (buzzfeed) [travel]
toyota probox minimalist van-shaped-objec (JDM only?) (motor1)
raspberry-pi-based tracking detection device (wired)
31 recipies to cook this August (kitchn) [cooking]
Satya Nadella talks about the future of work (microsoft)
remove tracking parameters from URLs in Firefox (ghacks via cryptogram)
Lex Fridman five-hour interview with John Carmack (spotify)
webapp for finding in-stock raspberry pis (rpilocator)
tool for archiving websites (has some anti-paywall features) (
webapp for bypassing news paywalls (12 ft)
8 top SBOM tools to consider (cso online) [sbom]

JULY 2022

the first complete sbom tool (tom alrich) [sbom][devsecops]
how to analyze an sbom (cloudsmith) [sbom][devsecops]
not just third-party risk (kusari) [sbom][devsecops]
ai-powered image upscaler (nero)
the myth of "I can't draw" (the conversation)
free file coversion tools (tinywow)
best-ever cabbage hash browns (delish) [cooking]
the two-question performance-based interview (lou adler) [hiring]
garlic confit recipe (kitchn) [cooking]
log4j post-mortem (cisa) [devsecops]
2022 Audubon Photography Awards (
cauliflower parmesean (delish) [cooking]
how to join ads-b tracking network (flightaware) [pi]
aquasec/CIS supply chain security guide (aquasec) [devsecops]
iconburst npm supply chain attack (sc magazine) [devsecops]
investigators tracking people who faked their own death (mel) [longreads]

JUNE 2022

who makes chicago's manhole covers? (chigago sun-times) [ironcovers]
github application security will win the appsec wars colin dembovsky
check if your keyboard can be eavesdropped through a microphone (keytap3)
why brewing coffee and tea are so different (serious eats) [coffee]
how fast are linux pipes? (Francesco Mazzo) [ops]
six mobility exercises for longevity (wellandgood)
zq, faster/easier alternative to jq (Steven McCanne) [ops]

MAY 2022

made to order tomoe river week-on-one-page planners (etsy)
various v60 techniques (rao, hoffman, kasuya, &c) (pouroverproject) [coffee]
tetsu kasuya 4:6 v60 technique (longshortlondon) [coffee]
Hario V60 Tetsu Kasuya Model (kaffenytt) (kurasu) [coffee]
how big companies kill ideas (scaling startups, learning from failure, &c) (decoder) [podcasts]

APRIL 2022

how to discover whether someone is actually happy at work (hbr) [comms]
casio fx-1 calculator with nixie tube display (twitter)
numerical projection display (cf. CDC 3300) (twitter)
apollo-era test/data equipment with faux-nixie display (twitter)

MARCH 2022

web-based microsoft word art generator (makewordart)
10 frank lloyd wright houses you can visit (afar)
how to tie 20 essential knots (outdoor life)
tool for viewing hidden metadata on airline reservations (github) (


various forum posts on hyperalignment for baratza vario grinder (reddit) (hb 1) (hb 2) (hb 3) [coffee]
arm-based upgrade board for Casio F91 (sensor watch)
five edible urban plants (outdoor life)
tmux cheatsheet ( [ops]
zsh config examples to review (joshua hartwell) (matt lim) [ops]
Nice things are meant to be enjoyed, even if it means they break sometimes (eater)
brining beans before cooking increases creaminess (serious eats)
Every Great Writer is a Great Deceiver: Vladimir Nabokov's Best Writing Advice (lithub)


global security database (gsd) [github database] [project plan] [csa circle group] [podcast]
five questions every manager should ask direct reports (hbr) [comms]
CostPlus Drug Company (Mark Cuban)
history of blinking cursor (inverse) [longreads]
better diff(1) output (github) [ops]
lsd - ls(1) deluxe w/ color, icons etc (github) [cf. exa][ops]
fx - interactive json processing (a la jqplay) (github) [ops]
fzf - general-purpose command-line fuzzy finder (github) [ops]
bat - better cat(1) with syntax highlighting (github) [ops]
duf - a better du(1) disk usage summary (github) [ops]


james webb space telescope mission tracker (live updates)(nasa)
macos security and privacy guide (github/drduh) [ops]
kdig for dns over https/tls examples (arch man) e.g. kdig +short +https [ops]
tetris players develop new ways to hold classic nes controllers for more speed (vice)
nyc diner-style ceramic coffee cup (moma store) [coffee]
the best mentors ask these 8 questions (fast company) [comms]
configure pihole for dns over tls (unbound) [ops]
configure pihole for dns over https (cloudflared) [ops]
how rainfail has changed in your area (usa today) [climate]
diverse teams are less comfortable, perform better (hbr)


install and use any command on any os (command not found) [ops]
mens jeans reviews (wirecutter)
moebius concept art from jodorowsky's dune (instagram) (google photos)
how to follow up with someone who isn't responding (hbr) [comms]
online open ldap test server (forumsystems)


losing your native language (bbc) [comms]


how to transfer stock into an ira (zacks finance)
one sentence will make you a more effective speaker (inc) [comms]
12 phrases that will make your audience put down their phones (inc) [comms]
stop ending your speeches with any questions (inc) [comms]


list of least-traveled highways by state with senic callouts (geotab) [travel]
interactive comparison of keycap profiles ( [keebs]
nyquist/levinson split 40/60 ortholinear keyboard (keebio) [keebs]
dsp40 40% staggered or orthlinear keyboard (keebio) [keebs]
remember anything with this 20-minute habit (inc)
be a more interesting conversationalist (inc) [comms]
questions interesting people ask (inc) [comms]
source for untabbed hario v60 filters (prima)
how english spelling got so disfunctional (aeon)
fricatives, with lots of tangents related to weird spelling in english (lingthusiasm podcast)

JULY 2021

mac/os x window management (remember positions &c) (slate)
new child tax credit faqs, including opt-out (irs)
baratza vario alignment video (youtube) [coffee]
baratza vario burr upgrade (youtube) [coffee]
baratza vario super alignment photo guide (home-barista) [coffee]
app to measure grind size distribution (ad astra) [coffee]
cybersecurity bad practices for critical infrastructure (cisa) [devsecops]
chicago to-dos (conde nast) [travel]
alonzo skiles livermore (findagrave) [ironcovers]

JUNE 2021

scary piece on vulnerabilities of weapon systems (crypto-gram)
benefits of being terrible (and great) at things (outside) [kaizen]
coffeevac 1/2 lb coffee cannister (tightvac) [coffee]
eight clues that a candidate will be a great hire (lou adler) [hiring]
writing in reverse for better written communication (emails, &c) (inc) [comms]
reading education is totally broken (apmreports) [comms]
monument spans continental plates in iceland (00group) [travel]
how to handle secrets on the command line (smallstep) [devsecops]
mrna revolution is just beginning (wired)

MAY 2021

Write Like You Talk: 12 Tips for Conversational Content (content marketing) [comms]
The good guy/bad guy myth (aeon)
You Can Only Maintain So Many Close Friendships (the atlantic)
america's most underrated national monuments (afar) [travel]
using ai/ml to probe software for vulnerabilities (wired via cryptogram) [devsecops]
docker container attack vectors and techniques (mitre) [devsecops]
free cloud-based linux host monitoring (interzer) [devsecops]
browse streaming services by genre, format &c (movieofthenight)
source for luggage parts, connectors, belt rivets etc (ohio travel bag)
high-end boutique dyneema bags/luggage (sdr traveller)
profile of memphis community radio stations (memphis flyer)
historic memphis buildings (historic

APRIL 2021

regular expression in-browser testing (regex tester - dan's tools) [devsecops]
tsundoku: the art of buying books and never reading them (bbc)
best office chairs (wirecutter)
deals on used high-end office chairs (seatingmind)
giving good compliments (ted ideas) [comms]
seven phrases to increase your power at work (fast company) [comms]

MARCH 2021

movment of indiana bell building while occupied in 1930 (via hn)
look for many small gains instead of few large gains (one percent rule) [kaizen]
obit for space shuttle engineer Allan McDonald (npr)
bash shell history tips - bang shortcuts (mooreds) [devsecops]


throwaway development container for docker (nicola) [devsecops]
octopus with completely transparent head (modernmet)
remote desktop for low-bandwith xserver (x2go)
short-lived ups passenger service on "quick change" cargo 727 freighters 1997-2001 (airways mag)
playground for jq (jqplay) [devsecops]
paen to midtown manhattan north of penn station (new yorker)
oldest manhole cover in nyc, in that unnamed neighborhood (se corner of 40th and 8th)


how to give better advice (sci am) [comms]
you will regret these choices in 10 years (medium)
the mathematical case against blaming people for their misfortune (psyche)
os x window management (rectangle)
os x automation tooling (hammerspoon)
important/urgent axes for decsision making (eisenhower matrix)
using dropbox on arm/raspi [1] [2] [3]
coffee flavor wheel (counter culture) [coffee]
quick and dirty how-to for building multi-arch docker images (docker blog) [devsecops]
most nutritious foods (bbc) [cooking]
major stargazing events for 2021 (natgeo)
configure raspberry pi for kubernetes (alex ellis)
boot raspberry pi 4 from USB (tom's hardware)


clearer thinking - improve rationality (good podcast as well) (spencer greenberg)
using obs &c for remote presentations (
webcam network of residential window views (windowswap)
browser-based photo editor with intuitive workflow (photopea)
teach it to a toddler to learn anything (feynman technique)
variation makes practice twice as effective (inc) [kaizen]


anger is temporary madness (massimo pigliucci)
remembering alex trebek (fivethirtyeight)
radical advance in multiplication speed (quanta)
jeff vandermeer: some version of the apocalypse is inevitable (sway podcast w/ kara swisher)
history/background on the circumflex (haggardhawks)
1983 war scare/able archer exercise (gwu nukevault)
three important life skills nobody taught you (


wifi qr code generator (qifi)
museum of obsolete library science (metmuseum)
history and evolution of the numpad (
colemak keyboard layout resources ( [keebs]
some bilingual people dyslexic in english but not their other language (medicalxpress)
open-source coloring/restoring of photos (deoldify)
conflict over ai/ml image upscaling/colorizing/adding frames etc (wired)


blacklight - real-time website privacy inspector (the markup)
comprehensive terminal/ssh for ipad/ios, with mosh support ( [devsecops]
wynton marsalis on 12 essential jazz recordings (pocket)
wynton marsalis picks his top 50 jazz recordings (jazz blog)


great thread on remote onboarding new hires (twitter)
three jobs that retention programs overlook (hbr)
improve your strategic thinking (hbr)
beagle bros, nrol-39, etc stickers (vintagetechstickers)
underground black market chalk dealers in academia (cnn)
overview of keycap profile differences (keeblog) [keebs]
transparent toilets in tokyo (nippon foundation)
image cloaking disrupts ml facial recognition (via crypto-gram)
fermi estimation, orders of magnitude, beirut/covid guessing (david epstein)
leather notebooks, pencil rolls, razor cases etc (inkit/etsy)
leather index card holder (etsy)
horween leather wallets etc (ashland chicago)
leather wallets, belts, watch straps (guarded goods)

JULY 2020

dutch oven bread (king arthur) [cooking]
listening via observation of light bulb vibration (via crypto-gram)
why new hand sanitizers smell bad (wirecutter)
old terminal keyboard arcana w/ why unix uses ~ for $HOME mentioned in passing (dave cheney) [keebs]
the three elements of trust (hbr) [comms]
promql query builder and learning aid (promlens) [devsecops]
historic memphis buildings and businesses (

JUNE 2020

the origin of unix pipes ( [devsecops]
extensive resource for AT&T long-lines tech and gear (
excellent vimrc example (github) [devsecops]
weird mods on mystery 737 (the drive)
long piece on Marcus Hutchins (kronos, wannacry) (@malwaretechblog) (via crypto-gram)

MAY 2020

noctilucent clouds intensifying in the arctic (spaceweather)
running dns-over-https with pihole (pihole)
os x command-line tool for reading cpu temp (github)
command-line utility for dispaying solar and lunar epherma (github)
promql (prometheus query language) cheat sheet, crash course (promql for humans) [devsecops]
install os x Catalina on older macs (dosdude1)