For over a century, both the prestige and budget of a corporate department have been measured by a single crude metric: headcount. If you manage 500 people,
On Second Thought Episode 08. The reflex is universal: every new service ships in its own container. The container is now the unit of thought, not merely a deployment artefact. Three currents converged. Isolation: Poul-Henning Kamp's FreeBSD Jails (1999, FreeBSD 4.0 in March 2000) provided kernel-native isolation with no daemon, one coherent abstraction; Solaris Zones (2004), Linux namespaces and cgroups (2006 to 2008, eight separate namespaces), LXC (2008), Docker (2013) reproduced the technique with progressively less coherence and more advertising. Org-shape: Scrum codified between 1995 and 2001 split organisations into sprint-shaped teams; Melvin Conway's 1968 paper had explained in advance that software mirrors its organisation's communication structure; the container became the natural envelope. Runtime: Node.js (Ryan Dahl, 2009) was single-threaded by design and multi-core hardware required multi-container deployment. The cost arrives in four layers: image bloat (node:22 over a gigabyte for a 50 MB application), supply chain (the May 2026 npm wave reached 172 packages, 403 versions, ~518 million cumulative downloads), daemon overhead (dockerd above 5 GB at 183 containers), and network tax (a function call ~1 microsecond, a network call between services ~1-5 milliseconds). The retreat is documented: Amazon Prime Video returned video monitoring to a monolith for ~90 per cent cost reduction; Segment consolidated 140 services into one; Istio quietly merged its own control plane back into a single binary; 37signals left AWS and recouped hardware inside year one. The alternatives have been quietly working: FreeBSD Jails, Capsicum, OpenBSD pledge and unveil, Go and Rust finding their own cores. The honest question is whether isolation, runtime split and team split were ever the same question.
The lasting influence of Netscape Time - The History of the Web
After Netscape, the speed of software sped up beyond what anyone could have imagined. Thanks to a documentary crew and a ghost writer, we have a full view of the whole thing.
Compliance Standards Are Not Carved in Stone, Stop Treating Them Like They Are: A 2026 Field Report
Your compliance standards are not carved in stone, your competitors are not waiting for your next change board meeting, and your security team has 18 months to pick a side. A 2026 field report from a conversation that should never have happened.
Technical Beauty Episode 35. tcpdump (Van Jacobson, Craig Leres, Steven McCanne at LBL, 1988) is a thin command-line filter on top of libpcap, on top of BPF. McCanne and Jacobson's 1992 paper 'The BSD Packet Filter' (USENIX Winter 1993, Best Student Paper) replaced Sun's NIT stack-based filter with a register-based in-kernel pseudo-machine; measured up to 20x faster than its predecessor and up to 100x faster than NIT on the same hardware. libpcap, factored out around 1995, is the capture library every serious network tool uses: Wireshark, tshark, dumpcap, Zeek, snort, suricata, nmap, ngrep, dsniff. eBPF (Alexei Starovoitov, Linux 3.18, December 2014) extended the same architecture with a wider register file and a verifier; it is what powers most contemporary Linux observability. The technical beauty is the layering, not the tool.
Google is transforming Search from a list of links into an AI-powered experience filled with conversational answers, autonomous agents, and interactive interfaces — a shift that could further reduce traffic to publishers across the web.
What I think is going on with AI is that what software managers really want is to be able to turn a dial marked "Quality" down and see a gauge marked "Speed" go up. AI agents seem like they could give managers that dial, so they've gotten very excited.
We are all familiar with ideas said to be ahead of their time, Babbage’s analytical engine and da Vinci’s helicopter are classic examples. We are also familiar with ideas “of their time,” ideas that were “in the air” and thus were often simultaneously discovered such as the telephone, calculus, evolution, and color photography. What is […]
What the PNR locator on your boarding pass actually contains, and why the fare calculation line on your e-ticket is written in a currency that does not exist.
Software Defined Talk Episode 572: The world isn’t curl
This week, we discuss how security gets sold to execs, where agentic coding and security collide, and Cloudflare vs. Datadog's diverging paths. Plus, Coté weighs in on sugar cookies.