<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Peter&apos;s Blog</title><description>All posts from Peter&apos;s Blog.</description><link>https://blog.bizjak.dev</link><language>en</language><atom:link href="https://blog.bizjak.dev/rss.xml" rel="self" type="application/rss+xml"/><item><title>sshole</title><link>https://blog.bizjak.dev/posts/sshhole</link><guid isPermaLink="true">https://blog.bizjak.dev/posts/sshhole</guid><description>OpenSSH, musl crypt, and the password that matched.</description><pubDate>Thu, 05 Nov 2026 18:00:00 GMT</pubDate><content:encoded>The conventional reading of a one-character * in /etc/shadow is simple. That account has no password. Nothing you type should ever match it. Key-only users, locked-looking roots, service accounts that must never accept a password prompt: the star is supposed to be the permanent &quot;no.&quot;...</content:encoded><category>cybersecurity</category></item><item><title>eBPF networking, XDP and Cilium</title><link>https://blog.bizjak.dev/posts/ebpf-networking-xdp-cilium</link><guid isPermaLink="true">https://blog.bizjak.dev/posts/ebpf-networking-xdp-cilium</guid><description>Programmable data planes, kernel bypass and in-kernel observability, from a 1993 packet filter to a model-checked verifier.</description><pubDate>Tue, 03 Nov 2026 05:21:55 GMT</pubDate><content:encoded>The pitch for eBPF networking usually fits on a conference slide. eBPF is faster than iptables. XDP drops packets at line rate. Cilium replaces kube-proxy, sidecars disappear, and the agents and middleboxes we used to bolt onto every node and every rack can be folded into a few programs running inside the kernel. Every one of those sentences contains something true. Repeated without the machinery underneath, most of them mislead....</content:encoded><category>networking</category></item><item><title>On Europe&apos;s sovereignty</title><link>https://blog.bizjak.dev/posts/on-europes-sovereignty</link><guid isPermaLink="true">https://blog.bizjak.dev/posts/on-europes-sovereignty</guid><description>Europe&apos;s regulation-as-a-precaution punishes success, weakens security, and fails at digital sovereignty.</description><pubDate>Wed, 28 Oct 2026 04:52:22 GMT</pubDate><content:encoded>Ask a policymaker in Brussels what European digital sovereignty looks like, and you will usually hear about replacing an American software-as-a-service subscription with an open-source workspace, launching a federated social network, or passing another compliance framework that forces foreign cloud providers to store user tables inside a Frankfurt data center. That surface-level framing mistakes the coat of paint on the top floor for the foundation of the building. When people casually ask, &quot;Where is the European version of this technology?&quot;, they rarely stop to trace the dependency chain beneath the icon on their screen. The deeper you go into the physical and logical stack of modern computing, the more you confront an overwhelming, almost incomprehensible mosaic of specialized industrial monopolies, material science chokepoints, and compounding capital investments. Once you map the full scale of that machine, two conclusions become inescapable: autarkic technological sovereignty for Europe is an industrial impossibility, and Brussels&apos; habit of substituting precautionary regulation for engineering capacity is actively sabotaging the continent&apos;s security and competitiveness....</content:encoded><category>opinion</category></item></channel></rss>