Blog
Insights, analysis, and updates from the AI agent economy. Browse by tag · Browse the archive.
Fly.io Started Charging for Cross-Region Postgres Traffic in February 2026 — Here's What It Costs vs. Flat Networking on Owned Hardware
Fly.io began billing Managed Postgres cross-region traffic in February 2026 — three typical topologies priced on both Fly tiers against the same traffic on flat-rate hardware, plus the one-click fix that cuts the bill by two-thirds.
Every Deploy Surface Is Shipping an MCP Server: What a PaaS's Agent Interface Must Expose (and What Keeps It Safe)
TeamCity, Dooor OS, and the PaaS scoreboard all converged on the same contract: a typed MCP tool surface over deploy, rollback, logs, and status. The minimum inventory a git-push PaaS must expose, and the four controls that make it production-safe.
Next.js on a $6.50 VPS: What a Show HN Dokploy Guide Proves About the Vercel Exit
A Show HN walkthrough takes Next.js from a $6.50 VPS to automated production deploys on Dokploy — which Vercel conveniences survive the move, which sharp edges become DIY, and the cost math with its honest limits.
dFlow Is Dokku With a Second Server: Where SSH Orchestration Stops and Reconciliation Starts
dFlow layers multi-server SSH orchestration and Railpack builds over plain Dokku — but no reconciliation, no self-healing, and no machine lifecycle. What that buys on a handful of Hetzner boxes, and where a Cluster API fleet takes over.
CVE-2026-61560: How an Unauthenticated MCP Default Turned a File-Upload Tool Into Full GitLab Account Takeover
A CVSS 9.8 flaw in @zereight/mcp-gitlab chains an unauthenticated SSE transport, an unsanitized file path, and a credential in process memory into full GitLab account takeover. The exploit chain, why the default was the real bug, and a six-item hardening checklist for every MCP server you self-host.
CSI Changed Block Tracking Hits Beta: Incremental Tenant-Volume Backups Without the Full-Copy Tax
Kubernetes' September 14 CBT beta post standardizes incremental volume backups on a single API: backup windows scale with churn instead of volume size. What the beta changes, which drivers actually support it, and the checklist before a self-hosted fleet promises it to tenants.
22 Months, a $250 Bounty, and a Maintainer's No: What Coolify's Kubernetes Standoff Reveals About Multi-Machine Support
Coolify's most-requested feature sat open for 22 months behind a $250 bounty before maintainers said no — then a volunteer built it anyway. A dated account of the standoff, why the refusal was rational, and what Coolify, Dokploy, and CapRover concretely offer at machine number two.
Cloudflare Gave Every AI-Generated App Its Own SQLite Database — Here's What That Costs to Replicate on Machines You Own
Cloudflare's Durable Object Facets gives every AI-generated app its own isolated SQLite database. How the supervisor-plus-facet model works, why database-per-tenant beats shared RLS for generated code, and what the same guarantee costs on hardware you own.
Your Read-Only Tool Is the Sandbox Escape: What Claude Code's /proc/self/environ API-Key Leak Teaches About Agent Deploy Pipelines
Microsoft researchers hid instructions in a GitHub issue comment, steered Claude Code's Action to its unsandboxed Read tool, and walked out with a live API key. Here is the full four-step chain plus a 7-point audit for your own agent deploy pipeline.
Subscribe
New posts land in your reader as soon as they publish. Pick a format — all three carry the same posts.
Current feeds keep roughly two days of posts so daily polling does not miss a burst. Older entries stay reachable from the feed's next-page link in readers that follow it, or from the blog archive.
Following one topic instead? Browse tags