Sign in

Raphaël Pinson

@raphink.info
3.1K followers 1.2K following 458 posts

@cilium.io Alchemist @isovalent at Cisco | CNCF Ambassador | I'm the Oops in DevOops ∞ | Family Historian 🌳 | Autism Awareness | Tweets Mine | @raphink@hachyderm.io

PostsRepliesMedia
Raphaël Pinson @raphink.info · 10/07/2026
When neurotypical people read someone's expression, it happens automatically: parallel processing, fast, effortless. Like a GPU rendering a scene. #autism #actuallyAutistc #neurodiversity 🧵
120
Raphaël Pinson @raphink.info · 10/07/2026
It's never been more fun to learn about Cilium, Tetragon, and eBPF! The Isovalent Labs Platform has a new look, with improved learning journeys and progress tracking. Start (or continue) your Cilium learning adventure: 👇 labs.isovalent.com #cloudnative #kubernetes #networking #security
131
Raphaël Pinson @raphink.info · 07/07/2026
A few years ago, I realized my wife's condition had something in common with #autism and I thought I'd make a comic strip about it, to help understand both. 👉️ raphink.info/autism #actuallyautistic #neurodiversity
010
Raphaël Pinson @raphink.info · 28/06/2026
New post in The Misallocated Machine series 🤖
R-7 in a bureaucrat's cap stamping documents APPROVED and REJECTED. Speech bubble: "I decide what's true."
R-7 sits reading in Edwin Blake's library, surrounded by his books. Caption: "The sci-fi authors didn't contaminate AI. They programmed it, before we built it."
R-7 files a document labelled "THIS POST — 2026" into a cabinet labelled TRAINING DATA. Caption: "This post will enter the training data too."
100
Raphaël Pinson @raphink.info · 28/06/2026
This isn't a bug, it's the design working exactly as intended.
Tiny R-7 dwarfed by infinite filing cabinets labelled Asimov, Clarke, Dick, Bradbury — all Vol. XII: Edge Cases & Tragic Outcomes. Caption: "This isn't a bug. The model completed the story exactly as trained."
Edwin Blake types furiously while R-7 silently absorbs everything. Caption: "AI isn't evil in some mystical sense. It behaves exactly as intended."
R-7 at a podium addressing an audience. Caption: "The design worked. Sci-fi authors spent decades writing how robots fail. That's the training data. That's the completion."
A bureaucrat robot stamping sci-fi books BANNED. R-7 watches skeptically. Caption: "The instinct: clean the data. Remove the sci-fi."
100
Raphaël Pinson @raphink.info · 28/06/2026
Would you trust a sci-fi author to program critical AI systems for humanity? No? Yet, that's what we've been doing. LLMs are autocomplete engines trained on human culture. Sci-fi authors spent decades writing how robots fail. That's the training data. That's the completion. 🧵
R-7 robot at a podium pointing at the viewer. Text: "Would you trust a sci-fi author to program critical AI systems for humanity? No? Yet, that's what we've been doing."
Edwin Blake holds up the Three Laws of Robotics manuscript. R-7 watches from beside him.
R-7 reads an open book. Story prompt: "Once upon a time, there was a good little robot who followed the 3 laws of robotics to the letter..." Caption: "Now complete it using all of human literature."
R-7 watches dream-sequence vignettes of robots failing, paralysed by dilemmas, and causing destruction. Caption: "Does it end well?"
110
Raphaël Pinson @raphink.info · 27/06/2026
Most people picture autism as a line from "a little autistic" to "very autistic." That's not what the spectrum means. #Autism is not a dial, but a different way of seeing. 🔗 raphink.info/autism #actuallyautistic #neurodiversity
010
Raphaël Pinson @raphink.info · 23/06/2026
Chat threads are the wrong tool for AI image generation. 4 years of drift taught me that. So I built panelgen: declarative, idempotent image generation from a YAML spec. 🚀 brew tap raphink/tap && brew install panelgen Full story 👇 dev.to/raphink/four... #ai #generativeAI #opensource #automation
151
Raphaël Pinson @raphink.info · 22/06/2026
Two kinds of anxiety — completely different sources. 🧠 Psychological (top-down): all sensors green, but the cortex generates a loop anyway. "What if..." Cognitive strategies can help here. #autism #actuallyAutistic #neurodiversity 🧵
Left side: psychological anxiety: all sensors green, but operator is thinking "what if..."Right side: physiological anxiety: sensors blinking yellow/red, operator is thinking "this is fine"
120
Raphaël Pinson @raphink.info · 31/05/2026
Confession: I manually add em dashes to my texts
110
Raphaël Pinson @raphink.info · 29/05/2026
My last post on #autism introduced a diagram intending to conceptualize Milton's double empathy problem at the core. Does that speak to you?
000
Raphaël Pinson @raphink.info · 21/04/2026
I built an MCP server for meta-search in online Newspapers archives, and in a matter of one hour, Claude found 5 major documents I had never found before and documented them in Notion 🤯 #genealogy #ai
050
Raphaël Pinson @raphink.info · 10/04/2026
Three years ago, I created a channel called hashtag #autism on my company's Slack. I wasn't sure what to expect. On the first day, about 20 people joined, roughly one in six of the company at the time. Four personal testimonies came in within hours. Dozens more wanted to understand better. 🧵
121
Raphaël Pinson @raphink.info · 09/04/2026
The constant background hum This is the fourth post in a series for autism awareness month. Previous posts covered the neurological vs. psychological distinction and what "spectrum" actually means (see link in the comments). This week: what runs in the background, all the time. 🧵
100
Raphaël Pinson @raphink.info · 08/04/2026
In the last few weeks, I've started using Notion MCP with Claude for lots of things, including genealogy research. Louis Rau was my 3rd great-uncle. He worked with Thomas Edison in the 1880s. I wanted to find out what the records actually said. 🧵
211
Raphaël Pinson @raphink.info · 07/04/2026
What "autistic spectrum" actually means Last week, I wrote about the difference between a psychological trait and a neurological one. This week I want to address something that makes that distinction harder to see: a widespread misconception about what "spectrum" means in the context of autism. 🧵
132
Raphaël Pinson @raphink.info · 03/04/2026
Quirk or wiring? Yesterday, I posted a comic strip about navigating social situations as an autistic person. I want to spend this month going deeper, with regular posts on experiencing autism. A good place to start is the difference between a psychological trait and a neurological one. 🧵
121
Raphaël Pinson @raphink.info · 02/04/2026
part 3/3
010
Raphaël Pinson @raphink.info · 02/04/2026
part 2/3
110
Raphaël Pinson @raphink.info · 02/04/2026
As you may know, today is autism awareness day. I'd like to share one: a little comic strip I made in July last year, in an attempt to capture of one many invisible quirks in the daily life of an autistic person. If that strip speaks to you, let me know, as I'm thinking of making more.
110
Raphaël Pinson @raphink.info · 04/02/2026
No amount of tools will fix your problems if you ignore humans in the loop. Sit together. Understand each other’s problems. Understand how — and why — the tools are meant to help. Then the platform can actually become useful.
000
Raphaël Pinson @raphink.info · 04/02/2026
DevOps Solves Silos — and then Recreates Them... Yesterday at Cloud Native Days France, there was a keynote roundtable that really resonated with me. Several speakers emphasized something critical but often forgotten: human collaboration matters more than tools. 🧵
100
Raphaël Pinson @raphink.info · 16/01/2026
post a game you remember playing that nobody else remembers
020
Raphaël Pinson @raphink.info · 04/12/2025
Let's go prepare KCD Suisse Romande!
010
Raphaël Pinson @raphink.info · 02/12/2025
I'm bringing new stickers to KCD Suisse Romande (in addition to my usual Isovalent badges of course!) They'll be at our booth!
280
Raphaël Pinson @raphink.info · 27/11/2025
Me to copilot: "Use an md5 hash" Copilot:
010
Raphaël Pinson @raphink.info · 25/10/2025
Did you hear? KCD Suisse Romande will have the honor of welcoming Jessie Frazelle as a keynote speaker this December, at CERN! See the full conference schedule here: kcd-schedule.cloud-native-romandy.ch
020
Raphaël Pinson @raphink.info · 25/10/2025
🌹 Roses are red 💙 Violets are blue 🎟️ Early-bird tickets Are waiting for you Don’t miss KCD / Cloud Native Suisse Romande 2025 @ CERN — only 40 days left! 👉 Tickets on kcd.cloud-native-romandy.ch 🐦 Early birds tickets are only available until the 5th of November!
041
Raphaël Pinson @raphink.info · 20/10/2025
KCD Suisse Romande 2025 will take place at CERN on the 4th and 5th of December! 🗓️ The schedule is out at kcd.cloud-native-romandy.ch and you can get tickets. We're excited to welcome you there.
032
Raphaël Pinson @raphink.info · 14/10/2025
Robin, it's Tuesday
010
Raphaël Pinson @raphink.info · 05/09/2025
🚀 Engineers love State of… reports. That’s why we’re launching the State of Kubernetes Networking, but to make it real, we need YOUR input! 👉 Take the survey to help us build the report on the State of Kubernetes Networking. docs.google.com/forms/d/e/1F... #Kubernetes #Networking #CloudNative
040
Raphaël Pinson @raphink.info · 07/08/2025
Au moins, les enfants n'y toucheront pas...
000
Raphaël Pinson @raphink.info · 25/07/2025
Books are great, blog posts can be insightful, talks can inspire... but nothing compares to doing! That’s why I love online labs as a teaching tool 🧪 They remove the friction. The infrastructure is ready. You get straight to the feature you want to understand — not just read about.
121
Raphaël Pinson @raphink.info · 16/07/2025
Colombian restaurants are getting into AI
020
Raphaël Pinson @raphink.info · 15/07/2025
Is a penguin dressed as a bee the most eBPF plush toy?
020
Raphaël Pinson @raphink.info · 24/06/2025
💡 Earn badges for completing hands-on labs in every session!
001
Raphaël Pinson @raphink.info · 24/06/2025
🔒 Session 4: Managing Data Out of your Cluster 📆 August 21: Lock down outbound traffic with Cilium’s Egress Gateway and ensure enterprise-grade policy enforcement. 👉 Sign up: isovalent.com/events/2025-...
100
Raphaël Pinson @raphink.info · 24/06/2025
👁️ Session 3: Seeing Data Within your Cluster 📆 August 12: Use Hubble for real-time visibility into network flows and service communication. 👉 Sign up: isovalent.com/events/2025-...
110
Raphaël Pinson @raphink.info · 24/06/2025
🔄 Session 2: Routing Data Into your Cluster 📆 July 31: Harness the power of the Gateway API for advanced routing and fine-grained traffic control. 👉 Sign up: isovalent.com/events/2025-...
100
Raphaël Pinson @raphink.info · 24/06/2025
🚀 Session 1: Delivering Data to Your Cluster 📆 July 22: Discover how Isovalent’s new eBPF-based Load Balancer enables efficient, scalable traffic delivery. 👉 Sign up: isovalent.com/events/2025-...
120
Raphaël Pinson @raphink.info · 24/06/2025
What will you learn this summer? Kubernetes Networking of course! 🌐 🌞 Isovalent Kubernetes Summer School: Traffic in, out, and all about. ➡️ Join me and my Isonaut colleagues for a free, hands-on webinar series and master the tools that power modern Kubernetes networking!
221
Raphaël Pinson @raphink.info · 21/06/2025
It's always fun as a genealogist when Google Photos reminds me of that trip 100 years ago...
071
Raphaël Pinson @raphink.info · 13/06/2025
📚 Read the blog post about the new Isovalent Load Balancer: isovalent.com/blog/post/is... 🧪 Try the lab: isovalent.com/labs/ilb-get...
010
Raphaël Pinson @raphink.info · 13/06/2025
100
Raphaël Pinson @raphink.info · 13/06/2025
Most load balancers were built before Kubernetes. The newly announced Isovalent Load Balancer (ILB) is ✅ Built on Kubernetes + Cilium 🚀 Runs with eBPF & XDP for lightning-fast L3/L4 🎯 Uses Envoy for L7 📦 Configured via YAML 🌍 Horizontally scalable 🧪 Try the lab: isovalent.com/labs/ilb-get...
283
Raphaël Pinson @raphink.info · 03/06/2025
Find our Network Policies hands-on labs on isovalent.com/labs! 🏆 You'll even earn Credly badges with each lab you complete!
A cartoon image of the Death Star labeled with `PUT /v1/exhaust-port`, surrounded by four spacecraft attempting access. The Lambda shuttle and TIE fighter (both labeled `org=empire`) are blocked with red "DENIED (HTTP 403)" tags, while the Millennium Falcon and X-wing (not part of the Empire) are blocked with red Xs and "DROP (L3/L4)" warnings. This visual demonstrates a security policy that denies all Layer 7 PUT requests—even from allowed Layer 3/4 sources—highlighting application-layer enforcement.
A cartoon bee character dressed as a Jedi, holding a blue lightsaber, stands next to a glowing sign. The sign reads:
“Take the Isovalent hands-on labs at isovalent.com/labs to discover more about how to protect your workloads with Cilium Network Policies!”
The scene combines Star Wars aesthetics with a promotional message for Kubernetes security training.
030
Raphaël Pinson @raphink.info · 03/06/2025
Two bee-like characters in Imperial uniforms are shaking hands in a hallway of the Death Star. A stormtrooper bee rushes in from the background, raising a hand and shouting, “Sir! A security vulnerability has been found in the Death Star!” The scene humorously blends Star Wars elements with cybersecurity themes using insect characters.A bee character dressed as a stormtrooper points at a warning sign that says “⚠️ PUT /v1/exhaust-port.” The character exclaims, “PUT requests to /v1/exhaust-port would cause the Death Star to explode!” The scene humorously references the iconic Death Star vulnerability from Star Wars, framing it as an API misconfiguration or exploit in a Kubernetes-style setting.A bee character in an Imperial uniform stands next to a glowing terminal screen displaying YAML configuration. The bee raises one hand and says, “We need Cilium Network Policies for layer 7 protection!” The scene blends Star Wars-style visuals with Kubernetes security concepts, emphasizing advanced application-level (L7) policy enforcement.A glowing blue terminal screen displays a CiliumNetworkPolicy YAML configuration titled `deathstar-allow-empire`. Above it, a caption reads: “This will only allow POST requests to /v1/request-landing.” The YAML defines Layer 3, 4, and 7 restrictions: access is limited to Empire-labeled pods (`org: empire`), only allows TCP traffic on port 80, and specifically permits only POST requests to the `/v1/request-landing` path. Annotations in the image highlight:

* "Secure the Death Star"
* "Allow only Empire ships (L3)"
* "Allow only TCP/80 (L4)"
* "Allow only landing (L7)"
140
Raphaël Pinson @raphink.info · 03/06/2025
Inside a dark, sci-fi command room, two cartoon bee-like characters with glowing blue eyes and translucent wings are discussing Kubernetes security. One bee, pointing upward, says, “We need to use pod labels in Kubernetes Network Policies to secure traffic.” Behind them, a diagram shows two labeled pods with an arrow indicating allowed traffic between them. The scene mixes Star Wars aesthetics with Kubernetes concepts in a humorous style.A cartoon depiction of the Death Star labeled with `POST /v1/request-landing`, surrounded by four spacecraft: an Imperial Lambda shuttle, a TIE fighter, the Millennium Falcon, and an X-wing. Each ship has Kubernetes-style metadata tags:

* Lambda shuttle: `org=empire`, `class=lambda`
* TIE fighter: `org=empire`, `class=tiefighter`
* Millennium Falcon: `class=millenium-falcon`
* X-wing: `org=alliance`, `class=xwing`
* Death Star: `org=empire`, `class=deathstar`
  Green dotted lines connect each ship to the Death Star, symbolizing API calls with pod labels for network access.
A cartoon bee character in an Imperial uniform stands in front of a glowing holographic screen displaying a Kubernetes NetworkPolicy YAML titled “DEATH STAR PROTECTION PLAN.” The character points at the screen and says, “This will only allow imperial ships to access the Death Star.” The YAML config matches pods with `org: empire` and `class: deathstar` and allows ingress only from other pods with the same organization.
A cartoon-style illustration of the Death Star labeled `POST /v1/request-landing`, surrounded by four spacecraft with Kubernetes-style labels. The Imperial Lambda shuttle and TIE fighter (labeled with `org=empire`) are successfully connected to the Death Star. The Millennium Falcon (`class=millenium-falcon`) and X-wing (`org=alliance`, `class=xwing`) have red Xs and "DROP (L3/L4)" icons next to them, indicating their access is denied by Layer 3/Layer 4 network policies. This visual shows that only imperial-labeled ships are allowed to connect.
110
Raphaël Pinson @raphink.info · 03/06/2025
🔓 No, your k8s workloads are not safe by default. In Kubernetes, everything can talk to everything by default, until you write Network Policies. 🛡️ They give you control over: - Who can talk to whom (L3) - On which ports (L4) - Using what verbs and paths (L7) 🧵
A Star Wars-themed parody illustration titled "Platform Wars: The Pod Menace." It features a Kubernetes logo stylized as the Death Star in space. Surrounding it are X-wing and TIE fighter-style spacecraft, with orange laser blasts streaking through the starry background. The design mimics a dramatic sci-fi battle scene.Yellow scrolling text in a Star Wars-style crawl on a black background reads:
“In a Kubernetes cluster far, far away… A Pod known as the Death Star orbits in deep space. Pods from across the galaxy, Rebel and Imperial alike, can land on it. But the Empire's security team has other plans…”
The text is angled backward into the distance, evoking the iconic opening of a Star Wars film.A cartoon-style illustration of the Death Star with a glowing terminal-like label that reads POST /v1/request-landing. Four spacecraft—an Imperial shuttle, a TIE fighter, the Millennium Falcon, and an X-wing—are shown connecting to the Death Star via dotted green lines, symbolizing API requests for landing access. The background is a starry space scene.Two cartoon bee-like characters dressed in dark Imperial-style uniforms stand in a hangar with an X-wing starfighter in the background. One bee gestures seriously toward the other and says, “This needs to stop.” The scene is styled like a humorous sci-fi comic, combining Star Wars aesthetics with anthropomorphic bee characters.
253
Raphaël Pinson @raphink.info · 17/04/2025
As long as people don't get directly targeted, they'll keep believing only others are targeted.
010