ContentPosts from @didieraupest..
Link
@faun shared a link, 3 weeks, 6 days ago

The Future of Threat Emulation: Building AI Agents that Hunt Like Cloud Adversaries

AI agents tap MCP servers andStrands Agents. They fire off tools that chart IAM permission chains and sniff out AWS privilege escalations. Enter the “Sum of All Permissions” method. It hijacks EC2 Instance Connect, warps through SSM to swipe data, and leaps roles—long after static scanners nod off. ..

The Future of Threat Emulation: Building AI Agents that Hunt Like Cloud Adversaries
Link
@faun shared a link, 3 weeks, 6 days ago

The Big LLM Architecture Comparison

Architectures since GPT-2 still ride transformers. They crank memory and performance withRoPE, swapGQAforMLA, sprinkle in sparseMoE, and roll sliding-window attention. Teams shiftRMSNorm. They tweak layer norms withQK-Norm, locking in training stability across modern models. Trend to watch:In 2025,..

The Big LLM Architecture Comparison
Link
@faun shared a link, 3 weeks, 6 days ago

How AI data integration transforms your data stack

AI data integration obliterates manual ETL chores. It handlesschema mapping,transformation,anomaly detection. Deployments sprint ahead. Machine learning models digest structured, semi-structured, unstructured formats. They forge real-time pipelines bristling withgovernanceandsecurity. Infra shift:A..

How AI data integration transforms your data stack
Link
@faun shared a link, 3 weeks, 6 days ago

The Evolution of AI Job Orchestration: The AI-Native Control Plane & Orchestration that Finally Works for ML

SkyPilot spins an AI-native control plane on Neocloud Kubernetes. It binds GPU pools across clouds into one resilient grid. Teams define ML jobs in a single YAML. SkyPilot drives gang scheduling, SSH/Jupyter access, and multi-cluster compute. It does auto failover and cost-smart scheduling. Infra s..

Link
@faun shared a link, 3 weeks, 6 days ago

The Cybersecurity Blind Spot in DevOps Pipelines

DevOps pipelines serve as superhighways for cybercriminals to target with credential leaks, supply chain infiltration, misconfigurations, and dependency vulnerabilities. Security must evolve with development to combat these sophisticated attacks...

Link
@faun shared a link, 3 weeks, 6 days ago

How GitHub engineers tackle platform problems

Product engineersare like builders ofGundam models, construcing the final product, whileplatform engineerssupply the tools needed to build these kits. Understanding theGundam analogyhelps differentiate engineering roles at GitHub...

Link
@faun shared a link, 3 weeks, 6 days ago

Self-hosting Trigger.dev v4 using Docker

Trigger.dev v4 sharpens self-hosting. It pins everything toDocker Compose. It bakesregistryandobject storagein. It chops YAML bloat. Env-var docs unify configs. Resource caps lock down security. Scaling? Spin up more worker containers...

Self-hosting Trigger.dev v4 using Docker
Link
@faun shared a link, 3 weeks, 6 days ago

How Zapier runs isolated tasks on AWS Lambda and upgrades functions at scale

Zapier snaps each customer Zap into its ownAWS Lambda, cradled inside leanFirecracker microVMs. It wrangles 100k+ functions under anEKScontrol plane and inventory DB. When runtimes retire, Zapier swings into action: a set ofTerraform modulespaired with a customLambda canary tool. Traffic trickles in..

How Zapier runs isolated tasks on AWS Lambda and upgrades functions at scale
Link
@faun shared a link, 3 weeks, 6 days ago

What Is IDOR? Finding and Preventing Insecure Direct Object References in AWS APIs

Attackers swap predictable IDs. They slip intoAWS APIs,Lambda functions, internal tools. Fuzzers likeffufflag sneaky HTTP 200s.Burp Intruderbubbles up 404 probes.CloudWatchlogs trace every call. Random UUIDs seal ID gaps...

What Is IDOR? Finding and Preventing Insecure Direct Object References in AWS APIs
Link
@faun shared a link, 3 weeks, 6 days ago

kubriX: Your Out-of-the-Box Internal Developer Platform (IDP) for Kubernetes

Discover how kubriX seamlessly integrates leading open-source tools like Argo CD, Kargo, and Backstage to deliver a fully functional IDP out of the box. This blog post provides a deep dive into the technical aspects of kubriX, showcasing its capabilities and value proposition within the realm of Int..