Join us

ContentUpdates and recent posts about Arti..
Link
@kaptain shared a link, 2 weeks ago
FAUN.dev()

Kubernetes Monitoring Helm chart v4: Biggest update ever!

The Kubernetes Monitoring Helm chart version 4.0 is designed to solve real pain points that users have hit as their monitoring setups have grown. Destinations are now defined as a map instead of a list, making it easier to manage configurations for multiple clusters. Collectors are defined by the us.. read more  

Kubernetes Monitoring Helm chart v4: Biggest update ever!
Link
@kaptain shared a link, 2 weeks ago
FAUN.dev()

How GitHub uses eBPF to improve deployment safety

GitHub hosts its own source code on github.com, creating a circular dependency. To mitigate this, GitHub maintains mirrors of its code and built assets. By using eBPF, GitHub can selectively monitor and block calls that create circular dependencies in their deployment system... read more  

How GitHub uses eBPF to improve deployment safety
Link
@kaptain shared a link, 2 weeks ago
FAUN.dev()

K3s on On-Prem Infrastructures the GitOps Way: Writing a Custom k0rdent Template from Scratch

Kubernetes, now 12 years old, has evolved into the universal operating system for modern infrastructure, running on various platforms like Proxmox. Using k0rdent, Proxmox, and K3s, users can provision and manage Kubernetes clusters on-premise in a declarative, repeatable, and clean manner. This appr.. read more  

K3s on On-Prem Infrastructures the GitOps Way: Writing a Custom k0rdent Template from Scratch
Link
@kaptain shared a link, 2 weeks ago
FAUN.dev()

When Kubernetes restarts your pod - And when it doesn’t

Production internals guide verified against Kubernetes 1.35 GA. Engineers need to understand terminology differences to avoid flawed runbooks and bad on-call decisions. Kubelet watches the pod spec, not other resources like ConfigMaps or Secrets, to explain the majority of config update investigatio.. read more  

When Kubernetes restarts your pod - And when it doesn’t
Link
@kala shared a link, 2 weeks ago
FAUN.dev()

Critical Claude Code vulnerability: Deny rules silently bypassed because security checks cost too many tokens

Clause Code security bypass: Anthropic's performance fix silently disabled deny rules for 500K+ developers when more than 50 subcommands were used in a command, impacting permission validation and security policy enforcement. The vulnerability stemmed from a tradeoff between security and performance.. read more  

Link
@kala shared a link, 2 weeks ago
FAUN.dev()

Scaling MCP adoption: Our reference architecture for simpler, safer and cheaper enterprise deployments of MCP

Cloudflare centralized MCP servers in a monorepo. It added governed templates, Cloudflare Access auth, audit logs, and DLP behind an MCP server portal. It launched Code Mode to collapse many tool schemas into two portal tools. Token use fell ~94%. Cloudflare Gateway now finds shadow MCP servers... read more  

Scaling MCP adoption: Our reference architecture for simpler, safer and cheaper enterprise deployments of MCP
Link
@kala shared a link, 2 weeks ago
FAUN.dev()

China has ‘nearly erased’ America’s lead in AI

Stanford HAI's 2026 AI Index shows China cut the U.S. lead inArenascores. In March 2026,Claude Opus 4.6ledDola‑Seed 2.0by 2.7%. A 2.7% margin is a photo finish. China outpaces the U.S. inpublicationcitations (20.6% vs 12.6% in 2024) and inindustrial robots(~295,000 vs 34,200). It also holds surplusc.. read more  

China has ‘nearly erased’ America’s lead in AI
Link
@kala shared a link, 2 weeks ago
FAUN.dev()

Anthropic releases Claude Opus 4.7, narrowly retaking lead for most powerful generally available LLM

Anthropic has unveiled Claude Opus 4.7, a powerful large language model that outperforms key rivals like GPT-5.4 and Google's Gemini 3.1 Pro in benchmarks such as agentic coding and financial analysis. Opus 4.7 leads the market on the GDPVal-AA knowledge work evaluation with an Elo score of 1753 and.. read more  

Link
@kala shared a link, 2 weeks ago
FAUN.dev()

I Measured Claude 4.7's New Tokenizer. Here's What It Costs You.

Anthropic's Claude Opus 4.7 migration guide states the new tokenizer utilizes "roughly 1.0 to 1.35x as many tokens" compared to 4.6. Actual measurements show a higher ratio on technical docs and real CLAUDE.md files. The cost of the new tokenizer was measured using real content and synthetic samples.. read more  

I Measured Claude 4.7's New Tokenizer. Here's What It Costs You.
Link
@devopslinks shared a link, 2 weeks ago
FAUN.dev()

Figma's next-generation data caching platform

Figma rearchitected their storage systems to support scalability, including horizontally sharding their Postgres stack and building FigCache, a stateless proxy service for Redis. FigCache decouples connection scalability from Redis, centralizes traffic routing, enhances security, and provides end-to.. read more  

Figma's next-generation data caching platform
Arti is an official Tor Project initiative to rewrite the Tor client stack in Rust. Its primary goal is to address long-standing safety, reliability, and maintainability challenges inherent in the legacy C-based Tor implementation. By leveraging Rust’s strong compile-time guarantees for memory safety and concurrency, Arti eliminates entire classes of bugs that have historically affected Tor, including many security vulnerabilities.

Arti is architected as a modular, embeddable library rather than a monolithic application. This makes it easier for developers to integrate Tor networking capabilities directly into other applications, services, and platforms. From its earliest versions, Arti has supported multi-core cryptography, cleaner APIs, and a more maintainable internal design.

While early releases focused on client functionality such as bootstrapping, running as a SOCKS proxy, and routing traffic over the Tor network, the long-term roadmap includes full feature parity with the existing Tor client, support for onion services, anti-censorship mechanisms, and eventually Tor relay functionality. Arti represents the future foundation of the Tor ecosystem, prioritizing long-term security, developer velocity, and adaptability.