Join us

ContentUpdates and recent posts about JFrog Xray..
Link
@varbear shared a link, 1 week, 2 days ago
FAUN.dev()

How The Heck Does Shazam Work? (An Interactive Exploration)

A phone captures audio and runs aFast Fourier Transform (FFT)on short windows. It builds aspectrogramand extractspeaks. Nearby peak pairs form compacthashes(two frequencies + time delta). Aninverted indexmaps those hashes to songs, and timing validates matches. Most services run lookups onserversaga.. read more  

How The Heck Does Shazam Work? (An Interactive Exploration)
Link
@kaptain shared a link, 1 week, 2 days ago
FAUN.dev()

From public static void main to Golden Kubestronaut: The Art of unlearning

The author left JVM monolith ops forKubernetes. They stacked certs:CKA,CKAD,CKS,KCNA,KCSA,CNCF Golden Kubestronaut. They treatPodsas the atomic deployable. They pick fights:IngressvsNodePort. They warn aboutConfigMapdrift. They spotlight runtime primitives:Horizontal Pod Autoscalerandservice meshfor.. read more  

From public static void main to Golden Kubestronaut: The Art of unlearning
Link
@kaptain shared a link, 1 week, 2 days ago
FAUN.dev()

Building a fault-tolerant metrics storage system at Airbnb

Airbnb built a metrics system that ingests50M samples/s, stores2.5PBof logical time series, and hosts1.3B active series. They use tenant-per-service grouping andshuffle sharding. They enforce per-tenant guardrails and a consolidatedcontrol plane. They shard queries and compaction. They run zone-awar.. read more  

Building a fault-tolerant metrics storage system at Airbnb
Link
@kaptain shared a link, 1 week, 2 days ago
FAUN.dev()

Why MicroVMs: The Architecture Behind Sandboxes

Docker Sandboxes puts each agent session in a dedicatedmicroVM. Each microVM runs a privateDocker daemoninside the VM boundary. That blocks access to the host. A new cross‑platformVMMruns on macOS, Windows, and Linux hypervisors. It slashes cold starts and runs fullDockerbuild, run, and compose work.. read more  

Why MicroVMs: The Architecture Behind Sandboxes
Link
@kaptain shared a link, 1 week, 2 days ago
FAUN.dev()

The AI-driven shift in vulnerability discovery: What maintainers and bug finders need to know

AI modelslet non-experts craft real and fake vulnerabilities at scale. They spit out low-quality noise and the occasional high-value report. Reports floodOSS maintainers. Triage, patching, release cadences, and downstreamupgrade/compliancepipelines buckle under the load. Guidance recommends publishi.. read more  

The AI-driven shift in vulnerability discovery: What maintainers and bug finders need to know
Link
@kaptain shared a link, 1 week, 2 days ago
FAUN.dev()

v1.36: User Namespaces in are finally GA

Kubernetesv1.36promotesUser Namespacesto GA on Linux. It brings rootless workload isolation. Kubelet leans on kernelID-mapped mounts. It sidesteps expensivechownby remappingUID/GIDat mount time and confines privileged processes. No more mass-chown screams... read more  

Link
@kala shared a link, 1 week, 2 days ago
FAUN.dev()

Introducing Coregit

Coregit reimplements Git's object model inTypeScriptand runs onCloudflare Workersas a serverless edge Git API. Its commit endpoint accepts up to 1,000 file changes per request and replaces 105+ GitHub calls with one. Yes - one. It acknowledges writes inDurable Objects(~2ms), then flushes objects toR.. read more  

Link
@kala shared a link, 1 week, 2 days ago
FAUN.dev()

Introducing Ternary Bonsai: Top Intelligence at 1.58 Bits

PrismML unveilsTernary Bonsai: a family of1.58-bitLMs in1.7B,4B, and8Bsizes. Models use ternary weights {-1,0,+1} with group-wise quantization. Weights are ternary (-1,0,+1). Each group of128weights shares anFP16scale. That cuts memory by ~9x versus 16-bit and boosts benchmark scores. The8Bhits 75.5.. read more  

Introducing Ternary Bonsai: Top Intelligence at 1.58 Bits
Link
@kala shared a link, 1 week, 2 days ago
FAUN.dev()

The PR you would have opened yourself

ASkillports models fromtransformerstomlx-lm. It bootstraps an env, discovers variants, downloads checkpoints, writes MLX implementations, and runs layered tests. It produces disclosed PRs with per-layer diffs, dtype checks, generation examples, numerical comparisons, and a reproducible, non-agentict.. read more  

The PR you would have opened yourself
Link
@kala shared a link, 1 week, 2 days ago
FAUN.dev()

A GitHub agentic workflow

The developer automated parsing of unstructured release notes withGitHub agentic workflows. The pipeline compilesMarkdowntoYAML, then runs an agent. The setup requires afine-grained Copilot token. It enforces a hardenedsandboxpolicy and forbids Marketplace actions. CI runs a compile-then-compare che.. read more  

A GitHub agentic workflow
JFrog Xray is an enterprise-grade Software Composition Analysis (SCA) and security platform built to work deeply with JFrog Artifactory. It analyzes binaries, dependencies, and container images to detect vulnerabilities, license issues, and policy violations across the entire software supply chain. Xray performs recursive scanning, meaning it inspects every layer and transitive dependency of an artifact. It integrates with CI/CD pipelines, IDEs, and developer workflows to block risky components before they reach production. Large organizations use Xray to enforce governance, accelerate secure release cycles, and maintain continuous visibility into their artifacts from build to deployment.