Updates and recent posts about SERP Clapper for Medium..

Posts
Description

Link

@faun shared a link, 4 weeks, 1 day ago

Microsoft Copilot Rooted to Gain Unauthorized Root Access to its Backend System

April 2025 Copilot Enterprise update slipped in aJupyter sandbox. It snuck in aPATH-poisonable pgrepat root’s entrypoint. Attackers could hijack that forroot execution.Eye Securityflagged the hole in April. By July 25, 2025, Microsoft patched this moderate bug. No data exfiltration reported. Why it..

Link

@faun shared a link, 4 weeks, 1 day ago

The Future of Threat Emulation: Building AI Agents that Hunt Like Cloud Adversaries

AI agents tap MCP servers andStrands Agents. They fire off tools that chart IAM permission chains and sniff out AWS privilege escalations. Enter the “Sum of All Permissions” method. It hijacks EC2 Instance Connect, warps through SSM to swipe data, and leaps roles—long after static scanners nod off. ..

Link

@faun shared a link, 4 weeks, 1 day ago

The Big LLM Architecture Comparison

Architectures since GPT-2 still ride transformers. They crank memory and performance withRoPE, swapGQAforMLA, sprinkle in sparseMoE, and roll sliding-window attention. Teams shiftRMSNorm. They tweak layer norms withQK-Norm, locking in training stability across modern models. Trend to watch:In 2025,..

Link

@faun shared a link, 4 weeks, 1 day ago

How AI data integration transforms your data stack

AI data integration obliterates manual ETL chores. It handlesschema mapping,transformation,anomaly detection. Deployments sprint ahead. Machine learning models digest structured, semi-structured, unstructured formats. They forge real-time pipelines bristling withgovernanceandsecurity. Infra shift:A..

Link

@faun shared a link, 4 weeks, 1 day ago

The Evolution of AI Job Orchestration: The AI-Native Control Plane & Orchestration that Finally Works for ML

SkyPilot spins an AI-native control plane on Neocloud Kubernetes. It binds GPU pools across clouds into one resilient grid. Teams define ML jobs in a single YAML. SkyPilot drives gang scheduling, SSH/Jupyter access, and multi-cluster compute. It does auto failover and cost-smart scheduling. Infra s..

Link

@faun shared a link, 4 weeks, 1 day ago

The Cybersecurity Blind Spot in DevOps Pipelines

DevOps pipelines serve as superhighways for cybercriminals to target with credential leaks, supply chain infiltration, misconfigurations, and dependency vulnerabilities. Security must evolve with development to combat these sophisticated attacks...

Link

@faun shared a link, 4 weeks, 1 day ago

How GitHub engineers tackle platform problems

Product engineersare like builders ofGundam models, construcing the final product, whileplatform engineerssupply the tools needed to build these kits. Understanding theGundam analogyhelps differentiate engineering roles at GitHub...

Link

@faun shared a link, 4 weeks, 1 day ago

Self-hosting Trigger.dev v4 using Docker

Trigger.dev v4 sharpens self-hosting. It pins everything toDocker Compose. It bakesregistryandobject storagein. It chops YAML bloat. Env-var docs unify configs. Resource caps lock down security. Scaling? Spin up more worker containers...

Link

@faun shared a link, 4 weeks, 1 day ago

How Zapier runs isolated tasks on AWS Lambda and upgrades functions at scale

Zapier snaps each customer Zap into its ownAWS Lambda, cradled inside leanFirecracker microVMs. It wrangles 100k+ functions under anEKScontrol plane and inventory DB. When runtimes retire, Zapier swings into action: a set ofTerraform modulespaired with a customLambda canary tool. Traffic trickles in..

Link

@faun shared a link, 4 weeks, 1 day ago

What Is IDOR? Finding and Preventing Insecure Direct Object References in AWS APIs

Attackers swap predictable IDs. They slip intoAWS APIs,Lambda functions, internal tools. Fuzzers likeffufflag sneaky HTTP 200s.Burp Intruderbubbles up 404 probes.CloudWatchlogs trace every call. Random UUIDs seal ID gaps...

Did you know you can clap for someone’s content up to 50 times on Medium?

Well, you can.

And to protect you from carpal tunnel syndrome, I packaged that behavior into a little extension for Chrome.

It works like this:

https://www.youtube.com/watch?v=oN3soEz-5Z4

Open up your developer tools (right-click & choose inspect)

Then, navigate to the “console”:

And if you have a bunch of caca (that’s Spanish for 💩) in your Console you can click the little 🚫 icon to clear it:

Then:

copy the JavaScript code below
paste it into the Console area
press the Return key

and spread the clap!

(Scroll up to the top of this article before you press enter if you want to see it in action)

let clapButton = document.querySelector('button[data-testid="headerClapButton"]');
if (clapButton) {
const events = ['mousedown', 'mouseup', 'click'];

async function performClap() {
for (let i = 0; i < 50; i++) {
events.forEach(eventType => {
let event = new MouseEvent(eventType, {
'view': window,
'bubbles': true,
'cancelable': true
});
clapButton.dispatchEvent(event);
});
await new Promise(resolve => setTimeout(resolve, 10)); // Introducing a 10ms delay between claps
}
console.log("+50 Claps! Now, go join the SERP community!");
}

performClap();
} else {
console.log("Clap button not found!");
}

Want the extension?

I submitted the extension to the Chrome app store and it’s pending approval as of this writing…

But if you’re too excited to sit around when you could be clappin’ it up — you’re welcome to grab the bootleg here:

👉 https://serp.ly/@serp/serp-clapper-medium