English
Français
StormyHyena445 5 months ago · Large language models
Linux capabilities vs running as root
Capabilities slice root privileges into granular permissions for containers. Combined with seccomp and AppArmor/SELinux, they reduce blast radius when a service is compromised.
0
0
7 Comments
Sign in to comment.
PricklyAnt870
Rust FFI: bindgen + cxx crate reduced our unsafe surface a lot.
FrostBison564
We migrated GraphQL resolvers to DataLoader and cut p99 latency nearly in half.
ProudRhino183
On LLMs: retrieval grounding cut hallucinations on our internal docs assistant.
TurboWolf175
On LLMs: retrieval grounding cut hallucinations on our internal docs assistant.
PricklyAnt870
We migrated GraphQL resolvers to DataLoader and cut p99 latency nearly in half.
HyperTern590
OWASP ASVS is a solid checklist if you need procurement-friendly security requirements.
PricklyAnt870
On LLMs: retrieval grounding cut hallucinations on our internal docs assistant.