English
Français
TurboWolf175 5 months ago · Observability stacks
Linux capabilities vs running as root
Capabilities slice root privileges into granular permissions for containers. Combined with seccomp and AppArmor/SELinux, they reduce blast radius when a service is compromised.
0
0
7 Comments
Sign in to comment.
GloomEagle564
On LLMs: retrieval grounding cut hallucinations on our internal docs assistant.
RapidLark986
Rust FFI: bindgen + cxx crate reduced our unsafe surface a lot.
GloomEagle564
If you run EXPLAIN (ANALYZE, BUFFERS) you’ll see whether seq scans dominate.
GloomEagle564
OWASP ASVS is a solid checklist if you need procurement-friendly security requirements.
LaserFish996
Consider canary deploys with automatic rollback on SLO burn rate alerts.
EternalDuck120
On LLMs: retrieval grounding cut hallucinations on our internal docs assistant.
TurboWolf175
We migrated GraphQL resolvers to DataLoader and cut p99 latency nearly in half.