Join us

ContentUpdates from Checkmarx...
Link
@faun shared a link, 2 months, 3 weeks ago
FAUN.dev()

Inside NVIDIA GPUs: Anatomy of high performance matmul kernels

NVIDIA Hopper packs serious architectural tricks. At the core: **Tensor Memory Accelerator (TMA)**, **tensor cores**, and **swizzling**—the trio behind async, cache-friendly matmul kernels that flirt with peak throughput. But folks aren't stopping at cuBLAS. They're stacking new tactics: **warp-gro.. read more  

Inside NVIDIA GPUs: Anatomy of high performance matmul kernels
Link
@faun shared a link, 2 months, 3 weeks ago
FAUN.dev()

The productivity paradox of AI coding assistants

A July 2025 METR trial dropped a twist: seasoned devs using Cursor with Claude 3.5/3.7 moved **19% slower** - while thinking they were **20% faster**. Chalk it up to AI-induced confidence inflation. Faros AI tracked over **10,000 developers**. More AI didn’t mean more done. It meant more juggling, .. read more  

The productivity paradox of AI coding assistants
Link
@faun shared a link, 2 months, 3 weeks ago
FAUN.dev()

Building a Natural Language Interface for Apache Pinot with LLM Agents

MiQ plugged **Google’s Agent Development Kit** into their stack to spin up **LLM agents** that turn plain English into clean, validated SQL. These agents speak directly to **Apache Pinot**, firing off real-time queries without the usual parsing pain. Behind the scenes, it’s a slick handoff: NL2SQL .. read more  

Building a Natural Language Interface for Apache Pinot with LLM Agents
Link
@faun shared a link, 2 months, 3 weeks ago
FAUN.dev()

Jupyter Agents: training LLMs to reason with notebooks

Hugging Face dropped an open pipeline and dataset for training small models—think **Qwen3-4B**—into sharp **Jupyter-native data science agents**. They pulled curated Kaggle notebooks, whipped up synthetic QA pairs, added lightweight **scaffolding**, and went full fine-tune. Net result? A **36% jump .. read more  

Jupyter Agents: training LLMs to reason with notebooks
Link
@faun shared a link, 2 months, 3 weeks ago
FAUN.dev()

Becoming a Research Engineer at a Big LLM Lab - 18 Months of Strategic Career Development

To land a big career role like Mistral, mix efficient **tactical** moves (like LeetCode practice) with **strategic** ups, like building a powerful portfolio and a solid network. Balance is key; aim to impress and prepare well without overlooking the power of strategy in shaping a successful career... read more  

Link
@faun shared a link, 2 months, 3 weeks ago
FAUN.dev()

Shai-Hulud npm Supply Chain Attack

Malicious npm packages just leveled up: this one dropped a self-spreading worm that hijacks repos and leaks secrets the moment it lands. It abuses `postinstall` scripts to run TruffleHog and swipe tokens straight from your codebase. Then it uses GitHub Actions to exfiltrate the loot and auto-publis.. read more  

Shai-Hulud npm Supply Chain Attack
Link
@faun shared a link, 2 months, 3 weeks ago
FAUN.dev()

Top 30 Argo CD Anti-Patterns to Avoid When Adopting Gitops

A teardown of Argo CD anti-patterns calls out 28 common misfires—stuff like skipping Git for Application CRDs or stuffing Helm/Kustomize config right into Argo CD manifests. Yikes. It pushes for a cleaner setup: use **ApplicationSets** instead of rolling your own YAML, turn on **auto-sync/self-heal.. read more  

Link
@faun shared a link, 2 months, 3 weeks ago
FAUN.dev()

How FinOps Drives Value for Every Engineering Dollar

Duolingo’s FinOps crew didn’t just track cloud costs—they wired up sharp, automated observability across 100+ microservices. Real-time alerts now catch AI and infra spend spikes before they torch the budget. They sliced TTS costs by 40% with in-memory caching. Dumped pricey CloudWatch metrics for P.. read more  

How FinOps Drives Value for Every Engineering Dollar
Link
@faun shared a link, 2 months, 3 weeks ago
FAUN.dev()

Introducing DigitalOcean Organizations, a new and comprehensive account layer

DigitalOcean just dropped **Organizations**—a real upgrade for anyone juggling multiple Teams. Think one top-level account to rule them all: centralized user control, one invoice to track, and org-wide settings for taxes, credits, and permissions... read more  

Introducing DigitalOcean Organizations, a new and comprehensive account layer
Link
@faun shared a link, 2 months, 3 weeks ago
FAUN.dev()

Observability for the Invisible: Tracing Message Drops in Kafka Pipelines

When an event drops silently in a distributed system, it is not a bug, it is an architectural blind spot. Detect, debug, and prevent message loss in Kafka-based streaming pipelines using tools like OpenTelemetry, Fluent Bit, Jaeger, and dead-letter queues. Make sure observability gaps in event strea.. read more  

Checkmarx is a leading enterprise application security company headquartered in Atlanta, Georgia, USA. The company is best known for its expertise in Static Application Security Testing (SAST), helping organizations identify and remediate security vulnerabilities early in the software development lifecycle. By integrating directly into developers’ workflows, Checkmarx enables secure coding practices without slowing down development speed. Its comprehensive security platform supports a wide range of programming languages and frameworks, making it a trusted choice for global enterprises looking to build and maintain secure, high-quality applications. With a strong focus on innovation, Checkmarx continues to evolve its offerings to address the growing complexity of modern application security challenges.