Join us

ContentUpdates from The Open Source Security Foundation (OpenSSF) is a...
Link
@faun shared a link, 5 months, 1 week ago
FAUN.dev()

OpenAI Agent Builder: A Complete Guide to Building AI Workflows Without Code

OpenAI’sAgent Builderdrops the guardrails. It’s a no-code, drag-and-drop playground for building, testing, and shipping AI workflows - logic flows straight from your brain to the screen. Tweak interfaces inWidget Studio. Plug into real systems with theAgents SDK. Just one catch: it’s locked behind P.. read more  

Link
@faun shared a link, 5 months, 1 week ago
FAUN.dev()

walrus: ingesting data at memory speeds

Walrusis a lock-free, single-nodeWrite Ahead Log in Rustthat rips through a million ops/sec and moves 1 GB/s of write bandwidth - on bare-metal, nothing fancy. It leans on mmap-backed sparse files, atomic counters, and zero-copy reads to get there. Each topic gets its own line of 10MB memory-mapped .. read more  

walrus: ingesting data at memory speeds
Link
@faun shared a link, 5 months, 1 week ago
FAUN.dev()

I'm Building a Browser for Reverse Engineers

A researcher rolled their ownChromium forkwith a customDevTools Protocol (CDP) domain- not for fun, but to surgically probe browser internals. It reaches into Canvas, WebGL, and other trickier APIs, dodging the usual sandbox and spoofing all the bot blockers they'd rather you leave alone. It injects.. read more  

I'm Building a Browser for Reverse Engineers
Link
@faun shared a link, 5 months, 1 week ago
FAUN.dev()

Inside Husky’s query engine: Real-time access to 100 trillion events

SteamPipe just gutted its real-time storage engine and rebuilt it inRust. Expect faster performance and better scaling. Now runs oncolumnar storage, ships withvectorized queries, and rolls anobject store-backed WAL. Serious firepower for time series data. System shift:Another sign that high-throughp.. read more  

Link
@faun shared a link, 5 months, 1 week ago
FAUN.dev()

Development gets better with Age

A longtime AWS insider, Werner Vogels, breaks down the shift from slow-and-steady software growth to the generative AI rocket ride. Capabilities soared. Guardrails? Not so much. No docs, no handrails - just launch and learn. AWS didn’t chase the hype. It pulled a classic AWS move: doubled down on B2.. read more  

Development gets better with Age
Link
@faun shared a link, 5 months, 1 week ago
FAUN.dev()

Technical Tuesday: 10 best practices for building reliable AI agents in 2025

UiPath just droppedAgent Builder in Studio- a legit development environment for AI agents that can actually handle enterprise chaos. Think production-grade: modular builds, traceable steps, and failure handling that doesn’t flake under pressure. It’s wired forschema-driven prompts,tool versioning, a.. read more  

Link
@faun shared a link, 5 months, 1 week ago
FAUN.dev()

Write Deep Learning Code Locally and Run on GPUs Instantly

Modal cuts the drama out of deep learning ops. Devs write Python like usual, then fire off training, eval, and serving scripts to serverless GPUs - zero cluster wrangling. It handles data blobs, image builds, and orchestration. You focus on tuning with libraries like Unsloth, or serving via vLLM... read more  

Write Deep Learning Code Locally and Run on GPUs Instantly
Link
@faun shared a link, 5 months, 1 week ago
FAUN.dev()

Serverless RL: Faster, Cheaper and More Flexible RL Training

New product, Serverless RL, available through collaboration between CoreWeave, Weights & Biases, and OpenPipe. Offers fast training, lower costs, and simple model deployment. Saves time with no infra setup, faster feedback loops, and easier entry into RL training... read more  

Link
@faun shared a link, 5 months, 1 week ago
FAUN.dev()

The RAG Obituary: Killed by Agents, Buried by Context Windows

Agent-based setups are starting to edge out old-school RAG. As LLMs snag multi-million-token context windows and better task chops, the need for chunking, embeddings, and reranking starts to fade. Claude Code, for example, skips all that - with direct file access and smart navigation instead. Retrie.. read more  

The RAG Obituary: Killed by Agents, Buried by Context Windows
Link
@faun shared a link, 5 months, 1 week ago
FAUN.dev()

How AWS S3 serves 1 petabyte per second on top of slow HDDs

AWS S3 doesn’t need fancy hardware. It wrings performance out ofcheap HDDs,log-structured merge trees, anderasure coding. The trick? Shard everything. Hit it in parallel. Randomized placementdodges hotspots.Hedged requestsrace the slowest links. And when things get lopsided, S3 rebalances - constant.. read more  

How AWS S3 serves 1 petabyte per second on top of slow HDDs
The Open Source Security Foundation (OpenSSF) is an industry-backed foundation focused on strengthening the security of the global open source software ecosystem. It brings together major technology companies, cloud providers, open source communities, and security experts to address systemic security challenges that affect how software is built, distributed, and consumed.

OpenSSF was launched in 2021 and operates under the Linux Foundation, combining efforts from earlier initiatives such as the Core Infrastructure Initiative (CII) and industry-led supply chain security programs. Its mission is to make open source software more trustworthy, resilient, and secure by default, without placing unrealistic burdens on maintainers.

The foundation works across several key areas:

- Supply chain security: Developing frameworks, best practices, and tools to secure the software lifecycle from source to deployment. This includes stewardship of projects like sigstore and leadership on SLSA (Supply-chain Levels for Software Artifacts).

- Security tooling: Supporting and incubating open source tools that help developers detect, prevent, and remediate vulnerabilities at scale.

- Vulnerability management: Improving how vulnerabilities are discovered, disclosed, scored, and fixed across open source projects.

- Education and best practices: Publishing guidance, training, and maturity models such as the OpenSSF Best Practices Badge Program, which helps projects assess and improve their security posture.

- Metrics and research: Advancing data-driven approaches to understanding open source security risks and ecosystem health.

OpenSSF operates through working groups and special interest groups (SIGs) that focus on specific problem areas like securing builds, improving dependency management, or automating provenance generation. This structure allows practitioners to collaborate on concrete, actionable solutions rather than high-level policy alone.

By aligning maintainers, enterprises, and security teams, OpenSSF plays a central role in reducing large-scale risks such as dependency confusion, compromised build systems, and malicious package injection. Its work underpins many modern DevSecOps and cloud-native security practices and is increasingly referenced by governments and enterprises as a baseline for secure software development.