Welcome to this week’s edition of our tech roundup! In this post, we’ll dive into the most noteworthy links from the past few weeks, covering a range of topics including security, AI, and development. So let’s get started!
Monday, October 24th
- Embeddings: What they are and why they matter
- This article explores the concept of embeddings and their significance in various applications.
- Building RAG from Scratch (Lower-Level) - LlamaIndex 🦙 0.8.49
- Learn how to build an advanced retriever, answerer, and generator (RAG) from scratch using the LlamaIndex framework.
Tuesday, October 25th
- Working with JWTs in Burp Suite - PortSwigger
- This guide provides insights into working with JSON Web Tokens (JWTs) in Burp Suite for effective session management.
- What Algorithms can Transformers Learn? A Study in Length Generalization
- Dive into the world of transformers and explore the ability for these models to generalize across different input lengths.
Wednesday, October 26th
- Securing generative AI: An introduction to the Generative AI Security Scoping Matrix - AWS Security Blog
- AWS Security Blog’s post introduces the concept of the Generative AI Security Scoping Matrix and its importance in securing generative AI models.
- What are the most pressing world problems?
- Check out this comprehensive list of the most pressing global problems and learn how you can make a difference.
Thursday, October 27th
- The Bitter Lesson
- Explore the concept of the “bitter lesson” in AI and how it emphasizes the importance of leveraging large amounts of computation.
- Security_Engineer_Interview_Questions/security-interview-questions.md at master · tadwhitaker/Security_Engineer_Interview_Questions · GitHub
- If you’re preparing for a security engineer interview, this list of interview questions can help you brush up on your knowledge.
- Mentors - 🎉 Security Mentor Club
- Looking for guidance in the security industry? Check out Security Mentor Club’s list of mentors who can provide valuable insights and advice.
Friday, October 28th (Prolific Day)
- OWASP LLM Top 10 - DevSecCon
- DevSecCon provides an overview of the OWASP LLM (Layered Language Models) Top 10, highlighting key vulnerabilities and best practices.
- Statsig - #1 Feature Management and Experimentation Platform
- Statsig offers a powerful feature management and experimentation platform, enabling teams to make data-driven decisions and launch features confidently.
Monday, October 31st
- SEC.gov - SEC Charges SolarWinds and Chief Information Security Officer with Fraud, Internal Control Failures
- The U.S. Securities and Exchange Commission (SEC) charges SolarWinds and its Chief Information Security Officer with fraud and internal control failures.
Tuesday, November 3rd
- GoogleCloudPlatform/healthcare-data-harmonization - This is an engine that converts data of one structure to another, based on a configuration file which describes how. There is an accompanying syntax to make writing mappings easier and more robust.
- Google Cloud Platform introduces healthcare-data-harmonization, an engine for converting data structures using configuration files.
- Agent-based vs Agentless security: Which Approach is Better
- Gain insights into the differences between agent-based and agentless security approaches and understand which one might be better suited for your needs.
Friday, November 4th
- https://youtube.com/watch?v=yj-wSRJwrrc&si=7SxOT3ssXZHDs1qf
- LLMs are eating software, pydantic is all you need!
That’s it for this week’s tech roundup! We hope you found these links informative and relevant to your interests. Tune in next week for more exciting updates and insights from the tech world.