TLDR WEB DEV 2023-06-12

CS:GO: FROM ZERO TO 0-DAY

Neodyme identified three independent remote code execution (RCE) vulnerabilities in the popular Counter-Strike: Global Offensive game. Each vulnerability can be triggered when the game client connects to their malicious Python CS:GO server. This post details their journey through the CS:GO binary and conducts a technical deep dive into various identified bugs. They conclude by presenting a proof of concept (POC) exploit that leverages four different logic bugs into remote code execution in the game’s client, triggered when a client connects to the server.

WHAT IS A VECTOR DATABASE?

Many AI applications that involve large language models or generative AI rely on vector embeddings, a type of data representation that carries within it semantic information that’s critical for the AI to gain understanding and maintain a long-term memory they can draw upon when executing complex tasks. Vector databases offer optimized storage and querying capabilities for embeddings. They have the capabilities of a traditional database that are absent in standalone vector indexes and the specialization of dealing with vector embeddings, which traditional scalar-based databases lack.

Lyft's engineering blog discusses strategies for identifying and addressing performance issues in streaming pipelines. The author emphasizes the importance of an iterative process involving measurement, root cause identification, and fixing. Key performance issues they address include data skewness, large window size, interaction with low-speed services, and serialization/deserialization, with solutions ranging from avoiding unnecessary operations to optimizing network aspects.

SHOULD YOU OPTIMIZE FOR ALL-CASH COMPENSATION?

Tech companies often allow employees to choose their stock and cash ratio, especially if the company stock had a drastic fall. However, the choice of how much stock to get can be complicated - on one hand, employees have access to “insider information” such as usage statistics and business dashboards. On the other hand, even with this information, employees can’t control how the stock will perform since it depends on a number of factors, such as market expectation. This blog shows numerical experiments on what will happen depending on your stock/cash ratio if you were a Shopify employee.

THE SURPRISING POWER OF DOCUMENTATION

Documentation can be boring to write, but its long-term value cannot be understated. Each hour invested into documentation at a company can save up to a hundred productivity hours as a result across the company. Building a documentation-first culture is extremely important for a team to scale well and for developers to stay productive as a codebase gets larger and larger. However, documentation is not a silver bullet or a substitute to human interaction, which has nuances that cannot be transferred through the written word.

GROWING FROM ENGINEER TO MANAGER AND THRIVING

This interview with Nicola Ballota, the Director of Cloud at Namecheap, goes over Ballota’s career path to the role he’s in today and the advice he would give to people who want to reach his level one day. He lays out concrete steps to aspiring engineers who want to grow into a manager role and gives tips on how to keep improving your knowledge overall as a manager.

OZONE

Ozone is software to help developers build unit tests for LLMs. Ozone enables developers to ensure prompt reliability, increase security, and foster efficient collaboration. It provides intuitive prompt testing and refinement, including automated registered tests, for reliable and secure AI interactions.

FAKER.JS UI

Faker.js UI provides an easy way to generate fake, but realistic data, for testing and development.

TINYBASE

TinyBase is a reactive data store for local-first apps. It has many features, like support for both KV stores and tabular data, a powerful query engine, flexible UI reactivity to data updates, data sync between remote and local storage, and more. When compressed, TinyBase is less than 10kB and has zero dependencies.

THE MYTH OF THE AI INFRASTRUCTURE PHASE

Can LLM infrastructure be built before LLM applications? The phrase “sell shovels in a gold rush” has led to a host of infrastructure for LLMs startups in the wake of the LLM boom. However, knowing the correct APIs and use cases for LLM infrastructure before real LLM-enabled applications are deployed for a long time is difficult. It may not be the time yet for AI infrastructure companies as actual AI applications need time to grow first so that actual problems can be discovered.

MENTAL LIQUIDITY

Mental liquidity is the ability to quickly abandon previous beliefs when the world changes or when you come across new information. However, mental liquidity is rare and can be hard to change as you get older. Morgan Housel, the author of Psychology of Money, lays out some anecdotes about how Albert Einstein himself even had a problem with mental liquidity. It’s important to be careful about what beliefs you let become a part of your identity and how most fields have theories, ideas, and hunches, but not laws - things that are unimpeachable and cannot ever change.

HOW MUCH DOES IT COST TO DEVELOP AN APP LIKE SHEIN?

Shein is a fashion shopping app that contains basic features like authentication, payment, and more. This article contains numerous business aspects of developing an app like Shein. It starts by explaining how much it costs to develop the app, which depends on factors like app size, platform and location of app developers. A basic small-scale app can cost between $25,000-$35,000 and take 4-6 months to develop. The article then focuses on the business model of Fashion apps like Shein, what makes it popular and key features to include in a fashion app. On the technical side, it covers the process of developing such an app, from market analysis to development and to testing.

10 UNIX FILE MANAGEMENT COMMANDS THAT EVERY DEVELOPER SHOULD KNOW

Knowing some handy Unix-based commands to communicate with the system via terminal can save you time as a developer.

AWESOME CODEBASES

A collection of awesome open-source codebases worth exploring.

REDDIT’S USERS AND MODERATORS ARE REVOLTING AGAINST ITS CEO

In protest to Reddit’s new proposed API changes, many popular subreddits are shutting down their communities temporarily, on June 12th.

EP63: LINUX FILE SYSTEM EXPLAINED

This system design refresher goes over how the Linux file system is designed and provides a handy cheat sheet for SQL vs NoSQL databases.