All bites
The whole library, newest first. Filter by what you are here for, or pick a topic if you already know.
8668 bites
Page 189
Mask R-CNN: Region-Based Detection
Mask R-CNN belongs to the R-CNN family core: selective search over CNN feature maps yields bounding boxes with object categories. Reusing convolutional features for localization, not just classification, is the win.
U-Net: Segmentation with Less Data
U-Net retrofits fully convolutional networks to segment images precisely with fewer training examples. It runs a 512 by 512 frame in under a second on a 2015 GPU, fitting latency-sensitive pipelines.
SSD: Real-Time Detection Without Region Proposals
SSD scores default boxes across multiple scales in one forward pass. It runs real-time robotics and mobile vision where two-stage detectors lag. The footgun is ignoring shallow feature maps, which destroys small object accuracy as early layers carry fine…
FLANN Matcher for Feature Correspondence
OpenCV's FLANN matcher pairs query and train descriptors to find cross-image feature correspondences as an alternative to Brute-Force. Engineers often assume FLANN shares Brute-Force's normType and crossCheck parameters, causing silent configuration errors…
How does shared responsibility shift between IaaS and SaaS?
Tests your understanding of security ownership across cloud stacks. Strong answer: in IaaS you own OS, apps, and network controls; in SaaS you only own data, identities, endpoints, and accounts while the provider manages the rest.
Explain the difference between IaaS, PaaS, and SaaS with examples
This tests your grasp of cloud abstraction layers and shared responsibility. A strong answer maps IaaS to raw infrastructure like EC2, PaaS to managed runtimes like Heroku, and SaaS to end-user apps like Gmail.
Kappa Architecture Unifies Batch and Stream
Kappa treats batch as a special case of streaming: store every event in an immutable log, compute views in real time, and replay the log when logic changes. It removes Lambda's dual codebase but forces you to pay for infinite retention and replay costs.
AWS Cost and Usage Report (CUR)
Think of CUR as your AWS itemized receipt, delivered daily to S3. It breaks down charges by hour, product, resource, and tag for spreadsheets or Athena queries. Mid-month numbers are estimates, so do not lock budgets until the report finalizes after invoicing.
CloudEvents: The Event Data Standard
CloudEvents provides a common envelope for event data, enabling routing without custom parsers. Use it when events cross clouds, SaaS tools, or internal services. It standardizes wrappers, not payloads, so producers and consumers still need aligned schemas.
AWS SDK: Code That Operates Your Cloud
The AWS SDK turns AWS API calls into native code so your app can command S3 or DynamoDB directly. It handles auth, retries, and formatting automatically. The footgun: forgetting region or credentials causes silent failures that look like network errors.
IAM: The Gatekeeper Framework
IAM is the framework that decides who gets through the door and what they can touch inside your systems. It governs every employee transition, from onboarding to departure. The trap is treating IAM as a one-time setup rather than an ongoing lifecycle process.
GitLab Flex merges seats and AI into one budget
GitLab Flex reshapes one annual budget monthly across seats, AI credits, and features without re-procurement. Engineering leaders can shift spend from idle seats to agent usage instead of guessing headcount six months out. Ask at renewal.
GitLab Orbit unifies code lifecycle in live graph
GitLab Orbit beta unifies code, pipelines, and ownership in a live graph. Compare the Market tests show Orbit-grounded reviewers hit 70% accuracy versus 58% for RAG.
GitLab patches 13 CVEs including SAML account takeover flaw
GitLab 19.0.2, 18.11.5, and 18.10.8 patch 13 security flaws, including four High-severity CVEs like SAML account takeover (CVSS 8.7) and unauthenticated API DoS. Self-managed instances must upgrade immediately; GitLab.com is already patched.
Design a golden path CI/CD pipeline for a Go API
Propose build, test, SAST, containerize, deploy stages with hooks or config overlays for flexibility.
Design a workflow for managing security scanner vulnerabilities
This tests scaling security without developer noise fatigue. A strong answer covers centralized ingestion, severity SLAs with exploitability, auto-triage rules, and CI gates on critical findings only. A red flag is forcing manual review of all scanner output.
What strategies reduce DAST scan time while maintaining security coverage?
It tests balancing security depth with CI velocity through DAST tuning. A strong answer covers incremental scans, parallel workers, scoped targets, and shift-left complements.
Design short-lived dynamic database credentials and their security benefits
This tests automated least-privilege credential lifecycle design. A strong answer covers a secrets broker with database plugins, short TTL leases tied to workload identity, and automatic revocation. Red flag: manual rotation or long-lived CI variables.
How would you create and distribute reusable IaC components at scale?
This tests platform engineering governance at scale. A strong answer proposes a versioned module registry, policy-as-code guardrails, automated validation pipelines, and self-service documentation.
What is an artifact repository and why not just a shared filesystem?
Tests your grasp of immutability, metadata, and access control for build artifacts. A strong answer covers versioning, checksums, RBAC, and API retrieval that NFS lacks. Red flag: saying a shared filesystem is simpler and therefore enough for production.