Get the weekly digestSubscribe

/ THE FEED /

Read what ships.

Deep, recent reads ranked by depth and freshness.

Discordremove filterYelpremove filterGitLabremove filterDepth 4+remove filterClear all

  1. 01GitLab · tutorial

    PHP2Shell: GitLab helps find and remediate critical PHP flaws

    Critical remote code execution vulnerabilities known as PHP2Shell affect the PHP engine across multiple versions, requiring immediate runtime updates to fixed versions or patched distribution packages. The team utilized platform features like container scanning, code search, and automated agent workflows to locate PHP projects and remediate vulnerabilities. Operators must also check logs and environments for signs of compromise as framework updates and input validations cannot prevent these engine-level flaws.

    DEPTH ■■■■■10 min read5 days ago

    ArchitectureSecurity

    Sign in to save and rate

  2. 02GitLab · scaling

    Make every AI credit count: See, cap, and reduce agent spend

    Uncontrolled AI agent spending can be mitigated by combining open-weight models, centralized context graphs to reduce retries, and usage analytics with credit caps. GitLab introduced these capabilities in its Duo Agent Platform to help platform teams trace, limit, and optimize AI credit consumption. The resulting architecture matches specific tasks to lower-cost models while maintaining task completion quality.

    DEPTH ■■■■■6 min read2 weeks ago

    Sign in to save and rate

  3. 03Yelp · architecture

    The making of the Yelp Assistant UI

    Yelp developed a chat interface called Yelp Assistant using a hybrid approach combining native UI components and a server-driven UI framework called CHAOS. This architecture allows the team to dynamically update the chat experience without waiting for app store releases. The system separates views from data using reactive datasets and MessageEvents to manage the chat loop, state, and user interactions.

    DEPTH ■■■■■12 min read4 weeks ago

    Sign in to save and rate

  4. 04Discord · architecture

    Safer for Teens, Same Discord for Adults

    Discord developed a privacy-preserving age assurance and estimation system to comply with expanding global regulations while keeping adult experiences unchanged. By analyzing account metadata and patterns rather than private messages, the system automatically classifies over 90 percent of users into age groups. Users can also verify their status through alternative methods like credit cards or platform app stores if automated classification is incorrect.

    DEPTH ■■■■■18 min read5 weeks ago

    Sign in to save and rate