Techreport blog

Engineering Insights & Guides

The best problem-solving writing in software engineering — databases, performance, security, frontend and distributed systems, in one feed.

11,845 articles
Performance — Measuring Developer Productivity via Humans

Measuring Developer Productivity via Humans

Measuring developer productivity is a difficult challenge. Conventional metrics focused on development cycle time and throughput are limited, and there aren't obvious answers for where else to turn. Qualitative metrics offer a powerful way to measure and understand developer productivity using data derived from developers themselves. Organizations should prioritize measuring developer productivity

ANAbi Noda and Tim Cochran·March 19, 2024Performance
Security — Gaining kernel code execution on an MTE-enabled Pixel 8

Gaining kernel code execution on an MTE-enabled Pixel 8

In this post, I’ll look at CVE-2023-6241, a vulnerability in the Arm Mali GPU that allows a malicious app to gain arbitrary kernel code execution and root on an Android phone. I’ll show how this vulnerability can be exploited even when Memory Tagging Extension (MTE), a powerful mitigation, is enabled on the device.

MYMan Yue MoMan Yue Mo·March 18, 2024Security
SRE & Ops — Logarithm: A logging engine for AI training workflows and services

Logarithm: A logging engine for AI training workflows and services

Systems and application logs play a key role in operations, observability, and debugging workflows at Meta. Logarithm is a hosted, serverless, multitenant service, used only internally at Meta, that consumes and indexes these logs and provides an interactive query interface to retrieve and view logs. In this post, we present the design behind Logarithm, and […]

CWChris Wiltz·March 18, 2024SRE & Ops
Security — Mitigating a token-length side-channel attack in our AI products

Mitigating a token-length side-channel attack in our AI products

The Workers AI and AI Gateway team recently collaborated closely with security researchers at Ben Gurion University regarding a report submitted through our Public Bug Bounty program. Through this process, we discovered and fully patched a vulnerability affecting all LLM providers. Here’s the story

CMCelso, MichelleCelso, Michelle·March 14, 2024Security
Performance — Brief History of Scaling Uber

Brief History of Scaling Uber

This blog post was written by Josh Clemm, Senior Director of Engineering at Uber Eats. This is a repost from his LinkedIn article, approved by the author. On a cold evening in Paris in 2008, Travis Kalanick and Garrett Camp couldn't get a cab. That's when the idea for Uber was born. How great would it be if you could "push a button and get a ride?" Fast forward to today where Uber is the largest m

BByteByteGoByteByteGo·March 14, 2024Performance
Engineering — It’s a sellers’ market(place)

It’s a sellers’ market(place)

Today, the most innovative changes in marketplaces are about providing more value to sellers. Many of them hinge on the kind of financial infrastructure Stripe provides.

GPGary PelissierGary Pelissier·March 14, 2024Engineering
AI & ML — Building Meta’s GenAI Infrastructure

Building Meta’s GenAI Infrastructure

Marking a major investment in Meta’s AI future, we are announcing two 24k GPU clusters. We are sharing details on the hardware, network, storage, design, performance, and software that help us extract high throughput and reliability for various AI workloads. We use this cluster design for Llama 3 training. We are strongly committed to open […]

CWChris Wiltz·March 12, 2024AI & ML
Security — Log Explorer: monitor security events without third-party storage

Log Explorer: monitor security events without third-party storage

With the combined power of Security Analytics + Log Explorer, security teams can analyze, investigate, and monitor for security attacks natively within Cloudflare, reducing time to resolution and overall cost of ownership for customers by eliminating the need to forward logs to third-party SIEMs

JSJen Sells, ClaudioJen Sells, Claudio·March 8, 2024Security