Loading feed…
Trendyol Tech15 Hot1 comments25 min read
We Automated Over 15,000 Security Reviews Without Letting AI Decide Everything
AI summary
Để giải quyết bài toán kiểm tra bảo mật mất hàng giờ, công ty đã triển khai hệ thống automation với 15,000+ security reviews. Họ kết hợp deterministic controls và specialized AI agents để xử lý tác vụ nhưng vẫn giữ con người giám sát an toàn. Nhờ hệ thống này, thời gian verification giảm từ vài giờ xuống còn vài phút. Bài học đáng học là cách thiết kế hybrid approach giữa AI và human oversight mà không để AI tự quyết định, sử dụng safe escalation khi cần xử lý phức tạp. Các công nghệ như deterministic controls và specialized AI agents được tận dụng tối ưu để đạt hiệu suất cao.
AI summaries can be wrong. Read the original before relying on anything important.
Why read it: Bài viết này giúp lập trình viên hiểu cách kết hợp kiểm soát xác định và AI chuyên dụng để tự động hóa hiệu quả quy trình rà bảo mật.
What do you remember?
Answer 3 short questions to earn reward points for this article. Only do it if you want the points.
up to +17 points
3 questions · under a minute · optional
Source: https://medium.com/trendyol-tech/we-automated-over-15-000-security-reviews-without-letting-ai-decide-everything-6ddc9ba47ee0. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.
8 Sync ecosystem
One account, the whole ecosystem
Read the news here, practice coding, follow structured courses and train for IELTS on our sibling products — all connected through one 8 Sync account.
8syncdev.com
8syncdev.comThe ecosystem home: product overviews, blog and full pricing.
ExploreCourses
course.8syncdev.comLearn along a clear roadmap: videos, auto-graded quizzes, certificates and mentors who ship for a living.
View the roadmapCoding practice
coding.8syncdev.com1,000 DSA problems in Vietnamese, auto-graded across 7 languages — many FREE, right in your browser.
Practice for freeIELTS
ielts.8syncdev.comAI grading for all four IELTS skills with detailed rubric feedback.
Try it freeZUS — AI IDE
zus.8syncdev.comA 22 MB AI IDE for Vietnamese devs.
Download freemind0
mind0.8syncdev.comOrganizational memory for AI agents.
ExploreAcoLeads
home-acoleads.8syncdev.comAI that staffs your Fanpage and qualifies leads for you.
Try itRecommended for you
Hacker News1 Hot13 min
Show HN: A 15 MB self-hosted Netflix and Spotify for your media server
One self-hosted app for your shows, movies and music. - HolyArrs/HolyArrs
Bootlin1 Hot6 min
sbom-cve-check 1.4.0 released
sbom-cve-check 1.4.0 has been released, adding an OpenVEX exporter and improving Linux kernel CVE analysis and version parsing. The new openvex export type, contributed by Andrey Zhizhikin, generates OpenVEX v0.2.0 documents with VEX assessments, configurable via a new --export-author option. Kernel CVE handling now distinguishes mainline versions like 6.12 from stable versions like 6.12.34 to reduce false positives and negatives. Version parsing also gained support for formats like 0.9~rc5 and Ubuntu-style suffixes, and build metadata like 1.25.0+4f85853f64 is now ignored per semver rules. Install or upgrade with pip install --upgrade "sbom-cve-check[extra]".
Planet Golang1 Hot17 min
Inside PGO
In the previous article , we made Go code faster by changing how it computes. SIMD lets one CPU instruction work on several values at once, and the simd/archsimd and simd packages give Go access to it. Our dot product ran about 9 times faster, but the code got a lot harder to read. At the end, I promised another route to speed, one where you don’t rewrite anything. That route is Profile-Guided Optimization (PGO). You record a CPU profile of where your program spends its time and give it back to the compiler, so it can work harder on the code that is actually hot. Your source stays exactly as it was. We briefly saw it in the IR post , and today we’re going deep into it.
Hacker News200 Hot2 min
MCP Explained
An interactive guide to the Model Context Protocol: every JSON-RPC message on the wire, step by step. Transports, OAuth, tools, resources, sampling, elicitation, tasks, tool search and codemode.
AWS3 Hot2 min
Amazon Bedrock AgentCore now offers a Web Search API
Discover more about what's new at AWS with Amazon Bedrock AgentCore now offers a Web Search API
CNCF1 Hot9 min
One flag, many guardrails: Making a platform safe enough to delegate
This post draws on a talk co-presented with Julien Semaan of Kubex at KubeCon + CloudNativeCon Europe 2026; GitOps Gone Wild: Hardening Delivery Pipelines for…
Flavio Copes1 Hot12 min
API pricing vs subscription: what my month of Codex would cost on the API
I priced 30 days of my real Codex usage at API rates. A $100 plan covered $745 of API-equivalent work. Here's the math, the script to run on your own logs, and when the API still wins.
JetBrains1 Hot20 min
The State of Go in 2026: What Changed In the Golang Ecosystem Since Last Year
What changed in the Go ecosystem since last year? We looked at the Developer Ecosystem 2026 survey to bring you the answers.
Comments
Loading comments…