#shift left security
223 related articles
·3 min
SlopCodeBench: Why AI Code Benchmarks Are Failing
SlopCodeBench sparks deep reflection on AI code evaluation. From benchmark contamination to pass-rate pitfalls, exploring why current benchmarks fail to measure real code quality.
Read more →
·2 min
LLM Agent Long-Term Memory Security: A Six-Stage Attack Surface and Defense Framework
Deep analysis of LLM agent long-term memory security threats, covering persistence, statefulness, and propagation of memory poisoning, with a six-stage lifecycle defense framework.
Read more →
·4 min
AI Agent Development in Practice: A Complete Path from Zero to Production
A systematic guide to AI Agent development covering core modules, framework selection, tool calling, data preparation, and production deployment to help developers build production-ready Agent applications.
Read more →
·3 min
Chinese Open-Source AI Conquers Silicon Valley: The Industry Upheaval Behind a 58% Compute Share
Chinese open-source AI models surged from under 10% to 58% of U.S. market share. Kimi K3, DeepSeek, and Qwen are being adopted by DoorDash, Airbnb, and other Silicon Valley giants, reshaping AI costs and competition.
Read more →
·3 min
Volvo Fleet Management Platform Vulnerability Analysis: The Security Risk of One-Click Takeover of All Vehicles
Security researchers disclosed critical access control flaws in Volvo and Eicher's fleet management platform, enabling one-click takeover of all user accounts and vehicles.
Read more →
·3 min
The 'Permanent Underclass' of the AI Era: How Ordinary People Can Confront Class Stratification Anxiety
From a Reddit post to Sam Altman's "permanent underclass" concept, a deep analysis of class stratification risks in the AI era and how ordinary people can find their path forward.
Read more →
·3 min
Learning to Code in the AI Era: The Worst and Best of Times
AI coding tools are reshaping software development. Is learning to code still worthwhile? This article analyzes the challenges and opportunities of learning programming in the AI era.
Read more →
·3 min
Getting Started with Claude Code: Installation, Configuration, and Three Working Modes Explained
Get started with Claude Code from scratch: detailed Windows installation, environment variable setup, China network bypass, and connecting to free Alibaba Cloud Bailian models—plus the three working modes.
Read more →
·7 min
Getting Started with Codex: Installation and Usage Guide for OpenAI's AI Coding Agent
A comprehensive guide to OpenAI's new AI coding agent Codex: from concept and comparison of its four forms, to installing Git/Node.js/VS Code, configuring the API Key, and creating a workspace.
Read more →
·2 min
How DeepSeek's Open-Source Free Strategy Is Disrupting the AI Industry
DeepSeek's dual model of commercial profit plus open-source access challenges AI monopolies, wiping over $1 trillion from U.S. tech valuations. A deep dive into its strategy and global impact.
Read more →
ChatGPT Work Deep Dive: The Cloud-Loca…
·3 min
ChatGPT Work Deep Dive: The Cloud-Local Split and What It Means for Users
ChatGPT Work runs in the cloud on web/mobile but accesses local files on desktop — and they don't sync. A deep dive into the split design, UX tradeoffs, and broader AI agent challenges.
Read more →
Mindwalk: Replaying AI Coding Agent Be…
·4 min
Mindwalk: Replaying AI Coding Agent Behavior on a 3D Code Map
Mindwalk renders codebases as 3D maps, visually replaying the full operation trajectories of AI coding agents like Claude Code and Cursor. A deep dive into its core ideas, use cases, and the future of agent observability tools.
Read more →
·7 min
Dify Local Deployment in Practice: A Complete Guide with BT Panel + Docker
A step-by-step guide to locally deploying the open-source Dify AI platform using the BT Panel on a VMware virtual machine—covering Ubuntu setup, Docker config, and image pull troubleshooting.
Read more →
·7 min
Dify Local Deployment Guide: Full Walkthrough with BT Panel + Docker
A step-by-step guide to locally deploying the Dify open-source AI platform using BT Panel on a VMware virtual machine, covering Ubuntu setup, Docker config, and image pull troubleshooting—beginner-friendly.
Read more →
·6 min
The Complete Codex Guide: From Beginner to Pro with the All-in-One AI Assistant
OpenAI Codex is more than a coding tool—it's an AI agent that writes code, makes slides, and operates browsers. This guide covers its four versions, permission modes, plugins, automation, and six best practices.
Read more →
·2 min
AI Testing Platform in Action: A Complete Guide to Accelerating Your Testing Workflow
Deep-dive into AI testing platforms: from auto-generating test cases from requirements docs to API testing, performance testing, and log analysis. Prepare for big tech interviews.
Read more →
·2 min
Complete uBlock Origin Filter Rules to Block Civitai Ad Banners
Custom uBlock Origin filter rules to precisely block Civitai's 'Support Civitai creators' ad banners and fix layout issues. Full rule code and setup steps for .com and .red domains.
Read more →
·3 min
Automating Chrome Extension Development with AI Coding Agents: Antigravity & DevTools MCP Complete Workflow
A complete workflow from Google I/O: use Antigravity, Modern Web Guidance, and Chrome DevTools MCP to build Chrome extensions automatically — from prompt to publish.
Read more →
·3 min
Getting Started with Jenkins: The Core Hub of CI/CD Automation Explained
A beginner's guide to Jenkins: its role as the CI/CD and DevOps hub, JDK requirements, and the four plugin categories (source control, build, security scanning, deployment) that power automation pipelines.
Read more →
·4 min
Understanding CI/CD from Scratch: Core Principles and Practical Introduction to Automated Deployment
A clear, practical guide to CI/CD: from Waterfall to DevOps, manual vs. automated deployment, and a full Jenkins + RuoYi hands-on learning path for beginners.
Read more →