Featured image of post SBOM and SLSA: How to Protect Development Environments from Software Supply Chain Attacks

SBOM and SLSA: How to Protect Development Environments from Software Supply Chain Attacks

A complete guide to supply chain defense in GitHub Actions and CI/CD. From the lessons of the SolarWinds incident, we thoroughly explain the generation and management of SBOM (SPDX/CycloneDX), the 4 levels of SLSA, and how to implement signature verification using Sigstore.

Featured image of post LLM Inference Acceleration: How KV Cache and Speculative Decoding Work

LLM Inference Acceleration: How KV Cache and Speculative Decoding Work

A deep dive into llama.cpp and quantization. From the memory bandwidth wall to PagedAttention and Speculative Decoding, we thoroughly explain the bottlenecks of Transformer inference and the latest optimization technologies.

Featured image of post CPU Speculative Execution: Why Speed Upgrades Created Spectre

CPU Speculative Execution: Why Speed Upgrades Created Spectre

An explanation of 'speculative execution', the mechanism that dramatically sped up modern CPUs, and the background of how it created the historic security vulnerability 'Spectre', discussing the trade-off between performance and security.