teleren/devto huggingface dataset:
Computer Vision Meetup: Lessons Learned fine-tuning Llama2 for Autonomous Agents
Tags: computervision, ai, machinelearning, datascience
Published: 2024-06-07 20:19:30

In this talk, [Rahul Parundekar](https://www.linkedin.com/in/rparundekar), Founder of A.I. Hero, Inc. does a deep dive into the practicalities and nuances of making LLMs more effective and efficient. He’ll share hard-earned lessons from the trenches of LLMOps on Kubernetes, covering everything from the critical importance of data quality to the choice of fine-tuning techniques like LoRA and QLoRA. Rahul will share insights into the quirks of fine-tuning LLMs like Llama2, the need for looking beyond loss metrics and benchmarks for model performance, and the pivotal role of iterative improvement through user feedback – all learned through his work on fine-tuning an LLM for retrieval-augmented generation and autonomous agents. Whether you’re a seasoned AI professional or just starting, this talk will equip you with the knowledge of when and why you should fine-tune, to the long-term strategies to push the boundaries of what’s possible with LLMs, to building a performant framework on top of Kubernetes for fine-tuning at scale.

Speaker: Rahul Parundekar is the founder of A.I. Hero, Inc., a seasoned engineer, and architect with over 15 years of experience in AI development, focusing on Machine Learning and Large Language Model Operations (MLOps and LLMOps). AI Hero automates mundane enterprise tasks through agents, utilizing a framework for fine-tuning LLMs with both open and closed-source models to enhance agent autonomy.

Not a Meetup member? Sign up to attend the next event:

https://voxel51.com/computer-vision-ai-meetups/

Recorded on May 30, 2024 at the AI, Machine Learning and Data Science Meetup.
Next Generation SQL Injection: Github Actions Edition
Tags: githubactions, security, devops
Published: 2024-06-07 20:16:53

In the evolving landscape of software development, Continuous Integration and Continuous Deployment (CI/CD) tools like GitHub Actions have become indispensable. However, with great power comes great responsibility, and it's crucial to be aware of potential security pitfalls. One such vulnerability is treating untrusted inputs, such as branch names or pull request (PR) titles, as static parameters.
Spoiler alert, **they should NOT be trusted**

I enjoy puzzles, so here goes one:
```
steps:
  - name: Generate summary
    run: |
      echo "Pull Request for [${{ github.event.pull_request.title }}](https://github.com/${{ github.repository }}/pull/${{ github.event.pull_request.number }}) has been updated 🎉" >> $GITHUB_STEP_SUMMARY
      echo "Image tagged **v${{ needs.determine_app_version.outputs.app_version }}** has been built and pushed to the registry." >> $GITHUB_STEP_SUMMARY
This will generate a workflow summary like:
```

Can you spot the vulnerability?

## The Problem

When a developer clicks on the Revert PR button in GitHub, the new PR title is `Revert "<OLD TITLE>"`. This breaks the Generate summary step.

Try again if you haven’t spotted the vulnerability

The vulnerability lies in how `github.event.pull_request.title` input is handled. **GitHub Actions expressions dynamically generate code**. Unfortunately, if the PR title contains any special characters or unexpected input, it can cause the script to fail or behave unexpectedly.

## The Impact

When developers click on Revert PR button, the PR title is `Revert "<OLD TITLE>"`, the echo command in the Generate summary step generates the bash command:
```
echo "Pull Request for [Revert "<OLD TITLE>"](https://github.com/${{ github.repository }}/pull/${{ github.event.pull_request.number }}) has been updated 🎉" >> $GITHUB_STEP_SUMMARY
```

The presence of the double quotes within the PR title closes the echo early. However, this allows for bad actors to craft a title that could be used take full control of the runner

## The Solution

To prevent this issue, one approach is to use env as an input “encoder” and avoid directly using GitHub Actions `${{ }}` expressions. For example:
```
env:
  TITLE: ${{ github.event.pull_request.title }}
steps:
  - name: Generate summary
    run: |
      echo "Pull Request for [$TITLE](https://github.com/${{ github.repository }}/pull/${{ github.event.pull_request.number }}) has been updated 🎉" >> $GITHUB_STEP_SUMMARY
```

By using the `env` context to store untrusted inputs, you avoid potential script-breaking issues caused by special characters pre-rendered by Github Actions.

Leave a comment if you can think on a different way to solve this problem!
Weekly Updates - June 7, 2024
Tags: couchbase, community, database, ai
Published: 2024-06-07 19:53:57

Hi everyone!👋
Hope you had a great week. 

- 🎉 **Exciting update to VSCode Extension** -We’re thrilled to announce a significant update to our Couchbase VSCode Extension. With our latest release, we’ve expanded our horizons to support GitHub Codespaces and various other remote development environments. [*Read the blog here >>*](https://www.couchbase.com/blog/couchbase-vscode-remote-development-environments/)
<br>

- 📖 **New Blog: What is Data Mining** - Have you wanted to learn about Data Mining, what it is, techniques, tools and applications? Look no further, [*read our blog here >>*](https://www.couchbase.com/blog/data-mining-techniques/)
<br>

- 📺 **Looking for videos to learn more about Couchbase?** Check out our YouTube channel with various Playlists, such as Vector Search & AI, Community Highlights and more! [*You can subscribe to our channel here >>*](https://www.youtube.com/@CouchbaseInc/playlists)
<br>

Have a great weekend everyone! 😊
Spring Cloud: Get configuration from config server
Tags: spring, springcloud
Published: 2024-06-07 19:37:09

Following library is used

- Java 17
- Spring Framework 6.1.6
- Spring Cloud Common 4.1.2
- Spring Cloud Config Client 4.1.2

The minimum entries of configuration is

```
spring.application.name=example-application
spring.config.import=configserver:https://localhost:8888
```

When the application starts, first retrieve the configuration from **https://localhost:8888/example-application/default**. The response content type must be **application/json**. Following is an example of the response.

```
HTTP/1.1 200
Content-Type: application/json
Transfer-Encoding: chunked
Date: Tue, 21 May 2024 10:00:00 GMT

{"name":"example-application","profiles":["default"],"label":null,"version":null,"state":null,"propertySources":[{"name":"file:/C:/work/temp/config/example-application-default.properties","source":{"a.b.c":"d"}},{"name":"file:/C:/work/temp/config/example-application.properties","source":{"a.b":"c","a.a":"b","message":"Hello world!"}}]}
```

The retrieve logic is defined in *org.springframework.cloud.config.client.ConfigServerConfigDataLoader#getRemoteEnvironment* and the configuration class is *org.springframework.cloud.config.client.ConfigClientProperties*.

The basic HTTP authentication can be specified by

```
spring.application.name=example-application
spring.config.import=configserver:https://localhost:8888
spring.cloud.config.username=user
spring.cloud.config.password=pass
```

After configuration is retrieved, two entries are inserted into the *PropertySources* list in *ApplicationContext*.

![PropertySources](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/zfs6sgksjvggzq3qecv9.png)

# Decrypt encrypted secret

Property value in configuration can be encrypted. Encoded value has a prefix **{cipher}**.

```
message={cipher}0123456789abcfef0123456789abcfef
```

Decryption is done in *org.springframework.cloud.bootstrap.encrypt.DecryptEnvironmentPostProcessor#postProcessEnvironment*.

The default algorithm is **AES/CBC/PKCS5Padding**. Property of **encrypt.key** is a string password, then a 256 bits key is generated by PBKDF2 hash function (Java implementation is *com.sun.crypto.provider.PBKDF2KeyImpl*).

```
encrypt.key=any_string_is_ok
```

After decryption, a SystemEnvironmentPropertySource of name *decrypted* is inserted into the PropertySources list in ApplicationContext.
PHP
Tags: php
Published: 2024-06-07 19:13:54

06 Jun 2024
PHP 8.3.8 Released!
The PHP development team announces the immediate availability of PHP 8.3.8. This is a security release.

All PHP 8.3 users are encouraged to upgrade to this version.

For source downloads of PHP 8.3.8 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.
Creative Parallax Slider | Swiper Slider
Tags: codepen
Published: 2024-06-07 18:57:13

This demo showcases a responsive parallax slider using the Swiper library. It includes autoplay functionality with a dynamic progress bar that visually indicates the time left before the slide changes. The progress bar fills horizontally, providing a clear and engaging user experience.

Features:

Parallax Effect: Adds depth to your slides with smooth, animated background movements.
Autoplay: Automatically transitions through slides, adjustable via a delay setting.
Navigation: Includes next and previous buttons for manual slide control.
Pagination: Provides clickable pagination dots to quickly navigate between slides.
Progress Bar: A horizontal progress bar that fills to indicate the time remaining until the next slide.
Technologies Used:

HTML5: Structured the slider and its elements.
CSS3: Styled the slider, including the parallax effect and progress bar.
JavaScript (jQuery): Implemented Swiper slider functionality and progress bar animation.
This setup is perfect for showcasing creative digital products, providing a visually appealing and interactive experience for users.

How to Use:

Include the required Swiper CSS and JavaScript files in your project.
Add the provided HTML structure for the slider.
Implement the CSS for styling the slider and the progress bar.
Initialize the Swiper slider in your JavaScript, including the autoplay settings and progress bar updates.
Enjoy exploring the possibilities with this Creative Parallax Slider!

{% codepen https://codepen.io/CreativeSalahu/pen/yLWoePv %}
Dev Challenges: Frontend - Neeraj Gupta
Tags: frontendchallenge, devchallenge, css, india
Published: 2024-06-07 18:54:17

_This is a submission for [Frontend Challenge v24.04.17](https://dev.to/challenges/frontend-2024-05-29), CSS Art: June._

## Inspiration
The Sahyadri Hills, or Western Ghats, transform into a lush paradise during the monsoon with vibrant greenery, cascading waterfalls, and misty peaks. Popular trekking spots and cultural sites like Sinhagad Fort offer breathtaking views and rich heritage. It’s an enchanting retreat for nature lovers and adventure enthusiasts.

## Demo 
https://dev-challenges-frontend.vercel.app/

## Journey 
This is the only beautiful memory in my mind right now, so thought of sharing it with community
Cybersecurity in the Age of IoT: Challenges and Solutions
Tags: webdev, javascript, devops, ai
Published: 2024-06-07 18:44:49

1. **Proliferation of IoT Devices**:
   - The rapid increase in IoT devices expands the attack surface, making networks more vulnerable to cyber threats.

2. **Inadequate Security Measures**:
   - Many IoT devices lack robust security features, often due to cost constraints or limited processing power, leaving them susceptible to attacks.

3. **Complex Network Architectures**:
   - Integrating numerous IoT devices into existing networks complicates security management, requiring more sophisticated monitoring and control mechanisms.

4. **Data Privacy Concerns**:
   - IoT devices often collect and transmit sensitive data, raising significant privacy issues if data is intercepted or improperly handled.

5. **Firmware Vulnerabilities**:
   - Outdated or unpatched firmware in IoT devices can be exploited by attackers, highlighting the need for regular updates and patches.

6. **Lack of Standardization**:
   - The absence of universal security standards for IoT devices leads to inconsistent security practices, increasing the risk of vulnerabilities.

7. **Botnets and DDoS Attacks**:
   - Compromised IoT devices can be used to form botnets, which can launch large-scale distributed denial-of-service (DDoS) attacks.

8. **Authentication and Access Control**:
   - Ensuring proper authentication and access control for numerous IoT devices is challenging but essential to prevent unauthorized access.

9. **Endpoint Protection Solutions**:
   - Implementing endpoint protection solutions tailored for IoT can help safeguard devices against malware and other cyber threats.

10. **Advanced Threat Detection**:
    - Utilizing advanced threat detection technologies, such as AI and machine learning, can enhance the ability to identify and mitigate emerging threats in IoT environments.

Happy Learning 🎉
777SweepStakesCasino
Tags: onlinegaming, california, florida, texas
Published: 2024-06-07 18:36:17

Welcome to 777SweepstakesCasino, your ultimate destination for thrilling online gaming! Dive into an electrifying world of excitement with our exclusive games like Ultra Panda, Fire Kirin, and Vegas X. Create your profile now to unlock access to a plethora of adrenaline-pumping experiences. Our platform offers seamless gameplay, stunning graphics, and generous rewards that keep you coming back for more. Join our vibrant community of gamers and embark on an unforgettable journey filled with big wins and endless entertainment. Whether you're a seasoned player or new to online gaming, 777SweepstakesCasino caters to all, providing an unparalleled gaming experience. Sign up today and let the fun begin! Get ready to explore a world where every spin, shot, and bet brings you closer to massive rewards and thrilling adventures. Don’t miss out on the excitement – join 777SweepstakesCasino now and start your path to epic wins and lasting memories!
Click Here : https://777sweepstakescasino.com/
Gerador de currículos otimizado para os sistemas de ATS utilizados no Brasil, como Gupy e 99Jobs ( gratuito 😎)
Tags: braziliandevs, react, productivity
Published: 2024-06-07 18:30:36

Para quem não conhece, ATS (Applicant Tracking System) é um sistema de rastreamento de candidatos utilizado pelas empresas para gerenciar o processo de recrutamento. Um currículo otimizado para ATS é crucial porque esses sistemas utilizam algoritmos para filtrar e classificar currículos com base em palavras-chave e critérios específicos. Ter um currículo bem ajustado aumenta significativamente as chances de ser selecionado para uma entrevista.

Este projeto é um fork do trabalho original de Saurav Hathi, que eu adaptei e customizei para o Brasil. Se você já tentou usar ferramentas gringas para criar seu currículo, sabe o quanto é frustrante ter que traduzir e ajustar tudo para o português. Foi pensando nisso que desenvolvi esta nova versão, traduzida e configurada com as palavras-chave certas, seguindo o manual de boas práticas da Gupy.

Link do gerador: https://geradorcv.pedrobarreto.me

O repositório é de código aberto e está disponível no GitHub. Se você quiser contribuir, otimizar ou simplesmente utilizar a ferramenta, fique à vontade para acessar e participar.
Repositório: https://github.com/pedrobarreto/curriculoats
Network configuration on Linux
Tags: linux, networking
Published: 2024-06-07 18:25:55

This is how a network needs to be configured when spinning up a linux server. For example for a fresh install of a local lab on of linux virtual machines on VMware Fusion, Virtualbox or AWS, etc. These are some of the technical details that need to be verified and configured properly.

- **Host Address:** The unique IP address of your system on the network.
- **Network Subnet Address:** Defines the local network's range.
- **Default Router/Gateway:** The device that routes traffic to other networks.
- **System Host Name:** The name by which a system is identified on a network.
- **DNS Server Address:** Used for resolving hostnames to IP addresses.

**Network Configuration Files:**
- Linux systems use `systemd-networkd` service for network interface detection and configuration.
- Different distributions have different files for network settings, such as:
  - **Debian-based:** `/etc/network/interfaces`
  - **Red Hat-based:** `/etc/sysconfig/network-scripts` directory
  - **OpenSUSE:** `/etc/sysconfig/network`

**Configuration Methods:**
1. **Manual Editing:** Directly modify network configuration files.
2. **Graphical Tools:** Use distribution-provided GUI tools.
3. **Command-Line Tools:** Utilize terminal commands for configuration.

**Examples:**

***File Configuration***

For CentOs file /etc/sysconfig/network-scripts/ifcfg-<interface_name> (such as eth0 or enp3s0)
```
DEVICE=<interface_name>
TYPE=Ethernet
ONBOOT=yes
NM_CONTROLLED=yes
BOOTPROTO=static
IPADDR=192.168.1.100
NETMASK=255.255.255.0
GATEWAY=192.168.1.1
DNS1=8.8.8.8
DNS2=8.8.4.4
```

***Command Line***
There are multiple types of commands, most common are `ifconfig`, `ip`, `nmcli`.

- ifconfig: it's legacy but commonly known.
- nmcli: for simple network configurations.
- ip: for advanced configurations, which could involve scripting and more complex scenarios.

***ip command example:***
```
# Set IP
>> ip addr add 192.168.1.100/24 dev <interface_name>

# Activate the interface device
>> ip link set <interface_name> up

# Set Default router
>> ip route add default via 192.168.1.1

# Set DNS (not included in ip commands, gotta write directly to file)

>> echo "nameserver 8.8.8.8" | sudo tee /etc/resolv.conf
>> echo "nameserver 8.8.4.4" | sudo tee -a /etc/resolv.conf

# ONBOOT=yes has to be set manually as well
```

***nmcli command example***
```
nmcli con mod "ConnectionName" ipv4.addresses 192.168.1.100/24
nmcli con mod "ConnectionName" ipv4.gateway 192.168.1.1
nmcli con mod "ConnectionName" ipv4.dns "8.8.8.8,8.8.4.4"
nmcli con mod "ConnectionName" ipv4.method manual
nmcli con mod "ConnectionName" connection.autoconnect yes
```
lá số tử vi
Published: 2024-06-07 18:13:20

Tử Vi, hay Tử Vi Đẩu Số, là một bộ môn huyền học được dùng với các công năng chính như: luận đoán về tính cách, hoàn cảnh, dự đoán về các " vận hạn" trong cuộc đời của một người đồng thời nghiên cứu tương tác của một người với các sự kiện, nhân sự.... Chung quy với mục đích chính là để biết vận mệnh con người.

Lấy lá số tử vi để làm gì ?
Xem lá số tử vi trọn đời có bình giải chi tiết sẽ giúp cho quý bạn mệnh biết về tương lai, vận hạn theo các năm. Khi lấy lá số tử vi theo giờ sinh và ngày tháng năm sinh thì quý bạn cần khám phá phần luận giải lá số để nắm bắt vận mệnh của chính mình. Lá số tử vi trọn đời mang yếu tố tham khảo giúp quý bản mệnh tránh việc không nên, tăng cường việc tốt từ đó có một cuộc sống suôn sẻ và nhiều may mắn.

Lá số tử vi trọn đời thể hiện điều gì ?
Trên mỗi lá số tử vi sẽ thể hiện các phương diện cuộc sống của quý bản mệnh theo từng năm tuổi cụ thể như: công danh, sự nghiệp, gia đạo, tình duyên, tiền tài, sức khỏe, anh chị em, quan hệ xã hội...
Để tra cứu và lấy lá số tử vi trọn đời trực tuyến miễn phí quý bạn cần cung cấp đầy đủ và chính xác nhất về họ tên, giờ sinh, ngày sinh, tháng sinh, năm sinh và giới tính.
Ngoài ra: cách xem lá số tử vi có thể thay đổi theo các năm. Vì vậy để luận đoán và có cái nhìn chính xác nhất về tương lai và vận mệnh của mình trong năm Kỷ Hợi 2019 cũng như trong năm Canh Tý 2020. Quý bạn nên lấy lá số tử vi 2019 và cách lập lá số tử vi để tham khảo chi tiết tử vi năm 2020 của mình, cũng như phân tích và khám phá lá số tử vi trọn đời của các năm khác.
Xem thêm tại: https://tuvi.vn/lap-la-so-tu-vi
From Mechanical Engineer to Web Developer: My Journey
Tags: webdev, beginners, career, careerdevelopment
Published: 2024-06-07 17:52:35

Hi Everyone!

I’m Bashar, a mechanical engineering graduate who transitioned into web development. My journey began as a Design Engineer, where I spent six years creating machine parts and manufacturing drawings. However, the COVID-19 pandemic changed everything. Like many, I lost my job and found myself rethinking my career path.

I’ve always had a passion for coding. Despite opportunities during my school days, I didn’t pursue it then (a decision I now regret). During the pandemic, with ample free time, I decided to dive into programming. I stumbled upon a YouTube channel called Crossroads (now [Brototype](https://www.youtube.com/@BrototypeMalayalam)) and their ['100K Coding Challenge'](https://youtu.be/pDmEYRhyusU?si=EhyOvXk6l8rBJh4f) series. This series was a turning point for me. Seeing my first 'Hello World' output filled me with joy and ignited my enthusiasm for learning programming.

As a Design Engineer, I rarely saw the end products of my work, which left me feeling unfulfilled. In contrast, coding allowed me to see immediate results, giving me a sense of ownership and satisfaction. This newfound happiness motivated me to continue my coding journey.

I completed several projects by following YouTube tutorials and an online course on Udemy to learn JavaScript. I started building projects using the MERN Stack and began applying for coding jobs. The transition was challenging, but after a few months of job hunting, I secured my first coding job as a Backend Developer at [Skyniche Technologies](https://skyniche.com/).

At Skyniche, I worked on various projects, which helped me learn and upskill significantly. This career switch boosted my confidence and courage to pursue more in life. Now, I’m in the vibrant city of Dubai, looking for exciting opportunities while continuously learning new technologies.

I’d love to connect with fellow tech enthusiasts and learn more about growing in the tech field. Feel free to connect with me on LinkedIn and GitHub.

LinkedIn: [Bashar V I](https://www.linkedin.com/in/basharvi/)
GitHub: [BasharVI](https://github.com/BasharVI)

Thanks for reading!

Cheers,
Bashar
Homemade Caching
Tags: performance, laravel, restapi, php
Published: 2024-06-07 17:42:25

It it almost never a good idea to reinvent the wheel, but if you really have a need a patch it rather than reinventing it... maybe it will work!

In our latest [story](https://sharesquare-engineering.medium.com/homemade-caching-with-laravel-64c2a6a8cd2d) we present an elegant caching layer we developed in Laravel, and we do so not without pride.
Position: Categorical Deep Learning is an Algebraic Theory of All Architectures
Tags: machinelearning, ai, beginners, datascience
Published: 2024-06-07 17:40:17

*This is a Plain English Papers summary of a research paper called [Position: Categorical Deep Learning is an Algebraic Theory of All Architectures](https://aimodels.fyi/papers/arxiv/position-categorical-deep-learning-is-algebraic-theory). If you like these kinds of analysis, you should subscribe to the [AImodels.fyi newsletter](https://aimodels.substack.com) or follow me on [Twitter](https://twitter.com/mikeyoung44).*



**If you enjoyed this summary, consider subscribing to the [AImodels.fyi newsletter](https://aimodels.substack.com) or following me on [Twitter](https://twitter.com/mikeyoung44) for more AI and machine learning content.**
My third day
Tags: linux, support
Published: 2024-06-07 17:39:30

Its my 3rd third day on this platform. I am finding this platform quite cool. Although I hadn't any chance to go through the training session today. But I tried few more basic commands that was given by my collegue.
Commands like ls,rm,cp,mv,whomami, these commands I have been using on regular basis in my previous firm. Its weekend already, so see you after a while.
React native (UWP) support
Published: 2024-06-07 17:34:27

Hi,

React native supports windows application development using UWP.

The Microsoft announced the UWP upgrades stops and only supports bug fixes.

Does the react native support windows development using UWP ? Any updates?
Does the react native support recent "Windows APP SDK" development?
What is future plan to support windows app development ?

Kindly clarify it.