<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Best Practices on Chen Kai Blog</title><link>https://www.chenk.top/en/tags/best-practices/</link><description>Recent content in Best Practices on Chen Kai Blog</description><generator>Hugo</generator><language>en</language><lastBuildDate>Sun, 06 Jul 2025 09:00:00 +0000</lastBuildDate><atom:link href="https://www.chenk.top/en/tags/best-practices/index.xml" rel="self" type="application/rss+xml"/><item><title>Transfer Learning (12): Industrial Applications and Best Practices</title><link>https://www.chenk.top/en/transfer-learning/12-industrial-applications-and-best-practices/</link><pubDate>Sun, 06 Jul 2025 09:00:00 +0000</pubDate><guid>https://www.chenk.top/en/transfer-learning/12-industrial-applications-and-best-practices/</guid><description>&lt;p>A three-person team at a fintech startup shipped a fraud-detection model in two weeks that outperformed the previous system built by 12 engineers over 6 months. The secret? They fine-tuned a pretrained transformer on 5,000 labeled transactions instead of architecting a rule-based ensemble from scratch. The model caught 23% more fraud in the first month while cutting false positives in half. When their VP of Engineering asked why the old team took so long, the answer was simple: they didn&amp;rsquo;t have transfer learning.&lt;/p></description></item><item><title>Docker and Containers (7): Security — Running Containers Without Giving Away the Keys</title><link>https://www.chenk.top/en/docker-containers/07-security-and-best-practices/</link><pubDate>Thu, 22 Jun 2023 09:00:00 +0000</pubDate><guid>https://www.chenk.top/en/docker-containers/07-security-and-best-practices/</guid><description>&lt;p>Docker&amp;rsquo;s default configuration prioritizes convenience over security. Containers run as root, have access to a broad set of Linux capabilities, and can write to their entire filesystem. This is fine for development but dangerous for production. A container escape vulnerability in a root-privileged container means an attacker can take over the host. Let&amp;rsquo;s fix that.&lt;/p>
&lt;hr>
&lt;h2 id="the-threat-model" class="heading-anchor">The Threat Model&lt;a href="#the-threat-model" class="heading-link" aria-label="Permalink to this section" title="Copy link to this section">#&lt;/a>
&lt;/h2>&lt;p>Before securing your setup, understand what you&amp;rsquo;re defending against:&lt;/p></description></item></channel></rss>