The article debunks the myth that agile eliminates planning by showing that even in complex, time‑boxed Scrum projects a flexible, continuously‑refined plan covering scope, cost, schedule, and quality is essential for managing risk and delivering business value.
This article presents a comprehensive overview of financial risk management, detailing business challenges such as identity verification and fraud, and describing technical solutions including feature engineering, sample handling, model optimization, and online validation, emphasizing the integration of data-driven AI techniques throughout the process.
The closure of Guizhou’s Huaxintong highlights the high risk of semiconductor ventures, the need for companies and governments to admit failure, and why courage to cut losses and tolerate setbacks is essential for a sustainable chip industry in China.
The article explains how thorough requirement analysis, disciplined daily planning, proactive risk communication, and a strong team project culture enable testers to actively contribute to project success, improve delivery quality, and align product outcomes with business value in fast‑changing mobile‑internet environments.
This article explains the origin of Java thread pools, outlines their advantages and potential risks such as deadlocks and resource exhaustion, describes their internal states and processing flow, provides guidance on sizing for CPU‑ or I/O‑bound tasks, and reviews the four common thread‑pool implementations.
This comprehensive guide outlines 40 essential project management terms—from basic concepts like project plans and WBS to advanced topics such as risk mitigation, Kanban flow limits, and quality assurance—helping professionals enhance their terminology and improve project communication.
The article outlines Ant Financial's technical risk prevention platform, describing the challenges of financial‑grade distributed architectures, the multi‑layer risk assurance system, the TRaaS platform's risk baseline, handling, and change‑control mechanisms, and how these practices empower partners to achieve high‑availability and secure financial services.
This article explains how to build a credit scoring card model using logistic regression, detailing the full development workflow—from variable selection and WOE encoding to model training, evaluation metrics like AUC and KS, and deployment considerations for risk management.
Ant Group’s Alipay presented its AI‑driven risk control capabilities and led the development of an ITU‑SG17 international security standard for enhanced identity authentication, highlighting its low loss rate and reinforcing its global fintech reputation.
Ant Financial’s internal red‑blue technical attack‑defense program, driven by a dedicated blue team and SRE‑based red team, continuously probes system weaknesses, refines fault‑injection tools like Awatch, and evolves high‑availability and self‑healing mechanisms to strengthen risk control and operational reliability.
This article shares practical insights on project management, covering how to understand project goals, assess resources, communicate with stakeholders, handle risks and changes, create effective plans, and ensure successful delivery through disciplined documentation and verification.
Project managers often face shifting requirements, poorly organized meetings, delayed progress, and post‑launch knowledge gaps, but by clearly defining scope, using focused agendas, daily stand‑ups, critical‑path monitoring, and documenting assets for hand‑off, teams can apply agile‑inspired practices to deliver value faster.
This article outlines Ant Financial’s engineering practices for achieving fast yet stable continuous delivery of financial‑grade internet products, covering industry challenges, agile delivery methods, risk‑controlled innovation, and the AntLinkE platform that integrates DevOps, data analytics, and service support.
The article explains how Objective‑C Categories can implement a low‑overhead, type‑safe communication layer between iOS components, compares alternative patterns like DI, SPI and NotificationCenter, presents performance data, and proposes two Category‑based schemes with tooling to detect method‑name conflicts and ensure maintainable modular architecture.
This article explains the rapid rise of open‑source technologies, outlines common questions and risks associated with open‑source license usage, summarizes a guide covering eleven major licenses, and announces the OSCAR Open Source Pioneer Day where experts will discuss compliance and best practices.
This article offers eight practical operations‑team strategies—inspection, monitoring alerts, capacity planning, network restrictions, risk pre‑plans, data backup, on‑call mechanisms, and staying connected—to ensure system stability and enjoy the Golden Week holiday without incidents.
The article explores how big data and artificial intelligence are reshaping finance through automated risk management, advanced customer data handling, personalized services, predictive analytics, and real‑time analysis, highlighting practical methods, benefits, and future trends for financial institutions.
The article analyses the shortcomings of traditional seller‑driven financial risk data queries and proposes a blockchain consortium that uses distributed ledger, consensus, smart contracts and token‑based pricing to enable fair, secure, and efficient data sharing and settlement among financial institutions.
This article explains what user profiling is, why it matters for large‑scale enterprises, and how to design a data‑driven profiling system—including data sources, business modeling, tag taxonomy, and practical applications such as targeted marketing, risk assessment, user research, personalized services, and strategic decision‑making.
In this interview, senior JD.com project manager Tian Yanyun discusses his most memorable projects, coordination techniques without formal authority, demand decomposition, feasibility assessment, risk control, portfolio benefits, and how to thrive in a volatile, uncertain, complex, and ambiguous environment.
This article examines how big data technologies are reshaping banking, insurance, and securities by enabling customer profiling, precision marketing, risk management, and operational optimization, while also outlining the key challenges such as data quality, integration complexity, standards, and governance that the sector must overcome.
The article explains the three‑entity (customer, user, account) account model, its architectural layout, and how it supports diverse fintech scenarios such as marketing, risk control, intra‑ and inter‑business line operations, and external service provisioning.
This article chronicles the three‑generation evolution of Zhihu’s anti‑cheat platform Wukong, detailing its business context, spam taxonomy, multi‑layered control methods, architectural redesigns, strategy language improvements, graph‑based risk analysis, and the continuous integration of big‑data and machine‑learning techniques to combat content and behavior spam.
This article explores the core competencies that distinguish a truly professional project manager, emphasizing the importance of goal‑oriented thinking, effective communication, risk identification, and strong negotiation skills while highlighting common pitfalls and the need for clear appointment and exit criteria.
This article explains why architects need both specialized and general management skills and summarizes the ten PMP knowledge areas—Integration, Scope, Schedule, Cost, Quality, Resource, Communication, Risk, Procurement, and Stakeholder—providing visual references for each.
This article outlines the comprehensive responsibilities of a software testing engineer, covering requirement review, documentation, system architecture awareness, process management, risk and time management, and provides practical guidelines to improve software quality and delivery speed.
The article details Ctrip's mature real‑time anti‑fraud platform, describing its big‑data parallel processing, AI‑driven models, device‑fingerprinting, CDNA service, and evolving architecture that together achieve sub‑150 ms decision latency while handling billions of daily transactions.
This article analyses fifteen typical architectural design risks—such as duplicate interactions, high‑frequency calls, redundant requests, non‑reentrant interfaces, unreasonable timeouts, retry misconfigurations, IP direct‑connect, cross‑datacenter calls, weak/strong dependencies, third‑party reliance, cache penetration, cache avalanche, and coupling issues—explaining their definitions, impacts, detection methods, and concrete mitigation measures with real‑world Baidu cases to help engineers improve system stability.
This article presents an Active PU Learning framework that combines active learning with two‑step positive‑unlabeled learning to improve cash‑out fraud detection in Alipay’s fifth‑generation risk engine, AlphaRisk, achieving three‑fold identification gains over unsupervised methods while reducing labeling costs.
The article shares practical reflections on project management in e‑commerce development, emphasizing the importance of clear requirements, effective communication, realistic scheduling, resource allocation, and proactive risk management to help practitioners improve their project outcomes.
This article examines Suning's evolution from a basic network‑operations unit to a comprehensive security ecosystem, detailing its organizational structure, protection platforms, integrated risk‑control mechanisms, big‑data threat perception system, and management processes that together safeguard its e‑commerce operations.
This article shares a detailed, experience‑based framework for project managers to successfully lead cross‑company, multi‑team software collaborations by dividing work into planning, implementation, and delivery phases, emphasizing risk identification, schedule coordination, change handling, and continuous external communication.
The article outlines sixteen key characteristics—including a skeptical attitude, uncompromising quality, user‑centric thinking, early testing, risk management, strong analysis, negative testing, effective negotiation, and teamwork—that together define what makes a software tester truly outstanding.
This article reflects on Mark Zuckerberg’s early Facebook experience, emphasizing the importance of creating value, building learning‑focused organizations, rapid experimentation, hiring talent without experience, and embracing risk as essential for successful entrepreneurship.
This article discusses quality assurance strategies for virtual businesses, covering layered testing approaches, external decoupling techniques, process simulation, risk prevention, and team building methods to ensure efficient and reliable platform operations.
This article recounts the development of Ctrip's graphical captcha system, describing its early .NET‑based implementation, the challenges encountered such as uniform difficulty, limited data collection, and poor user experience, and how successive redesigns—including multilingual support, adaptive difficulty, and slider‑plus‑character selection—balanced security and usability.
This guide outlines the key components, step‑by‑step process, and quality‑assurance measures for evaluating software and hardware system architectures to ensure reliability, scalability, security, and cost‑effectiveness while reducing risk and guiding future design decisions.
The article walks through building an initial software project plan by translating effort estimates into a timeline, discussing ideal versus realistic weekly capacity, handling urgent issues, allocating testing time, identifying risks and assumptions, and adding buffer to produce a roughly nine‑week schedule.
This article explains how to design a payment system by covering product classification, module functions, business processes, and reference architectures, illustrating the role of microservice proxies, risk assessment, and integration with popular platforms like Alipay, WeChat Pay, and PayPal.
This article details Zhaogang's journey from a chaotic startup environment to a mature, multi‑stage security operation, covering its background, the four‑phase security framework, traditional security domains, and practical strategies for driving security initiatives across the organization.
The article examines how Baidu Waimai, positioning itself as a big‑data company, built an intelligent system for database resource optimization and risk management, outlines preventive measures for database reliability, and discusses the rapid growth and challenges of cloud databases.
The article reflects on the challenges faced by operations engineers in small companies, illustrating why they often become scapegoats, and offers practical advice on learning, risk control, communication, and disaster‑recovery drills to increase their value and effectiveness.
This article explains the concept, structure, and practical strategies of payment routing—including guide routing and transaction routing—using a retail store analogy to illustrate how routing decisions optimize user experience, success rates, and profitability while managing costs and risk.
Meituan’s risk‑control architecture transforms diverse, high‑volume e‑commerce services into a middleware‑based platform that unifies data collection, combines expert rules with machine‑learning models, and employs a three‑stage defense—pre‑risk, real‑time detection, and post‑incident response—to continuously adapt to evolving fraud threats.
This article outlines Ctrip's comprehensive business security strategy, detailing four major risk types, three core protection systems—including a unified captcha, a real‑time risk control engine, and a risk data platform—followed by a technology‑driven architecture, new captcha services, and future security directions.
The article describes how Alibaba leverages big data, cloud computing and AI through its “City Brain” project and security platforms to improve urban traffic management, public safety, anti‑fraud measures and e‑commerce risk control, illustrating the transformative impact of data‑driven technologies on modern social governance.
Using the classic tale of Bian Que, this article explains how proactive, mid‑stage, and reactive risk controls in IT operations prevent small issues from becoming catastrophic failures, illustrated with real‑world storage, cloud, and equipment‑selection case studies.
This article explores how Google Site Reliability Engineers manage service reliability by balancing risk, cost, and business goals, using metrics like unplanned downtime, availability formulas, and risk tolerance to set realistic SLOs for both consumer and infrastructure services.
This article reviews the rapid growth of China’s OTA market, the rise of black‑market threats, and how Ctrip’s security team has iteratively redesigned its risk‑defense architecture—from a .NET‑based real‑time system, through an offline risk‑library, to the integrated Ares platform—highlighting each stage’s strengths, shortcomings, and lessons learned.
This article, excerpted from the upcoming Chinese edition of “SRE: Google Site Reliability Engineering”, examines how Google’s SRE guiding philosophies—disaster planning, post‑mortem culture, automation, and data‑driven decision‑making—are adopted, adapted, or contrasted in sectors such as manufacturing, aerospace, nuclear, telecommunications, healthcare, and finance, highlighting key similarities, differences, and lessons for Google and the broader tech industry.
Drawing from a weekend sailing race, the author reflects on team motivation, member selection, structure, agile roles, risk management, and incentive systems, offering practical analogies to improve the effectiveness of software development teams.
The article shares a veteran IT professional’s insights on how technical debt forms, the risks it brings, various repayment strategies, and practical ways to prevent debt crises, emphasizing continuous management and disciplined engineering practices.
This guide outlines sixteen practical project‑management insights—from defining clear goals and stakeholder roles to handling cost‑cutting pressures and risk mitigation—helping teams streamline planning, improve execution, and prevent unnecessary overtime.
This article outlines why proactive information‑security preparedness, cross‑department response teams, and clear incident‑response checklists are essential for minimizing damage and maintaining trust when a data breach occurs.
This guide shares practical experiences and lessons on selecting suitable open‑source components, testing and deploying them safely, and deciding when and how to modify or extend them, helping teams avoid costly pitfalls while leveraging community‑driven software.
In this technical presentation, HP's storage director shares market trends, flash storage evolution, performance metrics, planning considerations, and risk mitigation strategies, highlighting how storage architecture directly impacts database efficiency, reliability, and cost in modern enterprise environments.
The article explores the essence of information security by comparing it to safeguarding personal money, detailing the four fundamental attributes—confidentiality, integrity, availability, and controllability—and illustrating how different conditions shape security needs, from personal to enterprise contexts.
The article explains how architects can adopt a risk‑ and cost‑driven, lightweight approach to keep architecture agile, offering five actionable recommendations—decision‑focused delivery, a backlog of architectural concerns, economic impact prioritization, minimal architecture, and delivering just enough expectations—applicable across agile and plan‑driven projects.
The article recounts how a decades‑old, unused code path was unintentionally re‑activated during a rushed deployment of the Retail Liquidity Program, leading Knight Capital to send erroneous orders that caused a $460 million loss and the firm’s bankruptcy.
