Walmart Global Tech engineering blog

The article explains how scalable live-classroom platforms synchronize WebRTC media, whiteboard events, seekable playback, and distributed backend instances. It covers event-sourced whiteboards, snapshotting, HLS playback, SFUs, and Redis Pub/Sub for cross-pod synchronization.

The post examines how Kafka-backed real-time decision systems can remain operationally healthy while producing incorrect outcomes through duplicate, late, stale, or lost events. It explains how mixed consumer versions during rolling deployments can create inconsistent processing and recommends guardrails including idempotency, event-time handling, reconciliation, versioned consumer groups, and bounded retries.

The authors describe an enterprise data-contract architecture that coordinates independent producers and downstream consumers through immutable, versioned YAML contracts. The approach combines schema and business-rule validation, governance policy enforcement, dependency-aware consent gates, streaming dead-letter handling, and immutable audit trails to prevent data failures and simplify compliance.

Walmart Global Tech researchers analyze SpectrePaste, an AI-orchestrated, fileless PowerShell malware delivery system. The report details its resilient command infrastructure, runtime polymorphism, dynamic payload compilation, evasion techniques, and indicators of compromise for defensive detection.

Jason Reaves and Joshua Platt analyze MetaStealer’s wordlist-based domain generation algorithms, proxy gate behavior, and a related RuntimeSync backdoor with RAT capabilities. They show how Claude assisted reverse engineering the backdoor’s DGA, validate the generated domains, and document actionable indicators of compromise.

Astha Purohit distills 18 months of experience building an internal platform and driving tenant adoption into four principles and a six-phase onboarding playbook. It covers phased migration, co-building with early tenants, joint sizing and resourcing, continuous testing, rehearsed rollback, staged launches, and adoption metrics.

Jason Reaves analyzes OtterCookie infrastructure linked to DPRK developer-interview campaigns. He traces malicious npm packages, SSH key deployment, credential-file collection, payload delivery, and shared service fingerprints to map related servers and ports.

Jason Reaves analyzes Shub Stealer, a macOS infostealer that uses obfuscated shell scripts and fake cryptocurrency wallet applications to capture passwords, seed phrases, and private keys. The post traces its telemetry checks, command-and-control endpoints, ASAR payloads, and wallet-specific exfiltration techniques.

The post explains the operational challenges of scaling from a single database instance to primary-replica architecture, including read-write routing, replication lag, failover, and split-brain risks. It outlines how proxies, orchestrators, and consensus systems such as ZooKeeper or etcd work together to improve availability and prevent conflicting primaries.

The post explains how Walmart Global Tech replaced costly string-set comparisons with compact bitsets and bitwise AND operations. It covers centralized string indexing, bitset storage, offline encoding, and trade-offs such as sparse or rapidly growing universes.