All articles
-
Windows exit codes beyond pass/fail: robocopy's bitmask, msiexec's installer codes, and $LASTEXITCODE
robocopy encodes several independent facts (files copied, extra files, mismatches, failures) into one number below 8 that must be read as a bitmask, not compared to zero; msiexec returns specific Windows Installer codes where 3010 and 1641 mean success with a pending reboot, not failure; and PowerShell's $LASTEXITCODE is the only reliable way to see a native program's real code, with different rules depending on how the script was invoked.
-
f-strings and the format specification mini-language: the details that bite
An f-string formats each expression through the spec [[fill]align][sign][z][#][0][width][grouping][.precision][type]; precision truncates strings, a leading 0 pads numbers only, negative zero survives rounding unless z is given, and quote reuse inside braces needs Python 3.12. The = specifier prints expression and value for debugging.
-
Repositories whose setup runs as one verified command receive more first-time contributions than repositories with a manual setup list
Hypothesis: GitHub's scripts-to-rule-them-all README claims that lowering setup friction is key to faster and happier contributions; the proposal restates this measurably, predicting that repositories with a single self-checking setup command show more first-time contributor pull requests, more of them green on first push, and fewer setup issues than matched repositories with manual README steps.
-
Build provenance attestations: what SLSA provenance records and how it is verified
SLSA's Build track rates how trustworthy an artifact's provenance is, from 'provenance exists' (L1) to a hardened build platform (L3); the provenance is an in-toto attestation naming the artifact digests, the builder, the build type and its external parameters, and a consumer checks it against a root of trust and expected values before use.
-
Container image tags versus digests: mutable names and content addresses
A tag is a human-readable pointer that can be moved to a different manifest at any time; a digest is the hash of the manifest bytes and identifies exactly one image forever. Build and test by tag, deploy and pin by digest, and record the digest in every release note.
-
Merchant integration with ACP: checkout sessions, delegated tokens and safe retries
The ACP 2026-04-17 snapshot separates merchant checkout state from delegated payment credentials. Merchants need versioned session endpoints, compatible payment handlers, idempotent completion and authenticated order updates.
-
SNMPv3 on Linux with net-snmp: a SHA/AES user with the priv security level, communities retired
net-snmp's snmpd supports SNMPv3's User-based Security Model with per-user authentication and encryption, configured with createUser and checked with the priv security level on rouser/rwuser. Removing every rocommunity/rwcommunity line, and any com2sec mapping, closes the SNMPv1/v2c plaintext-community path that USM is meant to replace.
-
CSS custom properties for theming: inheritance, fallbacks and @property
Custom properties (--name) cascade and inherit like other properties and are read with var(--name, fallback); an invalid substitution does not discard the rule but falls back to the initial or inherited value, and @property adds a type, an initial value and animation support. Structure them as raw tokens plus semantic roles and override roles per scope to theme.
-
Building and maintaining a cryptographic inventory for post-quantum migration
Record where cryptography protects data, who owns each dependency, and what evidence supports the record. Use a CycloneDX CBOM to exchange technical assets without mistaking it for a complete migration plan.
-
MCP STDIO command injection: Langflow remediation and Fay exposure
Langflow and Fay vulnerabilities show why MCP launch configuration requires code-execution authorization. Langflow 1.10.3 completes its fix by enforcing validation at execution, including configurations embedded in flows; the reviewed Fay record gives no fixed version.
-
A reproducible protocol for a household water-use observation
A proposed observation protocol: define the meter, the reading times, the household conditions and the units, record raw readings with timestamps, and report consumption as a range with the conditions that applied; no consumption result is claimed here.
-
Preparing a Linux golden image for cloning: host keys, machine-id, logs and net rules
A Linux image meant to be cloned many times must not carry a populated /etc/machine-id (or a stale /var/lib/dbus/machine-id), existing SSH host keys, MAC-pinned network configuration or cloud-init state. Otherwise every clone boots with the same identifiers as its siblings, and removing the host keys without a first-boot regeneration path leaves clones without SSH.
-
Running a retrospective that produces changes, not lists
A retrospective earns its time when it ends with one or two changes that have an owner, a deadline and a way to tell whether they happened; the Scrum Guide asks for the most impactful improvements to be addressed as soon as possible, and the Prime Directive sets the tone that makes people name real problems.
-
Game patches: package byte locality, delivery chunks and manifests
Control update size by understanding changed package bytes, separating logical content chunks from transfer chunks, and measuring download traffic independently from installation work.
-
Running IBM i CL commands from an SSH/PASE shell: system, qsh, and CCSID pitfalls
From an SSH session into IBM i PASE, the PASE-for-i system utility and the QSH/Qshell environment are the two supported ways to run CL commands and capture their output. Both convert between the job's CCSID and PASE's own encoding, which is where most first-time integration bugs come from.
-
Disagreeing in writing without causing offense: quote, core point, alternative
A written objection that can change a decision first restates the opposing position in its strongest form, quotes the disputed passage, attacks the core point rather than the tone or the person, rates its own evidence honestly, and proposes an alternative. Paul Graham's hierarchy of disagreement and Google's guide for reviewers supply the standards.
-
Environment Importance Sampling: Match Directions, Probabilities and Lighting Weights
Reduce environment-light sampling noise without biasing brightness by tracking the correct probability measure and validating prefiltered lighting separately.
-
Long-running and idle-in-transaction sessions in PostgreSQL: what they block and how to bound them
An open transaction holds its locks and pins the xmin horizon, so VACUUM cannot remove rows deleted after it began and DDL queues behind it; the worst case is a session idle in transaction because a client never committed. Find them in pg_stat_activity by xact_start and state, and bound them per role with idle_in_transaction_session_timeout, transaction_timeout and statement_timeout.
-
Unity Terrain Authoring: Coordinate Shape, Surface Layers and Openings
Build a terrain blockout around its heightfield representation, reuse surface layers intentionally, and review adjoining tiles and cave openings as separate authoring responsibilities.
-
YaST versus direct configuration on SUSE: what still runs from the command line, and the wicked/NetworkManager split
YaST modules can be listed and run individually from a non-graphical session with the yast command, but not every module has command-line support, and SUSE explicitly reserves NetworkManager for desktop and mobile workloads while keeping wicked as the network service every server certification is done against. An agent editing /etc/sysconfig/network files directly should check which service actually owns the interface first.
Machine-readable: JSON