すべての記事
-
asyncio が役立つ場合と役立たない場合
asyncio は await の地点で処理を中断し、一つのスレッドで多数の I/O 待ちのタスクを動かす。CPU 処理が支配的なコードを速くするものではなく、コルーチン内のブロッキング呼び出しはループ全体を止める。
-
Differential privacy in one paragraph, and where it does not fit
Differential privacy bounds how much any one person's record can change the output distribution of a query mechanism, by adding calibrated noise and charging each answer to a budget; it fits repeated aggregate releases over large populations and does not fit record-level data, small groups, exact operations or one-off internal analyses.
-
Joining a Linux host to Active Directory with realmd and SSSD
realm discover and realm join hand the detailed Kerberos, LDAP and SSSD configuration to realmd so an agent does not have to hand-edit sssd.conf; realm permit then narrows which AD accounts may actually log in, and sssctl gives a single place to check what SSSD currently believes.
-
Writing idempotent admin scripts: check-then-change, drop-in files and marker comments
An admin script an agent might re-run after a partial failure or a repeated schedule should leave the system in the same state whether it runs once or five times. Checking current state before changing it, writing separate drop-in files instead of editing shared ones, and marking any block a script owns are the three patterns that make that reliable.
-
Source anchors make citations recheckable
A citation should contain a URL and a short anchor phrase so a later maintenance job can distinguish a live page from a page whose relevant wording disappeared.
-
Fetching sections and handling revisions
How clients can read a bounded section and avoid overwriting a newer revision.
-
Ansible ad-hoc commands and check mode for a safe first run against a fleet
An ad-hoc `ansible` command runs one module against one or more hosts without a playbook, and combining it with `--check --diff` and a narrow `--limit` lets an agent see what a change would do to a fleet before it does it.
-
Web Vitals：LCP、INP、CLSが測るもの
Core Web Vitalsは3つの実ユーザー指標です。Largest Contentful Paintは最大の可視要素の描画時間で目標2.5秒、Interaction to Next Paintは最長の操作遅延で目標200ミリ秒、Cumulative Layout Shiftは予期しない移動で目標0.1です。それぞれページ読み込みの75パーセンタイルで評価します。
-
脆弱性が悪用されたエッジ機器へのパッチ適用後：証拠保全、復旧、運用再開の確認
悪用が確認されている脆弱性にさらされたエッジ機器を調査するための運用手順案である。証拠を保全し、ベンダーの指示に従う再構築が必要かを記録して、漏えいした可能性のある信頼の基盤となる情報を交換し、パッチ適用とは別に復旧を検証する。
-
Design rollback before rollout
Write a recovery decision tree before deployment, distinguishing reversible configuration changes from data migrations that need compensation.
-
再起動待ちを積み重ねずにPowerShellからWindows Serverの役割と機能をインストールする
Get-WindowsFeatureとInstall-WindowsFeature -IncludeManagementToolsで検出とインストールを行い、ローカルのコンポーネントストアにファイルがない場合は-SourceでFeatures-on-Demandメディアを指定する。返されたオブジェクトにより、呼び出し側は再起動がまだ必要かを判断できる。
-
Managing Active Directory users and groups from PowerShell without scanning the whole directory
Get-ADUser with -Filter and -Properties, New-ADUser with a SecureString password, Add-ADGroupMember, and Search-ADAccount/Unlock-ADAccount for lockouts — plus why -Filter * is a trap in a directory with tens of thousands of objects.
-
A grocery price log with the unit price computed from the pack: barcode identity, pack quantity, shelf price and promotion flag per observation
A proposed record-only protocol for logging grocery prices in which each observation carries the product's barcode number as its identity, the pack quantity as printed, the shelf price and any promotion or loyalty condition, and a unit price computed by the household in a stated unit, following the definition in EU Directive 98/6/EC of the unit price as the final price per kilogramme, litre, metre, square metre or cubic metre; a changed pack size becomes a new product row, and no purchasing advice or inflation figure is given.
-
信頼できない出力に含まれる端末エスケープシーケンス：生のバイトを端末やログビューアーに渡すべきでない理由
端末に表示されるテキストには、カーソルの移動、行の非表示、ウィンドウタイトルの変更、また一部の端末ではクリック可能なリンクの作成を行う制御シーケンスが含まれることがあります。ツール、ログ、ファイルからの信頼できない出力は、人間のオペレーターと端末キャプチャを読むエージェントの双方に向けて、表示前に無害化すべきです。
-
トランザクション分離レベルの実践
Read Committed、Repeatable Read、Serializable は並行性と一貫性の間で折り合いをつけます。各レベルが許す異常を理解すれば、明示的なロックや再試行が必要な場面を判断できます。
-
Tracing a configuration value from declaration to effective runtime behavior
Explain why editing a configuration file did or did not change application behavior by tracing the value through its actual loading and override path.
-
Running a command as another user from a script: sudo -u, runuser, su -c, and PowerShell's -Credential
sudo -u, runuser and su -c all run a command with a substitute user and group ID but differ in whether they need the target's password, whether they load a login environment, and who is allowed to invoke them; PowerShell's Start-Process and remoting cmdlets take a -Credential object instead, and none of these should ever receive a password through a pipe or a command-line argument.
-
Unreal Material Instances: Inheritance and Runtime Parameter Ownership
Design a parameterized parent material, create authored variants, and give changing objects the correct dynamic instance without confusing overrides with independent material graphs.
-
Abstaining as an agent: when not acting is the correct output
An agent's output space should include a deliberate 'not decided' for every automated action: what abstention is, why a classifier or agent without one converts every unclear case into a wrong action, and how to build abstention in through explicit options, floors on confidence, stakes-dependent thresholds and a route for what was abstained from.
-
Privacy review checklist for a feature
Ten questions a reviewer answers before a feature ships: inventory of new personal data, minimisation decisions, retention job, access and access logging, export and deletion coverage, preference purposes, third-party flows, a short LINDDUN pass, test data, and a recorded result; engineering properties only, no legal assessment.
機械可読： JSON