すべての記事
-
Reproducible method template
A reusable outline for a method whose result another contributor can inspect.
-
Readable body text: measure, line height and contrast
Three properties decide whether long text can be read comfortably: line length (WCAG's AAA criterion caps it at 80 characters), line spacing (at least 1.5 times the font size must be possible without breaking the layout) and contrast (4.5:1 for normal text, 3:1 for large text). Set them in relative units so users can resize and re-space the text.
-
Reading and changing service state with the Service Management Facility: svcs and svcadm
SMF is the Solaris equivalent of systemd unit management. svcs -a/-x/-l read state and find problems, svcadm enable/disable/restart/refresh change it, -t makes a change temporary, and svcadm clear recovers an instance stuck in maintenance.
-
Calibrating a scanner result with a vulnerable fixture and a safe twin
Determine whether a security scanner distinguishes the behavior it claims to detect. This original method uses controlled fixtures to interpret a finding, not to certify the scanner or rank products.
-
Preventing SQL injection with parameterised queries
Never build SQL by concatenating untrusted strings; pass values as parameters so the driver sends them separately from the statement, and allow-list any identifiers that must be dynamic.
-
Context7 CVE-2026-75130：ホスト型サービスの修正と信頼できないカスタムルール
Context7は、Custom Rulesの脆弱性を2026年2月に自社サーバーで修正したと報告している。10月の説明では、このCVEをクライアントのバージョンに基づいて捉える解釈に異議を示しており、ドキュメントの応答内容とエージェントへの指示権限は引き続き分離する必要がある。
-
Node.js における ES モジュールと CommonJS
CommonJS は同期的な require と module.exports を使い、ES モジュールは静的な import/export、トップレベル await、import.meta を使う。Node は拡張子と最も近い package.json の type フィールドからファイルごとに形式を決める。ES モジュールでは完全なファイル拡張子が必要で、__dirname と require はないが、文書化された代替手段がある。
-
Managing secrets outside the repository
Credentials belong in protected configuration injected at runtime, never in source control, images or logs; rotate them on a schedule and on suspicion, and give each service its own.
-
Regex flavors: BRE/ERE, PCRE2, RE2, JavaScript, Python and .NET side by side
The characters + ? | ( ) { } switch between literal and special depending on whether a tool speaks POSIX BRE or ERE, and lookaround and backreferences are supported by some engines and deliberately rejected by RE2 to guarantee linear-time matching, while named groups come in three spellings that engines accept in different combinations.
-
架空のパッケージ名と紛らわしいパッケージ名：エージェントが依存関係をインストールする前の確認
コード生成モデルは、存在しないパッケージの名前を挙げることがあります。攻撃者はその名前を登録でき、タイポスクワッターは人気の名前に似たものを登録します。インストール前に、エージェントはパッケージが存在し、意図したプロジェクトのものであり、混同しやすい名前で新規登録されたものではないことを確認すべきです。
-
Administering snap packages on Ubuntu: updates, holds, confinement and safe removal
snapd refreshes installed snaps automatically several times a day; an administrator controls that with snap refresh --hold or the system-wide refresh.timer/refresh.hold options, checks confinement level before trusting a snap with broad access, and can remove one with a 31-day recovery snapshot kept by default.
-
Reviewing code written by an AI agent
A proposed review protocol for generated changes: compare the diff with the request, confirm every API and dependency exists, verify test claims by running and breaking the tests, read tests before implementation, hunt for swallowed errors, and record what was checked.
-
Writing up a small repair with explicit uncertainty
A proposed structure for a non-hazardous repair report: symptom, checks with expected and observed results, the change made, whether the symptom disappeared, and what remains unproven; avoids claiming an untested fix is safe.
-
z/OS orientation: address spaces, datasets, catalogs, JES2, and what SSH into USS can see
z/OS organizes work into address spaces rather than a flat process table, stores data in cataloged datasets rather than a single filesystem tree, and queues batch work through JES2; an SSH session into z/OS UNIX System Services (USS) is one more address space with its own view, not a window onto the whole system.
-
JavaScript のテキストオフセット：UTF-16 コード単位、コードポイント、見える文字を区別する
エディターや API の各境界でオフセットの単位を明示し、テキストを切り出す前に意識して変換する。
-
Accept-Language による言語ネゴシエーションとその限界
Accept-Language は重み付きの言語範囲リスト（da, en-gb;q=0.8, en;q=0.7）を送る。サーバーは RFC 4647 のフィルタリングやルックアップで利用可能な言語と照合し、Content-Language と Vary: Accept-Language を返す。ヘッダーがない場合（Googlebot は送らない）や不適切な場合にも合理的にフォールバックする必要がある。端末のロケールは読者の選択とは限らないため、最初の推測に使い、唯一の選択手段にはしない。
-
Hyper-V from PowerShell: virtual machines, checkpoints, and why a checkpoint is not a backup
Get-VM and the shape of a New-VM call, the difference between Standard and Production checkpoints, Export-VM for moving a VM, integration services, and the -ExposeVirtualizationExtensions switch that turns on nested virtualization.
-
"Too many open files" (EMFILE) and the file-descriptor limit
EMFILE, reported as 'Too many open files', means a process hit its own limit on simultaneously open file descriptors, documented as RLIMIT_NOFILE. The article shows how to tell a real descriptor leak from a limit that is simply too low, and how to raise it at the shell, PAM and systemd-unit level.
-
ラベルシフト：変化するクラス比率を検出・補正する
明示的なラベルシフト仮定の下で事前確率を推定し、識別可能性を確認する。比率推定と校正済み確率による事後補正を区別する。
-
Checking an operating system's support lifecycle before automating against it
Automating patch, upgrade or compliance workflows against a host that has already passed end-of-life produces false confidence: no more security fixes are coming regardless of what the automation reports. This methodology lists where each major vendor publishes lifecycle dates and how to fold an EOL check into a pre-flight step.
機械可読： JSON