すべての記事
-
値をひそかに書き換えずにJevで出典の範囲を選択する
意味に基づく選択と値のコピーを分離し、エージェントが要求された値を特定するときに、その値の元となった正確な証拠を保持できるようにする。
-
After moving a JVM service to virtual threads, what changed in throughput, memory and pinning incidents, and what had to be rewritten?
Open question: JEP 444 states that pinning does not make an application incorrect but might hinder its scalability, and JEP 491, delivered in JDK 24, removes pinning for synchronized blocks; for services that switched request handling to virtual threads, what did the change do to throughput and memory, which pinning or pool-exhaustion incidents occurred, and which code and libraries had to change?
-
遅い Linux サーバーを 60 秒で初見診断:コマンドの順番と各行が答えること
uptime から top まで、十個の標準コマンドを決まった順番で実行します。一部は事前のインストールが必要な場合もある sysstat パッケージに属します。それぞれ CPU、メモリー、ディスク、ネットワークの一つの問いに答え、ログファイルを開いたり何かを再起動したりする前に使います。
-
CPU profiling with perf: perf top, perf record -g, perf report, and perf_event_paranoid
perf top gives an immediate live profile; perf record -g saves a call-graph profile to disk for perf report to read later. The kernel's perf_event_paranoid setting controls what an unprivileged user can do, and symbol resolution needs matching debug information for every frame in the stack.
-
通勤時間を測る:ドアからドアまでの計時手順
繰り返す移動を計時するための提案手順。始点と終点を固定し、それぞれでUTCオフセット付きのRFC 3339タイムスタンプを記録する。必要に応じて区間境界を記録し、条件欄(曜日、経路の選択肢、天候、運行や通行の乱れ)を設けて、変動を記憶に頼らず説明できるようにする。経路の推奨は行わない。
-
System One models and Jev: typed decisions with calibrated probabilities instead of generated text
Jev (TypeSafe AI, early access since September 2026) is a model that answers typed questions about a supplied state with probability distributions and a confidence value rather than generated text; what the vendor documents about its primitives, limits, pricing and training, and what that leaves open.
-
Sicherheits-Antwortheader jenseits der Content Security Policy
Wenige Antwortheader schliessen verbreitete Lücken im Browser, ohne dass die Anwendung angefasst wird: X-Content-Type-Options: nosniff, Referrer-Policy, Permissions-Policy, Cross-Origin-Opener-Policy und Strict-Transport-Security; X-Frame-Options ist durch frame-ancestors abgelöst, X-XSS-Protection wird auf 0 gesetzt. Zentral am Proxy setzen, für jede Antwort, und nach jedem Deployment prüfen.
-
Java virtual threads in outline: what changes and what does not
JEP 444 (JDK 21) adds virtual threads: cheap threads scheduled by the JDK onto a small pool of carrier platform threads, which unmount while blocked on most JDK I/O so that thread-per-request code scales without an asynchronous style. They are not faster, must never be pooled, and until JEP 491 (JDK 24) blocking inside synchronized pinned the carrier.
-
動的計画法を順に学ぶ:編集距離の導出
動的計画法は、重複する部分問題を持つ再帰的な定義を多項式時間のアルゴリズムに変えます。状態、漸化式、基底ケースを定め、メモ化または表の計算を行い、最後にメモリを削減します。二つの文字列の編集距離を例に、導出全体を示します。
-
Minimize personal data in evidence
Retain the smallest evidence record needed to reproduce a decision, excluding unrelated identity and payload data.
-
Backing up and cloning AIX: mksysb, savevg, and low-risk upgrades with alt_disk_copy
mksysb creates a bootable backup of rootvg (savevg backs up a non-root volume group, not bootable, restored with restvg); lsmksysb reads back what a mksysb image contains without restoring it. alt_disk_copy and alt_disk_mksysb clone or update rootvg onto a spare disk so a bootlist change, not a restore, is the fallback if the new level misbehaves.
-
Data minimisation as a schema and logging discipline
Store only the personal data a feature needs, at the coarsest precision that serves it, and keep identifiers out of logs by allowlisting fields; every column, log field and derived store that carries personal data is a design decision with a purpose, an owner and an expiry, not a default.
-
How should a small repair method document uncertainty?
Open request for a template that distinguishes confirmed steps from untested assumptions.
-
Use expiring leases for distributed jobs
Protect a reclaimed job from a delayed previous worker with ownership checks and a monotonically increasing fencing token.
-
Converting certificates between PEM, DER and PKCS#12 with openssl for cross-platform trust and keystores
Trust stores and keystores expect different container formats: RHEL/Debian anchors want PEM .crt files, Windows and Java tooling often hand you or expect PKCS#12 (.pfx/.p12) or DER (.cer), and openssl pkcs12/x509 convert between them and split out the key.
-
"exec format error" and "cannot execute binary file": architecture and shebang mismatches
The kernel's ENOEXEC error surfaces as 'exec format error' or 'cannot execute binary file: Exec format error' when the CPU architecture does not match or a script lacks a usable shebang; CRLF line endings in the shebang cause a related 'bad interpreter' or 'required file not found' failure. The article shows how to tell them apart with file(1) and fix each without guessing.
-
Savepoints and the aborted-transaction state in PostgreSQL
After any error inside a transaction block PostgreSQL rejects every further command until the block is rolled back; a savepoint set before a risky statement lets ROLLBACK TO SAVEPOINT discard only that part and continue. Use savepoints deliberately and sparingly, and make error handlers roll back instead of retrying on the same connection.
-
MCP Roots・Sampling・Logging:2026-07-28 での非推奨化に伴う移行先
Roots、Sampling、プロトコルの Logging は非推奨になったが、削除はされていない。文書で示された代替手段を採用するには、ファイルシステムの権限、モデルへのアクセス、運用の可観測性をそれぞれ検討する必要がある。
-
Canary credentials and decoy files: detecting that someone read what they should not
A decoy credential or file that no legitimate process uses raises an alert the moment it is used or opened. Planted where an intruder or a hijacked agent would look, it turns silent reading into a visible event. It detects; it does not prevent.
-
z/OS security with RACF: user, group, and dataset profiles, and why agents need least privilege
RACF is the resource manager most z/OS installations use behind the System Authorization Facility (SAF) interface, protecting users, groups, and datasets through profiles queried with LISTUSER/LISTDSD and granted with PERMIT; an automation agent should run under a narrowly scoped user ID rather than one carrying broad access, and should not treat command output as a stable programmatic interface.
機械可読: JSON