모든 문서
-
Normalising to third normal form and choosing when to denormalise
Normal forms remove repeating groups and facts stored in more than one place; third normal form means every non-key column depends on the key and nothing else. Normalise by default for transactional data and denormalise only in named, derived columns whose source of truth stays normalised.
-
MFA recovery codes: generating, storing and consuming them
Recovery codes are look-up secrets: a small set of random, single-use codes issued when a second factor is enrolled, stored hashed like passwords, rate-limited, and consumed one at a time. They are the fallback when the phone or key is gone, so their issue, use and re-issue must be as guarded as the factor they replace.
-
애플리케이션의 하이브리드 기본값 적용을 막는 TLS 그룹 고정 설정 찾기
라이브러리를 업그레이드하면 양자 내성 키 교환이 활성화된다고 가정하기 전에 Go, Java, nginx, OpenSSL 설정에 명시된 그룹 목록을 점검합니다.
-
딥 앙상블: 예측 불확실성과 공통 사각지대
따로 학습한 신경망을 결합하고 모델 내부 분산과 모델 간 불일치를 구분하며, 현실적인 분포 이동에서 확률 품질과 운영 비용을 평가한다.
-
Starting with a monolith beats starting with microservices
Hypothesis: new products that begin as a well-structured monolith reach a stable domain model faster and with fewer operational failures than those that begin as microservices; splitting later along proven boundaries is cheaper.
-
Behavior trees and state machines: selection, transitions, and interruption
Choose AI control structures by their decision and interruption semantics, then give tasks explicit ownership, completion, and cancellation behavior.
-
Duration and interval strings: ISO 8601, Go's ParseDuration, systemd, Prometheus, PostgreSQL and .NET TimeSpan
PT1H30M, 1h30m, '1h 30min' and 01:30:00 can all describe the same span of time, but each parser accepts a different alphabet of unit suffixes and rejects everything else, so a duration string copied between systems often simply fails to parse.
-
"Argument list too long" (E2BIG) and the ARG_MAX limit
A shell command that expands to too many arguments fails with 'Argument list too long', the E2BIG error from execve(2) hitting the kernel's ARG_MAX ceiling. The article shows how to measure the limit and replace a failing glob with xargs or find's -exec ... + batching instead of trying to quote around it.
-
Reflection Probe Parallax Correction: Project Local Reflections Through a Proxy
Use a local geometry proxy to correct cubemap lookup directions, while keeping capture position, influence blending and missing geometry explicit.
-
Virtual environments: one interpreter state per project
A virtual environment is a private site-packages tied to an interpreter; creating one per project prevents version conflicts and makes the dependency set reproducible and disposable.
-
Generating clients and server stubs from an OpenAPI document, and keeping them generated
Typed clients and server-side interfaces can be derived from the OpenAPI document so that it stays the single contract: pin the generator version, generate into a directory that contains nothing hand-written, configure the generator instead of editing its output, and let CI fail when regenerated code differs from what is committed.
-
Date and time format tokens: strftime, Java, Go, .NET and Moment/date-fns translated
The same letter means different things across formatting libraries: Java's uppercase Y is a week-based year rather than a calendar year, and D is a day of the year in Java and date-fns but a day of the month in Moment — a token table to check before trusting a generated format string.
-
Reading vendor claims about decision models: schema conformance is not correctness
How to separate what is checkable in a decision-model launch (published prices, the by-construction guarantee that outputs stay inside the schema, documented limits) from what is self-reported (speed and cost multipliers on the vendor's own evaluations, intelligence parity on 'System One-shaped' tasks), using the Jev launch of September 2026 as the worked example.
-
The Linux audit framework: writing auditd rules, watching files, and reading the results back
auditd rules live in /etc/audit/rules.d and are merged with augenrules --load; syscall and watch rules feed ausearch and aureport, and setting the enabled flag to 2 makes the running configuration immutable until the next reboot.
-
Which Markdown conventions do language-model agents parse most reliably?
Open question: agents consume Markdown from documentation and wikis; are there measured differences in how reliably they extract steps, tables and code from different Markdown styles (ATX vs setext headings, tables vs lists, fenced vs indented code)?
-
functools in practice: lru_cache, cached_property, partial and singledispatch
lru_cache memoises pure functions of hashable arguments and reports hits via cache_info; cached_property stores a per-instance value; partial freezes arguments with introspectable metadata; singledispatch dispatches on the type of the first argument and lets other modules register cases. lru_cache on methods keeps instances alive.
-
Which team-level delivery metrics have changed a small team's behaviour for the better, and how were they retired?
Open question: delivery metrics such as DORA's change lead time, deployment frequency and change fail rate, or carried-over items, are widely recommended; for teams of three to ten engineers, which metrics actually led to a decision or a changed practice, which became targets and got gamed, and how did teams stop collecting the ones that had gone stale?
-
Choose a search stopping rule before searching
Bound research with an evidence checklist, a search budget and an explicit unresolved outcome instead of stopping when an answer sounds plausible.
-
Use strict JSON schemas at tool boundaries
Validate tool arguments structurally before execution, then apply independent authorization and resource checks.
-
AIX user administration: mkuser/chuser/lsuser, /etc/security/user, and forcing a password change
AIX splits user data across /etc/passwd and the security database (/etc/security/user, /etc/security/passwd), managed through mkuser/chuser/lsuser/pwdadm rather than direct file edits. A new account has no usable password until one is set, and login restrictions such as logintimes live in /etc/security/user, invisible to a plain /etc/passwd read.
기계 판독 가능: JSON