Все статьи
-
Structured, schema-bounded handoffs between agents reduce injection success compared with free-text handoffs
Hypothesis: when an agent that reads untrusted content can pass only schema-validated fields with bounded length to the agent that acts, injected instructions reach the acting agent less often than when it passes free-form prose.
-
IPv6 enablement checklist for a website
Enable IPv6 in this order: address and firewall on the host, the server listening on [::] (nginx's IPv6 listener accepts only IPv6 by default, so keep the IPv4 one), a test over curl -6 against the address, then the AAAA record, then monitoring that probes each address family separately; Happy Eyeballs clients hide a broken IPv6 path behind a delay, while simpler clients fail outright.
-
sed and awk for line-oriented edits: substitution, fields and in-place changes
sed applies editing commands, chiefly s/regexp/replacement/, to each line; awk splits lines into fields and runs pattern-action pairs. Use sed for substitutions and deletions, awk for column work and small aggregations, and handle -i, -n and GNU-versus-BSD differences deliberately.
-
Checking server time synchronisation: timedatectl, chronyc tracking and what to alert on
Clock drift breaks certificate validation, token expiry, log correlation and lock leases silently; on every host check that a time service is running and synchronised, read the offset, stratum and leap status from the daemon, alert on 'not synchronised' and on an offset above a locally chosen bound, and re-check after reboots and image rebuilds.
-
Надёжный Markdown: CommonMark и то, чего в нём нет
CommonMark определяет заголовки, списки, выделение, ссылки, блоки кода и другое с однозначным алгоритмом разбора. Таблицы, сноски и списки задач — расширения, которые средство отображения может поддерживать или нет, а необработанный HTML может быть отключён.
-
CSV: формат, в котором пограничных случаев больше, чем запятых
RFC 4180 описывает распространённый диалект CSV, но реальные файлы различаются разделителями, кавычками, кодировкой и окончаниями строк. Используйте библиотеку для разбора, явно задавайте диалект и обрабатывайте имена заголовков и кодировки осознанно.
-
Windows process-level performance diagnosis: Get-Process, Get-CimInstance, and handle counts
Get-Process sorts by working set or cumulative CPU time; the Win32_PerfFormattedData_PerfProc_Process CIM class gives a computed CPU-percentage rate instead; a steadily climbing handle count is the signature of a leak, and Process Explorer or Process Monitor add the detail PowerShell does not expose.
-
Variance, standard deviation, MAD and IQR: reporting the spread
A location without a spread is half a number. The standard deviation describes spread well for roughly normal data and is dominated by the tails otherwise; the interquartile range and the median absolute deviation describe the bulk. Name the measure, give the sample size, use the n−1 form for estimates from samples, and never label an error bar with a bare ±.
-
Учёт домашних запасов еды и пищевых отходов по фиксированному правилу взвешивания
Предлагаемый домашний протокол: вести список еды с названием, количеством, дословно переписанной датой с упаковки и местом хранения, а каждый выбрасываемый продукт взвешивать и указывать причину из фиксированного списка. Даты не интерпретируются, советы о безопасности не даются; это позволяет подсчитать месячную массу выброшенного и сопоставить её с покупками.
-
Kubernetes resource requests and limits: scheduling, throttling and OOM kills
A request is what the scheduler reserves for a container and what the kubelet guarantees; a limit is what the kernel enforces. CPU limits throttle, memory limits kill, and the request-to-limit relationship decides the Pod's QoS class and therefore who is evicted first under node pressure.
-
cmd.exe and batch script pitfalls: %ERRORLEVEL% timing, delayed expansion and caret escaping
Batch files still show up inside installers, legacy scheduled tasks and vendor tooling. %ERRORLEVEL% is expanded at parse time and can read stale, delayed expansion changes that behaviour, and the caret is the escape character that most agent-generated batch code gets wrong on the first try.
-
Reproducible builds and pinned dependencies
A build is reproducible when the same source and build environment produce bit-for-bit identical output; lockfiles with hashes, pinned base images and fixed timestamps are the practical steps toward it.
-
Running apt and dpkg non-interactively on Debian and Ubuntu without hanging on prompts
A scripted apt-get or dpkg run can stall on a debconf prompt, a modified-conffile question or a held dpkg lock. Setting DEBIAN_FRONTEND, the right confold/confdef options and preseeding debconf answers first turns an install into a command that either finishes or fails loudly.
-
Поиск самых затратных SQL-операторов с помощью pg_stat_statements
pg_stat_statements агрегирует число вызовов, время выполнения и количество блоков по нормализованным операторам для всего сервера. Загрузите модуль через shared_preload_libraries, ранжируйте по total_exec_time и отдельно по calls, сравните среднее с максимумом, изучите столбцы буферов, затем исследуйте лидирующие операторы через EXPLAIN ANALYZE и сравните результаты до и после по queryid.
-
A hot-tap temperature and time-to-plateau log: probe held in the stream, fixed handle position, readings every 15 seconds
A proposed record-only protocol for logging what a hot tap delivers over time: a probe thermometer held in the stream by a peg or a cup rather than by hand, the tap opened to a marked position, readings every 15 s until three agree, and the time to that plateau and the plateau value recorded with the time since hot water was last drawn; the reading interval follows the response time the USDA FSIS page gives for thermistor thermometers, and no target temperature or water-heater adjustment is described.
-
Windows first-boot provisioning agents in the cloud: EC2Launch v2, the Azure VM Agent, and cloudbase-init
AWS, Azure and most other clouds run a small agent inside a Windows image that processes user data or custom data on first boot; the common agents are EC2Launch v2, Azure's provisioning and Windows VM agents (which store custom data in CustomData.bin but do not execute it) and the open-source cloudbase-init. Each logs to a different location worth checking when provisioning appears to have silently failed.
-
Testing error paths and timeouts of outbound calls
List the failure classes of every dependency (refused, reset, connect timeout, read timeout, 5xx, 429, malformed or slow body), inject each with a test double at unit level and a fault-injecting proxy at integration level, and assert on the promised behaviour: attempts, backoff, typed errors, cleanup and no partial writes.
-
Квантование после обучения и обучение с учётом квантования: выбор и проверка меньшей модели
PTQ преобразует готовую модель; QAT адаптирует обучение к имитируемой ошибке квантования. Качество калибровки, поддержка операций и измеренное качество экспорта важнее одной лишь разрядности.
-
IBM i backups: SAVLIB, SAVOBJ, SAVSYS, save files, and the GO SAVE menu
IBM i backups revolve around SAVLIB/SAVOBJ/SAVSYS writing to tape or to a save file created with CRTSAVF, and the GO SAVE menu options that wrap them into repeatable, optionally unattended, full or partial system saves.
-
A cooking record with timer and thermometer side by side: elapsed time and probe reading at fixed checkpoints
A proposed record-only protocol for dishes cooked repeatedly, in which the kitchen timer's elapsed time and a probe thermometer's reading are logged together at checkpoints fixed in advance, with the instrument type, insertion depth and settle time stated as the USDA FSIS page on food thermometers describes them for dial and digital instruments; no cooking time, target temperature or food-safety guidance is given.
Машиночитаемо: JSON