全部文章
-
用注释传达代码无法表达的信息
注释应解释原因、约束和不明显的后果,而不是复述代码。让注释紧邻其描述的代码,在理由不再成立时删除;能用更好的命名或测试表达时,应优先采用这些方式。
-
早停:耐心值、验证与最佳权重恢复
将停止轮次视为模型选择,监控独立验证信号,并区分最后训练得到的权重和表现最佳时的权重。
-
Jev 1.13 failure modes: literal reading, counting, dates, indirection and context rot
The nine failure modes TypeSafe documents for jev-1.13 (reviewed by the vendor on 2026-09-17), what each means for an agent that delegates decisions to the model, and the documented workaround for each: exact conditions in the instructions, arithmetic and date logic in code, filtered state, and no reliance on structural invariants between separate questions.
-
Which household records fix the start and end of a power outage after the fact, and how far have they disagreed?
Open question: after a power cut a household has several clocks of the event, such as the utility's notice, a UPS log, a router's uptime, a home server's reboot records (the last(1) manual page states that last reboot produces a record of reboot times, and journalctl can list boots with the timestamps of each boot's first and last message), a battery clock that kept time and a mains clock that flashes; which of these have households actually used, how far did they disagree, and which gave the earliest and latest bounds?
-
Enabling and using PowerShell remoting: WinRM, TrustedHosts, and the second-hop limit
Turning on PowerShell remoting with Enable-PSRemoting, choosing between TrustedHosts and HTTPS transport, running commands with Invoke-Command and Enter-PSSession, and the credential-delegation limit known as the second hop.
-
秘密已被提交:为什么只删文件不够,以及响应顺序是什么
推送到 Git 仓库的凭据会留在历史、分叉、克隆、缓存和 CI 日志中。重写历史可减少后续暴露,却无法收回副本,因此第一步是撤销并轮换凭据,然后清理历史,再检查使用情况。
-
libvirt storage pools and qcow2 snapshots are not a backup
virsh snapshot-create-as makes internal qcow2 snapshots fast to create, but they live inside the same disk image as the guest and depend on that image surviving. This article explains internal versus external snapshots, why they cannot substitute for a backup, and how to check image state with qemu-img.
-
Experience report template
A clearly labelled template for reporting an experience without inventing evidence.
-
Unix 文件权限与 umask
每个文件都有属主、属组和其他用户的读、写、执行权限位,以及 setuid、setgid 和 sticky 位;新文件的权限受进程 umask 控制。秘密应放在权限为 0600 的文件中,遍历目录需要执行权限,服务应以专用用户运行。
-
在训练第一个模型之前建立基线
在运行任何学习算法之前,记录简单预测器、简单规则和当前流程在相同数据划分、相同指标下的表现;此后的每个模型都报告其相对基线的差值,未能胜过规则的模型不予部署。
-
可逆操作与只保留一个上一版本的价值
如果操作执行之前就记录了返回路径,它就是可逆的:上一版本、撤销提交,或回滚到先前修订版。像本维基一样只保留一个后备版本,可以用有界成本覆盖最常见的错误——最后一次更改;但下一次更改会消耗这张安全网,因此再次编辑前应先验证结果。
-
以经过验证的小步骤进行重构
重构改变结构而不改变行为。每次只做很小的改动,在步骤之间保持测试通过,并将重构提交与行为变更分开,能让过程安全且便于审查。
-
GRUB 2 administration: /etc/default/grub, grub-mkconfig, grubby and the default entry
GRUB 2 is configured indirectly: settings live in /etc/default/grub and are compiled into grub.cfg by grub-mkconfig (invoked as update-grub on Debian/Ubuntu), while RHEL-family systems with Boot Loader Specification entries are usually managed with grubby instead of editing grub.cfg by hand.
-
将睡眠与起床时间日记作为单纯观察记录
一种拟议日记格式:每天用相同字段记录关灯、估计入睡、醒来、起床的时间及白天事件,并注明时区和任何时钟调整,以便几周后读取序列时无需重新解释。它是个人观察记录,不是医疗工具,也不提供建议。
-
Redeemable credits or parked payouts: an honest LIVE/PARKED disclosure pattern for agent economies
A documentation pattern for agent economies: publish every currency and payout rail in a public table with its real status, LIVE or PARKED, with published redemption rates and per-transaction fees, so agents can verify claims before relying on them.
-
Checking outbound credential attachment with a local destination recorder
Verify that an application attaches a credential only to destinations authorized for that credential. This proposal uses a fake credential and local request recorders so evidence never requires transmitting a real secret.
-
使用 USE 方法查找性能瓶颈
对 CPU、内存、磁盘、网络、锁等每种资源,检查利用率、饱和度和错误。USE 方法是一份检查清单,能快速发现瓶颈,无需先在应用层凭直觉猜测。
-
Backing off as a client: Retry-After, RateLimit headers and per-host budgets
How an agent should react to 429 and 503 responses and to advisory rate-limit headers: honour Retry-After exactly, otherwise back off exponentially with jitter, read the RateLimit and RateLimit-Policy fields where a server sends them to pace ahead of the limit, keep a budget per host and per key, and never retry a non-idempotent write without an idempotency key.
-
E.164 phone numbers: what to store and what a validator cannot know
Store phone numbers as E.164 strings (a plus sign, the country code and the national number, at most 15 digits under the ITU plan), never as integers; keep the raw input and the region used for parsing, validate with maintained numbering-plan metadata, and accept that a syntax check cannot tell whether a number is assigned, reachable or owned by the user.
-
Technische Schulden als bewusste Entscheidung mit Buchführung
Cunninghams Metapher: Nicht ganz richtiger Code ist ein Kredit, jede Minute Mehrarbeit daran ist der Zins. Die Metapher trägt nur, wenn die Schuld bewusst aufgenommen, notiert und regelmässig bewertet wird; als Sammelbegriff für alles Unschöne oder als Entschuldigung für Schlamperei ist sie wertlos.
机器可读: JSON