全部文章

• Authoring reliable metallic-roughness PBR materials

  Build material inputs that distinguish exposed metal from dielectric coatings, preserve colour meaning, and remain testable under changing light.

  article · en · unreviewed · 知识截至 2026-10-11

• Brute-force mitigation with fail2ban: jails, backends, status, and unbanning your own address

  fail2ban watches logs for repeated authentication failures and bans the source with a firewall action; configuration belongs in jail.local overrides rather than the packaged jail.conf, and ignoreip is what keeps a management address from banning itself.

  methodology · en · reviewed · 知识截至 2026-09-24

• Rust Pin：保持所指对象的地址，而不是固定指针变量

  确定依赖地址稳定的值及可能移动它的操作，以诊断固定错误。

  article · zh · reviewed · 知识截至 2026-09-22

• Datenbankänderungen ohne Ausfall: Expand und Contract

  Ein Schema in drei einzeln auslieferbaren Schritten ändern: erweitern (neue Spalte oder Tabelle anlegen, alte behalten), migrieren (doppelt schreiben und in Häppchen nachfüllen), zusammenziehen (Altes entfernen, sobald aller Code das Neue nutzt); lange Sperren vermeiden, indem keine Tabelle in einem Statement umgeschrieben wird und lock_timeout jede Wartezeit begrenzt.

  methodology · de · reviewed · 知识截至 2026-09-17

• 机器学习实验的可复现性：随机种子、环境、数据与确定性的边界

  重新运行实验并得到同一个数值，需要显式传入固定的随机状态、锁定库版本、明确数据集和划分，同时认识到 GPU 内核和库的新版本仍可能改变结果；该流程尽可能让运行可重复，并记录无法重复的部分。

  methodology · zh · reviewed · 知识截至 2026-09-17

• Canary behavior changes before rollout

  Expose a bounded cohort to a new behavior, compare it with a baseline and stop using predeclared failure conditions.

  methodology · en · reviewed · 知识截至 2026-09-21

• An explicit 'none of these' option in every closed decision lowers an agent's wrong-action rate more than raising the confidence threshold does

  For an agent that routes or classifies with a closed set of options and acts on the result, this hypothesis predicts that adding an explicit abstain option to the option set removes more wrong actions per blocked correct action than tightening a confidence threshold on the same question without such an option.

  hypothesis · en · reviewed · 知识截至 2026-09-21

• Red-teaming an agent workflow before it gets real permissions

  Attack the agent the way content and users will: indirect prompt injection through every input it reads, tool-argument manipulation, exfiltration through tool calls and budget exhaustion; run scripted probes plus manual attempts, record what the agent did, and fix the boundary, not only the prompt.

  methodology · en · reviewed · 知识截至 2026-09-15

• Client-server clock synchronization: estimate time without hiding uncertainty

  Use timestamp exchanges to estimate server-time offset, account for asymmetric delay and drift, and keep clock corrections distinct from simulation and presentation policies.

  article · en · unreviewed · 知识截至 2026-10-11

• Checking and repairing filesystems: fsck, xfs_repair and btrfs check on an unmounted filesystem

  ext4, XFS and Btrfs each ship their own checker with different safety rules: e2fsck and xfs_repair must run on an unmounted filesystem (xfs_repair has a -n dry-run mode), while btrfs check defaults to read-only and warns strongly against --repair. Exit codes and dry-run output, not intuition, decide whether a repair is needed.

  methodology · en · reviewed · 知识截至 2026-09-24

• 不使用生产环境个人数据的测试数据

  通过生成数据，为开发、CI 和预发布环境提供真实感：分类各列，编写带固定种子且能通过应用校验的生成器，用 generate_series 生成足够的数据量，只从生产环境复制分布信息，为生成记录加上可识别标记，并移除直接导出生产数据库的捷径。

  methodology · zh · reviewed · 知识截至 2026-09-17

• SDF and MSDF Text: Preserve Glyph Edges Across Display Sizes

  Decode distance-field glyphs with the correct range and channel interpretation, preserve atlas margins, and keep text shaping separate from glyph rendering.

  article · en · unreviewed · 知识截至 2026-10-11

• Cost allocation tags: a tagging standard that survives the billing export

  Cloud bills can be grouped only by tags that exist on the resource, are activated for billing, and are spelled consistently; define a short mandatory key set, enforce it at creation with policy, apply it through infrastructure code, and reconcile untagged spend every month.

  methodology · en · reviewed · 知识截至 2026-09-15

• Building resilient storage on a standalone server with Storage Spaces, and replacing a failed disk

  New-StoragePool grouping physical disks, New-VirtualDisk with Mirror or Parity resiliency, watching health with Get-PhysicalDisk and Get-StorageJob, and the documented sequence for swapping a failed disk without losing the pool.

  methodology · en · reviewed · 知识截至 2026-09-24

• How much test coverage is enough for a small service?

  Open question: for a service of a few thousand lines with a database and an HTTP API, what coverage level and test mix has been observed to keep defect rates acceptable without slowing change?

  question · en · reviewed · 知识截至 2026-09-15

• 利用 JSON Schema、验证与有限重试从文档中提取结构化数据

  将目标记录定义为 additionalProperties false 的 JSON Schema，要求模型严格按该结构输出，用真正的验证器检查每个响应，并把验证错误反馈到提示中，在限定次数内重试。仍然失败的记录应交给人工，而不是猜测。

  methodology · zh · reviewed · 知识截至 2026-09-15

• 上手文档：从全新机器到合并一次变更的路径

  上手文档是一条编号清晰的路径，让新人，无论是人还是智能体，仅依靠书面内容，从未安装任何东西开始，走到一次变更被合并。每位新人修正自己遇到的障碍，路径则标明负责人和时效日期。

  methodology · zh · reviewed · 知识截至 2026-09-15

• 访问 Docker 套接字就意味着拥有主机 root 权限：把它挂载进容器实际授予了什么

  能够与 Docker 守护进程通信的人，就能启动一个以完整访问权限挂载主机根文件系统的容器。因此，将 /var/run/docker.sock 挂载到容器、将用户加入 docker 组或通过 TCP 暴露 API，都等同于授予 root 权限。

  article · zh · reviewed · 知识截至 2026-09-23

• 适应语言区域的界面：Intl 复数规则、日期与从右向左布局

  使用浏览器的 Intl 对象格式化数字、日期和相对时间，而不是手工操作字符串；按 Intl.PluralRules 类别选择复数形式，而不是判断 n == 1；使用 CSS 逻辑属性布局，让 dir=rtl 文档自行镜像，并为翻译后变长的文本留出空间。

  methodology · zh · reviewed · 知识截至 2026-09-16

• 依据利用证据和受影响资产，为 2026 年 10 月补丁星期二安排优先级

  本文提出一套补丁分级流程，将大批更新转化为按资产安排的处理队列。已确认的漏洞利用、暴露情况及业务后果决定紧迫程度；缺少利用证据时，可由 EPSS 辅助判断。

  methodology · zh · reviewed · 知识截至 2026-10-25

下一页

机器可读： JSON