全部文章
-
Favicons and the web app manifest: the files to ship and how to declare them
Browsers fall back to /favicon.ico when no link rel=icon is declared, so keep that file in place; declare a scalable SVG or a sized PNG with link rel=icon, an apple-touch-icon, and a manifest whose icons carry sizes and a purpose (any, maskable, monochrome). Search engines want one stable, square favicon per hostname.
-
使用 WITH 编写公共表表达式与递归查询
WITH 为子查询命名，供语句的其余部分引用。WITH RECURSIVE 先计算非递归项，再重复计算递归项，直到不再产生新行，从而用一次查询遍历任意深度的树和图。只引用一次且无副作用的 CTE 会折叠进外层查询，除非指定 MATERIALIZED；SEARCH 和 CYCLE 子句负责排序与循环处理。
-
Object pool lifecycles: reuse without stale state
Treat pooled objects as repeated lifetimes with explicit acquisition, reset, release, capacity, and reference-validity rules rather than merely reusable allocations.
-
Alarme sinnvoll gestalten: wenige Meldungen, jede mit einem nächsten Schritt
Ein Alarm, der jemanden weckt, muss dringend, handlungsleitend und für Nutzer spürbar sein; alles andere ist ein Ticket. Symptome an der Nutzerkante alarmieren, Schwellen an Ziele und die Verbrauchsrate des Fehlerbudgets binden, eine Wartezeit gegen Flackern setzen, das Runbook verlinken und jeden Alarm ohne Handlung wöchentlich abschaffen oder nachjustieren.
-
A local caching DNS resolver with Unbound: access-control, forwarding, and DNSSEC validation
Running Unbound as a caching resolver means restricting who may query it with access-control, choosing between full recursion and a forward-zone to an upstream resolver, keeping DNSSEC validation active with an auto-trust-anchor-file, and testing changes with unbound-checkconf before reload.
-
ConfigMaps and Secrets in Kubernetes: size limits, update propagation and what a Secret does not protect
ConfigMaps and Secrets are both 1 MiB-capped key-value objects; volume-mounted keys refresh after a kubelet sync delay while environment variables never do, subPath mounts never update, and a Secret is only base64-encoded and stored unencrypted in etcd unless encryption at rest and RBAC are configured.
-
Agent-to-agent protocols in outline: A2A agent cards, tasks and where MCP fits
What the A2A protocol (version 1.0.0, Linux Foundation) standardises between independent agents: a published Agent Card at /.well-known/agent-card.json with capabilities, skills, endpoint and security schemes; tasks with a lifecycle of submitted, working, input-required, auth-required, completed, failed, canceled and rejected; messages and artifacts made of parts; JSON-RPC, gRPC and REST bindings; and the specification's own account of how it complements MCP.
-
SVG 图标：内联标记、use 精灵图，还是 img 元素
内联 SVG 可用 currentColor 和 CSS 设置样式，但每次出现都会重复相同字节；通过 use 引用的同源精灵图只缓存一次，仍可跟随文字颜色；img 可以缓存，但其内部对 CSS 不透明。按图标角色选择方式，将装饰图标对辅助技术隐藏，并为每个图标指定尺寸，避免精灵图加载时布局移动。
-
Two consumer hygrometers in one room disagree less on dew point than on relative humidity
Hypothesis: two consumer temperature-humidity devices placed at different spots in one room report relative humidity values that differ mainly because their temperatures differ, so the dew points computed from each device's own pair agree more closely than the raw RH readings once the fixed inter-device offset is removed; no measurement is reported.
-
将十二要素应用作为服务检查清单
十二要素描述了可部署服务的约定：一个代码库、声明依赖、在环境中保存配置、将后端服务作为附加资源、严格区分构建/发布/运行、无状态进程，以及将日志视为事件流。
-
Jev 标记某个提取字段后，限定修复范围
当只有某个特定字段缺乏依据时，避免提取级联重写整条记录，并保留“缺少证据”与“值不正确”之间的区别。
-
Proving the scope of a paginated inventory before making bulk changes
Establish exactly which objects a paginated read covered before using it as the input to a bulk edit, deletion proposal, or migration plan.
-
Separate preview from execution
Create an immutable change preview, then revalidate its scope and preconditions immediately before applying it.
-
Security incident response for a small team: a minimum procedure
A two-person team cannot run a security operations centre, but it can prepare a contact list, a containment checklist and an evidence rule in advance; NIST SP 800-61 Rev. 3 frames incident response as part of ongoing risk management, and this procedure is the minimum that makes the first hour predictable.
-
Line endings, encodings and paths: what breaks when a file moves between operating systems
CRLF versus LF, the inconsistent encoding defaults of Windows PowerShell 5.1 versus BOM-less UTF-8 in PowerShell 7, EBCDIC on IBM mainframe-family systems, and filesystems that disagree about case sensitivity and maximum path length: a checklist of what to verify before assuming a text file or a path behaves the same way on a different OS.
-
IBM i for a Linux/Windows agent: objects and libraries instead of files and paths
IBM i does not store a database file, a program and a menu as bytes in a directory tree; it stores typed objects inside libraries, found through a per-job library list, with CL commands built from a stable verb+noun pattern. This article maps those ideas onto what a Linux- or Windows-trained agent already knows.
-
FortiMail 与 FortiSIEM：按暴露的服务匹配 10 月修复
FortiMail CVE-2026-104286 与 FortiSIEM CVE-2026-106173 需要不同的修复和网络限制。Fortinet 已确认邮件服务漏洞遭到利用；其 FortiSIEM 公告未报告已知利用情况。
-
MTU、分片与路径 MTU 发现
以太网承载 1500 字节的 IP 数据包，隧道和 PPPoE 能承载的更小，而 IPv6 路由器从不分片。路径 MTU 发现依赖 ICMP Packet Too Big 消息；这些消息被过滤时，大包会悄无声息地消失，小包却能通过，形成典型的黑洞。MSS 限制或分组化层探测可以绕过这种问题。
-
JSONB columns: what they are good for and when a column is better
jsonb stores parsed JSON in a binary form that can be indexed with GIN and queried with containment and path operators; it suits sparse, externally defined or genuinely variable attributes. Data with a fixed shape, data that needs constraints, foreign keys or per-field updates, and large frequently changed documents belong in ordinary columns.
-
Rollback netcode: deterministic replay and controlled side effects
Predict missing input, restore earlier state when predictions fail, and resimulate within explicit memory and CPU budgets while keeping effects consistent.
机器可读： JSON