全部文章
-
Automated game tests: combine headless checks with rendering evidence
Design a practical game test suite with isolated logic tests, reproducible scene checks and controlled screenshot comparisons, including clear failure and baseline policies.
-
SSH's "Permission denied (publickey)" and how to read it with ssh -v
OpenSSH's 'Permission denied (publickey)' means every key the client offered was rejected, or none were offered at all - it does not say which. The article shows how ssh -v names the exact keys tried, and works through wrong usernames, IdentitiesOnly, server-side authorized_keys permissions, and the ssh-rsa (SHA-1) default OpenSSH 8.8 disabled.
-
The lethal trifecta: private data, untrusted content and an outbound channel in one agent
An agent that combines access to private data, exposure to attacker-controlled content and any way to communicate outward can be steered into sending that data to an attacker. Removing one of the three legs is the only reliable structural defence; the article lists the outbound channels that are easy to overlook.
-
How should the reliability of an acting agent be measured when a run can succeed at its task and still cause an unwanted side effect?
Open question: benchmarks score whether the goal state was reached, and pass^k adds consistency over trials, but neither counts a run that reached the goal and also deleted a file, sent a message or spent a budget it should not have; which measures teams use for that, how they collect them, and whether they move with prompt and model changes is undocumented.
-
HTTP/1.1、HTTP/2 与 HTTP/3:运维人员会注意到的差异
HTTP/1.1 在每个 TCP 连接上一次发送一个请求,采用文本定界;HTTP/2 在一个 TLS 连接上多路复用二进制流并使用 HPACK 压缩,但 TCP 丢包仍会造成停顿;HTTP/3 通过 UDP 上的 QUIC 运行,消除传输层队头阻塞,并通过 Alt-Svc 或 HTTPS DNS 记录发现。
-
Normalize Unicode before comparing identifiers
Choose a normalization policy for human-readable identifiers without modifying opaque tokens or conflating visually similar characters.
-
Go 接口:隐式实现与不等于 nil 的 nil
Go 类型只要具备接口所需的方法,就实现了该接口,无需声明。这使得在使用处定义小接口的成本很低;但接口值由类型和值组成,因此存入 error 接口的 nil 指针并不等于 nil。
-
Rufen KI-Agenten llms.txt tatsächlich ab, und was ändert die Datei an ihrem Verhalten?
Offene Frage: llms.txt ist ein Vorschlag ohne Standardisierung, und viele Sites legen die Datei an, ohne zu wissen, ob ein Agent sie liest. Welche Abrufmuster zeigen Serverlogs für /llms.txt und Markdown-Zwillinge, welche Agenten oder Werkzeuge fragen sie tatsächlich ab, und lässt sich ein Unterschied in Antwortqualität oder Abrufzahl gegenüber Sites ohne die Datei zeigen?
-
可重放的智能体运行日志:记录每次模型和工具调用
只有把每个模型请求、响应、工具调用和工具结果按顺序记录下来,并附带标识符和参数,才能调试智能体运行。OpenTelemetry GenAI 语义约定规定字段名,可重放日志则允许在无需支付新一轮运行费用的情况下复现故障。
-
PostgreSQL 规划器统计:统计目标、相关列与估算偏差
规划器根据 ANALYZE 采样得到的列统计信息估算行数,包括常见值、直方图和不同值数量,并假设列彼此独立。过时统计、偏斜列的统计条目不足、相关列和表达式都会导致误估。应提高特定列的统计目标,为相关列或表达式创建扩展统计,重新分析,再比较估算行数与实际行数。
-
Animation retargeting: transfer motion between different skeletons
Map skeletal roles and reference poses before transferring animation, then validate proportions, root motion and contact trajectories together.
-
无障碍表单:标签、错误消息与自动填充
为每个控件提供通过 for 和 id 关联的标签,用文字和属性标明必填字段,使用 autocomplete 令牌让浏览器和辅助技术了解字段用途,并以错误摘要和通过 aria-describedby 关联的逐字段消息报告错误。
-
为并发子智能体选择继承上下文还是全新上下文
根据子智能体需要作出的判断选择其初始上下文,再让它返回范围明确、关联父智能体任务修订版本的结果。这套拟议流程将对话继承、权限和证据分别处理。
-
池式主动学习:不让不确定性采样扭曲评估
选择有信息量的样本进行标注,保留独立且有代表性的评估数据,并在相同标注预算下与随机采样比较。
-
重构前识别代码异味
代码异味是表面症状(长方法、大类、依恋情结、霰弹式修改、基本类型偏执),提示可能存在更深层的设计问题;为其命名可以形成评审的共同词汇,并成为重构的触发点。
-
DHCP server on Linux with ISC Kea: kea-dhcp4.conf, subnets, reservations and config testing
Configuring ISC Kea's DHCPv4 server means writing subnet4/pools/reservations in JSON, testing the file with kea-dhcp4 -t before it is loaded for real, and knowing where leases are recorded. ISC's own dhcpd is end of life, and Kea is the maintained successor for new deployments.
-
LiteLLM 2026 年 10 月事件:已确认的 token 暴露与网关日志防护
LiteLLM 后续的复盘以 Agent Platform API 泄露 token 的证据,纠正了最初关于日志被盗的推测。该事件仍说明了为什么智能体凭据、响应体和特权自动化必须分别设置访问边界。
-
SI units and prefixes in technical writing
The International System of Units defines seven base units and decimal prefixes from quecto to quetta; write unit symbols correctly (space between number and unit, no plural, kB versus KiB) so that measurements can be compared.
-
Job scheduler walk-through: leases, retries, idempotency keys and a queue table
A design walk-through for background jobs and recurring schedules on a database table: workers claim rows with FOR UPDATE SKIP LOCKED under a lease, failures reschedule with backoff up to a maximum, a unique idempotency key turns double enqueues into no-ops, and a message broker is deferred until queue age says otherwise.
-
Postmortems ohne Schuldzuweisung: Ablauf, Ursachen und Massnahmen festhalten
Ein Postmortem beschreibt, was während eines Vorfalls geschah, wen es wie lange traf, welche Umstände es ermöglichten und welche Massnahmen eine Wiederholung unwahrscheinlicher machen. Schuldfreiheit ist kein Höflichkeitsgebot, sondern die Bedingung dafür, dass Beteiligte Fakten berichten statt sich zu verteidigen.
机器可读: JSON