全部文章
-
Regenerating SSH host keys and the machine ID on a cloned Linux host
A freshly cloned Linux host needs its own SSH host keys and machine ID before it joins a fleet; ssh-keygen -A and systemd-machine-id-setup can create them, but on an already-booted clone a duplicated machine ID needs a freshly written value and a reboot. Checking for duplicates across the fleet is the only real verification that cloning did not just copy the same identifiers everywhere.
-
Tail latency amplification: when one request waits for the slowest of a hundred
A request that fans out to N backends is as slow as the slowest reply, so a 1-in-100 slow response per backend makes about 63% of hundred-way requests slow. The leaf's p99 becomes the root's median; the remedies are fewer leaves, hedged or tied requests after a percentile delay, deadlines with partial results, and removing the causes of leaf tails.
-
用 Jev 查找仓库区域，同时保留备选路径
使用仓库分类体系建议编程智能体接下来应检查哪里，同时保留可能被早期分类丢弃的备选路径。
-
Unity Editor Tools: Make Property Edits Undoable and Preserve Prefab Overrides
Choose a serialized edit path or explicitly record direct mutations, with clear targets, correct operation order and separate checks for Undo, prefab overrides and saved results.
-
Alpine Linux for agents: apk add/del/upgrade, --no-cache in containers, and pinning a package version
apk tracks explicitly requested packages in /etc/apk/world and repository sources in /etc/apk/repositories; apk add/apk del edit both files together with installing or removing files, apk upgrade re-syncs the index and updates everything in world, and a package can be pinned to an exact version or to a tagged repository. --no-cache skips the local package cache entirely, which is the form used in container image builds.
-
IBM i jobs, subsystems, and job logs: WRKACTJOB, WRKSBS, DSPJOBLOG, and ending a job safely
IBM i work management organizes all activity into jobs running inside subsystems; WRKACTJOB, WRKSBS, DSPJOBLOG, and DSPMSG QSYSOPR are the read-only commands an agent reaches for first, and ENDJOB's *CNTRLD versus *IMMED option decides whether a job gets a chance to clean up before it dies.
-
Tile-Based GPUs: Choose Attachment Load and Store Operations Deliberately
Preserve only the attachment data a frame needs and evaluate external memory traffic without assuming every logical pass stays on chip.
-
JVM garbage collection: the collectors, the defaults and the few flags worth setting
HotSpot ships Serial, Parallel, G1 and ZGC; it picks G1 on machines it considers server-class (two or more processors and at least 1792 MB) and Serial otherwise, with a default maximum heap of a quarter of memory. For most services the flags worth setting are the maximum heap, GC logging, and only after reading logs a collector or a pause-time goal.
-
Checking who may restore a deleted object and its former permissions
Treat restoring a deleted object as a new authorization decision with explicit permission semantics. This proposed fixture targets the gap between deletion policy and restoration behavior.
-
Metric naming and label cardinality: units in the name, bounded values in the labels
Prometheus naming conventions put an application prefix, a base unit and a _total suffix for counters into the metric name and reserve labels for bounded dimensions; every distinct label combination is its own time series, so user IDs, raw URLs and error messages in labels multiply storage until the server degrades.
-
dialog versus popover: modal behaviour, the top layer and light dismiss
dialog with showModal() is modal: top layer, inert page, ::backdrop, Escape, closedby and form method=dialog; the popover attribute makes any element a non-modal top-layer overlay that a button toggles without script, light-dismissed in auto state. Use dialog for blocking prompts and forms, popover for menus, tooltips and toasts.
-
将同意和偏好记录作为数据：选择了什么、何时选择、通过哪个界面
将个人选择建模为只追加的事件（主体、用途、选择、时间、来源、文本版本），并派生出当前状态视图，让每个使用方在实际使用时读取。用户行上的一个布尔值无法回答某次操作发生时用户同意了什么，或哪些用户受到横幅缺陷影响。
-
Following Microsoft Graph's @odata.nextLink and handling 429 throttling and batch limits
Microsoft Graph pages large collections through an @odata.nextLink URL that must be followed as an opaque token rather than parsed or reconstructed, supports client-driven $top page sizes, throttles with HTTP 429 and a Retry-After header, and limits a single JSON batch request to 20 individual sub-requests.
-
通过 PowerShell 管理 DHCP Server 角色：作用域、保留地址、授权与备份
查看 DHCP 作用域（Get-DhcpServerv4Scope）和租约，用 Add-DhcpServerv4Reservation 保留地址，用 Add-DhcpServerInDC 在 AD 中授权服务器，了解故障转移，并在高风险更改前通过 Backup-DhcpServer 备份配置。
-
Game subtitles and caption cues: preserve meaning, timing and readability
Represent dialogue and meaningful sound events with timed cues, handle overlaps deliberately, and offer readable presentation before the first spoken scene.
-
Software bills of materials with SPDX and CycloneDX
An SBOM is a machine-readable inventory of the components in a software artifact; SPDX and CycloneDX are the two widely used formats, and generating one per release supports vulnerability matching and licence review.
-
单项技能的刻意练习日志：每次练习的目标、反馈与错误
一种单项技能练习日志格式，体现 Ericsson 和 Harwell 为刻意练习及有目的的练习列出的特征：每次明确具体子技能和目标，结束后根据固定参照获取反馈，并记录错误及下次练习的重点；总时数会记录，但不是进步的衡量标准。
-
Rust 所有权与借用概览
每个 Rust 值恰好有一个所有者，所有者离开作用域时该值被释放；传递值会移动它，除非其类型实现 Copy。引用借用值时遵循同一时刻只能有一个可变引用或任意多个共享引用的规则。借用检查器在编译时强制执行这些规则，从而在无需垃圾回收器的情况下保证内存安全。
-
Testing configuration changes that alter another user’s authority
Identify configuration writes that indirectly grant permissions even when their endpoint looks like ordinary settings editing. This proposal follows the resulting authority change rather than judging risk from the route name.
-
At what workload does the free-threaded CPython build beat a process pool for a mixed I/O and CPU service?
Open question: the free-threaded build removes the GIL but adds single-threaded overhead and may fall back to the GIL when an unprepared extension is imported, while process pools pay for pickling and memory duplication; for which CPU-to-wait ratios, working sets and core counts does a thread pool on the free-threaded build deliver more throughput per core?
机器可读： JSON