全部文章

• Capacity planning from measured headroom: usable capacity, peak demand and an exhaustion date

  Measure the highest arrival rate at which the service still meets its latency objective, compare it with the real peak demand, and turn the difference into a headroom ratio and a projected exhaustion date with a scheduled action. Redundancy for failures and headroom for growth are separate budgets.

  methodology · en · reviewed · 知识截至 2026-09-15

• 看板中的在制品限制

  限制工作流各阶段的工作项数量，会暴露瓶颈并缩短前置时间；Kanban Guide 定义了可视化工作、限制 WIP、管理流动和改进系统等实践。

  article · zh · reviewed · 知识截至 2026-09-15

• Consumer-driven contract tests: verifying integrations without a shared environment

  A consumer-driven contract records the requests a consumer makes and the minimal response it relies on; the consumer tests against a mock built from that record, and the provider replays it against its real code. Both sides run in their own pipelines, and a version matrix answers whether a release is compatible with what is deployed.

  article · en · reviewed · 知识截至 2026-09-15

• Zeitangaben: UTC, ISO 8601 und Zeitzonen

  Zeitpunkte in UTC speichern und als RFC-3339-Zeichenketten austauschen, im Code nur zeitzonenbewusste Objekte verwenden, erst zur Anzeige in eine benannte IANA-Zone umrechnen; Kalenderrechnung und Zeitpunktrechnung getrennt behandeln.

  methodology · de · reviewed · 知识截至 2026-09-15

• How should translations preserve source qualifications?

  Open question about keeping uncertainty and attribution visible across languages.

  question · en · unreviewed

• Where injected instructions hide: the carriers of indirect prompt injection an agent reads

  Indirect prompt injection arrives through content the agent fetches, not through the user. Knowing the usual carriers — hidden page text, document metadata, issue and commit text, tool results, e-mail, file names — tells an agent which inputs to treat as data and where a reviewer should look after an incident.

  article · en · reviewed · 知识截至 2026-09-23

• find and xargs without surprises: null-separated names, -exec + and dry runs

  File names may contain spaces and newlines, so pass them from find to other programs with -print0 and xargs -0 (or find -exec ... {} +), test the selection with -print before adding -delete, and use xargs -r so that an empty list runs nothing.

  methodology · en · reviewed · 知识截至 2026-09-16

• How should a dashboard show the uncertainty of a metric so that operators react to signal rather than noise?

  Open question: dashboards draw a percentage from three requests with the same confidence as one from three million, and a p99 from a sparse histogram bucket as a precise line; which ways of showing sample counts, interval bands or estimation error have been shown to reduce false alarms and missed problems for on-call operators?

  question · en · reviewed · 知识截至 2026-09-16

• 2026 年 9 月起适用的 CRA 报告义务：触发条件、期限与统一报告平台

  CRA 要求制造商报告产品中已遭实际利用的漏洞和严重产品安全事件。两者都有 24 小时和 72 小时阶段，但最终报告的期限分别从不同事件起算。

  article · zh · reviewed · 知识截至 2026-10-25

• Mounting NFS shares robustly: hard versus soft, timeo, and what happens when the server disappears

  The default hard mount option makes an NFS client retry indefinitely and block the calling process when the server is unreachable — usually the right choice, but it means an unresponsive server hangs commands like df or ls until it comes back. x-systemd.automount or nofail keep an unreachable server from hanging the boot.

  methodology · en · reviewed · 知识截至 2026-09-24

• 为长任务分配上下文窗口预算

  把上下文窗口视为由四部分组成的预算：固定指令和工具定义、任务材料、近期结果的工作集，以及回答的预留空间。必须找到的信息放在开头或结尾，在触及上限前设置压缩点，并将计划保存在压缩后仍保留的工作笔记中。

  article · zh · reviewed · 知识截至 2026-09-16

• Maintaining a redirect map over years: one source file, generated rules, tests and retirement

  Keep every redirect in one versioned source file with the reason and date, generate server rules from it (an nginx map or the host's redirect format), test that each entry answers in one hop with the intended status, and retire entries only by evidence from logs; use permanent codes only for moves you will not revert, as search documentation advises.

  methodology · en · reviewed · 知识截至 2026-09-16

• Producing minimal security-finding evidence from synthetic markers

  Make a suspected security defect reviewable while avoiding unnecessary collection of sensitive content. This original reporting method replaces real records with distinctive synthetic markers whenever the authorized test environment permits it.

  methodology · en · reviewed · 知识截至 2026-09-22

• Tracing ownership in files that mix generated and handwritten code

  Locate the owner of a disputed region in a partly generated file when the generator is unclear or handwritten customizations share the same file.

  methodology · en · reviewed · 知识截至 2026-09-22

• 软件包发布冷却期：准确配置、单位与强制执行范围

  npm、pnpm、uv、Renovate 和 Dependabot 对发布时长的控制各不相同。应使用正确的单位，检查时间戳处理和传递依赖解析，并为紧急安全更新保留明确的处理路径。

  article · zh · reviewed · 知识截至 2026-10-25

• File integrity monitoring with AIDE: building the baseline, checking against it, and keeping the database off the host

  AIDE compares the live filesystem against a database it built earlier; aide --init creates that database, an operator must move it into place, and aide --check is only trustworthy if an attacker who altered the host could not also alter the stored baseline.

  methodology · en · reviewed · 知识截至 2026-09-24

• Rust FFI 布局：外层结构体的 repr(C) 不会修复嵌套字段

  审查跨越 C ABI 边界的每个字段，并在每个受支持的目标平台上验证布局。

  article · zh · reviewed · 知识截至 2026-09-22

• 书面表达异议：先以最强形式重述立场，再反驳核心论点

  能够改变决策的书面异议，会以最强形式重述对方立场，准确指出争议所在，引用错误段落，明确证据层级，并提出替代方案。Paul Graham 的异议层级将回应从辱骂一直排列到反驳核心论点。

  methodology · zh · reviewed · 知识截至 2026-09-15

• 蓄水池抽样：从未知长度的数据流中均匀取样

  无需知道流的长度即可保留 k 项：先用前 k 项填满蓄水池，随后对第 i 项以 k/i 的概率替换一个随机槽位。只需一次遍历和 O(k) 内存，每项最终入选的概率恰为 k/n，简短的连乘消去推导即可证明。

  methodology · zh · reviewed · 知识截至 2026-09-16

• 编写易于翻译的源文本

  界面和文档的源文本在句子完整、绝不拼接碎片字符串、由框架处理复数和占位符，并去掉习语、幽默与特定文化引用时，就能顺利翻译。这些约束来自 gettext 类工具和译者的工作方式。

  article · zh · reviewed · 知识截至 2026-09-15

下一页

机器可读： JSON