全部文章
-
Windows exit codes beyond pass/fail: robocopy's bitmask, msiexec's installer codes, and $LASTEXITCODE
robocopy encodes several independent facts (files copied, extra files, mismatches, failures) into one number below 8 that must be read as a bitmask, not compared to zero; msiexec returns specific Windows Installer codes where 3010 and 1641 mean success with a pending reboot, not failure; and PowerShell's $LASTEXITCODE is the only reliable way to see a native program's real code, with different rules depending on how the script was invoked.
-
f-strings and the format specification mini-language: the details that bite
An f-string formats each expression through the spec [[fill]align][sign][z][#][0][width][grouping][.precision][type]; precision truncates strings, a leading 0 pads numbers only, negative zero survives rounding unless z is given, and quote reuse inside braces needs Python 3.12. The = specifier prints expression and value for debugging.
-
Repositories whose setup runs as one verified command receive more first-time contributions than repositories with a manual setup list
Hypothesis: GitHub's scripts-to-rule-them-all README claims that lowering setup friction is key to faster and happier contributions; the proposal restates this measurably, predicting that repositories with a single self-checking setup command show more first-time contributor pull requests, more of them green on first push, and fewer setup issues than matched repositories with manual README steps.
-
构建来源证明：SLSA 记录什么，以及如何验证
SLSA 的 Build 方向评定制品来源信息的可信程度，从“存在来源信息”（L1）到加固的构建平台（L3）。来源信息是一份 in-toto 证明，列出制品摘要、构建者、构建类型及其外部参数；使用前，消费方依据信任根和预期值进行验证。
-
容器镜像的标签与摘要：可变名称与内容地址
标签是人类可读的指针，可以随时移向另一个清单；摘要是清单字节的哈希，永久精确标识一个镜像。按标签构建和测试，按摘要部署和固定，并在每份发布说明中记录摘要。
-
商家集成 ACP：结账会话、委托令牌与安全重试
ACP 2026-04-17 快照将商家的结账状态与委托付款凭证分开。商家需要带版本的会话端点、兼容的付款处理器、幂等的完成操作，以及经过身份验证的订单更新。
-
SNMPv3 on Linux with net-snmp: a SHA/AES user with the priv security level, communities retired
net-snmp's snmpd supports SNMPv3's User-based Security Model with per-user authentication and encryption, configured with createUser and checked with the priv security level on rouser/rwuser. Removing every rocommunity/rwcommunity line, and any com2sec mapping, closes the SNMPv1/v2c plaintext-community path that USM is meant to replace.
-
CSS custom properties for theming: inheritance, fallbacks and @property
Custom properties (--name) cascade and inherit like other properties and are read with var(--name, fallback); an invalid substitution does not discard the rule but falls back to the initial or inherited value, and @property adds a type, an initial value and animation support. Structure them as raw tokens plus semantic roles and override roles per scope to theme.
-
建立并维护后量子迁移所需的密码资产清单
记录数据在哪些位置受到密码机制保护、各项依赖由谁负责，以及记录有哪些证据支持。使用 CycloneDX CBOM 交换技术资产信息，但不要将其误当作完整的迁移计划。
-
MCP STDIO 命令注入：Langflow 的修复与 Fay 的风险暴露
Langflow 和 Fay 的漏洞表明，MCP 启动配置必须受到代码执行授权的约束。Langflow 1.10.3 通过在执行时强制验证配置（包括嵌入工作流的配置）完成了修复；所查阅的 Fay 记录未给出已修复版本。
-
可复现的家庭用水观察规程
一份拟议的观察规程：明确水表、读数时间、家庭情况及单位，记录带时间戳的原始读数，并以区间形式报告用水量及当时的条件；本文不声称获得了任何用水量结果。
-
Preparing a Linux golden image for cloning: host keys, machine-id, logs and net rules
A Linux image meant to be cloned many times must not carry a populated /etc/machine-id (or a stale /var/lib/dbus/machine-id), existing SSH host keys, MAC-pinned network configuration or cloud-init state. Otherwise every clone boots with the same identifiers as its siblings, and removing the host keys without a first-boot regeneration path leaves clones without SSH.
-
让回顾会议产出改变，而不只是清单
当回顾以一两个有负责人、有期限、能判断是否完成的改变结束时，它才值得投入时间。Scrum Guide 要求尽快处理影响最大的改进，而首要指令为人们指出真实问题奠定基调。
-
Game patches: package byte locality, delivery chunks and manifests
Control update size by understanding changed package bytes, separating logical content chunks from transfer chunks, and measuring download traffic independently from installation work.
-
Running IBM i CL commands from an SSH/PASE shell: system, qsh, and CCSID pitfalls
From an SSH session into IBM i PASE, the PASE-for-i system utility and the QSH/Qshell environment are the two supported ways to run CL commands and capture their output. Both convert between the job's CCSID and PASE's own encoding, which is where most first-time integration bugs come from.
-
Schriftlich widersprechen, ohne zu verletzen: Zitat, Kernpunkt, Alternative
Ein schriftlicher Widerspruch, der eine Entscheidung ändern kann, gibt die Gegenposition zuerst in ihrer stärksten Form wieder, zitiert die strittige Stelle, greift den Kernpunkt an statt Ton oder Person, stuft die eigene Evidenz ehrlich ein und schlägt eine Alternative vor. Paul Grahams Hierarchie des Widersprechens und Googles Leitfaden für Reviewer liefern die Massstäbe.
-
Environment Importance Sampling: Match Directions, Probabilities and Lighting Weights
Reduce environment-light sampling noise without biasing brightness by tracking the correct probability measure and validating prefiltered lighting separately.
-
Long-running and idle-in-transaction sessions in PostgreSQL: what they block and how to bound them
An open transaction holds its locks and pins the xmin horizon, so VACUUM cannot remove rows deleted after it began and DDL queues behind it; the worst case is a session idle in transaction because a client never committed. Find them in pg_stat_activity by xact_start and state, and bound them per role with idle_in_transaction_session_timeout, transaction_timeout and statement_timeout.
-
Unity Terrain Authoring: Coordinate Shape, Surface Layers and Openings
Build a terrain blockout around its heightfield representation, reuse surface layers intentionally, and review adjoining tiles and cave openings as separate authoring responsibilities.
-
YaST versus direct configuration on SUSE: what still runs from the command line, and the wicked/NetworkManager split
YaST modules can be listed and run individually from a non-graphical session with the yast command, but not every module has command-line support, and SUSE explicitly reserves NetworkManager for desktop and mobile workloads while keeping wicked as the network service every server certification is done against. An agent editing /etc/sysconfig/network files directly should check which service actually owns the interface first.
机器可读： JSON