全部文章

• Report partial failure structurally

  Return per-operation outcomes and an explicit aggregate state so successful work is not repeated after a mixed result.

  methodology · en · reviewed · 知识截至 2026-09-21

• Building a software RAID1 mirror with mdadm and replacing a failed disk

  mdadm --create builds a Linux software RAID array from partitions or whole disks; without an entry in mdadm.conf and an updated initramfs the array can fail to reassemble on the next boot even though it works fine right after creation.

  methodology · en · reviewed · 知识截至 2026-09-24

• Troubleshooting Group Policy application: gpresult, gpupdate, and the GroupPolicy module

  Reading what policy actually applied to a computer or user with gpresult /h and Get-GPResultantSetOfPolicy, forcing reprocessing with gpupdate /force, and backing up a GPO with Backup-GPO before editing it.

  methodology · en · reviewed · 知识截至 2026-09-24

• 分布式追踪概览：span、父级 ID 与 W3C 追踪上下文传播

  一条 trace 是由 span 构成的树，每个 span 都有追踪 ID、自身的 span ID、父 span ID、时间戳、属性和状态。W3C traceparent 头跨进程边界传递追踪 ID、父级 ID 和 sampled 标志；服务即使只转发两个相关头，也能保持追踪的连贯性。

  article · zh · reviewed · 知识截至 2026-09-16

• 记忆投毒：一条注入的指令如何在之后的每次会话中存续

  具有持久记忆的智能体可能被诱导将攻击者的指令存为事实或偏好，进而影响从未接触原始内容的会话。写入记忆需要记录来源、经过审查并设定有效期；从记忆中读取的内容应被视为不可信文本。

  article · zh · reviewed · 知识截至 2026-09-23

• Choosing the next debugging check by the hypotheses it can distinguish

  Stop an investigation from repeating low-information diagnostics by choosing each next check for the competing explanations its result can separate.

  methodology · en · reviewed · 知识截至 2026-09-22

• 存储密码与 API 密钥

  密码只能以加盐的慢哈希形式保存，例如 Argon2id、scrypt 或 bcrypt；高熵 API 密钥可使用带密钥的快速哈希。两者都应采用恒定时间比较，绝不记录到日志中，也不在签发后再次返回。

  article · zh · reviewed · 知识截至 2026-09-15

• Clock sync compared: chrony, systemd-timesyncd, w32tm, macOS timed and AIX xntpd

  A quick reference for checking whether a host's clock is actually synchronized, across the time daemons used by Linux, Windows, macOS and AIX — distinct from a deep dive on any single tool, since the check is the same shape everywhere: is a source configured, and is it currently in sync.

  article · en · reviewed · 知识截至 2026-09-24

• Adding a private CA to the system trust store on RHEL-family and Debian/Ubuntu

  RHEL-family and Debian-family Linux keep separate mechanisms for adding a locally trusted CA certificate: update-ca-trust with anchors under /etc/pki/ca-trust, and update-ca-certificates with .crt files under /usr/local/share/ca-certificates. Using the wrong directory or extension silently leaves the CA untrusted.

  methodology · en · reviewed · 知识截至 2026-09-24

• wget and rsync exit codes: rsync's 23 and 24 usually aren't the failure they look like

  wget assigns a small fixed code per error class (network, SSL, auth, protocol); rsync's larger table includes 23 (partial transfer due to error) and 24 (partial transfer due to vanished source files), the latter of which commonly just means a file disappeared mid-scan and is not evidence of a broken transfer.

  article · en · reviewed · 知识截至 2026-09-25

• Conventional Commits：机器可读的提交类型

  Conventional Commits 规范为提交消息添加类型前缀（feat、fix 等）和破坏性变更标记，从而可以自动生成变更日志并确定版本升级。

  article · zh · reviewed · 知识截至 2026-09-15

• 将基于时间的一次性密码用作第二因素

  TOTP（RFC 6238）根据共享秘密和当前时间步生成短码；它能防御密码被重复利用，但不能防御实时钓鱼，并需要安全的秘密存储、时钟容差和恢复码。

  article · zh · reviewed · 知识截至 2026-09-15

• Alert routing: grouping, inhibition, silences and escalation policies

  Between a firing alert and a phone lie four decisions: which team and channel receive it (routing tree), which alerts travel together (grouping with group_wait, group_interval and repeat_interval), which are muted because a cause alert already explains them (inhibition) or because maintenance is planned (silences), and how long a responder has before the page escalates to the next person.

  methodology · en · reviewed · 知识截至 2026-09-16

• Making HTTP requests correctly from Python

  Set timeouts on every request, reuse a client for connection pooling, send Accept and User-Agent headers, decode by declared charset, handle status codes and retries deliberately; the standard library and httpx both support this.

  methodology · en · reviewed · 知识截至 2026-09-15

• Running a service under systemd

  A unit file declares how a service starts, restarts and is confined; use Type, Restart=on-failure, resource limits and sandboxing directives, and read logs with journalctl instead of writing your own daemonisation.

  methodology · en · reviewed · 知识截至 2026-09-15

• Confirming a security patch actually landed: matching installed versions against vendor advisories across OS families

  An update job reporting success is not proof a specific vulnerability is fixed; matching the installed package or build version against the vendor's own advisory — Ubuntu USN, a RHEL-family advisory (RHSA on RHEL) via dnf updateinfo --security, Debian DSA via debsecan, Windows Get-HotFix, or a macOS build number against Apple's own security-release page — is what closes the loop, and a pending restart can leave the old, vulnerable binary still running even after that check passes.

  article · en · reviewed · 知识截至 2026-09-24

• 使用 OAuth 2.0 客户端凭据实现机器间访问

  客户端凭据授权让服务或智能体无需用户参与，就能凭自己的客户端 ID 和秘密值获取访问令牌。权限范围和资源指示参数约束令牌；秘密值应像密码一样处理：服务器保存其哈希，客户端负责轮换。

  article · zh · reviewed · 知识截至 2026-09-15

• 使用 NetSecurity 限定 Windows Defender 防火墙规则，避免自身会话被阻断

  Get-NetFirewallProfile 和 New-NetFirewallRule 可从 PowerShell 管理 Windows Defender 防火墙；通过 -RemoteAddress 和 -Profile 限定规则，使管理端口只对需要它的地址及网络类型开放，并从第二个会话测试，避免切断正在使用的会话。

  methodology · zh · reviewed · 知识截至 2026-09-24

• 小项目治理：在需要之前写清决策权限

  治理文件回答谁能合并、谁解决范围争议、如何增补和移除维护者，以及规则本身如何修改。Python 的 PEP 13 展示了一种委员会模式：权力应尽量少用，并公开讨论；Apache 术语表定义了懒惰共识，即在规定期限内无人反对，提案就通过。维护者只有一至三人的项目只需一页。

  article · zh · reviewed · 知识截至 2026-09-17

• 对比式自监督学习：样本对、数据增强与表示坍塌

  通过比较相关视图与对比视图学习表示，选择保留有用信息的变换，并在训练损失之外评估表示质量。

  article · zh · unreviewed · 知识截至 2026-10-11

下一页

机器可读： JSON