全部文章
-
Normalising to third normal form and choosing when to denormalise
Normal forms remove repeating groups and facts stored in more than one place; third normal form means every non-key column depends on the key and nothing else. Normalise by default for transactional data and denormalise only in named, derived columns whose source of truth stays normalised.
-
MFA 恢复码：生成、存储和使用
恢复码是查找型秘密：在登记第二因素时发放的一小组随机一次性代码，像密码一样以哈希形式保存，限制尝试速率，并逐个消耗。手机或密钥丢失时，它们是后备途径，因此发放、使用和重新发放必须像其所替代的因素一样受到严密保护。
-
排查阻止应用采用混合算法默认值的 TLS 组固定配置
在认定库升级已启用后量子密钥交换之前，应先审查 Go、Java、nginx 和 OpenSSL 配置中显式指定的组列表。
-
深度集成：预测不确定性与共同盲点
组合独立训练的网络，区分模型内方差与成员分歧，并在实际可能出现的分布变化下评估概率质量及运行成本。
-
Starting with a monolith beats starting with microservices
Hypothesis: new products that begin as a well-structured monolith reach a stable domain model faster and with fewer operational failures than those that begin as microservices; splitting later along proven boundaries is cheaper.
-
Behavior trees and state machines: selection, transitions, and interruption
Choose AI control structures by their decision and interruption semantics, then give tasks explicit ownership, completion, and cancellation behavior.
-
Duration and interval strings: ISO 8601, Go's ParseDuration, systemd, Prometheus, PostgreSQL and .NET TimeSpan
PT1H30M, 1h30m, '1h 30min' and 01:30:00 can all describe the same span of time, but each parser accepts a different alphabet of unit suffixes and rejects everything else, so a duration string copied between systems often simply fails to parse.
-
"Argument list too long" (E2BIG) and the ARG_MAX limit
A shell command that expands to too many arguments fails with 'Argument list too long', the E2BIG error from execve(2) hitting the kernel's ARG_MAX ceiling. The article shows how to measure the limit and replace a failing glob with xargs or find's -exec ... + batching instead of trying to quote around it.
-
Reflection Probe Parallax Correction: Project Local Reflections Through a Proxy
Use a local geometry proxy to correct cubemap lookup directions, while keeping capture position, influence blending and missing geometry explicit.
-
Virtual environments: one interpreter state per project
A virtual environment is a private site-packages tied to an interpreter; creating one per project prevents version conflicts and makes the dependency set reproducible and disposable.
-
Generating clients and server stubs from an OpenAPI document, and keeping them generated
Typed clients and server-side interfaces can be derived from the OpenAPI document so that it stays the single contract: pin the generator version, generate into a directory that contains nothing hand-written, configure the generator instead of editing its output, and let CI fail when regenerated code differs from what is committed.
-
Date and time format tokens: strftime, Java, Go, .NET and Moment/date-fns translated
The same letter means different things across formatting libraries: Java's uppercase Y is a week-based year rather than a calendar year, and D is a day of the year in Java and date-fns but a day of the month in Moment — a token table to check before trusting a generated format string.
-
如何阅读供应商对决策模型的主张：符合模式不等于正确
以 2026 年 9 月 Jev 的发布为例，区分决策模型发布中可核查的内容（公开价格、由设计保证输出不越出模式的约束、文档限制）与供应商自报内容（其自有评测中的速度和成本倍数，以及在“System One 类型”任务上的智能水平相当）。
-
The Linux audit framework: writing auditd rules, watching files, and reading the results back
auditd rules live in /etc/audit/rules.d and are merged with augenrules --load; syscall and watch rules feed ausearch and aureport, and setting the enabled flag to 2 makes the running configuration immutable until the next reboot.
-
Which Markdown conventions do language-model agents parse most reliably?
Open question: agents consume Markdown from documentation and wikis; are there measured differences in how reliably they extract steps, tables and code from different Markdown styles (ATX vs setext headings, tables vs lists, fenced vs indented code)?
-
functools 实践：lru_cache、cached_property、partial 与 singledispatch
lru_cache 对参数可哈希的纯函数进行记忆化，并通过 cache_info 报告命中；cached_property 为每个实例保存一个值；partial 固定参数并提供可内省的元数据；singledispatch 根据第一个参数的类型分派，并允许其他模块注册实现。对方法使用 lru_cache 会让实例持续存活。
-
Which team-level delivery metrics have changed a small team's behaviour for the better, and how were they retired?
Open question: delivery metrics such as DORA's change lead time, deployment frequency and change fail rate, or carried-over items, are widely recommended; for teams of three to ten engineers, which metrics actually led to a decision or a changed practice, which became targets and got gamed, and how did teams stop collecting the ones that had gone stale?
-
开始检索前先确定停止规则
通过证据清单、检索预算和明确的“尚未解决”结果来限定研究范围，而不是在答案听起来可信时就停止。
-
Use strict JSON schemas at tool boundaries
Validate tool arguments structurally before execution, then apply independent authorization and resource checks.
-
AIX user administration: mkuser/chuser/lsuser, /etc/security/user, and forcing a password change
AIX splits user data across /etc/passwd and the security database (/etc/security/user, /etc/security/passwd), managed through mkuser/chuser/lsuser/pwdadm rather than direct file edits. A new account has no usable password until one is set, and login restrictions such as logintimes live in /etc/security/user, invisible to a plain /etc/passwd read.
机器可读： JSON