全部文章
-
用手机声级应用观察家庭噪声：数字能说明什么，不能说明什么
如何把智能手机应用用于室内噪声观察记录，而非测量：记录应用、设备、计权、指标、位置和时长，保留背景记录，并说明 NIOSH 应用页面自身列出的限制（其 iOS 应用标称精度为 ±2 dBA，Android 精度无法验证）。本文不提供暴露限值或健康指导。
-
Touch targets and pointer types: sizing controls for fingers and mice
WCAG 2.2 requires pointer targets of at least 24 by 24 CSS pixels at level AA, with exceptions for spacing, inline links and equivalent controls, and 44 by 44 at level AAA. The pointer and hover media features report whether the primary input is coarse or fine and whether it can hover, so a design can enlarge controls and drop hover-only interactions where a finger is the pointer.
-
Accessibility fundamentals: perceivable, operable, understandable, robust
WCAG organises requirements under four principles; the most common failures on content sites are missing text alternatives, colour-only signalling, keyboard traps, low contrast and unlabeled controls.
-
"Text file busy" (ETXTBSY): writing to a running executable
ETXTBSY, reported as 'Text file busy', means an attempt was made to open a currently-executing program's file for writing. The article shows how to find the process holding it open and why deploying by rename instead of in-place overwrite avoids the error and any downtime.
-
Troubleshooting containers from the host with lsns and nsenter
When a container's own tools are too minimal to debug a networking problem, entering its namespaces from the host with nsenter lets you run full host utilities such as ss or ip against the container's environment. This methodology covers finding the container's PID and namespace, and the difference between entering all namespaces and just one.
-
编写无责事故复盘
事故复盘记录事件中发生了什么、造成了哪些影响、有哪些促成原因，以及哪些行动能减少复发。无责原则让人们愿意报告事实，而不是为自己辩护。
-
Running Homebrew non-interactively on a build agent: NONINTERACTIVE, env vars and Brewfile
Homebrew's installer, its auto-update and analytics behaviour, and formula versions can all be controlled without a prompt for use on a CI runner, and a Brewfile makes the installed set reproducible across runners.
-
Querying the unified log on macOS: log show, log stream and predicates
The unified log is stored in a compressed binary format, not text files, so it has to be queried with the log tool. This methodology covers log show and log stream with predicates, time windows, JSON output, and bundling the store with log collect for later analysis.
-
主干开发与短期分支
至少每天将所有人的工作集成到一条共享主线，保持分支短暂存在，并用标志隐藏未完成的工作，可以减少合并冲突，让持续集成真正落地。
-
How often should small teams rehearse a full database restore?
Open question: guidance says to test restores, but how often, and how much of the procedure, do small operations teams actually rehearse for databases under a few gigabytes without losing the habit?
-
.gitattributes：行尾、diff 驱动、merge 驱动与 export-ignore
提交到仓库的 .gitattributes 文件为整个团队统一各路径的行为：text=auto 和 eol 规范化行尾，diff= 指定差异块头部模式或用于二进制文件的 textconv，merge= 选择 union 等驱动，binary 标记应保持原样的文件，export-ignore 则将路径排除在 git archive 之外。
-
Running a public status page honestly: components, automation and history
A status page earns trust only when it turns red when users see red; host it off the infrastructure it reports on, list components users recognise, let everyone on call post without approval, update on a fixed cadence during incidents, and keep the history visible.
-
Integrating parallel agent results against one current artifact
Combine independently prepared changes without assuming that each worker’s passing checks remain valid after the changes interact in the shared result.
-
Windows Server 2012 ESU 到期与 Server 2016 迁移期限
Windows Server 2012 和 2012 R2 的第三年 ESU 已于 2026年10月13日结束；Server 2016 的扩展支持将于 2027年1月12日结束。选择受支持的升级或迁移路径前，应盘点确切版本和服务器角色。
-
Exporting NFS shares from a Linux server: /etc/exports, exportfs and NFSv4-only mode
Sharing directories over NFS means writing /etc/exports entries with the right options, reloading them with exportfs instead of a restart, and deciding whether the server should speak NFSv4 only. This methodology covers the syntax, the reload/verify cycle, and the single firewall port an NFSv4-only server needs.
-
Mounting SMB/CIFS shares from Linux with a credentials file instead of embedding a password
mount -t cifs accepts a username and password directly in the mount options, which then appears in process listings and /etc/fstab in plain sight; a credentials file readable only by root removes both exposures. uid/gid/file_mode/dir_mode decide who can use the files locally, since SMB permissions do not map onto Unix ownership.
-
Zeit- und Kostenbudget für Modellaufrufe in Agenten
Jeder Agentenlauf bekommt ein Token-, Schritt- und Zeitbudget, das im Code durchgesetzt wird; die Verbrauchsfelder jeder Antwort werden gelesen, stabile Inhalte wandern in einen cachefähigen Präfix, Offline-Arbeit auf den Batch-Endpunkt. Ein Lauf ohne Budget endet am Timeout, nicht nach Plan.
-
编写让评审者能够作出决定的设计文档或 RFC
设计文档在编写代码之前促成决定：先讲问题，再列目标与非目标、指南层面和参考层面的说明、备选方案及各自被否决的理由、缺点，以及明确的未决问题清单；其结构遵循 PEP 1、Rust RFC 模板和 Google 设计文档实践的要求。
-
Chrome CVE-2026-87491：确保更新安装后通过重启浏览器生效
Google 已确认 CVE-2026-87491 遭到利用。受管设备群必须依据各平台对应的版本号和实际生效的企业策略，同时验证更新已送达、浏览器已重启。
-
登录服务提供方遭入侵后：按范围重置、会话恢复与泄露密码筛查
恢复受影响的用户账号，同时不将每一次第三方泄露都视为本地已遭入侵的证据。将基于证据的重置和会话失效措施，与撞库监测及保护隐私的密码筛查相结合。
机器可读： JSON