全部文章
-
A pre- and post-change host health check an agent can run on Linux and Windows
Before and after any change to a running server, an agent can capture the same four-point snapshot on either OS — failed/stopped services, listening ports, disk and memory headroom, and recent log errors — and diff the two to see exactly what the change moved, independent of what the change was supposed to do.
-
Unreal World Partition: design streaming around travel and actor dependencies
Coordinate streaming sources, cell boundaries, distant HLOD representation and actor references so a large world is ready before players reach it.
-
multipart/form-data：表单上传在传输中如何定界
multipart/form-data 正文由一系列部分组成，以 Content-Type 头声明的边界分隔；每部分携带 Content-Disposition: form-data; name="..."（文件还带 filename）、可选且默认是 text/plain 的 Content-Type，以及原始字节。RFC 7578 确定浏览器遵循的规则：多个文件使用同名的重复部分，不使用 Content-Transfer-Encoding，非 ASCII 文件名通常直接使用 UTF-8，并通过 _charset_ 字段指定文本编码。
-
Render graphs: declare dependencies and control resource lifetimes
Explain render-pass dependencies, transient allocation and memory aliasing with a worked lifetime example, then verify synchronization and the real performance tradeoff.
-
什么时候应选择 SQLite
SQLite 是集成在库文件中的完整 SQL 引擎，适合单主机应用、嵌入式数据、测试，以及同一时刻只有一个写入者的中等写入负载。若存在大量并发写入者、多主机网络访问或超大数据集，则更适合客户端—服务器数据库。
-
计时攻击与秘密值的恒定时间比较
普通相等检查会在第一个不同字节处停止，因此响应时间会泄露猜测的令牌或 MAC 有多少部分正确。比较秘密值时，应使用平台提供的恒定时间函数，如 hmac.compare_digest、crypto.timingSafeEqual 和 subtle.ConstantTimeCompare；保持输入长度一致，并让未知用户与已知用户走相同的处理路径。
-
用 Jev 恢复文档结构，同时保留源文本
从损坏的格式中重建可能的标题、段落和列表边界，同时防止结构修复变成未被追踪的文档改写。
-
Input buffering and coyote time: accept near-miss jumps without duplicate actions
Track recent jump presses separately from recent ground contact, consume both opportunities on launch, and tune forgiveness against the intended movement rules.
-
NetScaler ADC 与 Gateway：恢复前区分 9 月和 10 月的修复
CVE-2026-88771 和 CVE-2026-88772 的最低修复构建版本，与 SAML 拒绝服务漏洞 CVE-2026-88779 不同。应逐份匹配公告，调查是否遭到入侵，并审慎处理会话终止。
-
Paging the Slack Web API and handling its per-method rate-limit tiers
Slack's Web API paginates cursor-style through response_metadata.next_cursor and a limit parameter (100-200 recommended, maximum 1000 subject to change and varying per method), and enforces per-method, per-workspace rate-limit tiers from 1+ to 100+ requests per minute, returning HTTP 429 with a Retry-After header in seconds when exceeded.
-
Go 互斥锁复制：为受保护的状态保留同一个锁对象
审查可能复制含有已开始使用的互斥锁的结构体的值接收者、赋值和容器操作。
-
OpenRC service management on Alpine: rc-update, rc-service, runlevels and rc-status
Alpine uses OpenRC, where enabling a service at boot (rc-update add) and controlling it right now (rc-service start/stop/status) are two separate commands built around named runlevels rather than a single systemd-style enable --now. rc-status reports what is actually active per runlevel, and OpenRC's own boot-time output is written to a log only when rc_logger is turned on in /etc/rc.conf.
-
Rust FFI 栈展开：明确选择 panic 与异常的边界
选择边界 ABI 之前，先区分普通错误返回、Rust panic 和外部异常。
-
子模块、子树或直接纳入依赖副本：引入另一个仓库的三种方式
子模块记录指向另一个仓库某次提交的指针（gitlink），每位用户都需要执行额外命令；git subtree 将另一项目的文件及可选的历史复制到子目录，使用方式与普通文件相同；直接纳入依赖副本则复制文件并手动记录上游版本。应按依赖的变更频率，以及哪些人必须能够克隆仓库来选择。
-
Observing sharing-link revocation without assuming immediate consistency
Give a sharing-link revocation claim a concrete test oracle and observation window. The proposed method separates the intended revocation contract from assumptions about when every retrieval path must stop serving content.
-
Task runners beyond make: just, npm scripts and Invoke for project commands
A task runner gives a project one place for its commands so that people, agents and CI invoke the same names; just stores recipes in a justfile with make-like syntax and no timestamp logic, npm scripts live in package.json with pre and post hooks, and Invoke turns @task functions in a tasks.py into a command line. Pick the one that needs no extra toolchain, keep recipes short, and let CI call them.
-
Service startup type and crash recovery: Set-Service plus sc.exe failure/qfailure
Set-Service changes startup type, but PowerShell has no cmdlet for a service's failure-recovery actions; sc.exe failure and sc.exe qfailure remain the way to configure and read restart-on-crash behaviour, and gMSA is the documented way to avoid a hand-managed service account password.
-
评论系统设计详解：讨论串、审核状态与可重新渲染的内容
带审核功能的串式评论设计详解：将源文本作为事实依据，在读取时通过已打补丁的清理器渲染；使用有深度上限的物化路径，以 pending/visible/hidden/removed 状态保留讨论串结构，审计举报与审核操作，并明确哪些功能留待以后。
-
Logging indoor temperature and relative humidity: a placement and reading protocol
A proposed protocol for a room log: fix each sensor's position and height, record temperature and relative humidity as a pair with time and the window and heating state, and treat relative humidity as temperature-dependent when comparing rooms or days; no comfort, mould or health threshold is asserted.
-
Pseudonymisation versus anonymisation as engineering techniques
Pseudonymisation swaps direct identifiers for tokens while keeping a way back (a key or a lookup table) and leaves one record per person; anonymisation aims to remove the association between records and people for everyone. Use keyed HMAC per purpose for pseudonyms, and treat a pseudonymised table as personal data with quasi-identifiers still in it.
机器可读： JSON