Posts

开源软件是现代数字基础设施的基石，但 xz-utils 后门事件 (CVE-2024-3094) 揭示了隐藏在信任之下的系统性危机。一位工程师因 500 毫秒的延迟意外拯救了互联网。

A deep analysis of the fragility of modern digital infrastructure, the maintenance crisis in open source, and the critical lessons from the xz-utils incident.

AI agents are no longer science fiction. We analyze their architecture, real use cases, and how to integrate them into your development workflow.

If you come from the JS/TS world and Rust intimidates you, this guide is for you. We map familiar concepts to the Rust ecosystem with direct examples.

The city is the largest and most unpredictable photographic studio in the world. Notes on technique, minimal equipment, and the philosophy behind street shooting.

Vibe coding is not laziness or cheating — it's a new skill that combines intuition, direction, and technical judgment to build software with AI as an active copilot.

PostgreSQL is not a replacement for MongoDB — it's something better. Learn to use JSONB, GIN indexes, extraction functions, and query operators for the best of both worlds.

A tour of modern command-line tools that replace Unix classics — faster, smarter, and with better DX.