// paginated posts

const page = 10

const article = {
  title: "Python 多进程连接池防护全是死代码:共读 TCP 导致静默串号排查修复",
  publishedAt: "2026.09.15",
  tags: ["fork 继承 fd","连接池 fork 安全","多进程共读同一 TCP 连接"],
  href: "/blogs/2026-09-15-0000-pythonfork-tcp"
}

export default article
const article = {
  title: "Python 多进程连接池防护全是死代码:共读 TCP 导致静默串号排查修复",
  publishedAt: "2026.09.15",
  tags: ["fork 继承 fd","连接池 fork 安全","多进程共读同一 TCP 连接"],
  href: "/blogs/2026-09-15-0000-pythonfork-tcp"
}

export default article
article.tsexport default
publishedAt2026.09.15

const article = definePost()

Python 多进程连接池防护全是死代码:共读 TCP 导致静默串号排查修复

为防串号写的「fork 自检」与「响应归属校验」在真实链路里全是死代码:自检只拦 init 期,校验对象在 fork 后已失效。多进程共读一条 TCP 连接仍导致偶发 TimeoutError、JSONDecodeError 与静默串号。本文逐行审计假防护失效原因,给出可落地的修复与验证方案。

fork 继承 fd连接池 fork 安全多进程共读同一 TCP 连接
readMore()
const article = {
  title: "CNB 流水线 Solver 阶段「交接文件缺失」怎么排查:scenario/.current-round.json 不存在、scenario/ 只有 .gitkeep、上轮构建仍 pending",
  publishedAt: "2026.09.15",
  tags: [],
  href: "/blogs/2026-09-15-0800-cnbsolver-pending"
}

export default article
const article = {
  title: "CNB 流水线 Solver 阶段「交接文件缺失」怎么排查:scenario/.current-round.json 不存在、scenario/ 只有 .gitkeep、上轮构建仍 pending",
  publishedAt: "2026.09.15",
  tags: [],
  href: "/blogs/2026-09-15-0800-cnbsolver-pending"
}

export default article
article.tsexport default
publishedAt2026.09.15

const article = definePost()

CNB 流水线 Solver 阶段「交接文件缺失」怎么排查:scenario/.current-round.json 不存在、scenario/ 只有 .gitkeep、上轮构建仍 pending

本仓库是一个「每天 3 个计算机实战问题」的自动化训练闭环,.cnb.yml 里定义了一条定时流水线: 两个 stage 共享同一个工作目录,Creator 通过写入一个「不提交」的状态文件把本轮信息交接给 Solver: 08:00 场次轮到 Solver(solve-scenario stage

readMore()
const article = {
  title: "UDP 大响应被静默截断:DNS 超过接收缓冲区的响应收到半截报文(dig timed out / DNS message is malformed),recvfrom 缓冲区与 EDNS0/TC 位排查",
  publishedAt: "2026.09.15",
  tags: ["`UDP 截断`","`recvfrom 缓冲区太小`","`DNS message is malformed`"],
  href: "/blogs/2026-09-15-1600-udp-dns-dig-recfrom-msg-trunc-edns0"
}

export default article
const article = {
  title: "UDP 大响应被静默截断:DNS 超过接收缓冲区的响应收到半截报文(dig timed out / DNS message is malformed),recvfrom 缓冲区与 EDNS0/TC 位排查",
  publishedAt: "2026.09.15",
  tags: ["`UDP 截断`","`recvfrom 缓冲区太小`","`DNS message is malformed`"],
  href: "/blogs/2026-09-15-1600-udp-dns-dig-recfrom-msg-trunc-edns0"
}

export default article
article.tsexport default
publishedAt2026.09.15

const article = definePost()

UDP 大响应被静默截断:DNS 超过接收缓冲区的响应收到半截报文(dig timed out / DNS message is malformed),recvfrom 缓冲区与 EDNS0/TC 位排查

内网自建权威 DNS(UDP 5354),部分记录很大(资产清单 TXT,20 段 x 250 字节 ≈ 5KB)。业务侧的 Python 查询代码取不到数据:

`UDP 截断``recvfrom 缓冲区太小``DNS message is malformed`
readMore()
const article = {
  title: "AI日报 2026-09-15",
  publishedAt: "2026.09.15",
  tags: ["朕喜技术","科技资讯","人工智能"],
  href: "/blogs/ai-daily-2026-09-15"
}

export default article
const article = {
  title: "AI日报 2026-09-15",
  publishedAt: "2026.09.15",
  tags: ["朕喜技术","科技资讯","人工智能"],
  href: "/blogs/ai-daily-2026-09-15"
}

export default article
article.tsexport default
publishedAt2026.09.15

const article = definePost()

AI日报 2026-09-15

本期AI日报聚焦金融AI大额融资、分子动力学模拟登上Science Advances、算电协同认证、具身智能开源赛事与仿真训练基础设施,以及端侧AI进入惠普预装等进展,同时关注Agent安全与AI对数学研究范式的冲击。

朕喜技术科技资讯人工智能
readMore()
const article = {
  title: "Python fork 继承 TLS 连接池:bad record mac 错配完整排查与修复",
  publishedAt: "2026.09.14",
  tags: [],
  href: "/blogs/2026-09-14-0000-forktls"
}

export default article
const article = {
  title: "Python fork 继承 TLS 连接池:bad record mac 错配完整排查与修复",
  publishedAt: "2026.09.14",
  tags: [],
  href: "/blogs/2026-09-14-0000-forktls"
}

export default article
article.tsexport default
publishedAt2026.09.14

const article = definePost()

Python fork 继承 TLS 连接池:bad record mac 错配完整排查与修复

Python 父进程预热 TLS 连接池后 fork 出多个 worker,多进程共用同一条 TLS 连接导致请求/响应错配,报 DECRYPTION_FAILED_OR_BAD_RECORD_MAC、BrokenPipeError 等错误。本文排查 fd 继承与 TLS 帧边界错乱,给出 spawn 启动等修复方案。

readMore()
const article = {
  title: "Python fork 多进程抢读同一条 TCP 连接:缓存静默串号完整排查与修复",
  publishedAt: "2026.09.14",
  tags: [],
  href: "/blogs/2026-09-14-0800-forktcp"
}

export default article
const article = {
  title: "Python fork 多进程抢读同一条 TCP 连接:缓存静默串号完整排查与修复",
  publishedAt: "2026.09.14",
  tags: [],
  href: "/blogs/2026-09-14-0800-forktcp"
}

export default article
article.tsexport default
publishedAt2026.09.14

const article = definePost()

Python fork 多进程抢读同一条 TCP 连接:缓存静默串号完整排查与修复

连接池在父进程预热后 fork 出 4 个 worker,多进程抢读同一条 TCP 长连接,把别人的响应当成自己的,造成缓存「张冠李戴」式静默数据污染——明文 TCP 下零报错、日志全绿。本文复现串号全过程,给出每进程独立连接池与 fork 自检的修复方案。

readMore()
const article = {
  title: "连接池响应归属校验形同虚设:fork 共读 TCP 静默接受他人缓存值",
  publishedAt: "2026.09.14",
  tags: [],
  href: "/blogs/2026-09-14-1600-forktcp"
}

export default article
const article = {
  title: "连接池响应归属校验形同虚设:fork 共读 TCP 静默接受他人缓存值",
  publishedAt: "2026.09.14",
  tags: [],
  href: "/blogs/2026-09-14-1600-forktcp"
}

export default article
article.tsexport default
publishedAt2026.09.14

const article = definePost()

连接池响应归属校验形同虚设:fork 共读 TCP 静默接受他人缓存值

连接池的「响应归属校验」只在请求刚发出时记录 pid,fork 之后校验形同虚设:多进程共读一条 TCP 长连接,把别人的缓存值当成自己的静默接受——日志全绿、数据全错。本文拆解校验失效的时序漏洞,讲清 fork 与连接生命周期的冲突,并给出真正有效的防护方案。

readMore()
const article = {
  title: "AI日报 2026-09-14",
  publishedAt: "2026.09.14",
  tags: ["朕喜技术","科技资讯","人工智能"],
  href: "/blogs/ai-daily-2026-09-14"
}

export default article
const article = {
  title: "AI日报 2026-09-14",
  publishedAt: "2026.09.14",
  tags: ["朕喜技术","科技资讯","人工智能"],
  href: "/blogs/ai-daily-2026-09-14"
}

export default article
article.tsexport default
publishedAt2026.09.14

const article = definePost()

AI日报 2026-09-14

今日看点:亮源新创发布三项具身智能技术,构建从仿真训练到真机部署的规模化闭环;开源画图Agent Archify登顶GitHub三榜,开发者背景引发关注;外滩大会出现“关系型生产力Agent”新形态,尝试兼顾任务交付与长期留存。

朕喜技术科技资讯人工智能
readMore()
const article = {
  title: "NFSv4 读旧数据、rm 删不掉、写不落盘:客户端缓存一致性排查与修复",
  publishedAt: "2026.09.13",
  tags: [],
  href: "/blogs/2026-09-13-0800-nfsv4"
}

export default article
const article = {
  title: "NFSv4 读旧数据、rm 删不掉、写不落盘:客户端缓存一致性排查与修复",
  publishedAt: "2026.09.13",
  tags: [],
  href: "/blogs/2026-09-13-0800-nfsv4"
}

export default article
article.tsexport default
publishedAt2026.09.13

const article = definePost()

NFSv4 读旧数据、rm 删不掉、写不落盘:客户端缓存一致性排查与修复

NFSv4 挂载后读旧数据、rm 删不掉、写不落盘,改 nolock、proto=tcp、rsize 都没用。根因是 NFS 客户端缓存一致性模型:页面缓存、属性缓存与 close-to-open 语义。本文用三节点 Docker 复现,讲清 actimeo、noac 等参数并给出可验证修复。

readMore()
const article = {
  title: "Nginx proxy_cache 忽略 Set-Cookie/Cache-Control 导致会话串号越权",
  publishedAt: "2026.09.13",
  tags: [],
  href: "/blogs/2026-09-13-1600-nginx-proxy-cache-set-cookie-cache-control"
}

export default article
const article = {
  title: "Nginx proxy_cache 忽略 Set-Cookie/Cache-Control 导致会话串号越权",
  publishedAt: "2026.09.13",
  tags: [],
  href: "/blogs/2026-09-13-1600-nginx-proxy-cache-set-cookie-cache-control"
}

export default article
article.tsexport default
publishedAt2026.09.13

const article = definePost()

Nginx proxy_cache 忽略 Set-Cookie/Cache-Control 导致会话串号越权

给 /api/ 开启 Nginx proxy_cache 并 proxy_ignore_headers Set-Cookie、Cache-Control 后,无 Cookie 请求命中他人缓存,造成会话串号与数据越权。本文复现缓存投毒过程,讲解 proxy_cache_key 与按 Cookie 隔离缓存的正确修法。

readMore()
// showing 91-100 of 281 posts