Hero Image
Articles

A website submission directory to submit your business, startup, or website Summon your site - HTML, CSS, JS. See it live instantly. 台灣罪犯圖鑑 Collection of digital clock designs Command Line Interface Guidelines Github SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled. HelixDB is an OLTP graph-vector database built in Rust on Object Storage. vscodium: binary releases of VS Code without MS branding/telemetry/licensing - VSCodium 使用 Open VSX Registry 替換 Visual Studio Marketplace,相容大多數 extension。 Lore is a next-generation, open source version control system bsharp: A tool to teach children perfect pitch maltrail: Malicious traffic detection system croc: Easily and securely send things from one computer to another PixelRAG: The end of web parsing. The beginning of scalable pixel-native search. link: https://pixelrag.ai/ Cosmos is the most secure and easy way to self-host a Home Server. It acts as a secure gateway to your application, as well as a server manager. It aims to solve the increasingly worrying problem of vulnerable self-hosted applications and personal servers. yopass: Secure sharing of secrets, passwords and files GitHub-Store: A free, open-source app store for developers’ releases on GitHub, Codeberg & Forgejo — browse, discover, and install apps with one click. iroh: IP addresses break, dial keys instead. A library that adds QUIC + NAT Traversal to your apps. Project N.O.M.A.D, is a self-contained, offline survival computer packed with critical tools, knowledge, and AI to keep you informed and empowered—anytime, anywhere. macshot: Feature-packed native macOS screenshot & recording tool: annotate, auto-redact PII, record GIFs, OCR + translate, scroll capture, beautify, and more. No Electron, no subscription. OfficeCLI is the first and best Office suite purpose-built for AI agents to read, edit, and automate Word, Excel, and PowerPoint files. Free, open-source, single binary, no Office installation required. A Patch for GIMP 3+(https://www.gimp.org/) for Photoshop Users chatto: A fully-featured team and group chat application that you can easily selfhost. nextest: A next-generation test runner for Rust. OpenDisplay:Sidecar 与 Duet Display 的开源替代品,把闲置的 iPhone / iPad 变成 Mac 第二显示屏 Deskreen:将局域网设备变为电脑的第二块屏幕 Skill ponytail: Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote. skillspector: Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks. security-audit: A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings Article RFC 10008: The HTTP QUERY Method Making HTTP requests from a container that has no curl, using bash /dev/tcp rr-debugger(https://github.com/rr-debugger/rr) Deno Desktop Linux on Older Hardware: The Complete Revival Guide (2026) Show HN: Getting GLM 5.2 running on my slow computer iPhone引導模式怎麼開?借手機人不怕隱私外洩和一鍵鎖定App Modern Linux Tools iPhone引導模式怎麼開?借手機人不怕隱私外洩和一鍵鎖定App 開啟與設定功能 打開 iPhone 上的 「設定」 App。 點選 「輔助使用」。 往下找到並點選 「引導使用模式」,然後將其開啟。 建議順便進行以下設定: 密碼設定:點一下「密碼設定」>「設定引導使用模式密碼」,輸入一組解鎖密碼,並可同時開啟 Face ID 或 Touch ID 作為快速解鎖/結束的方式。 輔助使用快速鍵:建議將其開啟,之後只要連按三下側邊按鈕就能快速叫出或退出此模式。 開始使用(將 iPhone 鎖定在單一 App) 打開你想要讓別人(或自己專注)使用的 App。 啟動引導使用模式: 具備 Face ID 的 iPhone(全螢幕機型):連按三下側邊按鈕(電源鍵)。 具備主畫面按鈕的舊款 iPhone:連按三下主畫面按鈕(Home 鍵)。 或者也可以呼叫 Siri:「打開引導使用模式」。 如果跳出輔助使用快速鍵面板,請點選 「引導使用模式」。 自訂限制區域(選用): 如果想讓螢幕上的特定區域無法被觸控點擊(例如遊戲內的廣告區塊),直接用手指在該區域畫一個圓圈,之後可以拖曳邊框來調整大小。 點一下右下角的「階段設定」(或選項),可以自由決定是否停用以下功能: 側邊按鈕 / 頂端按鈕 音量按鈕 動作(防止螢幕自動旋轉或因晃動而有反應) 軟體鍵盤 觸控(若想完全讓整個螢幕無法觸控可關閉此項) 時間限制 設定完成後,點一下右上角的 「完成」,再點一下 「開始」 即可正式鎖定。 如何結束引導使用模式 連按三下側邊按鈕(或主畫面按鈕)。 輸入你剛剛設定的引導使用模式密碼(或直接使用 Face ID / Touch ID 驗證)。 畫面左上角會出現 「結束」 按鈕,點下去即可退出此模式。

Hero Image
Articles

Pokemon Emerald in WebAssembly(https://github.com/tripplyons/pokeemerald-wasm) Github wxt: Next-gen Web Extension Framework Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize A curated list of awesome 3D printing resources hermes-agent: It’s the only agent with a built-in learning loop - it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a deepening model of who you are across sessions. Run it on a $5 VPS, a GPU cluster, or serverless infrastructure that costs nearly nothing when idle. It’s not tied to your laptop - talk to it from Telegram while it works on a cloud VM. loupe: A privacy-focused iOS app that raises awareness about what native apps can see(https://apps.apple.com/cn/app/loupe-app%E8%83%BD%E7%9C%8B%E5%88%B0%E4%BB%80%E4%B9%88/id6766152470) LaunchNext: Bring your Launchpad back in MacOS26+ ,highly customizable, powerful, free. endlessh: SSH tarpit that slowly sends an endless banner iptables-tracer: Trace packets as they go through iptables chains serverless-dns: The RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io ouch: stands for Obvious Unified Compression Helper. It’s a CLI tool for compressing and decompressing various formats.(https://github.com/ouch-org/ouch#supported-formats) shpool: shpool is a service that enables session persistence by allowing the creation of named shell sessions owned by shpool so that the session is not lost if the connection drops. shpool can be thought of as a lighter weight alternative to tmux or GNU screen. While tmux and screen take over the whole terminal and provide window splitting and tiling features, shpool only provides persistent sessions. The biggest advantage of this approach is that shpool does not break native scrollback or copy-paste. capslock: is a capability analysis CLI for Go packages that informs users of which privileged operations a given package can access. This works by classifying the capabilities of Go packages by following transitive calls to privileged standard library operations. unregistry: Push docker images directly to remote servers without an external registry NetNewsWire is a free and open-source feed reader for macOS and iOS. It supports RSS, Atom, JSON Feed, and RSS-in-JSON formats. K4YT3X’s Hardened & Optimized Linux Kernel Parameters Turso is an in-process SQL database, compatible with SQLite. zizmor is a static analysis tool for GitHub Actions. RustFS is a high-performance, distributed object storage system built in Rust. Usage: is a spec and CLI for defining CLI tools. Arguments, flags, environment variables, and config files can all be defined in a Usage spec. It can be thought of like OpenAPI (swagger) for CLIs. SurfSense: An open source, privacy focused alternative to NotebookLM for teams with no data limits. ICANN implementation of the Registry Data Access Protocol (RDAP) OpenRDAP is a command line RDAP client implementation in Go. Article 1-Click GitHub Token Stealing via a VSCode Bug Linux 系统误将 chmod 权限改成 了 000,如何恢复? Laptops all have built-in security tokens these days Tailscale and RustDesk: Secure remote access to all your desktops Unexpected security footguns in Go’s parsers 君子慎讀 辭典中標注的「讀音」和「語音」是什麼? 拜託別再「我汗你」了! Linux 系统误将 chmod 权限改成 了 000,如何恢复? #include <sys/stat.h> int main() { chmod("/usr/bin/chmod", 0755); return 0; } ubuntu@ubuntu:~$ which chmod /usr/bin/chmod ubuntu@ubuntu:~$ ls -lh /usr/bin/chmod lrwxrwxrwx 1 root root 8 Sep 27 2025 /usr/bin/chmod -> gnuchmod ubuntu@ubuntu:~$ ls -lh /usr/bin/gnuchmod -rwxr-xr-x 1 root root 67K Jan 23 21:34 /usr/bin/gnuchmod ubuntu@ubuntu:~$ sudo chmod 000 /usr/bin/chmod ubuntu@ubuntu:~$ ls -lh /usr/bin/chmod lrwxrwxrwx 1 root root 8 Sep 27 2025 /usr/bin/chmod -> gnuchmod ubuntu@ubuntu:~$ ls -lh /usr/bin/gnuchmod ---------- 1 root root 67K Jan 23 21:34 /usr/bin/gnuchmod ubuntu@ubuntu:~$ cat main.c #include <sys/stat.h> int main() { chmod("/usr/bin/chmod", 0755); return 0; } ubuntu@ubuntu:~$ gcc ./main.c ubuntu@ubuntu:~$ sudo ./a.out ubuntu@ubuntu:~$ ls -lh /usr/bin/chmod lrwxrwxrwx 1 root root 8 Sep 27 2025 /usr/bin/chmod -> gnuchmod ubuntu@ubuntu:~$ ls -lh /usr/bin/gnuchmod -rwxr-xr-x 1 root root 67K Jan 23 21:34 /usr/bin/gnuchmod Laptops all have built-in security tokens these days macOS https://github.com/yubico/libfido2

Hero Image
Articles

https://medium.com/@0050211 精通比特幣 https://virtualosmuseum.org/ mathematical playground 台灣資料的 MCP Hub 幼園通:幼兒園地圖查詢系統 Github 小林 x 图解计算机基础 Awesome Docker Compose Examples Golang-Concurrency-Pattern-Demo Learn Go with Tests SystemDesign Prometheus Notes Rust算法题解 📝 Today I Learned golang-samples Golang 面试题搜集 打造超人學習能力 单机百万级别QPS 网络传输 AI 编程的测试用例 whichllm: Find the best local LLM that actually runs on your hardware. NeuTTS: On-device TTS model by Neuphonic OpenNutriTracker is a free and open source calorie tracker with a focus on simplicity and privacy. Algorithm powering the For You feed on X DigitalPlat FreeDomain: Free Domain For Everyone forge: A Python framework for self-hosted LLM tool-calling and multi-step agentic workflows.: Three ways to use it: Proxy server, WorkflowRunner, Guardrails middleware. Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. cmux: Ghostty-based macOS terminal with vertical tabs and notifications for AI coding agents superset: Code Editor for the AI Agents Era - Run an army of Claude Code, Codex, etc. on your machine Maigret collects a dossier on a person by username only, checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. VoxCPM2: Tokenizer-Free TTS for Multilingual Speech Generation, Creative Voice Design, and True-to-Life Cloning Turn Claude Code into a full game dev studio — 49 AI agents, 72 workflow skills, and a complete coordination system mirroring real studio hierarchy. https://github.com/alistaitsacle/free-llm-api-keys Ian Xiaohei Illustrations 是一个 Codex Skill,用来指导 AI Agent 为中文文章、帖子、博客、Notion 文档和方法论内容生成正文配图。 odysseus: A self-hosted AI workspace – meant to be the self-hosted version of the UI experience you get from ChatGPT and Claude. But with more jank and fun. Running on your own hardware, with your own data – local-first, privacy-first, and no trojan. 🐸 Read Frog - Open Source Immersive Translate | 🐸 陪读蛙 - 开源沉浸式翻译 LiveContainer is an app launcher (not emulator or hypervisor) that allows you to run iOS apps inside it.: Allows you to install unlimited apps (3 app/10 app id free developer account limit does not apply here) with only one app & app id. You can also have multiple versions of an app installed with multiple data containers. Image Toolbox is a powerful app for advanced image manipulation. It offers dozens of features, from basic tools like crop and draw to filters, OCR, and a wide range of image processing options Nyx (goddess of the night in Greek mythology) is a self-contained script for cleaning forensic traces on Linux, macOS, and Windows. Open source games groupcache groupcache-go PEER.AS — explore global BGP routing, IP prefixes, ASNs, AS_PATH, origins and peering. The whole thing runs in your browser: there is no backend, no API, and no database server. The site is just a bundle of static files you can host, fork, or mirror anywhere. Tool ec2instances.info https://imagefree.net/zh-Hant Article XDG Base Directory Spec Zig vs Rust in 2026 Your Clippy Config Should Be Stricter 部落卷卷 HN Popularity Contest Tracing HTTP Requests with Go’s net/http/httptrace 免費 3D 列印模型網站 MakerWorld: Bambu Lab 官方模型平台。很多模型已經附好列印參數(3MF),下載後可直接列印。適合新手。 Printables: Prusa 官方社群平台。高品質免費模型很多,分類清楚。實用工具、收納、機械零件特別豐富。 Thingiverse: 歷史最悠久的 3D 模型網站之一。免費模型數量非常大。 Thangs: 兼具模型搜尋引擎與模型平台。可以搜尋多個模型網站的內容。有免費也有付費模型。 Cults3D: 設計師作品較多。公仔、模型、Cosplay 道具品質高。付費模型比例較高,但也有免費下載區。 XDG Base Directory Spec Category Environment Variable Default Value FHS Approximation Configuration $XDG_CONFIG_HOME $HOME/.config /etc Data $XDG_DATA_HOME $HOME/.local/share /usr/share State $XDG_STATE_HOME $HOME/.local/state /var/lib Cache $XDG_CACHE_HOME $HOME/.cache /var/cache package main import ( "os" "fmt" "log" "path/filepath" ) func getConfigDir() (string, error) { configDir := os.Getenv("XDG_CONFIG_HOME") // If the value of the environment variable is unset, empty, or not an absolute path, use the default if configDir == "" || configDir[0:1] != "/" { homeDir, err := os.UserHomeDir() if err != nil { return "", err } return filepath.Join(homeDir, ".config", "my-application-name"), nil } // The value of the environment variable is valid; use it return filepath.Join(configDir, "my-application-name"), nil } func main() { config_dir, err := getConfigDir() if err != nil { panic(err) } fmt.Println(config_dir) } whichllm uvx whichllm@latest

Hero Image
Articles

TelegramChannels warpgate: is a smart & fully transparent SSH, HTTPS, Kubernetes, MySQL, PostgreSQL bastion host that doesn’t require a client app or an SSH wrapper. Details that make interfaces feel better: npx skills add jakubkrehel/make-interfaces-feel-better TheWhisper: High-Performance Speech-to-Text Open Design: The open-source alternative to Claude Design. Local-first, web-deployable, BYOK at every layer — 16 coding-agent CLIs auto-detected on your PATH (Claude Code, Codex, Devin for Terminal, Cursor Agent, Gemini CLI, OpenCode, Qwen, Qoder CLI, GitHub Copilot CLI, Hermes, Kimi, Pi, Kiro, Kilo, Mistral Vibe, DeepSeek TUI) become the design engine, driven by 31 composable Skills and 72 brand-grade Design Systems. No CLI? An OpenAI-compatible BYOK proxy is the same loop minus the spawn. Claw Code is the public Rust implementation of the claw CLI agent harness. The canonical implementation lives in rust/, and the current source of truth for this repository is ultraworkers/claw-code. Open-ClaudeCode: 完整开源的 Claude Code 项目 - 基于 Anthropic 官方源码重建 Claude Code Best V5 (CCB): 牢 A (Anthropic) 官方 Claude Code CLI 工具的源码反编译/逆向还原项目。目标是将 Claude Code 大部分功能及工程化能力复现 (问就是老佛爷已经付过钱了)。虽然很难绷, 但是它叫做 CCB(踩踩背)… 而且, 我们实现了企业版或者需要登陆 Claude 账号才能使用的特性, 实现技术普惠 deepclaude: Use Claude Code’s autonomous agent loop with DeepSeek V4 Pro, OpenRouter, or any Anthropic-compatible backend. Same UX, 17x cheaper. pyinfra turns Python code into shell commands and runs them on your servers. Execute ad-hoc commands and write declarative operations. Target SSH servers, local machine and Docker containers. Fast and scales from one server to thousands. Think ansible but Python instead of YAML, and a lot faster. mise: Dev tools, env vars, and tasks in one CLI Aube installs automatically when you run a script. The tightest security defaults of any Node.js package manager - and the only one with a lifecycle-script jail. Drops into existing projects using existing lockfiles. Dirty Frag: Universal Linux LPE taken. You opened this page. It already knows the following. internetarchive.ch Apple is increasing my cortisol levels Hidden Bar lets you hide menu bar items to give your Mac a cleaner look. Thaw is a powerful menu bar management tool for macOS 26. While its primary function is hiding and showing menu bar items, it aims to cover a wide variety of additional features to make it one of the most versatile menu bar tools available. Dirty Frag git clone https://github.com/V4bel/dirtyfrag.git && cd dirtyfrag && gcc -O0 -Wall -o exp exp.c -lutil && ./exp

Hero Image
Articles

gstack: Use Garry Tan’s exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA Waza: Engineering habits you already know, turned into skills Claude can run. docmd: Build production-ready documentation from Markdown in seconds. talk-normal: Make any LLM talk like a normal person. A system prompt that removes AI slop. The Quiet Colossus smolvm: Tool to build & run portable, lightweight, self-contained virtual machines. MAD Bugs: “cat readme.txt” is not safe in iTerm2 https://aistupidlevel.info/ https://markdown.new/ caveman: Claude Code skill that cuts 65% of tokens by talking like caveman trellis-mac: This is a port of Microsoft’s TRELLIS.2 — a state-of-the-art image-to-3D model — from CUDA-only to Apple Silicon via PyTorch MPS. No NVIDIA GPU required. ggsql: A grammar of graphics for SQL https://lawsofsoftwareengineering.com/ VidStudio: a browser based video editor that doesn’t upload your files cal.diy: Scheduling infrastructure for absolutely everyone. RustTraining opendoas: A portable fork of the OpenBSD doas command, is a minimal replacement for the venerable sudo. compressO: Convert any video/image into a tiny size. 100% free & open-source. Available for Mac, Windows & Linux. kami: Part of a trilogy: Kaku (書く) writes code, Waza (技) drills habits, Kami (紙) delivers documents. design-md-chrome: Chrome extension to extract styles from any website and generate DESIGN.md files and design skills for AI based on TypeUI 佐enter 成人碎牛皮手套 localsend: An open-source cross-platform alternative to AirDrop GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems. Warp is an agentic development environment, born out of the terminal. Just the Browser: Remove AI features, telemetry data reporting, sponsored content, product integrations, and other annoyances from web browsers. Copy Fail: CVE-2026-31431 MAD Bugs: “cat readme.txt” is not safe in iTerm2 The core bug The bug is a trust failure. iTerm2 accepts the SSH conductor protocol from terminal output that is not actually coming from a trusted, real conductor session. In other words, untrusted terminal output can impersonate the remote conductor.

Hero Image
Articles

SingleFlight macOS 奇怪的安全扫码机制 Agentic Design Patterns 你不知道的 Claude Code:架构、治理与工程实践 你不知道的 Agent:原理、架构与工程实践 rtk: CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies difftastic: a structural diff that understands syntax I Ditched Elasticsearch for Meilisearch. Here’s What Nobody Tells You. 策展島嶼的深度敘事: https://github.com/frank890417/taiwan-md Linux 中网络包的一生 Gitingest: Turn any Git repository into a prompt-friendly text ingest for LLMs. 7 More Common Mistakes in Architecture Diagrams Use Cases Superpowers: Superpowers is a complete software development workflow for your coding agents, built on top of a set of composable “skills” and some initial instructions that make sure your agent uses them. everything-claude-code: The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond. Agency Agents: A complete AI agency at your fingertips - From frontend wizards to Reddit community ninjas, from whimsy injectors to reality checkers. Each agent is a specialized expert with personality, processes, and proven deliverables. MiroFish: A Simple and Universal Swarm Intelligence Engine, Predicting Anything. Lightpanda Browser: the headless browser designed for AI and automation Anatomy of the .claude/ Folder Cocoa-Way: Native macOS Wayland Compositor written in Rust using Smithay. Experience seamless Linux app streaming on macOS without XQuartz. Pretext: Fast, accurate & comprehensive text measurement & layout Ghostmoon.app: A Swiss Army Knife for your macOS menu bar CodingFont: A game to help you pick a coding font The Git Commands I Run Before Reading Any Code Winhance: Application designed to optimize, customize and enhance your Windows experience. Native Instant Space Switching on MacOS FluidCAD: Write CAD models in JavaScript. See the result in real time. Awesome DESIGN.md: Copy a DESIGN.md into your project, tell your AI agent “build me a page that looks like this” and get pixel-perfect UI that actually matches. graphify: AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, GitHub Copilot CLI, OpenClaw, Factory Droid, Trae, Google Antigravity). Turn any folder of code, docs, papers, images, or videos into a queryable knowledge graph SingleFlight package analyzer import ( "context" "sync" "golang.org/x/sync/singleflight" "github.com/nathan/stock_bot/internal/storage" ) type AnalysisService struct { genai *GenAIClient d1Client *storage.D1Client stockCache map[string]*StockAnalysisResult mu sync.RWMutex sf singleflight.Group } func (s *AnalysisService) analyzeStock(ctx context.Context, code, name string) (*StockAnalysisResult, error) { // 1. 第一層防護:檢查記憶體快取 (L1 Cache) s.mu.RLock() if result, ok := s.stockCache[code]; ok { s.mu.RUnlock() return result, nil } s.mu.RUnlock() // 2. 第二層防護:Singleflight (請求合併) key := "stock:" + code v, err, _ := s.sf.Do(key, func() (interface{}, error) { // 3. 執行昂貴的邏輯 (DB + Gemini API) result, err := s.doAnalyzeStock(ctx, code, name) if err != nil { return nil, err } // 4. 寫入快取 (務必在 singleflight 內部完成,防止下一波瞬間擊穿) s.mu.Lock() s.stockCache[code] = result s.mu.Unlock() return result, nil }) if err != nil { return nil, err } return v.(*StockAnalysisResult), nil } func (s *AnalysisService) doAnalyzeStock(ctx context.Context, code, name string) (*StockAnalysisResult, error) { // 建立一個子 Context 用於內部的多個非同步任務 g, ctx := errgroup.WithContext(ctx) var dbData string var aiResult string // 任務 1:查資料庫 g.Go(func() error { // 隨時檢查 Context 是否已取消 select { case <-ctx.Done(): return ctx.Err() default: // 模擬資料庫查詢 dbData = "Historical Data" return nil } }) // 任務 2:呼叫 Gemini API g.Go(func() error { // 將 ctx 傳入 API 客戶端,讓它能跟隨整體的超時控制 res, err := s.genai.Generate(ctx, "Analyze this: "+code) if err != nil { return err } aiResult = res return nil }) // 等待所有任務完成或其中一個出錯 if err := g.Wait(); err != nil { return nil, err } return &StockAnalysisResult{Data: dbData, Analysis: aiResult}, nil } func (s *AnalysisService) analyzeStockWithMetrics(ctx context.Context, code string) (*StockAnalysisResult, error) { key := "stock:" + code v, err, shared := s.sf.Do(key, func() (interface{}, error) { return s.doAnalyzeStock(ctx, code, "Name") }) // 紀錄監控指標:分辨是「原始呼叫」還是「共享結果」 status := "original" if shared { status = "shared" } s.sfCounter.Add(ctx, 1, metric.WithAttributes( attribute.String("stock_code", code), attribute.String("type", status), )) if err != nil { return nil, err } return v.(*StockAnalysisResult), nil } macOS 奇怪的安全扫码机制 # 查看最近的 syspolicyd 扫描记录 log show --predicate 'subsystem == "com.apple.syspolicy.exec"' --last 5m --style compact | grep performScan System Settings → Privacy & Security → Full Disk Access,给 VS Code 完全磁盘访问权限有效