Bookmark on Ricky

Articles

Wed, 03 Jun 2026 10:07:17 +0800

https://medium.com/@0050211
精通比特幣
https://virtualosmuseum.org/
mathematical playground
台灣資料的 MCP Hub
幼園通：幼兒園地圖查詢系統
Github
Tool
- ec2instances.info
- https://imagefree.net/zh-Hant
Article
免費 3D 列印模型網站
- MakerWorld: Bambu Lab 官方模型平台。很多模型已經附好列印參數（3MF），下載後可直接列印。適合新手。
- Printables: Prusa 官方社群平台。高品質免費模型很多，分類清楚。實用工具、收納、機械零件特別豐富。
- Thingiverse: 歷史最悠久的 3D 模型網站之一。免費模型數量非常大。
- Thangs: 兼具模型搜尋引擎與模型平台。可以搜尋多個模型網站的內容。有免費也有付費模型。
- Cults3D: 設計師作品較多。公仔、模型、Cosplay 道具品質高。付費模型比例較高，但也有免費下載區。

XDG Base Directory Spec

Category	Environment Variable	Default Value	FHS Approximation
Configuration	$XDG_CONFIG_HOME	$HOME/.config	/etc
Data	$XDG_DATA_HOME	$HOME/.local/share	/usr/share
State	$XDG_STATE_HOME	$HOME/.local/state	/var/lib
Cache	$XDG_CACHE_HOME	$HOME/.cache	/var/cache

package main
import (
 "os"
 "fmt"
 "log"
 "path/filepath"
)

func getConfigDir() (string, error) {
 configDir := os.Getenv("XDG_CONFIG_HOME")

 // If the value of the environment variable is unset, empty, or not an absolute path, use the default
 if configDir == "" || configDir[0:1] != "/" {
 homeDir, err := os.UserHomeDir()
 if err != nil {
 return "", err
 }
 return filepath.Join(homeDir, ".config", "my-application-name"), nil
 }

 // The value of the environment variable is valid; use it
 return filepath.Join(configDir, "my-application-name"), nil
}

func main() {
 config_dir, err := getConfigDir()
 if err != nil {
 panic(err)
 }

 fmt.Println(config_dir)
}

whichllm

uvx whichllm@latest

Articles

Wed, 13 May 2026 11:15:33 +0800

Dirty Frag

git clone https://github.com/V4bel/dirtyfrag.git && cd dirtyfrag && gcc -O0 -Wall -o exp exp.c -lutil && ./exp

Articles

Thu, 30 Apr 2026 11:46:57 +0800

MAD Bugs: “cat readme.txt” is not safe in iTerm2

The core bug

The bug is a trust failure. iTerm2 accepts the SSH conductor protocol from terminal output that is not actually coming from a trusted, real conductor session. In other words, untrusted terminal output can impersonate the remote conductor.

Articles

Wed, 15 Apr 2026 09:22:42 +0800

SingleFlight
macOS 奇怪的安全扫码机制
Agentic Design Patterns
你不知道的 Claude Code：架构、治理与工程实践
你不知道的 Agent：原理、架构与工程实践
rtk: CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies
difftastic: a structural diff that understands syntax
I Ditched Elasticsearch for Meilisearch. Here’s What Nobody Tells You.
策展島嶼的深度敘事: https://github.com/frank890417/taiwan-md
Linux 中网络包的一生
Gitingest: Turn any Git repository into a prompt-friendly text ingest for LLMs.
7 More Common Mistakes in Architecture Diagrams
Use Cases
Superpowers: Superpowers is a complete software development workflow for your coding agents, built on top of a set of composable “skills” and some initial instructions that make sure your agent uses them.
everything-claude-code: The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
Agency Agents: A complete AI agency at your fingertips - From frontend wizards to Reddit community ninjas, from whimsy injectors to reality checkers. Each agent is a specialized expert with personality, processes, and proven deliverables.
MiroFish: A Simple and Universal Swarm Intelligence Engine, Predicting Anything.
Lightpanda Browser: the headless browser designed for AI and automation
Anatomy of the .claude/ Folder
Cocoa-Way: Native macOS Wayland Compositor written in Rust using Smithay. Experience seamless Linux app streaming on macOS without XQuartz.
Pretext: Fast, accurate & comprehensive text measurement & layout
Ghostmoon.app: A Swiss Army Knife for your macOS menu bar
CodingFont: A game to help you pick a coding font
The Git Commands I Run Before Reading Any Code
Winhance: Application designed to optimize, customize and enhance your Windows experience.
Native Instant Space Switching on MacOS
FluidCAD: Write CAD models in JavaScript. See the result in real time.
Awesome DESIGN.md: Copy a DESIGN.md into your project, tell your AI agent “build me a page that looks like this” and get pixel-perfect UI that actually matches.
graphify: AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, GitHub Copilot CLI, OpenClaw, Factory Droid, Trae, Google Antigravity). Turn any folder of code, docs, papers, images, or videos into a queryable knowledge graph

SingleFlight

package analyzer

import (
 "context"
 "sync"

 "golang.org/x/sync/singleflight"
 "github.com/nathan/stock_bot/internal/storage"
)

type AnalysisService struct {
 genai *GenAIClient
 d1Client *storage.D1Client
 stockCache map[string]*StockAnalysisResult
 mu sync.RWMutex
 sf singleflight.Group
}

func (s *AnalysisService) analyzeStock(ctx context.Context, code, name string) (*StockAnalysisResult, error) {
 // 1. 第一層防護：檢查記憶體快取 (L1 Cache)
 s.mu.RLock()
 if result, ok := s.stockCache[code]; ok {
 s.mu.RUnlock()
 return result, nil
 }
 s.mu.RUnlock()

 // 2. 第二層防護：Singleflight (請求合併)
 key := "stock:" + code
 v, err, _ := s.sf.Do(key, func() (interface{}, error) {
 // 3. 執行昂貴的邏輯 (DB + Gemini API)
 result, err := s.doAnalyzeStock(ctx, code, name)
 if err != nil {
 return nil, err
 }

 // 4. 寫入快取 (務必在 singleflight 內部完成，防止下一波瞬間擊穿)
 s.mu.Lock()
 s.stockCache[code] = result
 s.mu.Unlock()

 return result, nil
 })

 if err != nil {
 return nil, err
 }
 return v.(*StockAnalysisResult), nil
}
func (s *AnalysisService) doAnalyzeStock(ctx context.Context, code, name string) (*StockAnalysisResult, error) {
 // 建立一個子 Context 用於內部的多個非同步任務
 g, ctx := errgroup.WithContext(ctx)

 var dbData string
 var aiResult string

 // 任務 1：查資料庫
 g.Go(func() error {
 // 隨時檢查 Context 是否已取消
 select {
 case <-ctx.Done():
 return ctx.Err()
 default:
 // 模擬資料庫查詢
 dbData = "Historical Data"
 return nil
 }
 })

 // 任務 2：呼叫 Gemini API
 g.Go(func() error {
 // 將 ctx 傳入 API 客戶端，讓它能跟隨整體的超時控制
 res, err := s.genai.Generate(ctx, "Analyze this: "+code)
 if err != nil {
 return err
 }
 aiResult = res
 return nil
 })

 // 等待所有任務完成或其中一個出錯
 if err := g.Wait(); err != nil {
 return nil, err
 }

 return &StockAnalysisResult{Data: dbData, Analysis: aiResult}, nil
}
func (s *AnalysisService) analyzeStockWithMetrics(ctx context.Context, code string) (*StockAnalysisResult, error) {
 key := "stock:" + code
 v, err, shared := s.sf.Do(key, func() (interface{}, error) {
 return s.doAnalyzeStock(ctx, code, "Name")
 })

 // 紀錄監控指標：分辨是「原始呼叫」還是「共享結果」
 status := "original"
 if shared {
 status = "shared"
 }

 s.sfCounter.Add(ctx, 1, metric.WithAttributes(
 attribute.String("stock_code", code),
 attribute.String("type", status),
 ))

 if err != nil {
 return nil, err
 }
 return v.(*StockAnalysisResult), nil
}

macOS 奇怪的安全扫码机制

# 查看最近的 syspolicyd 扫描记录
log show --predicate 'subsystem == "com.apple.syspolicy.exec"' --last 5m --style compact | grep performScan

System Settings → Privacy & Security → Full Disk Access，给 VS Code 完全磁盘访问权限有效

Tools

Sun, 15 Mar 2026 17:52:24 +0800

tirith: Tirith guards the gate and intercepts suspicious URLs, ANSI injection, and pipe-to-shell attacks before they execute.
subtrace: Inspect HTTP requests in any server with just a single command.
prek: ⚡ Better pre-commit, re-engineered in Rust
sandbox-exec: macOS’s Little-Known Command-Line Sandboxing Tool
babyshark: Flows-first PCAP TUI (case files, gorgeous UX).
llmfit: A terminal tool that right-sizes LLM models to your system’s RAM, CPU, and GPU. Detects your hardware, scores each model across quality, speed, fit, and context dimensions, and tells you which ones will actually run well on your machine.

sandbox-exec(Deprecated)

sandbox-exec -f profile.sb command_to_run

Bookmark on Ricky

Articles

XDG Base Directory Spec

whichllm

Articles

Dirty Frag

Articles

MAD Bugs: “cat readme.txt” is not safe in iTerm2

The core bug

Articles

SingleFlight

macOS 奇怪的安全扫码机制

Tools

sandbox-exec(Deprecated)

Links