本文基于 deepseek-harness 仓库（0.1.0-rc.5，约 1.2 万次提交）源码逐行解读，并实际运行了其单元测试与回放 fixture 验证结论。

DeepSeek 官方开源了一个 agent harness：everything is a plugin——连模型适配器、工具注册表、会话日志、甚至 agent 主循环本身都是插件，任何一个都可以从配置里被替换。

这不只是营销话术。把它拆开之后，我发现这个框架藏着大量"不看代码绝对发现不了"的细节：为什么工具调用结果要伪装成 user 角色？为什么模型请求必须是会话日志的"纯函数"？为什么崩溃后日志里会出现一个任何主循环都永远不会主动发出的 turn/end？并发工具调用怎么在"并发执行"和"严格保序"之间同时成立？

这篇文章用中英双语，从架构骨架到内核细节逐层拆解。

This article is based on a line-by-line reading of the deepseek-harness repository (0.1.0-rc.5, ~12K commits), and the conclusions were verified by actually running its unit tests and replay fixtures.

DeepSeek has open-sourced an agent harness where everything is a plugin — the model adapters, the tool registry, the session log, and even the agent loop itself are all plugins, and any of them can be replaced from configuration.

That is not just marketing. Once you open it up, you find a pile of details you can only discover by reading the code: why do tool results disguise themselves as user messages? Why must a model request be a “pure function” of the session log? Why does a crash leave behind a turn/end that no loop ever emits on its own? And how do concurrent tool calls manage to be both “concurrent” and “strictly ordered” at the same time?

This article goes from the architectural skeleton down to the kernel-level details, in both Chinese and English.

本文翻译自: https://arxiv.org/pdf/1808.03156

摘要

Apple Wireless Direct Link (AWDL) 是一个专有的、未公开的、基于 IEEE 802.11 的自组网（ad hoc）协议。Apple 于 2014 年左右首次引入 AWDL，此后将其集成到整个产品线中，包括 iPhone 和 Mac。我们发现 AWDL 驱动着超过十亿终端设备上的流行应用，如 AirPlay 和 AirDrop。然而，该协议本身以及潜在的安全和 Wi-Fi 共存问题尚未被研究。在本文中，我们通过二进制分析和运行时分析，揭示了该协议的工作原理。简而言之，每个 AWDL 节点会宣布一系列可用性窗口（Availability Windows, AWs），表明其与其他 AWDL 节点通信的准备状态。一个被选举出的主节点（master）负责同步这些序列。在 AW 之外，节点可以将其 Wi-Fi 无线电调谐到不同信道以与接入点通信，或关闭无线电以节省能源。基于我们的分析，我们进行了实验，研究了主节点选举过程、同步精度、跳频动态和可实现的吞吐量。我们还进行了初步安全评估，并发布了一个开源的 AWDL Wireshark 解析器，以促进未来的研究。

关键词： AWDL, 逆向工程, 自组网, IEEE 802.11, 专有协议, Apple, macOS, iOS

This article is translated from: https://arxiv.org/pdf/1808.03156

Abstract

Apple Wireless Direct Link (AWDL) is a proprietary and undocumented IEEE 802.11-based ad hoc protocol. Apple first introduced AWDL around 2014 and has since integrated it into its entire product line, including iPhone and Mac. While we have found that AWDL drives popular applications such as AirPlay and AirDrop on more than one billion end-user devices, neither the protocol itself nor potential security and Wi-Fi coexistence issues have been studied. In this paper, we present the operation of the protocol as the result of binary and runtime analysis. In short, each AWDL node announces a sequence of Availability Windows (AWs) indicating its readiness to communicate with other AWDL nodes. An elected master node synchronizes these sequences. Outside the AWs, nodes can tune their Wi-Fi radio to a different channel to communicate with an access point, or could turn it off to save energy. Based on our analysis, we conduct experiments to study the master election process, synchronization accuracy, channel hopping dynamics, and achievable throughput. We conduct a preliminary security assessment and publish an open source Wireshark dissector for AWDL to nourish future work.

Keywords: AWDL, Reverse engineering, Ad hoc networks, IEEE 802.11, Proprietary protocol, Apple, macOS, iOS

2026 年 6 月，Github Copilot 的计费方式从原来的按请求次数收费变成了按 Token 消耗量收费。并且不再提供任何免费模型。

这一计费方式的改变使得 Github Copilot 的使用成本大幅增加，对于重度使用者经常可以一天就消耗掉一个月的使用额度。

Token 焦虑时代正式来临。

本文介绍如何在 VS Code 中使用 Github Copilot 对接现有的免费模型 API。

In June 2026, GitHub Copilot’s billing model changed from charging per request to charging by token consumption. It also stopped offering any free models.

This billing change dramatically increased the cost of using GitHub Copilot — heavy users can easily burn through a month’s quota in a single day.

The era of token anxiety has officially arrived.

This article explains how to connect GitHub Copilot to existing free model APIs in VS Code.

最近在折腾博客的时候，偶然发现自己复制的 Cloudflare 账户 ID 在粘贴的时候就变样了，即使这个账户 ID 藏在一段话的中间，也会被篡改！

全程火绒安全形同虚设，完全没有任何提示和拦截。

演示视频：

While tinkering with my blog recently, I happened to notice that the Cloudflare account ID I copied got altered when pasted — even when the ID was buried in the middle of a paragraph, it was still tampered with!

Huorong Security was completely useless throughout this whole ordeal, without any alerts or blocks whatsoever.

Demo video:

大黑山

Big Black Mountain

太炸裂了！！！

4 月 30 日下班后刷短视频，发现了这个超级劲爆的安全漏洞：CVE-2026-31431，又名 Copy Fail。
它只需 10 行 Python 代码，就能完成 Linux 本地权限提升，直接获得 root 权限。而且这个漏洞从 2017 年就存在，几乎影响所有主流 Linux 发行版。

This is absolutely insane!!!

While scrolling through short videos after work on April 30th, I discovered this absolutely explosive security vulnerability: CVE-2026-31431, also known as Copy Fail.
It only takes 10 lines of Python to achieve Linux local privilege escalation and directly obtain root privileges. What’s more, this vulnerability has existed since 2017 and affects almost all mainstream Linux distributions.

最近半年来，由于 Denuvo 加密技术可以通过 HYPERVISOR 来绕过，已经被破解了很多游戏了。

我常用的盗版游戏网站上已经有很多 Denuvo 加密游戏的破解版本了，包括《剑星》、《红色沙漠》等等。

https://www.gameshare.cc/search?q=D加密

不知道是出于什么原因，在这个网站上并没有发布《黑神话：悟空》的破解版本。

但其实《黑神话：悟空》和其他 Denuvo 加密游戏没什么本质不同，一样可以通过 HYPERVISOR 来绕过 Denuvo 的保护。

dodi 上已经发布了《黑神话：悟空》的破解版本了，但考虑到这个网站需要魔法才能访问，我这里重新分享一下《黑神话：悟空》的破解版本。

Over the past half year, since Denuvo’s DRM can be bypassed via HYPERVISOR, quite a few games have been cracked.

Many Denuvo-protected games already have cracked versions on the pirate game site I usually use, including Stellar Blade, Crimson Desert, and more.

https://www.gameshare.cc/search?q=D加密

For some reason, this site has not published a cracked version of Black Myth: Wukong.

But in essence, Black Myth: Wukong is no different from other Denuvo-protected games — its Denuvo protection can also be bypassed via HYPERVISOR.

dodi has already published a cracked version of Black Myth: Wukong. However, since that site requires a VPN to access, I’m re-sharing the cracked version of Black Myth: Wukong here.

两个著名的 Switch 模拟器，分别是 Yuzu 和 Ryujinx。但由于任天堂的压力，Yuzu 和 Ryujinx 都停止了更新。

现在的 Switch 模拟器主要是这两个项目的分支，我这次安装的是 Yuzu 的分支 Eden 和 Ryujinx 的分支 Ryubing。

我找到了这两个模拟器的解压即用版本：

There are two famous Switch emulators: Yuzu and Ryujinx. However, under pressure from Nintendo, both Yuzu and Ryujinx have stopped updating.

The current Switch emulators are mainly forks of these two projects. This time I installed Eden (a fork of Yuzu) and Ryubing (a fork of Ryujinx).

I found portable (extract-and-run) versions of both emulators: