kindy

macOS 隐私目录保护机制深度总结

一、核心问题

你希望在 macOS 上创建一个类似 ~/Library/Group Containers/group.com.apple.notes 的"私密目录"，阻止各种应用/程序随意访问。

结论：普通用户无法创建真正的系统级 Data Vaults（这需要 Apple 的数字签名）。但通过组合策略，可以达到极高的安全水平。

---

kindy

Python GIL Test

https://docs.python.org/3.13/library/threading.html

kindy

os code name

kindy

# vim:fdm=manual:sw=2:ts=2:et:ft=gitconfig:

[alias]
  b = branch
  ba = branch -a
  c = commit
  cf = config
  ci = commit
  co = checkout
  dc = svn dcommit

kindy

为了更方便阅读 acorn 的代码，我把 acorn 的 parser 都合并到 state.js 内了：

https://github.com/kindy/acorn/blob/vscode-happy/acorn/src/state.js

kindy

-- es5 --

declare var NaN
declare var Infinity
declare function eval(x
declare function parseInt(s
declare function parseFloat(string
declare function isNaN(number
declare function isFinite(number

kindy

Memory Compare

# Lua
1.3KB/Thread

10000   mem:1.28125KB     total:13641.189453125KB

# Luajit
0.5KB/Thread

kindy

/* eslint no-param-reassign: 0 */

/**
 * JavaScript implementation of W3 DOM4 TreeWalker interface.
 *
 * See also:
 * - https://dom.spec.whatwg.org/#interface-treewalker
 *
 * Attributes like "read-only" and "private" are ignored in this implementation
 * due to ECMAScript 3 (as opposed to ES5) not supporting creation of such properties.

kindy

Client-side SSL

For excessively paranoid client authentication.

Using self-signed certificate.

Create a Certificate Authority root (which represents this server)

Organization & Common Name: Some human identifier for this server CA.

openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 365 -key ca.key -out ca.crt

kindy

// 此处所列函数只是框架，实际使用仍需要调整和修正
// 提供的是一个思路

// 替换函数是同步的
function replSync(txt) {
  let pick = (s, e) => txt.substring(s, e);

  const re = /\w/g;
  const buf = [];
  let lastIdx = 0;