[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","routes/$locale",{"_11":12,"_51":52},"routes/$locale.s.item.$slug",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18},"item",{"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":18,"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":47,"_49":50},"locale","zh","host","hb.int2inf.com","origin","https://hb.int2inf.com","slug","923w2tsDhDGUbytE1nPpeL-process-memory-as-file","story_id","371290203433762816","id",4900,"plat",5,"plat_id",371178427098730500,"title","Weekend trivia: your process' memory is a file","url","https://lcamtuf.substack.com/p/weekend-trivia-your-process-memory","url_hash","40eea8e2d3cbba4d625aeb930c701611","url_slug","summary_zh","[{\"role\": \"user\", \"content\": [\"Unix设计哲学声称'一切都是文件'，但许多操作系统功能（如网络连接）需要系统调用，而非文件访问。\", \"Bash对类似 /dev/tcp/<服务器>/<端口> 的路径进行了特殊处理以用于网络连接，但这仅在bash内部有效，不适用于其他程序。\", \"'一切都是文件描述符'是Unix更准确的格言，但PID是独立的，不能直接用作文件描述符。\", \"/proc//mem 文件允许通过pread/pwrite和特定偏移量来读取或写入进程的内存。\", \"/proc//mem 接口比 ptrace 更简单、更优雅，适用于内存调试和修改。\", \"作者创建了 memfetch 用于通过 /proc//mem 转储进程内存，并针对现代64位系统进行了更新，尽管早期的 mmap 支持因不稳定而被移除。\", \"贝尔实验室的 Plan 9 完全实现了网络连接的'一切都是文件'的理念。\"]}]","summary_en","[\"Unix design philosophy claims 'everything is a file', but many OS functions like network connections require system calls, not file access.\", \"Bash special-cases paths like /dev/tcp// for network connections, but this only works within bash, not for other programs.\", \"'Everything is a file descriptor' is a more accurate maxim for Unix, but PIDs are separate and not directly usable as file descriptors.\", \"The /proc//mem file allows reading from or writing to a process's memory via pread/pwrite with specific offsets.\", \"The /proc//mem interface is simpler and more elegant than ptrace for memory debugging and modification.\", \"The author created memfetch to dump process memory via /proc//mem, updated for modern 64-bit systems, though earlier mmap support was removed due to instability.\", \"Plan 9 from Bell Labs fully implements 'everything is a file' for network connections.\"]","tags","[\"memory\", \"proc filesystem\", \"Unix\"]","cost","{\"completion_tokens\": 238, \"prompt_tokens\": 1742, \"total_tokens\": 1980, \"is_byok\": 0}","created",1785199823,"status",0,"ctime","2026-07-28T08:14:33Z","mtime","b58_hash","923w2tsDhDGUbytE1nPpeL","messages",{"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70},"Index",{"_27":138,"_139":140,"_141":142},"Menu",{"_119":93,"_38":88,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137},"Pager",{"_113":114,"_115":116,"_117":118},"Search",{"_97":93,"_98":99,"_71":100,"_101":88,"_86":102,"_103":104,"_105":106,"_107":108,"_109":110,"_111":112},"Tags",{"_27":88,"_89":90,"_80":91,"_82":83,"_92":93,"_94":95,"_86":96},"TagDetail",{"_78":79,"_80":81,"_82":83,"_84":85,"_86":87},"Bilingual",{"_76":77},"Related",{"_27":73,"_74":75},"StoryList",{"_71":72},"no_content","暂无内容","相关文章","loading","加载中…","switch","双语","stories_count","共 {count} 篇","empty","该标签下暂时没有可展示的 story（或内容与主站尚未同步）。","error","加载失败（{code}）","back_to_tags","全部标签","hbir_missing_env","未配置 HBIR_API_BASE，无法加载 hbir。","标签","subtitle","热度排序，默认展示前 100 个标签","暂无标签","search_link","搜索","count_title","共 {count} 篇相关 story","未配置 HBIR_API_BASE，无法加载 hbir /tags。","button","no_query","没有查询","没有内容","tags_link","未配置 HBIR_API_BASE（hbir 服务基址）。请在服务端环境变量中设置，例如：https://your-hbir-host:8787","hbir_error","检索失败（{code}）","total_hits","约 {count} 条结果","snippet_fallback","（无摘录）","open_story","查看全文","no_results","没有匹配的条目","next","下一页","prev","上一页","first","首页","search","channel","频道","sign_in","登录","sign_out","退出登录","my_favs","我的收藏","add_memo","添加备注","memo_placeholder","在这里添加你的备注...","save","保存","cancel","取消","saving","保存中...","Hasty Briefs - 每日科技新闻摘要","desc","使用人工智能自动摘要技术,提供最新科技新闻、黑客新闻等内容的中英文摘要。即时更新,让你高效获取科技资讯","keywords","科技新闻,黑客新闻,人工智能,投资信息,自动摘要,即时更新"]

Hasty Briefsbeta

Weekend trivia: your process' memory is a file