Regulatory Knowledge Platform 02｜把DORA画成一张Graph以后，才能看懂这些法规之间到底什么关系
我开始把EUR-Lex里面的法规拆成结构化数据。中间当然有Parser、Canonical这些东西，这些不是我做这个项目最有意思的部分。Parser无非就是把EUR-Lex的XML、HTML、metadata解析出来，Canonical再把不同来源统一成我自己的格式。真正让我开始觉得这个Platform有意思，是...
- Cybersecurity 13
- Data Mining 11
- AI 7
- Financial Study Notes 6
- Service Design 5
- High-Performance Computing 2
Cybersecurity
| Regulatory Knowledge Platform 02 | After Drawing DORA as a Graph, I Finally Started to Understand How These Regulations Are Related |
I started to break the regulations from EUR-Lex into structured data. Of course, there are things like Parser and Canonical in the middle, but honestly these...
Regulatory Knowledge Platform 01｜我只是想让AI读DORA，后来发现PDF本身就是问题
前面写DORA 02的时候，我还在纠结DORA到底有多少份文件。一开始以为找到Regulation (EU) 2022/2554就结束了，后来又发现2556，然后是各种Delegated Regulation、Implementing Regulation、RTS、ITS、Guidelines、Final Rep...
学习DORA 04｜漏洞三个月没修，出了事到底该怪谁？
layout: single author_profile: true read_time: true comments: false share: true ———–
| Learning DORA 04 | A Vulnerability Stayed Unpatched for Three Months. Something Happened. Who’s to Blame? |
Let’s imagine Tenable finds a high-risk vulnerability on a core system. IT confirms that it needs to be fixed, but patching it requires a two-hour outage. Th...
学习DORA 03｜系统都外包给云厂商了，出了事到底算谁的？
layout: single author_profile: true read_time: true comments: false share: true ———–
| Learning DORA 03 | If the System Is Outsourced to a Cloud Provider, Whose Problem Is It When Things Go Wrong? |
Today AI started by asking me a question.
学习DORA 02｜我只是想下载一部DORA，为什么最后找到了十几份文件
我一开始以为DORA就是一部法规，对应一个PDF。
| Learning DORA 02 | I Just Wanted to Download DORA—Why Did I End Up with More Than Ten Files? |
At first, I thought DORA was simply one regulation, which meant one PDF.
学习DORA 01｜一次系统中断，为什么会引出一整套欧盟法规
银行是一个我以前从未涉足过的行业。我现在在卢森堡一家银行的欧洲总部从事信息安全相关工作，日常接触的事情包括漏洞管理、资产清查、安全告警、风险跟踪和一些审计检查。
| Learning DORA 01 | How a System Outage Can Lead to an Entire EU Regulatory Framework |
Banking was an industry I had never worked in before.
Vulnerability Analysis: Network Security in Fintech: 2.Deploying Tenable at Scale
This time I’m talking about what happens after last time get Tenable working in a lab. This is about deploying it in a real environment, which is a completel...
Vulnerability Analysis: Network Security in Fintech: 1.Building a Vulnerable Server
From this month, my focus will shift to cybersecurity, starting with network security in fintech. I have been interested in this topic for a while, and I thi...
Data Mining
Market Fear Regime Identification - Part2: Data Pipeline & Feasibility Study
Feature Engineering
Market Fear Regime Identification - Part1: Introduction
Project Overview
Ehtereum Network Analysis — Part 05: Whale & MEV Methodology
Whale & MEV Methodology
Ehtereum Network Analysis — Part 04: Network Construction
In this part, I finally start building the actual Ethereum transaction networks based on the cleaned data from Part 02 and the basic statistics from Part 03....
Ehtereum Network Analysis — Part 03: Basic Statistics
Data Cleaning After downloading the raw CSV files from Google BigQuery, I performed some data cleaning and preprocessing steps, code in the src/data/preproc...
Ehtereum Network Analysis — Part 02: Data Preparation
Data Source Selection There are many ways to explore Ethereum data on internet, genereally through blockchain explorers or public datasets. Kaggle is a good ...
Ehtereum Network Analysis — Part 01: Introduction
What a lovely day in Trento! Here is a perfect place to go hiking and enjoy nature and november sunshine. Everywher is covered with yellow and red leaves, re...
Why nobody sees my posts? (A small note on Friendship Paradox)
I posted something I cared about. Three likes. Meanwhile a friend’s timeline reads like a live stream. If this sounds familiar, here’s a gentle thought: it m...
Six Degrees of Separation - Initial Exploration
Curiosity · Craft · Simplicity — “Build to wonder.”
AI
Building OpenClaw One Agent for Multiple Users
Why I build a multi-user OpenClaw Gateway After I got the first blood-pressure assistant running, word spread quickly in my family.
Building OpenClaw Health Agent: A Blood Pressure Assistant for My Family on WeChat
I started this project for a very personal reason.
Building a Minimal SWE Agent From 0 to 1
Meta bought Manus, a startup that built an agent framework for software engineering tasks. I have been following their work for a while, and I was really imp...
What If Being Right About AI Is Actually Bearish? A Few Thoughts
The 2028 Global Intelligence Crisis: Why AI Might Be More Bearish Than We Think
AI Tools Shift from General to Vertical: Reflections on Agent Skills, MCP, and RAG in Production
In the Beginning
Dual-Engine AI Architecture: API + Local LLM for Finance Companies
A draft on building AI systems for internal factor research scenarios
Working Without a GPU
Introduction
Financial Study Notes
Exploring Futu on Bloomberg · A Fintech Research Note
A research note that investigates Futu Holdings Ltd (Nasdaq: FUTU) based on its Bloomberg investor presentation deck from November 2024. The analysis covers ...
Where Money Comes From · Liquidity and Runs
PDF source: Diamond–Dybvig teaching note (download)
Understanding Diamond (1996): Why Banks Exist — A Theory of Financial Gravity
Introduction — Why apples fall and banks exist
Finance Introduction: Chapter II - The Changing Structure of European Banking
Chapter I was about how banks evolved in theory and this chapter focuses on reality — how the structure of the European banking system changed over the last...
Service Design
Dual-Engine AI Architecture: API + Local LLM for Finance Companies
A draft on building AI systems for internal factor research scenarios
Modern Authentication Revisited: OAuth 2.0 and Beyond
Today, I have a class on Service-Oriented Architecture, a team presented on OAuth 2.0. Just some basic demo and flow diagrams, but it reminded me of how far ...
Building CryptoLens — A Microservice-Based Crypto Monitoring Dashboard
Introduction CryptoLens began as a small personal project: I simply wanted a clean, minimal, white-themed dashboard to monitor a few cryptocurrencies. No noi...
Revisiting Communication Models: REST, GraphQL, and RPC
Curiosity · Craft · Simplicity Build to wonder.
Docker — From Containers to Systems Thinking
Introduction — The Curiosity Behind a Box
High-Performance Computing
Trapezoidal Rule with OpenMP: critical and reduction
Recently I was practicing OpenMP with a simple numerical integration problem. The task itself is not difficult, but it helped me understand why reduction is ...
Hello Parallel World — My First OpenMP Program
I’ve been setting up a tiny OpenMP “Hello, World” to make sure my toolchain is honest with me. Nothing fancy—just enough to see multiple threads come alive a...