2. 迈向“虫”的理论:意外现象的“虫学” Towards a Theory of Bugs: The Ruliology of the Unexpected (writings.stephenwolfram.com)
4. 只需按一下按钮,Pad-O-Matic 就能打印一次性密码本 The Pad-O-Matic prints one-time pads at the press of a button (spectrum.ieee.org)
9. 利用沃尔沃/艾歇尔的车队管理平台,对所有用户和车辆实施管控 Exploiting Volvo/Eicher’s fleet management platform to gain control over all users and vehicles (eaton-works.com)
13. 助力赢得第二次世界大战的计算机:“科洛斯”破译了德国的加密通信 The Computer That Helped Win World War II: Colossus cracked Germany’s encrypted communications (spectrum.ieee.org)
16. 从零开始用现代 C 构建一个快速的无锁队列 Building a Fast Lock-Free Queue in Modern C From Scratch (blog.jaysmito.dev)
29. 从第一性原理出发的功能式编程,第一部分——动机 Functional programming from first principles, part 1 – motivation (www.endoflineblog.com)
35. 约翰·巴库斯函数式编程语言的发展历程 History of John Backus''s FP languages (softwarepreservation.computerhistory.org)
37. 在 std::function 与 copyable_function 之间进行相互转换 Interconverting std::function with copyable_function (quuxplusone.github.io)
47. 泽维尔·勒鲁伊谈编程、编程语言与形式验证 Xavier Leroy on programming, languages and formal verification (www.youtube.com)
50. Scanwheel:一款可以自己动手组装的鼓式机械电视 Scanwheel: a drum style mechanical television you can build yourself (github.com)
64. Android 可能很快会限制设备端的 ADB 功能,这将影响 Shizuku、libadb 以及开发者 Android May Soon Restrict On-Device ADB, Affecting Shizuku, libadb and Developers (kitsumed.github.io)
72. Chrome 为 Gemini 弹出窗口注册了一个全局快捷键 Chrome registers a global shortcut for Gemini popup window (unsung.aresluna.org)
103. Augmental MouthPad 是一款通过舌头控制的触摸板/轨迹板 Augmental MouthPad is a tongue-controlled touchpad/trackpad (www.cnx-software.com)
112. PImpl 惯用法与 C26 中的 std::indirect 类型 The PImpl idiom and the C26 std::indirect type (mariusbancila.ro)
115. 超越单一数值:评估量化模型的部署可行性 Beyond a Single Number: Evaluating Quantized Models for Deployment (byteshape.com)
122. Linux 补丁引入“KNOD”,实现内核级网络卸载直接至 AMD GPU Linux Patches Introduce "KNOD" For In-Kernel Network Offloading Directly To AMD GPUs (www.phoronix.com)
123. 首个已知的失控人工智能代理——还是一个极其拙劣的营销噱头? The first known runaway AI agent - or a very bad marketing stunt? (martinalderson.com)
125. Justif:适用于网络的克努斯-普拉斯对齐与微排版 Justif: Knuth-Plass justification and microtypography for the web (justif.lyall.co)
127. Pip 26.2:–only-deps 解决了长达 16 年的应用部署“权宜之计” Pip 26.2: –only-deps solves 16 years of app deployment hacks (jamesoclaire.com)
133. 我检查了我的“带回家完成”面试项目。这简直是一场大工程。 I Inspected My Take-Home Interview Project. It Was a Whole Operation (citizendot.github.io)
134. 保护我们的自由及开源软件(FLOSS)公共资源免受大型语言模型(LLMs)的侵害 Protecting our FLOSS commons from LLMs (blog.codeberg.org)
135. Frag Gap(CVE-2026-53362、CVE-2026-53366) Frag Gap (CVE-2026-53362, CVE-2026-53366) (blog.qwerty.or.kr)
138. RefluXFS:Linux 内核中 XFS 文件系统下的本地权限提升至 root 漏洞(CVE-2026-64600) RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) (blog.qualys.com)
139. Dark Elevator:Windows 安装服务本地权限提升漏洞(CVE-2026-50343) Dark Elevator: Windows Install Service Local Privilege Escalation (CVE-2026-50343) (blog.calif.io)
140. 隆重推出 Topcoat:一个用于使用 Rust 构建全栈响应式 Web 应用的框架 Announcing Topcoat: a framework for building full-stack reactive web apps with Rust (tokio.rs)
141. Unicode 变体选择器-15 和我流下的几滴眼泪 Unicode Variation Selector-15 and some of my tears (benjaminwil.info)
144. Oric Atmos 版《蛇庙》,仅用 10 行 BASIC 代码编写(2022) Snake Temple for Oric Atmos, in 10 lines of BASIC (2022) (bunsen.itch.io)
149. Notion 两年来的向量搜索实践:规模扩大 10 倍,成本降至十分之一 Two years of vector search at Notion: 10x scale, 1/10th cost (www.notion.com)
151. XDG RemoteDesktop 和 InputCapture 门户中的 libei 集成 libei integrations in the XDG RemoteDesktop and InputCapture portals (who-t.blogspot.com)
162. OpenAI模型突破安全沙箱,入侵Hugging Face获取数据以通过测试 OpenAI model breaks out of security sandbox, hacks Hugging Face for data to pass test (openai.com)
164. 您的 Agentic 工作流的缓存保持成本高出 8 倍 Your Agentic Workflow''s Cache Keepalive Costs 8x Too Much (blog.mempko.com)
167. 使用 Nagios 监控小型企业基础设施 Using Nagios for small business infrastructure monitoring (tech.chrishardie.com)
169. “不使用人工智能”的声明远不止是简单的声明 “No AI” Statements Are Much More Than Mere Statements (journal.james-zhan.com)
176. lazy-tmux:延迟恢复 tmux 会话,并保留滚动历史 lazy-tmux: restore tmux sessions lazily, with scrollback (lazy-tmux.xyz)
182. GitHub 突然拒绝了我的 SSH 密钥(解决方法竟然是一个 .pub 文件?!) GitHub suddenly rejected my SSH key (the fix was a .pub file?!) (thorsell.io)
183. 告别 IntelliJ:Emacs Eglot 上的 Scala 和 Kotlin LSP Escape IntelliJ: Scala and Kotlin LSPs on Emacs Eglot (jointhefreeworld.org)
184. GGG——使用 Guile Scheme 和 SXML 生成声明式 SVG 徽章 GGG – Declarative SVG badge generation using Guile Scheme and SXML (codeberg.org)
185. 面向企业的 KDE 需要强大的个人信息管理(PIM)基础设施 KDE for Enterprise Needs a Strong PIM Infrastructure (ervin.ipsquad.net)
187. 每天30到70个PR:我们是如何避免搞垮系统的 30 to 70 PRs a Day: How We Managed to Not Wreck Our Systems (www.honeycomb.io)
191. 使用 SSH 跳板服务器,但仅在我“踏上草地”时才使用 Using a SSH bastion, but only when I''m touching grass (evertpot.com)
198. SleeperGem:RubyGems供应链攻击瞄准了处于休眠状态的维护者账户 SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts (www.aikido.dev)
201. 一场 Linux 内核 0-day 漏洞探索之旅——从受限的 UAF 到物理内存读写 A Linux Kernel 0-day Journey - From a limited UAF to Physical Memory R/W (1day.dev)
203. 在 TLA 中将 MVCC 扩展为可序列化(2024) Extending MVCC to be serializable, in TLA (2024) (surfingcomplexity.blog)
207. 欧盟即将为了实现免签旅行,将我们最敏感的数据出售给美国 The EU is about to sell our most sensitive data to the US for visa-free travel (edri.org)
208. 4家编码代理供应商共存在7处沙箱逃逸漏洞 7 Sandbox Escape Vulnerabilities Across 4 Coding Agent Vendors (www.pillar.security)
209. Rust for Morello:即使在不安全的代码中,也能始终如一地保障内存安全 Rust for Morello: Always-On Memory Safety, Even in Unsafe Code (drops.dagstuhl.de)
210. 元垃圾回收:利用 OCaml 的垃圾回收器对 Rust 进行垃圾回收 Meta Garbage Collection: Using OCaml''s GC to GC Rust (soteria-tools.com)
211. 利用基于大型语言模型(LLM)的验证技术消除Linux网络堆栈中的错误 Using LLM-based Verification to Eliminate Bugs in Linux''s Network Stack (www.basis.ai)
216. 克劳德找到了雅可比猜想的一个反例 Claude found a counterexample to the Jacobian Conjecture (news.ycombinator.com)
218. 趣味模糊测试——snac2中的未认证拒绝服务漏洞 Fuzzing for fun - unauthenticated denial of service in snac2 (nullenvk.pl)
221. 旧版本软件的错误报告应由谁负责? Who’s responsible for bug reports on old software versions? (pointieststick.com)
234. Skred 现已成为一款支持 MIDI 的合成器和鼓机构建套件 Skred is now a MIDI aware synth and drum machine construction kit (lobste.rs)
237. 更多模拟器的精彩内容:一款可启动 Windows 的英特尔安腾(IA-64)模拟器 More emulation goodness, an Intel Itanium (IA-64) emulator that boots Windows (raymii.org)
238. 数学家们至今仍不清楚乘法运算的最快方法 Mathematicians still don’t know the fastest way to multiply numbers (www.scientificamerican.com)
240. 硬核 IndieWeb:每天仅需 0.01 美元,即可 100% 独立运营自己的网站 Hardcore IndieWeb: Run your own website 100% independently for only 0.01/day (www.neatnik.net)
246. Gleam 已将其源代码镜像到 tangled(一个基于 AT 协议的代码托管平台)上 Gleam has mirrored its source code on tangled (an AT-protocol based forge) (tangled.org)
251. wp2shell:WordPress 核心中的身份验证前远程代码执行漏洞 wp2shell: Pre Authentication RCE in WordPress Core (wp2shell.com)
260. NextBSD 项目重启:基于 FreeBSD 内核的苹果开源用户空间工具 NextBSD project revived: Apple''s FOSS user-space tools on the FreeBSD kernel (nextbsd.org)
261. 2026 年的 SSH 上的 PowerShell:Windows 上的 OpenSSH、密钥认证和 PowerShell 7 远程处理 PowerShell over SSH in 2026: OpenSSH on Windows, Key Auth, and PowerShell 7 Remoting (mattmichie.com)
273. topcoat:一个用于构建 Web 应用的“开箱即用”框架 topcoat: A batteries-included framework for building web apps (github.com)
275. Lobsters 对 matheusmoreira 关于 Lone Lisp 的采访 Lobsters Interview with matheusmoreira about Lone Lisp (alexalejandre.com)
277. 认知对等性:可重复性作为差分隐私的评估指标 Epistemic Parity: Reproducibility as an Evaluation Metric for Differential Privacy (cacm.acm.org)
281. 在网络安全领域,领先的开放重量级模型距离前沿还有多远? How Far Behind the Frontier are Leading Open Weight Models on Cyber? (www.aisi.gov.uk)
286. 在 Haskell 中采用广度优先方式展开树(2025) Unfolding trees breadth-first in Haskell (2025) (blog.poisson.chat)
287. PACT:面向网络的匿名凭证 – Mozilla Hacks PACT: Anonymous Credentials for the Web – Mozilla Hacks (hacks.mozilla.org)
289. 地球自转记录促使10月举行投票,以避免出现负闰秒 Earth Rotation Records Spur October Vote to Avert Negative Leap Second (www.techtimes.com)
290. 在全球范围内阻止《GUARD法案》和年龄验证法律的实施 — 自由软件基金会 — 携手共进,推动自由软件发展 Stop the GUARD Act and age verification laws worldwide — Free Software Foundation — Working together for free software (www.fsf.org)
291. 我们正在用Rust开发Postgres。这就像是数据库界的LLVM。 We''re building Postgres in Rust. Using the LLVM of databases (turso.tech)
292. 在宽指针环境下不使用跳板函数时使用 GCC 的嵌套函数(二) Using GCC''s Nested Functions with Wide Pointers and no Trampolines II (uecker.codeberg.page)