2. 让 devenv 快速启动,并带动整个 nixpkgs 系统一起启动 - devenv Making devenv start fast, and the whole nixpkgs with it - devenv (devenv.sh)
4. “新布卢布悖论”,或:为何 TypeScript 并非人工智能时代的理想选择 The New Blub Paradox, or: Why TypeScript Is a Poor Choice for the AI Era (iankduncan.com)
11. 在此次网络攻击发生前数年,警方就已经掌握了那些入侵伦敦交通局(TfL)的青少年相关信息 Teens who hacked TfL were known to police years before cyber-attack (www.bbc.co.uk)
14. mmo-chip:多玩家 CMOS 标准单元芯片逆向工程工具 mmo-chip: Multiplayer CMOS Standard Cell Chips Reverse Engineering Tool (github.com)
15. DSPi:一款面向树莓派 Pico(RP2040)和 Pico 2(RP2350)的、功能齐全的音频 DSP 固件 DSPi: A fully featured audio DSP firmware for the Raspberry Pi Pico (RP2040) and Pico 2 (RP2350) (github.com)
19. Dyalog v20.0 的新功能:数组、命名空间、组合、内联跟踪——阿舍·哈维-史密斯 Enhancements in Dyalog v20.0: Arrays, Namespaces, Composition, Inline Tracing - Asher Harvey-Smith (www.youtube.com)
21. Akrites:针对开源软件关键基础设施的协调、保密的漏洞修复工作取决于 Akrites: Coordinated, confidential vulnerability remediation for the open source software critical infrastructure depends on (akrites.org)
23. 隆重推出 Silk:一款专为 ClickHouse 设计的丝般顺滑的纤维运行时 Announcing Silk: a silky smooth fiber runtime for ClickHouse (clickhouse.com)
26. 通用同步的局限性:架构、权衡与决策因素的分类学 The Limits of Generalized Sync: ATaxonomy of Architectures, Trade‑offs, and Decision Factors (aaltodoc.aalto.fi)
29. 在Shai-Hulud出手之前,检测并清除开发工作站上的危险机密 Detecting and removing dangerous secrets on dev workstations before Shai-Hulud does (recyclebin.zip)
30. Clever Cloud 的 Pierre Zemb 谈 FoundationDB Pierre Zemb from Clever Cloud on FoundationDB (theconsensus.dev)
41. Go 语言中的零拷贝:sendfile、splice 以及 io.Copy 的开销 Zero-copy in Go: sendfile, splice, and the cost of io.Copy (segflow.github.io)
47. Sacr3d:一个用于在 Scheme 中实现 3D 图形渲染的渲染引擎工具箱 Sacr3d: A rendering engine toolbox to do 3D graphics in Scheme (teddd.srht.site)
51. Rails 的扩展:每小时 4100 万次请求,8 个数据库,disable_joins: true Scaling Rails: 41M Req/Hour, 8 DBs, disable_joins: true (andyatkinson.com)
52. Microspeak 进一步解释道:托管不就是“发布候选版”的另一个说法吗? Microspeak elaborated: Isn''t escrow just a release candidate by another name? (devblogs.microsoft.com)
56. window.showDirectoryPicker 为您开启了一个崭新的世界 window.showDirectoryPicker opens up a whole new world (steveharrison.dev)
63. RubyLLM——一个适用于所有主流AI服务商的、简洁优雅的Ruby框架 RubyLLM - a single, beautiful Ruby framework for all major AI providers (rubyllm.com)
64. [参与邀请]:2.5小时的Haskell基金会在线研讨会 [Call for Participation]: 2.5 hour Haskell Foundation Online Workshop (discourse.haskell.org)
76. 利用 Cackle 增强 Rust 供应链攻击的难度 (2023) Making Rust supply chain attacks harder with Cackle (2023) (davidlattimore.github.io)
80. maestro:一款用Rust语言编写的、轻量级且与Linux兼容的内核 maestro: Lightweight, Linux-compatible kernel, written in Rust (github.com)
82. Ultra:一个从零开始开发的核心,旨在与 Linux 内核用户空间实现(几乎)完全的 ABI 兼容性 Ultra: A from-scratch kernel that aims to be (nearly) fully ABI compatible with the Linux kernel userland (github.com)
87. Cloudflare 与主流浏览器合作,为全球互联网开发一种以隐私为先的协议 Cloudflare Collaborates With Leading Browsers to Develop a Privacy-First Protocol For the Global Internet (cloudflare.net)
93. 使用 Python 和 Apache Spark 实现自定义查询语言 Implementing a Custom Query Language with Python and Apache Spark (nchammas.com)
104. CMDK 快速切换键发明背后的趣闻轶事 The curious history the invention of the CMDK quick switcher (ux.stackexchange.com)
106. 谨以此文纪念那位在单词下方画上红绿波浪线的人 In memory of the man who put red and green squiggles under words (devblogs.microsoft.com)
110. 一步一个脚印,用每一台Lisp机器开创未来 Inventing the Future, One Lisp Machine at a Time (www.patrickdomanico.com)
112. Hyperblam:Web Audio API 的声明式实现 Hyperblam: a declarative implementation of the Web Audio API (hyperblam.how)
114. 为什么绘图板品牌不愿在Linux自由开源软件(FLOSS)驱动方面开展合作 Why Drawing Tablet Brands Won''t Collaborate on Linux FLOSS Drivers (www.davidrevoy.com)
130. 在 Linux/x86-64 上使用内存间接调用进行系统调用插桩(徒劳无功?),第一部分 System call instrumentation on Linux/x86-64 using memory-indirect calls (in vain?), part one (www.humprog.org)
134. loupe:一款注重隐私保护的 iOS 应用,旨在提高用户对原生应用能够获取哪些信息的认知 loupe: A privacy-focused iOS app that raises awareness about what native apps can see (github.com)
135. 关于当前艺术作品中出现的LLM中毒现象,有什么建议吗? What''s the advice for LLM poisoning of artwork these days? (lobste.rs)
139. postmarketOS v26.06(Alpen Avocado)正式发布 postmarketOS v26.06 (Alpen Avocado) released (postmarketos.org)
142. 人工智能会毁掉我们的技能吗?初步结果已经出炉,情况并不乐观 Is AI ruining our skills? Early results are in and they’re not good (www.nature.com)
144. 直通地狱?论滥用透明DNS转发器进行放大攻击 Forward to Hell? On Misusing Transparent DNS Forwarders For Amplification Attacks (labs.ripe.net)
145. cl-bbs:用 Common Lisp 重写的一个类似 schemeBBS 的文本论坛 cl-bbs: the schemeBBS-like textboard rewritten in Common Lisp (github.com)
148. “Mark-of-the-web”以及将安装程序固定到网站 Mark-of-the-web and pinning installers to sites (blog.randomoracle.io)
159. Fedora 44 Gnome 评测——我们已经不在堪萨斯了 Fedora 44 Gnome review - We''re not in Kansas anymore (www.dedoimedo.com)
166. 在不同版本的 Dropshot API 之间管理类型(Oxide RFD 619) Managing types across Dropshot API versions (Oxide RFD 619) (rfd.shared.oxide.computer)
170. UHF X11:专为 VisionOS 和 Apple Vision Pro 打造的 X11 UHF X11: X11 built for VisionOS and Apple Vision Pro (www.lispm.net)
171. 《欧盟网络弹性法案》为您做了(能做)什么? What has (can) the EU Cyber Resilience Act done (do) for you? (nxdomain.no)
172. 麻省理工学院气象雷达PDP-8/IX上的分时系统 Timesharing on the MIT Weather Radar PDP-8/IX (retrocomputingforum.com)
174. 一想到将来要写由法学硕士(LLM)起草的事故报告,我就感到不寒而栗 I am dreading our LLM-written incident report future (surfingcomplexity.blog)
183. 别再把变量命名为“Flag”了:布尔前缀的艺术 Stop Naming Your Variables "Flag": The Art of Boolean Prefixes (thatamazingprogrammer.com)
185. Akse3D——人人都能掌握的开源3D建模软件 Akse3D – open-source 3D modelling anyone can master (akse3d-en.skaperiet.no)
186. “瓦尔哈拉”项目详解:历经十年研发,最终融入 JDK 28 Project Valhalla, Explained: How a Decade of Work Arrives in JDK 28 (www.jvm-weekly.com)
190. Clownmaxxing、实验性提示词和乔伊的凯迪拉克待办事项清单 Clownmaxxing, experimental prompts and Joey''s cadillac todo list (charlesleifer.com)
196. Vim 创建者 Bram Moolenaar 那门被遗忘的编程语言——Zimbu(2023) Vim Creator Bram Moolenaar''s Forgotten Programming Language, Zimbu (2023) (thenewstack.io)
197. 我在 GitHub 上发现了一起大规模的恶意软件传播事件 I discovered a large-scale malware distribution on GitHub (orchidfiles.com)
199. 使用 git rebase --onto 更新堆叠的拉取请求 Updating Stacked Pull Requests with git rebase --onto (bd103.dev)
204. 骗术的未来早已到来,只是分布并不均匀——追求懒惰 The Future of the Con Is Already Here, It''s Just Not Evenly Distributed - In Pursuit of Laziness (manishearth.github.io)
207. Google Workspace 威胁要阻止访问 Firefox Google workspace threatening to block firefox access (tales.fromprod.com)
210. CVE-2026-42530:nginx HTTP/3 QUIC 模块中的“释放后使用”漏洞 CVE-2026-42530: Use after free in nginx HTTP/3 QUIC module (www.cve.org)
225. 本地版 Qwen 并不是比 Opus 差,它只是另一种工具 Local Qwen isn''t a worse Opus, it''s a different tool (blog.alexellis.io)
226. Audacity 4.0 测试版让您能够体验其全新的(更美观的)Qt 界面 Audacity 4.0 beta lets you test its new (nicer) Qt interface (www.omgubuntu.co.uk)
227. mirrors.wikimedia.org 将于 5 月 15 日停止服务 mirrors.wikimedia.org will be sunset on May 15 (lists.wikimedia.org)
228. Bcachefs 1.38.6 带来了多项性能改进 Bcachefs 1.38.6 Brings Many Performance Improvements (www.phoronix.com)
229. 没有比HOME更棒的地方:一段从Vim到VS Code,再回到Vim的10年之旅 There''s No Place Like HOME: A 10 Journey of Vim, Then VS Code, and Back to Vim (starikov.co)
231. LCD7-PANEL-LIME2 产品介绍:一款开箱即装的 Linux 触摸屏计算机 Introducing the LCD7-PANEL-LIME2: A Ready-to-Mount Linux Touch Panel Computer (olimex.wordpress.com)
239. 借助智能的 Rust 框架,让经济型模型发挥超乎其价位的性能 Making budget models punch above their weight with a smart Rust harness (yogthos.net)
241. R 核心团队荣获 2026 年 Rousseeuw 统计学奖 R Core team wins Rousseeuw Prize for Statistics 2026 (rousseeuwprize.org)
243. 谷歌 Manifest 3.0 版本更新对广告拦截器有效性的影响 The Impact of Google''s Manifest Version 3 Update on Ad Blocker Effectiveness (arxiv.org)
246. 我本可以把整个世界杯都“里克罗尔”了。我只需要我的身份证就行 I Could''ve Rickrolled the Entire FIFA World Cup. All I Needed Was My ID (bobdahacker.com)
248. Docker Desktop 网络机制的幕后原理(2022) How Docker Desktop Networking Works Under the Hood (2022) (www.docker.com)
249. OpenBSD PPP 协议栈中一个存在了 27 年的身份验证绕过漏洞 A 27-Year-Old Authentication Bypass in OpenBSD''s PPP Stack (blog.argus-systems.ai)
253. 在未安装 curl 的容器中,使用 bash /dev/tcp 发送 HTTP 请求 Making HTTP requests from a container that has no curl, using bash /dev/tcp (mareksuppa.com)
256. 终端文本渲染存在的问题(2024) all the ways in which terminals'' text rendering is bad (2024) (ecs.d2evs.net)
257. 从圣诞节期间服务中断到荣登App Store榜首:Aura Frames对Postgres扩展的回顾 From Christmas Outage to #1 App Store Ranking: An Aura Frames Postgres Scaling Retrospective (andyatkinson.com)
258. Arch Linux AUR 中的恶意软件现正将俄语垃圾信息植入 shell 配置文件中 Malware in Arch Linux AURs now inserting Russian spam into shell configs (lists.archlinux.org)
261. 谷歌Chrome的下一个更新将标志着热门广告拦截器的终结 Google Chrome''s next update will mark the end of popular ad blockers (9to5google.com)
266. Rust 与 C/C 在内存安全 CVE 方面的差异 How memory safety CVEs differ between Rust and C/C (kobzol.github.io)
270. Oxygen 6.7 正式发布:为 KDE 经典主题注入新鲜活力 Oxygen 6.7 is here: a breath of fresh air for KDE’s classic theme (filipfila.wordpress.com)
273. 有一次,x86 模拟器团队发现一段代码写得实在太糟糕,以至于他们在模拟过程中就直接修复了它 The time the x86 emulator team found code so bad that they fixed it during emulation (devblogs.microsoft.com)
274. 微软正寻求其最大的云服务竞争对手的帮助,以解决GitHub在AI运算能力方面的问题 Microsoft is resorting to its biggest cloud rival to deal with GitHub AI capacity issues (www.businessinsider.com)
280. AMD从其消费级处理器中移除内存加密功能后,用户纷纷表示不满 Users cry foul after AMD stripped memory crypto from its consumer CPUs (arstechnica.com)
283. savearoundtrip:发布一个 HTTPS DNS 记录,省去一次往返 savearoundtrip: publish an HTTPS DNS record, skip a round trip (savearoundtrip.com)
284. 俄语垃圾信息和粗俗内容正肆虐 Arch Linux AUR Russian Spam & Profanities Are Now Plaguing The Arch Linux AUR (www.phoronix.com)
287. MONOLITH:一款面向 x86 架构的实验性非 Unix 操作系统 MONOLITH: An experimental non-Unix operating system for x86 (codeberg.org)
291. 构建基于大型语言模型(LLM)的“人工智能”仍需领域知识 Building llm-driven “ai” still requires domain knowledge (lobste.rs)
292. 我们开发了 SmithDB,这是面向代理可观测性的数据层 We built SmithDB, the data layer for agent observability (www.langchain.com)
293. 你的 EPUB 文件没问题。但 Kobo 不这么认为。这得怪 Adobe。 Your EPUB Is Fine. Kobo Disagrees. Blame Adobe (andreklein.net)
294. kage:将任意网站保存为离线浏览版本,并移除其中的 JavaScript 代码 kage: Shadow any website for offline viewing, with the JavaScript stripped out (github.com)
295. 泽维尔·勒鲁伊关于编程中控制结构的新书 Xavier Leroy''s new book on Control Sturctures in Programming (xavierleroy.org)
298. pyinfra — 基于纯 Python 的无代理基础设施自动化 pyinfra — agentless infrastructure automation, in plain Python (pyinfra.com)