1. Dart Live:一款通过 Wasm 在网页端实现的编译器、虚拟机、分析器及热重载工具 Dart Live, a compiler, VM, analyzer and hot reload on the web via Wasm (modulovalue.github.io)
2. MacBook Neo 评测:专为普通用户打造的笔记本电脑 MacBook Neo Review: The Laptop For The Rest Of Us (fireborn.mataroa.blog)
3. Tolaria、Rust,以及关于“什么样的 Mac 应用能让我感到舒适”的思考 Tolaria, Rust, and Questions About What Makes a Mac App Feel Good to Me (shapeof.com)
4. 不依赖启发式的确定性全静态二进制文件翻译 Deterministic Fully-Static Whole-Binary Translation without Heuristics (arxiv.org)
5. 面向有志成为高级用户的用户,关于Kakoune的详细介绍 A detailed introduction to Kakoune for the aspiring power user (ficd.sh)
7. Stack Overflow 上那 262,715 个正则表达式问题未能解答的究竟是什么 what 262,715 regex questions on stack overflow haven''t answered (iev.ee)
9. Pycco:一款支持100行文本的文学风格并排文档渲染器 Pycco: 100-line literate-style side-by-side documentation renderer (pycco-docs.github.io)
10. 压缩 OxCaml js_of_ocaml 软件包:从 285 MB 缩减至 4 MB Shrinking the OxCaml js_of_ocaml bundle: 285 MB to 4 MB (kcsrk.info)
11. BeBox:BeOS 硬件、照片以及那桩未成行的苹果交易 The BeBox: BeOS Hardware, Photos, and the Apple Deal That Wasn''t (www.jdhodges.com)
12. 很快,我们终于可以将 JavaScript 驱逐到“阴影领域”了 Soon We Can Finally Banish JavaScript to the ShadowRealm (css-tricks.com)
14. “dnsmasq 中存在六个严重安全漏洞的 CVE” "six CVEs for serious security vulnerabilities in dnsmasq" (lists.thekelleys.org.uk)
17. 枚举转字符串的开销:C26 反射与传统方法的对比 cost of enum-to-string: C26 reflection vs the old ways (vittorioromeo.com)
23. Rockstar是如何将整座城市塞进PlayStation 2内存中的 How Rockstar fit an entire city into PlayStation 2 memory (www.youtube.com)
25. 在较新版本的 Android 系统上,任何应用都可能泄露某些流量 Any app on recent Android versions can leak certain traffic (mullvad.net)
30. 《在 Linux 和 Unix 系统上编译 Emacs 以提升性能的技术指南》 A Technical Guide to Compiling Emacs for Performance on Linux and Unix systems (www.jamescherti.com)
32. Kettle:用于可验证软件溯源的经过验证的构建方案 Kettle: Attested builds for verifiable software provenance (arxiv.org)
34. floci:轻量、灵活,且完全免费——AWS Local Emulator 的替代方案 floci: Light, fluffy, and always free - The AWS Local Emulator alternative (github.com)
35. 热门 Go 库 fsnotify 因维护者访问权限变更引发供应链安全警报 Popular Go library fsnotify raises supply chain alarms after maintainer access changes (socket.dev)
38. 第12届Plan 9国际研讨会注释摘要 An annotated digest of the 12th International Workshop on Plan 9 (n-gate.com)
48. 反极简主义的反扑,才是Oxygen重振雄风背后的真正原因 The anti-minimalist backlash is the bigger story behind Oxygen’s revival (filipfila.wordpress.com)
50. devenv 2.1:通过 libghostty 支持 zsh、fish 和 nushell 的 Nix - devenv devenv 2.1: Nix with zsh, fish, and nushell via libghostty - devenv (devenv.sh)
57. omlx:一款支持连续批处理和 SSD 缓存的 LLM 推理服务器,专为 Apple Silicon 设计——可通过 macOS 菜单栏进行管理 omlx: LLM inference server with continuous batching & SSD caching for Apple Silicon — managed from the macOS menu bar (github.com)
61. 使用 systemfd 将终端输出重定向到浏览器 Piping terminal output to the browser using systemfd (blog.izissise.net)
64. 最高支持 256 MB 的 FERRIT 模块化 F-RAM 存储设备,可将关键数据保存长达 200 年 Up to 256 MB FERRIT modular F-RAM storage device preserves critical data for up to 200 years (www.cnx-software.com)
70. 在不使用 TIOCSTI 的情况下替换 Bash 中的 Ctrl-R Replacing Ctrl-R in Bash without TIOCSTI (blog.rickardlindberg.me)
72. Tiny-Lua-Compiler:可能是迄今为止最小的 Lua 编译器 Tiny-Lua-Compiler: Possibly the smallest Lua compiler ever (github.com)
73. ClaudeBleed:Claude浏览器扩展中的一个漏洞允许任何扩展程序劫持它 ClaudeBleed: A Flaw In Claude''s Browser Extension Allows Any Extension to Hijack It (layerxsecurity.com)
80. 使用 Swift 训练大型语言模型(LLM),第一部分:将矩阵乘法性能从 Gflop/s 提升至 Tflop/s Training an LLM in Swift, Part 1: Taking matrix multiplication from Gflop/s to Tflop/s (www.cocoawithlove.com)
81. wayland.fyi 极简主义 Wayland 特别兴趣小组 wayland.fyi minimalist wayland special interest group (wayland.fyi)
87. 宇宙射线是量子计算机的克星——软件或许能解决这一难题 Cosmic Rays Are Quantum Computers'' Kryptonite—Software might just solve the problem (spectrum.ieee.org)
91. 用一个 10 MB 的 FST(有限状态转换器)二进制文件替换一个 3 GB 的 SQLite 数据库 Replacing a 3 GB SQLite database with a 10 MB FST (finite state transducer) binary (til.andrew-quinn.me)
93. 《优质的首个问题:提交你的首个开源贡献》 Good First Issue: Make your first open-source contribution (goodfirstissue.dev)
104. Aurora:一种适用于矩形矩阵的考虑权重关系的优化器 Aurora: A Leverage-Aware Optimizer for Rectangular Matrices (blog.tilderesearch.com)
106. 让大型语言模型“喝醉”以发现远程 Linux 内核 OOB 写入(及其他) Getting LLMs Drunk to Find Remote Linux Kernel OOB Writes (and More) (heyitsas.im)
107. 那些复杂的 Windows 恶意软件及其分析都去哪儿了? Where Have All the Complex Windows Malware and Their Analyses Gone? (r136a1.dev)
110. 在非标准 shell 环境中使用 GNU Emacs 的 Tramp 系统的注意事项 Notes on using GNU Emacs'' Tramp system in an unusual shell environment (utcc.utoronto.ca)
112. FFmpeg:互联网视频背后的非凡技术 FFmpeg: The Incredible Technology Behind Video on the Internet (www.youtube.com)
115. 我对代理的信任问题:从提示符注入到 gemini-cli 的供应链漏洞 My Agentic Trust Issues: From Prompt Injection to Supply-Chain Compromise on gemini-cli (www.pillar.security)
120. 你给了我一个u32,我给了你root权限。(io_uring ZCRX freelist LPE) You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE) (ze3tar.github.io)
121. Inflorescence – Pijul 的跨平台原生图形用户界面 Inflorescence – A cross-platform native GUI for Pijul (nest.pijul.com)
122. Chrome 的 AI 功能可能会占用你电脑中 4GB 的存储空间 Chrome’s AI features may be hogging 4GB of your computer storage (www.theverge.com)
123. killswitch:添加按函数的短路缓解原语 [LWN.net] killswitch: add per-function short-circuit mitigation primitive [LWN.net] (lwn.net)
126. 一种具有发现缺陷概率保证的随机调度器 A Randomized Scheduler with Probabilistic Guarantees of Finding Bugs (www.microsoft.com)
127. CADara - 我开发了一款开源的、完全基于浏览器的CAD软件 CADara - I made an open-source fully in-browser CAD (cadara.app)
131. Let''s Encrypt 因潜在安全事件暂停证书签发 Let''s Encrypt Stopping Issuance for Potential Incident (letsencrypt.status.io)
133. 漏洞花园:一份不断更新的已命名漏洞、攻击技术和利用程序清单 Vulnerability Garden: A growing list of named vulnerabilities, attack techniques and exploits (vulnerability.garden)
134. Linux 内核中的漏洞发现与验证(第一部分):CAN 释放后使用竞争条件 Discovery & Validation in the Linux Kernel (Part 1): CAN Use-After-Free Race (www.bynar.io)
139. 在完全运行于内存中的树莓派 Zero 上托管网站 Serving a Website on a Raspberry Pi Zero Running Entirely in RAM (btxx.org)
140. 通往支持文本选择的客户端生成PDF文件的意外复杂历程 The surprisingly complex journey to text-selectable client-side generated PDFs (sdocs.dev)
144. 在首次 SSH 连接时阻止中间人攻击,适用于任何 VPS 或云服务提供商 Stop MITM on the first SSH connection, on any VPS or cloud provider (www.joachimschipper.nl)
145. 用 aarch64 汇编语言构建一个 Web 服务器,以此赋予我(本已空虚的)生命以意义 building a web server in aarch64 assembly to give my life (a lack of) meaning (imtomt.github.io)
146. hpke-ng:更快、更小、更强大的 Rust 版 HPKE hpke-ng: Faster, Smaller, Harder HPKE for Rust (symbolic.software)
148. blaise:一款专为2020年代打造的现代自托管Object Pascal编译器。零遗留代码、全自动引用计数(ARC)及统一的UTF-8编码 blaise: A modern, self-hosting Object Pascal compiler built for the 2020s. Zero legacy, full ARC, and unified UTF-8 (github.com)
152. 《两个世界的故事:WireGuard 混合模式的正式阐述》 A Tale of Two Worlds, a Formal Story of WireGuard Hybridization (www.usenix.org)
155. cuda-oxide:cuda-oxide 是一个实验性的 Rust 到 CUDA 编译器 cuda-oxide: cuda-oxide is an experimental Rust-to-CUDA compiler (github.com)
158. 为什么在ASCII字符集中,小写字母不会紧跟在大写字母后面?——泰勒·希勒里 Why Don’t Lowercase Letters Come Right After Uppercase Letters in ASCII? – Tyler Hillery (tylerhillery.com)
164. 一夜之间格式化整个2500万行代码库:rubyfmt的故事 Formatting an entire 25 million line codebase overnight: the rubyfmt story (stripe.dev)
167. 幕后花絮:借助 Claude Mythos 预览版强化 Firefox Behind the Scenes Hardening Firefox with Claude Mythos Preview (hacks.mozilla.org)
171. .de 域名遭遇重大 DNS 故障:2026 年 5 月 5 日发生 DNSSEC 故障 Major DNS Outage Hits .de Domains: DNSSEC Failure on May 5, 2026 (www.ip.network)
176. 创建自己的编程语言比你想象的要容易(但也更难) Making your own programming language is easier than you think (but also harder) (lisyarus.github.io)
179. “氛围编码”和“能动性工程”的发展速度,比我预期的还要快 Vibe coding and agentic engineering are getting closer than I’d like (simonwillison.net)
182. cursed_browser:一款没有渲染引擎的网页浏览器——VLM 会读取 HTML 代码,并“凭空想象”出页面 cursed_browser: A web browser with no rendering engine — the VLM reads the HTML and hallucinates the page (github.com)
189. 未平仓合约正在悄然减少——这成了个问题 Open weights are quietly closing up - and that''s a problem (martinalderson.com)
193. Solod v0.1:符合 Go 语言人体工学设计、实用的标准库、原生 C 语言互操作性 Solod v0.1: Go ergonomics, practical stdlib, native C interop (antonz.org)
197. 1000个第三方可能窃取了RIPE NCC的会话令牌——这是设计使然 1000 third parties could have stolen RIPE NCC session tokens - by design (mxsasha.eu)
208. 了解 Wi-Fi 4/5/6/6E/7/8(802.11 n/ac/ax/be/bn) Understanding Wi-Fi 4/5/6/6E/7/8 (802.11 n/ac/ax/be/bn) (www.wiisfi.com)
209. 微软与IBM组织架构之间关于TAB键的争议 A dispute over the TAB key between Microsoft and IBM organizational structures (devblogs.microsoft.com)
213. Google Chrome 在未经用户同意的情况下,会在您的设备上悄然安装一个 4 GB 的人工智能模型 Google Chrome silently installs a 4 GB AI model on your device without consent (www.thatprivacyguy.com)
214. Z80 与 6502 及其同类产品的对比 Comparing the Z80 and 6502 to Their Relatives (bumbershootsoft.wordpress.com)
215. Lix 中存在可被利用的整数溢出漏洞 (CVE-2026-44028) An exploitable integer overflow in Lix (CVE-2026-44028) (lix.systems)
217. 我们正式发布 Mikan:一款基于立方体类型论的证明助手,它源自 Agda 的代码库 We''re announcing Mikan: a proof assistant for cubical type theory, forked from the Agda codebase (types.pl)
220. 面向行为的 Python 并发:无锁、无死锁、基于所有权 Behavior-Oriented Concurrency for Python: Lock-less, Deadlock-free, Ownership-based (microsoft.github.io)
225. 一个 Caddy 证书过期,原因是 systemd-resolved 出现了局部故障 A Caddy Cert Expired Because systemd-resolved Was Selectively Broken (rant.mvh.dev)
230. minipgp6:一种非常精简的现代 OpenPGP 实现 minipgp6: A very lean interpretation of modern OpenPGP (codeberg.org)
231. MacBook Neo 深度解析:跑分测试、晶圆经济性与8GB内存的豪赌 MacBook Neo Deep Dive: Benchmarks, Wafer Economics, and the 8GB Gamble (www.jdhodges.com)
233. 嵌入式Rust还是C语言固件?来自Ariel OS工业微控制器应用案例的启示 Embedded Rust or C Firmware? Lessons from an Industrial Microcontroller Use Case with Ariel OS (arxiv.org)
234. Bun(JavaScript 运行时)正在从 Zig 移植到 Rust Bun (the js runtime) is being vibe-ported from zig to rust (github.com)
237. sectorllm:在不到 1500 字节的 x86 汇编代码中实现 Llama2 推理 sectorllm: llama2 inference in 1500 bytes of x86 assembly (github.com)
240. 安全公告:Lix 和 Nix 中的本地权限提升漏洞 Security Advisory: Local privilege escalation in Lix and Nix (discourse.nixos.org)
242. OpenMythos:基于现有研究文献,从第一性原理出发对Claude Mythos架构进行的理论重建 OpenMythos: A theoretical reconstruction of the Claude Mythos architecture, built from first principles using the available research literature (github.com)
260. 一款原生 macOS 应用,用于关注 YouTube 频道,无需 Google 账号登录 Native macOS app to track YouTube channels, no Google login required (github.com)
261. 提醒:您可以将许多带有导航功能的小型 HTML 页面组合在一起,以实现交互功能 Reminder: You Can Stitch Together Lots of Little HTML Pages With Navigations For Interactions (blog.jim-nielsen.com)
262. 我不小心导致执法部门关闭了他们的压力测试蜜罐 I accidentally made law enforcement shut down their stresser honeypot (lina.sh)
270. 因自行车同步功能故障,我如何逆向工程破解了Wahoo的隐藏调试模式 How a Broken Bike Sync Led Me to Reverse Engineering My Wahoo’s Hidden Debug Mode (noahclements.com)
272. 三十年来,我每天都在Phish的音乐声中编程。到了2026年,音乐与工作已不再合拍 For thirty years I programmed with Phish on, every day. In 2026, the music is out of phase with the work (christophermeiklejohn.com)
277. git-async 网页演示 - 浏览器内的 Git 浏览器 git-async web demo - A git browser in the browser (git-async.donk.systems)
279. 我最喜欢的设备是一台 Chromebook,但它没有安装 ChromeOS My favorite device is a Chromebook, without ChromeOS (kokada.dev)
280. 文本模式的谎言:为何现代图文交互界面(TUI)对无障碍访问而言是一场噩梦 The text mode lie: why modern TUIs are a nightmare for accessibility (xogium.me)
281. Losrs - 在终端中使用 Markdown 卡片进行间隔重复学习 Losrs - Spaced Repetition in the terminal with markdown cards (github.com)
286. 在 Apple Network Server 2.0 ROM 上测试 macOS Testing MacOS on the Apple Network Server 2.0 ROMs (oldvcr.blogspot.com)
295. onionlink:仅使用 libsodium 和 mbedTLS,用 2.5k 行 C 语言连接 v3 洋葱服务 onionlink: 2.5k lines of C to connect to v3 onion services, using only libsodium and mbedTLS (github.com)
298. VideoLAN 发布了开源 AV2 解码器 Dav2d VideoLAN Publishes Dav2d For Open-Source AV2 Decoder (www.phoronix.com)