10. 针对实际环境中网页浏览器指纹识别的大规模测量与现实世界中的缓解措施 Large-Scale Measurement and Real-World Mitigation of Web Browser Fingerprinting in the Wild (fingerprinting.study)
13. Synaptics的专利主张导致DisplayLink驱动程序开发工作暂停 Synaptics patent claims stop work on DisplayLink drivers (lwn.net)
16. Ohme新推出的电动汽车充电桩隐私政策取消了“不出售数据”的承诺 Ohme’s new EV charger privacy policy drops its pledge not to sell data (blog.popey.com)
17. 超越编译器:让 IBM i 运行修改后的本机代码——程序验证价值 Beyond the compiler: Making IBM i run modified native code - Program Validation Value (blog.silentsignal.eu)
29. Docker 一直以来都使用微虚拟机(确切地说,是从 2016 年开始的) Docker has always used microVMs (well, since 2016) (dave.recoil.org)
30. 对一款老式二极管-晶体管逻辑芯片进行逆向工程 Reverse engineering a vintage diode-transistor logic chip (www.righto.com)
32. PyPI 重新设计的项目页面现已上线,其中安全提示更加清晰 PyPI's redesigned project pages with clearer security signals are now live (blog.pypi.org)
33. DeepX 宣称可在功耗低于 5 瓦的情况下进行高达 1000 亿参数的推理 DeepX claims inference up to 100B parameters at less than 5 W (www.eetimes.com)
37. Terminal2Shell:关键漏洞可在所有主流操作系统上立即授予shell访问权限 Terminal2Shell: Critical flaw grants instant shell access on every major OS (terminal2shell.com)
38. 在搭载 GentleOS 的经典 PC 上播放古典音乐 Playing classical music on a classic PC with GentleOS (www.youtube.com)
47. 使用树莓派和PPS GPS实现微秒级精度的NTP(2021) Microsecond accurate NTP with a Raspberry Pi and PPS GPS(2021) (austinsnerdythings.com)
49. Sem86:一款不包含硬编码语义的全系统 x86 模拟器 Sem86: a full-system x86 emulator without hardcoded semantics (liblisa.nl)
51. 当一种语言的创建者与其拥有者存在严重分歧时:C26 DIS阶段后的情况、历史经验及未来发展路径 When a language’s creator and its owners strongly disagree: C26 post-DIS, historical experience, and paths forward (isocpp.org)
54. 虚拟化 Redox:从 Virtio-FS 到云虚拟机管理程序,以及更远的未来 Virtualized Redox: from Virtio-FS to Cloud Hypervisor, and beyond (www.redox-os.org)
57. 在 Mac mini M5 Pro(48GB)上,我能实际利用本地 AI 做些什么? What can I realistically do with local AI on a Mac mini M5 Pro (48GB)? (lobste.rs)
59. 谁愿意通过众包方式,利用大型语言模型(LLM)对提交至Lobste.rs的文章进行扫描? Who wants to crowdsource LLM scans of articles submitted to Lobste.rs? (lobste.rs)
60. SFLC.in 关于针对其 X 账号及帖子的下架请求的声明 SFLC.in Statement Regarding the Takedown Requests Against Its X Account and Posts (sflc.in)
61. 追踪代码中的“面包屑”——意外提交的Ad-Hoc日志揭示了开发者对代码的理解程度 Following breadcrumbs in code - What accidentally committed Ad-Hoc logs reveal about developer comprehension (link.springer.com)
67. Nspawn 3.0:适用于 systemd-nspawn 容器的 Docker 兼容引擎 API Nspawn 3.0: A Docker-compatible Engine API for systemd-nspawn containers (blog.nspawn.org)
76. CHIMERA 通过声学管模拟有机声音 CHIMERA simulates organic sound with acoustic tubes (chimera-vocal-synth.vercel.app)
79. OpenBSD 的 top(1) 命令新增了一个选项,用于显示 chroot、pledge 和 unveil 的状态 OpenBSD top(1) adds flag to show chroot, pledge and unveil status (undeadly.org)
80. GhostMap:这个安卓漏洞会在你打开应用前就让手机崩溃 GhostMap: The Android flaw that crashes your phone before you open the app (www.bitdefender.com)
81. M-VAVE FM-1 的开源固件,由其制造商提供,一站式汇总 Open-source firmwares for the M-VAVE FM-1, from their makers, in one place (thefirmwarehub.com)
82. Postgres 的 FOR UPDATE SKIP LOCKED 队列究竟能处理到什么程度? Just how far can the FOR UPDATE SKIP LOCKED Postgres queue go? (garbagecollected.io)
83. Alpine Linux:绕过 openssh-server 的密码认证 Alpine Linux : openssh-server password authentication bypass (www.alpinelinux.org)
85. 你如何应对人工智能在网络上带来的种种负面影响? How are you dealing with all the negative side effects of AI on the web? (lobste.rs)
86. Meridian——一款基于 Servo 和 GPUI 构建的实验性网络浏览器 Meridian — an experimental web browser built on Servo and GPUI (op.tngl.io)
90. 不加质疑地转发:Web 框架为何过度信任“Forwarded”标头 Forwarded Without Question: How Web Frameworks Overtrust the Forwarded Header (www.lkoskela.fi)
94. Inform 是一种用于创作互动小说的编程语言 Inform is a programming language for creating interactive fiction (ganelson.github.io)
101. 凯文·布恩:使用 UEFI 进行裸机编程入门——系列目录 Kevin Boone: Firststeps in bare-metal programming using UEFI – series index (kevinboone.me)
102. 我们如何在生产环境中持续验证形式化规格说明 How we continuously validate formal specifications in production (www.datadoghq.com)
104. 从 Linux 到维基百科:志愿者如何构建互联网 From Linux to Wikipedia: How Volunteers Build the Internet (thereader.mitpress.mit.edu)
109. 以本地优先为特色的会议记录工具。设备端转录,不存储音频,端到端加密同步 Local-first meeting notetaker. On-device transcription, no stored audio, E2E encrypted sync (hellonod.app)
110. 让 musl 和 NVIDIA 专有驱动程序协同工作 Making musl and proprietary NVIDIA drivers work together (chimera-linux.org)
111. “2027计划”:关于重建互联网、科技经济和数字基础设施的RFC Project 2027: An RFC for rebuilding the internet, the tech economy, and digital infrastructure (joinproject2027.org)
114. Barracuda Networks 将成为您的新伙伴(Barracuda 电子邮件安全网关预认证远程根权限远程代码执行漏洞 CVE-2026-116606 / CVE-2026-111560) Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) (labs.watchtowr.com)
121. 为什么与人工智能代理合作如此令人疲惫(以及如何应对)——科技、工作与未来趋势 Why working with AI agents is so tiring (and what to do about it) – Tech, work, and what comes next (constantin.glez.de)
123. SourceHut 禁用注册绕过功能 CVE-2026-121728 SourceHut disabled registration bypass CVE-2026-121728 (blog.arusekk.pl)
126. Flink 的 Kafka 连接器如何将偏移量提交到 Kafka How Flink's Kafka connector commits offsets to Kafka (dalelane.co.uk)
133. 为什么“搜索已登录用户”前面会有一个阿努比斯门? Why is there an Anubis gate in front of Search for logged-in users? (lobste.rs)
137. Ruffle:稳定版本、API、文本……以及其他一切 Ruffle: Stable Releases, API, Text... and Everything Else (ruffle.rs)
139. 每个单词11纳秒:对异序词进行荒谬的过度优化 11 nanoseconds per word: Ridiculously Over-Optimizing Anagrams (wiredream.com)
149. 画家施莱米尔卷土重来:Zig 对 libc 的重写如何导致 SQLite 运行变慢 Shlemiel the Painter Is Back: How Zig’s libc Rewrite Made SQLite Slower (dennisforbes.ca)
152. 2026年11月如何加快Rust编译器的运行速度 How to speed up the Rust compiler in November 2026 (nnethercote.github.io)
153. Debian 的 apt 中存在中间人攻击导致的任意代码执行漏洞 Man-in-the-middle arbitrary code execution in Debian’s apt (lists.debian.org)
154. //go:embed 的工作原理:从源文件到二进制文件 How //go:embed Works: From Source Files to Binary (internals-for-interns.com)
163. 电子投票背后的密码学原理(以及为何纸质选票依然不可或缺) The cryptography behind electronic voting (and why paper ballots are still essential) (blog.trailofbits.com)
168. Postgres 19 REPACK:内置的在线表膨胀清理功能 Postgres 19 REPACK: Built-In Online Table Bloat Cleanup (www.snowflake.com)
170. macOS 27 Golden Gate 实际上并不支持 CoreStorage 卷 macOS 27 Golden Gate does not actually support CoreStorage volumes (wadetregaskis.com)
173. 关于DNSSEC的常见观念经受考验:邀请您对自己的假设进行事实核查 Common Beliefs About DNSSEC Put to the Test: An Invitation to Fact-Check Your Assumptions (circleid.com)
179. 1996年,一台搭载奔腾处理器的现代国际象棋引擎能否击败卡斯帕罗夫? Could a modern chess engine on a Pentium have defeated Kasparov in 1996? (nicholas.carlini.com)
180. Ubuntu 26.04 Rust 中的 sudo 与标准 sudo 不兼容 The Ubuntu 26.04 Rust sudo is not compatible with standard sudo (utcc.utoronto.ca)
190. 通往不透明软件的道路,正是由良好的(工程)初衷铺就的 The road to opaque software is paved with good (engineering) intentions (tomasp.net)
192. 权重空间编程的火花:大型语言模型(LLMs)能够原生读写神经网络权重 Sparks of Weight-Space Programming: LLMs can natively read & write neural network weights (rikiyat.github.io)
201. 仅仅为了调整时间,我就给车载导航系统越狱了 Jailbreaking my car's navigation system just so I can change the time (blog.nns.ee)
205. 保障互联网关键软件的安全:我们本可以如何在Bash中植入后门 Securing Internet-Critical Software: How We Could Have Backdoored Bash (www.hacktron.ai)
206. Polyend 发布了 Tracker 固件源代码 Polyend releases the Tracker firmware source code (backstage.polyend.com)
208. SuperVote:一款社交推荐应用的15年回顾 SuperVote: 15 year retrospective on a social endorsement app (callejas.com)
214. 我总下意识地认为我们的服务器需要越来越多的内存 My reflex of assuming our servers need ever-growing amounts of RAM (utcc.utoronto.ca)
216. Tyrtulia,一个专为终端设计的、无界面且无需密码的论坛 Tyrtulia, a headless forum with no passwords, made for the terminal (git.andros.dev)
221. C 安全性的问题:现代 C 是一种思维方式,而非标准——MC 博客 The Problem with C Safety: Modern C Is a Mindset, Not a Standard – MC BLOG (www.modernescpp.com)
225. 使用 braindead-local-intelligence 轻松体验本地人工智能 An easy way to try local AI with braindead-local-intelligence (dataswamp.org)
226. OpenBSD 版 GEFS(“足够好”文件系统)的开发工作正在推进 Work on GEFS (the Good Enough File System) for OpenBSD progresses (www.undeadly.org)
229. Let's Encrypt 推出 64 天有效期的证书:您的 ACME 客户端究竟何时才会续期? Let's Encrypt Goes to 64-Day Certificates: When Does Your ACME Client Actually Renew? (devops-daily.com)
239. 不使用人工智能,耗时52分钟。手动用C语言编写所有Linux文件处理工具 No AI, 52 min. Build all Linux Files utils in C by Hand (www.youtube.com)
241. 现代硬件性能计数器实现中的非确定性与计数溢出 Non-Determinism and Overcount on Modern Hardware Performance Counter Implementations (web.eece.maine.edu)
247. 一种游戏脚本语言,其在CPU上运行语音转文本的速度比lama.cpp快5倍 A game scripting language that runs speech-to-text 5x faster than llama.cpp on CPU (dasllama.io)
251. 通过排列迭代空间来加速 GPU 复制,或优化恒等函数 Speeding up GPU copies by permuting iteration spaces, or, optimising the identity function (futhark-lang.org)
254. CVE-2026-116155:ImageMagick 因经过特殊构造的 XMP 配置文件导致的内存泄漏 CVE-2026-116155: ImageMagick Memory Leak via Crafted XMP Profile (www.agilehunt.com)
263. 《Tactical-Retreat》:一款基于QuakeC、可免费获取的多平台《反恐精英》v1.5移植版 Tactical-Retreat: a freely available, multi-platform QuakeC-based Counter-Strike v1.5 port (www.frag-net.com)
264. 嵌入式项目陷入困境的十大原因(2002) The top ten reasons embedded projects get into trouble (2002) (www.ganssle.com)
265. 一位客户反映只能看到黑屏的工单 The support case of a customer who said that all they could see was a black screen (devblogs.microsoft.com)
271. Linux 内核中一个 CVSS 评分为 9.8 的 TCP 漏洞影响 Ubuntu、Red Hat 及其他发行版 Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions (thehackernews.com)
275. 使用 Rust 和 Durable Objects 为代理构建细粒度版本控制 Building fine-grained version control for agents with Rust and Durable Objects (delta.dev)
279. 将 NixOS 的内存占用和资源需求缩减到最低限度 Shrinking NixOS Ram footprint and resource requirements to the bare minimum (lowendspirit.com)
281. 关于 AO3 服务中断的最新情况,2026 年 10 月 30 日 转型作品组织 Update on AO3 Downtime, October 30, 2026 Organization for Transformative Works (www.transformativeworks.org)
282. Anthropic公司遭黑客攻击,导致远程访问木马被植入全球各地Claude开发者的笔记本电脑中 Anthropic hacked to deliver remote access trojan to Claude developer laptops worldwide (doublepulsar.com)
285. VS版Claude代码中的后门,Cursor官方扩展 Backdoors in Claude Code for VS, Cursor official extensions (cyberplace.social)
286. VictoriaLogs 与 Loki、Elasticsearch、OpenSearch、SigNoz 和 ClickStack 在结构化日志采集方面的对比 VictoriaLogs vs Loki, Elasticsearch, OpenSearch, SigNoz and ClickStack on structured log ingestion (victoriametrics.com)
287. arm64e 指针认证:PAC 密钥、PACIASP、A12 arm64e pointer authentication: PAC keys, PACIASP, A12 (sigreturn.com)
290. Pidgin 3.0 Alpha 4 2.98.0 已发布 Pidgin 3.0 Alpha 4 2.98.0 has been released (discourse.imfreedom.org)
291. gh-inbox:通过命令行批量清理 GitHub 通知 gh-inbox: clean up GitHub notifications in bulk from the command line (github.com)
293. 界面设计应以功能性为重,而非以熟悉度为重 Design the interface for functionality not familiarity (lapcatsoftware.com)
297. 网络安全即将成为科技领域最大的问题 Cybersecurity Is About to Be the Biggest Problem in Tech (projectautonomy.substack.com)
298. noalloc:用于在 Go 语言中强制实现零堆分配的工具和库 noalloc: Tooling and libraries to enforce zero heap allocations in Golang (github.com)
299. “开放固件”会成为电子音乐设备领域的下一个大趋势吗? Will Open Firmware Become the Next Big Trend in Electronic Music Gear? (www.synthtopia.com)