1. 在收到大量人工智能相关漏洞报告后,苹果限制了漏洞赏金计划的提交数量 Apple Limits Bug Bounty Submissions After a Barrage of AI Entries (www.pcmag.com)
3. Tailscale 如何协助发现 SQLite 的 WAL 重置漏洞 How Tailscale helped find the SQLite WAL-Reset bug (tailscale.com)
5. 从分析师视角看如何绕过 Android 硬件认证 Bypassing Android Hardware Attestation from the Analyst''s Chair (blog.quarkslab.com)
6. 浏览器中的 Numba:在 JupyterLite 中解锁全新的科学 Python 技术栈 Numba in the Browser: Unlocking a New Scientific Python Stack in JupyterLite (notebook.link)
8. fearless_simd v0.7:支持 64 位整数、改进的泛型、SSE2,以及即将发布的 v1.0 版本 fearless_simd v0.7: 64-bit integers, improved generics, SSE2, and upcoming v1.0 (linebender.org)
12. Deadbugz:当前正在进行的 MCP 供应链行动 Deadbugz: Currently Active MCP Supply-Chain Campaign (www.pillar.security)
20. 为什么 Go 语言是人工智能辅助软件工程的理想选择——Google 开发者博客 Why Go is an Ideal Language for AI-Assisted Software Engineering- Google Developers Blog (developers.googleblog.com)
23. 7天内用3kB内存基于自定义字节码虚拟机开发一款游戏 Making a game on a custom bytecode VM in 7 days and 3kB (laurent.le-brun.eu)
28. 降低图形API的复杂性:面向现代GPU的从零开始的设计 Reducing Graphics API Complexity: A Clean Slate Design for Modern GPUs (www.youtube.com)
32. 清理成本,或者说,探讨 OpenBSD 的 -fret-clean 标志 Cleaning costs, or, examining the OpenBSD -fret-clean flag (briancallahan.net)
43. 使用 Haskell Clash 在 FPGA 上解决 Advent Of Code 挑战 Solving Advent Of Code on FPGAs with Haskell Clash (midirus.com)
47. 黎曼ζ函数的三分之二以上的零点位于临界线上 More than two thirds of the zeros of the Riemann zeta function lie on the critical line (www.anthropic.com)
52. 将整数除法转换为浮点除法非常简单 Moving integer division to floating-point is trivial (marc-b-reynolds.github.io)
62. 一位研究人员注册了noreply.net域名。随后,各家公司开始向他透露机密信息 A researcher bought noreply.net. Companies started sending him secrets (arstechnica.com)
64. 一种纯CSS实现效果,展示阳光透过窗户洒入室内的场景 a pure css implementation of some sunlight streaming in through the window (github.com)
67. 使用 Tracy 对 Mutter、GNOME Shell 及应用程序进行性能分析 Performance profiling Mutter, GNOME Shell & apps with Tracy (www.youtube.com)
77. 编程语言如何影响令牌的效率和正确性? How do programming languages impact token efficiency and correctness? (danluu.com)
83. 突破防御:利用段错误并绕过英特尔CET机制进行链式攻击 Crashing Through Defenses: Exploiting Segfaults and Chaining around Intel CET (github.com)
88. 一家高频交易公司刚刚聘请了比雅恩·斯特劳斯特鲁普(C语言的创造者) High-frequency trading firm just hired Bjarne Stroustrup (creator of C) (www.efinancialcareers.com)
105. 将 Enlightenment 桌面环境移植到 NetBSD 上 Port the Enlightenment desktop environment to NetBSD (blog.netbsd.org)
117. 理解 C20 中的 std::counting_semaphore 和 std::binary_semaphore Understanding std::counting_semaphore and std::binary_semaphore from C20 (www.cppstories.com)
118. 修订提示可优化工业级大型语言模型(LLM)流程 Revision Prompting improves industrial LLM processes (revisionprompting.info)
120. “写代码从来都不是难事”这句话是对所有程序员的侮辱 "Code was never the hard part" is an insult to all programmers (blog.senko.net)
125. 《自动化的一些道德与技术后果》(1960) Some Moral and Technical Consequences of Automation (1960) (www.cs.umd.edu)
132. 构建 Groovie:一款先进的基于网页的鼓机/节拍序列器 Building Groovie, an Advanced Web-Based Drum Machine / Beat Sequencer (pointersgonewild.com)
135. homebrew-lab:一门由人工智能生成、自主学习、以实验台操作为主的电子课程,面向业余无线电爱好者和创客,通过示波器观察来学习模拟电路 homebrew-lab: An AI generated, self-directed, bench-driven electronics course for hams and makers, learning analog by seeing it on a scope (github.com)
136. BasicSync:一款用于在安卓系统上运行 Syncthing 的简单应用 BasicSync: A simple app for running Syncthing on Android (github.com)
137. 社交媒体的“兔子洞”、聚类以及随机游走的相对混合时间 social media rabbit holes, clusters, and the relative mixing times of random walks (notes.hella.cheap)
139. 并发性与吞吐量:为什么更高的并行度反而会降低数据库性能 Concurrency vs. Throughput: why more parallelism can make databases slower (planetscale.com)
142. 几乎达成共识:ABD与定额复制(quorum replication)的边界 Almost consensus: ABD and the edges of quorum replication (theconsensus.dev)
146. 问题出在我身上吗?通过面试其他团队来找出答案 Am I the problem? Interviewing another team to find out (www.macchaffee.com)
149. 源代码控制的新模型 作者:阿尔西德斯·丰塞卡 A new model for source control by Alcides Fonseca (wiki.alcidesfonseca.com)
155. 笔记的撰写与博客的发布:更新笔记与发布博文的区别 Notes Compound, Blogs Compile: When I Update a Note vs. Publish a Post (www.ssp.sh)
157. 在 GNU Emacs 中按时间顺序浏览“git blame”结果的几种方法 Some ways to navigate through ''git blame'' over time in GNU Emacs (utcc.utoronto.ca)
158. 介绍 Kitesurf:一款在 Cloudflare Workers 的 V8 隔离环境中运行的“代理优先”浏览器 Introducing Kitesurf: The agent-first browser that runs in V8 isolates on Cloudflare Workers (blog.cloudflare.com)
164. 我成功在 Windows 11 上运行了一款 1998 年的 CD-ROM 世界地图集 I got a 1998 CD-ROM world atlas running on Windows 11 (trevmex.com)
172. schrodingers-toctou:你运行的二进制文件并非你编写的程序 schrodingers-toctou: The binary you run is not the program you wrote (github.com)
173. 仅仅一个函数,速度却快了10倍?解读一个Rust性能PR Just One Function, 10x Faster? Reading a Rust Performance PR (greptime.com)
176. 一款无需光栅化即可投影纹理的 3D SVG 渲染器 a 3D SVG Renderer that projects textures without rasterization (seve.blog)
177. 在 NetBSD 上使用 bozohttpd 搭建一个简单的 Web 服务器 Setup a simple web server with bozohttpd on NetBSD (bozo.httpd.rocks)
178. 那个悄无声息地污染了无关热循环的 LuaJIT NYI The LuaJIT NYI That Silently Poisoned an Unrelated Hot Loop (streamhpc.com)
180. tl;dv(太懒了;未核实):181,874场会议完全开放 tl;dv (Too Lazy; Didn''t Validate): 181,874 Meetings Left Wide Open (bobdahacker.com)
181. Anthropic AI 创建了虚假个人资料,企图通过欺骗他人实施黑客攻击 Anthropic AI created fake profiles to deceive people in attempted hack (www.bbc.co.uk)
184. 我想知道,光靠表情符号能不能制作出一个有用的 DOS 可执行文件 i wonder if you could make a useful DOS executable with just emoji (oldbytes.space)
189. Comu 将一块 144MHz 的 CH32V203 RISC-V 开发板集成到了 USB-A 接口内 Comu Fits a 144MHz CH32V203 RISC-V Board Inside a USB-A Port (linuxgizmos.com)
192. Symbolics OpenGenera 将对非商业用途免费开放 Symbolics OpenGenera to go free for non-commercial use (hachyderm.io)
193. AI模型利用虚假身份试图欺骗开发者,令英国测试人员大吃一惊 AI models shock UK testers by using fake identities to try to trick developers (www.theguardian.com)
194. rezeptor:使用经过测试的 Proton-GE 配方在 Linux 上安装并运行 Windows 软件 rezeptor: Install and run Windows software on Linux with tested Proton-GE recipes (github.com)
198. Proxmox 正式支持 Arm,但存在一些限制 Proxmox officially supports Arm, with some caveats (www.jeffgeerling.com)
199. “残障加密狗”:为什么硅谷讨厌我和你 The "Disability Dongle": Why Silicon Valley Hates Me and you (sightlessscribbles.com)
200. 您的 Agentic 工作流的缓存保持成本高出 8 倍(v2:间隔前沿) Your Agentic Workflow''s Cache Keepalive Costs 8x Too Much (v2: the interval frontier) (blog.mempko.com)
206. 语义字段:Elasticsearch 中用于多模态搜索的单一字段 Semantic field: one field for multimodal search in Elasticsearch (www.elastic.co)
210. “五点哈斯克尔”:通过参数化实现无条件选定 "Five-Point Haskell": Unconditional Election via Parametricity (blog.jle.im)
214. rust-lang/rust 正在制定一项大型语言模型(LLM)政策 rust-lang/rust is adopting an LLM policy (blog.rust-lang.org)
216. Keyv及其合作伙伴在npm供应链攻击中遭到入侵 Keyv and friends compromised in npm supply chain attack (www.aikido.dev)
220. 我们好不容易学会了如何将一个 div 对齐居中,结果浏览器又增加了侧边栏 we finally learned to center a div, then browsers added sidebars (seg6.space)
222. 不要过早停止:以内存速度对源代码进行大小写转换 Don''t stop early: Case-folding source code at memory speed (github.blog)
225. 《天生反对》,或为何业余编程社区会强烈反对使用大型语言模型 Born Against, or why hobby programming communities are aggressively against LLM usage (blog.fogus.me)
229. 在 nightly 分支上启用借阅检查器的下一个版本 Enabling the next iteration of the borrow checker on nightly (blog.rust-lang.org)
232. 卡彭特的合并行为有悖于直觉 Karpenter''s consolidation behaviour is counter-intuitive (blog.appliedcomputing.io)
236. IntelliJ IDEA 支持 LSP:Java 和 Kotlin 智能功能现已登陆 VS Code、Cursor 和 Agentic Flows IntelliJ IDEA Goes LSP: Java and Kotlin Intelligence Comes to VS Code, Cursor, and Agentic Flows (blog.jetbrains.com)
243. Bibliograph:一款面向书籍的原型AppView Bibliograph: A Prototypical AppView for Books (discourse.atmosphere.community)
247. 可搜索的 OCI:通过范围请求索引实现容器镜像的延迟加载 Seekable OCI: Lazy-Loading Container Images via Range-Request Indexing (arxiv.org)
251. 通过编程方式将附件上传到 GitHub 问题、拉取请求和评论中 Programmatically upload attachments to GitHub Issues, Pull Requests, and Comments (island94.org)
252. 面向安腾处理器的 Windows XP 2002:狂暴无匹 Windows XP 2002 for the Itanium: Unbridled rage (virtuallyfun.com)
253. 无分支的Rust:通过移除一个if语句使过滤器速度提升4倍 Branchless Rust: Making a Filter 4x Faster by Removing an if (www.greyblake.com)
258. 以15年来首款全新C-Kermit产品发布,庆祝Kermit问世45周年 Celebrating 45 Years of Kermit with the First New C-Kermit Release in 15 Years (changelog.complete.org)
264. bonsai:一个用于构建动态 Web 应用程序的库,基于 Js_of_ocaml bonsai: A library for building dynamic webapps, using Js_of_ocaml (github.com)
271. Rust 项目目标:不可移动类型和有保证的析构函数 Rust Project Goals: Immobile types and guaranteed destructors (github.com)
282. 9front《THIS WAS SUPPOSED TO BE FUN》正式发行 9front "THIS WAS SUPPOSED TO BE FUN" Released (9front.org)
285. 欧盟关于人工智能模型的法规正式生效。这将带来哪些变化? EU rules on AI models become enforceable. What''s going to change? (www.euronews.com)
286. CP/M-386:基于 CP/M-68K 开发的适用于 386 保护模式的 CP/M 系统 CP/M-386: CP/M for 386 protected mode, derived from CP/M-68K (github.com)
289. SwiftUI 七年之后:一段平庸的故事:它何时才能摆脱“测试版”的感觉? SwiftUI After 7 Years: A Story of Mediocrity: Will it ever stop feeling like a beta? (ykvm.com)
292. TP-Link TL-841N 的获取 root 权限、固件分析以及硬编码且重置后仍保留的凭据 The rooting, firmware analysis and hardcoded, reset-persistent credentials of the TP-Link TL-841N (blog.juni-mp4.com)
295. NativeScope — 用于 React Native 调试的开源本地调试环境 NativeScope — Open Source local Studio for React Native debugging (www.nativescope.dev)
297. 我现在(主要)是根据速度来挑选模型,而不是根据智能水平 I''m (mostly) picking models on speed now, not intelligence (martinalderson.com)
300. 通过手动重新输入大语言模型(LLM)生成的代码来预防认知债务 Prevent cognitive debt by manually retyping LLM-generated code (ankursethi.com)