4. 仅仅为了调整时间,我就给车载导航系统越狱了 Jailbreaking my car's navigation system just so I can change the time (blog.nns.ee)
8. 保障互联网关键软件的安全:我们本可以如何在Bash中植入后门 Securing Internet-Critical Software: How We Could Have Backdoored Bash (www.hacktron.ai)
9. Polyend 发布了 Tracker 固件源代码 Polyend releases the Tracker firmware source code (backstage.polyend.com)
11. SuperVote:一款社交推荐应用的15年回顾 SuperVote: 15 year retrospective on a social endorsement app (callejas.com)
17. 我总下意识地认为我们的服务器需要越来越多的内存 My reflex of assuming our servers need ever-growing amounts of RAM (utcc.utoronto.ca)
19. Tyrtulia,一个专为终端设计的、无界面且无需密码的论坛 Tyrtulia, a headless forum with no passwords, made for the terminal (git.andros.dev)
24. C 安全性的问题:现代 C 是一种思维方式,而非标准——MC 博客 The Problem with C Safety: Modern C Is a Mindset, Not a Standard – MC BLOG (www.modernescpp.com)
28. 使用 braindead-local-intelligence 轻松体验本地人工智能 An easy way to try local AI with braindead-local-intelligence (dataswamp.org)
29. OpenBSD 版 GEFS(“足够好”文件系统)的开发工作正在推进 Work on GEFS (the Good Enough File System) for OpenBSD progresses (www.undeadly.org)
32. Let's Encrypt 推出 64 天有效期的证书:您的 ACME 客户端究竟何时才会续期? Let's Encrypt Goes to 64-Day Certificates: When Does Your ACME Client Actually Renew? (devops-daily.com)
42. 不使用人工智能,耗时52分钟。手动用C语言编写所有Linux文件处理工具 No AI, 52 min. Build all Linux Files utils in C by Hand (www.youtube.com)
44. 现代硬件性能计数器实现中的非确定性与计数溢出 Non-Determinism and Overcount on Modern Hardware Performance Counter Implementations (web.eece.maine.edu)
50. 一种游戏脚本语言,其在CPU上运行语音转文本的速度比lama.cpp快5倍 A game scripting language that runs speech-to-text 5x faster than llama.cpp on CPU (dasllama.io)
54. 通过排列迭代空间来加速 GPU 复制,或优化恒等函数 Speeding up GPU copies by permuting iteration spaces, or, optimising the identity function (futhark-lang.org)
57. CVE-2026-116155:ImageMagick 因经过特殊构造的 XMP 配置文件导致的内存泄漏 CVE-2026-116155: ImageMagick Memory Leak via Crafted XMP Profile (www.agilehunt.com)
66. 《Tactical-Retreat》:一款基于QuakeC、可免费获取的多平台《反恐精英》v1.5移植版 Tactical-Retreat: a freely available, multi-platform QuakeC-based Counter-Strike v1.5 port (www.frag-net.com)
67. 嵌入式项目陷入困境的十大原因(2002) The top ten reasons embedded projects get into trouble (2002) (www.ganssle.com)
68. 一位客户反映只能看到黑屏的工单 The support case of a customer who said that all they could see was a black screen (devblogs.microsoft.com)
74. Linux 内核中一个 CVSS 评分为 9.8 的 TCP 漏洞影响 Ubuntu、Red Hat 及其他发行版 Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions (thehackernews.com)
78. 使用 Rust 和 Durable Objects 为代理构建细粒度版本控制 Building fine-grained version control for agents with Rust and Durable Objects (delta.dev)
82. 将 NixOS 的内存占用和资源需求缩减到最低限度 Shrinking NixOS Ram footprint and resource requirements to the bare minimum (lowendspirit.com)
84. 关于 AO3 服务中断的最新情况,2026 年 10 月 30 日 转型作品组织 Update on AO3 Downtime, October 30, 2026 Organization for Transformative Works (www.transformativeworks.org)
85. Anthropic公司遭黑客攻击,导致远程访问木马被植入全球各地Claude开发者的笔记本电脑中 Anthropic hacked to deliver remote access trojan to Claude developer laptops worldwide (doublepulsar.com)
88. VS版Claude代码中的后门,Cursor官方扩展 Backdoors in Claude Code for VS, Cursor official extensions (cyberplace.social)
89. VictoriaLogs 与 Loki、Elasticsearch、OpenSearch、SigNoz 和 ClickStack 在结构化日志采集方面的对比 VictoriaLogs vs Loki, Elasticsearch, OpenSearch, SigNoz and ClickStack on structured log ingestion (victoriametrics.com)
90. arm64e 指针认证:PAC 密钥、PACIASP、A12 arm64e pointer authentication: PAC keys, PACIASP, A12 (sigreturn.com)
93. Pidgin 3.0 Alpha 4 2.98.0 已发布 Pidgin 3.0 Alpha 4 2.98.0 has been released (discourse.imfreedom.org)
94. gh-inbox:通过命令行批量清理 GitHub 通知 gh-inbox: clean up GitHub notifications in bulk from the command line (github.com)
100. 网络安全即将成为科技领域最大的问题 Cybersecurity Is About to Be the Biggest Problem in Tech (projectautonomy.substack.com)
101. noalloc:用于在 Go 语言中强制实现零堆分配的工具和库 noalloc: Tooling and libraries to enforce zero heap allocations in Golang (github.com)
102. “开放固件”会成为电子音乐设备领域的下一个大趋势吗? Will Open Firmware Become the Next Big Trend in Electronic Music Gear? (www.synthtopia.com)
109. Azure 的最薄弱环节——五起完整的跨租户安全事件 Azure’s Weakest Link - Five Full Cross-Tenant Compromises (www.binarysecurity.no)
112. “你根本不理解自己的代码”:从“十种语言中的十种排序”以及各种 JavaScript 引擎中,我们可以窥见当下我们所经历的抽象化趋势 "You Already Don't Understand Your Code": What "ten sorts in ten languages" and various JS engines say about the abstraction we're living through now (george.mand.is)
114. NetBSD 新增了一款名为 atto 的、适合初学者的文本编辑器 NetBSD adds a new beginner-friendly text editor called atto (mastodon.sdf.org)
116. Qwenputer:Qwen3.5内部一款功能完备、确定性的RISC-V处理器 Qwenputer: a fully functioning, deterministic RISC-V CPU inside Qwen3.5 (divagr.com)
118. 2026 年的终端配置:Ghostty、tmux 和 Neovim My Terminal Setup in 2026: Ghostty, tmux, and Neovim (nick-liu.com)
119. 一条格式错误的 WAP 推送短信会导致 Android 系统上的 com.android.phone 崩溃,并中断正在进行的通话(包括紧急呼叫) A single malformed WAP Push SMS crashes com.android.phone on Android, dropping active calls (including emergency calls) (smsofdeath.com)
132. GitLab 安全事件:有人试图利用 CVE-2026-97229 漏洞 Alpine Linux GitLab security incident: attempted exploitation of CVE-2026-97229 Alpine Linux (alpinelinux.org)
135. OpenBSD Jumpstart 8.0:新用户快速入门指南 OpenBSD Jumpstart 8.0: Quick Start Guide for New Users (openbsdjumpstart.org)
138. GOTO 被认为非常糟糕(用于 C 语言中的错误处理) GOTO Considered Totally Sick (for error handling in C) (thestateofinahaze.net)
142. 仅利用逻辑错误构建 Microsoft Edge 全链 Forging a Microsoft Edge Full Chain with Logic Bugs Only (blog.orange.tw)
143. 苹果的 Git 仍然信任那些遭到泄露的 eMudhra 证书 Apple's git still trusts the compromised eMudhra certificates (emudhra.we-have-a-problem.com)
148. Peel:一款适用于 macOS 的免费开源卸载工具和清理工具 Peel: A free, open source uninstaller and cleaner for macOS (peel.tuguidragos.com)
150. UEFI 固件中的代码执行漏洞影响了地球上绝大多数服务器 Code-execution flaw in UEFI firmware affects most servers on planet Earth (arstechnica.com)
156. 提醒:Lobsters NYC 聚会将于明天 5:30 在 Walker's 举行 Reminder: Lobsters NYC Meetup Tomorrow 5:30 at Walker's (lobste.rs)
160. 修复 KIO 向 USB 闪存盘和网络文件系统复制文件的问题 Fixing KIO copy to USB stick and network filesystems (blogs.kde.org)
162. 《与伯费德共度一晚:关于一块饼干如何被引诱、忍受并研究的故事》(1992) An Evening with Berferd: In Which a Cracker is Lured, Endured, and Studied (1992) (www.cheswick.com)
163. 模糊测试工具与人工智能:Fuzzilli 与 BigSleep 在 JavaScript 引擎上的对比 Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines (projectzero.google)
166. 现在,Python 和 TypeScript 中的 Protobuf 其实已经相当不错了 Protobuf in Python and TypeScript is actually good now (buf.build)
174. EnsoJS——一款以原生优先为理念的微框架,用于构建声明式 Web Components EnsoJS - native-first microframework for building declarative Web Components (ensojs.dev)
178. TypeScript 与 Haskell:联合类型与单例(2024) TypeScript and Haskell: Unions & Singletons (2024) (garciat.com)
179. Code.org 优质的初学者编程课程在人工智能热潮中被忽视了 Code.org's Excellent Beginner Programming Courses Gets Lost in the AI Hype (studio.code.org)
184. (VCF Midwest 2026) 为复古电脑打造一个“鲜活的90年代互联网” (VCF Midwest 2026) Building a Living 90s Internet for Vintage Computers (www.youtube.com)
188. 指纹黑名单的局限性:一种可复现的 Java 证书绕过方法 The Limits of Fingerprint Blocklists: A Reproducible Java Certificate Bypass (www.sonatype.com)
189. 仍在 Windows 11 上运行的最古老的 GUI 应用程序 Oldest GUI application that still runs on Windows 11 (blog.enlyth.com)
190. 一种更快的带符号 64 位常数向下除法计算方法 A faster way to compute signed 64-bit floor division by constants (www.benjoffe.com)
194. 网页爬虫曝光——追踪来自Contabo GmbH的请求 Web Page Crawler Revealed - tracking down requests from Contabo GmbH (bruceediger.com)
199. Shadow:虚假文件夹、明显的溢出以及ROP链 Shadow: Dummy folders, an obvious overflow, and a ROP chain (chirp.tene7.com)
201. 从冲动购买到口袋录音室:M-Vave FM-1 From impulse purchase to pocket studio: The M-Vave FM-1 (arstechnica.com)
210. OpenLDK:将 Java 世界引入 Common Lisp OpenLDK: Bringing the Java World into Common Lisp (atgreen.github.io)
215. 关于编译器警告设计的两点思考(2020) Two musings on the design of compiler warnings (2020) (quuxplusone.github.io)
219. glibc 更新意外导致 Chromium 音频功能失效(2021) When a glibc update accidentally breaks Chromium's audio (2021) (refi64.dev)
225. 关于DeepSeek将其推理引擎DeepInfer开源的思考 Reflections on DeepSeek Open-Sourcing Its Inference Engine, DeepInfer (wukong123.substack.com)
226. Slurptop:一款由电动工具电池供电的自制便携式电脑 The Slurptop: A home-built luggable that runs on power tool batteries (slurpburgers.com)
231. Nim 与 Rust:编程语言的关键在于“一致性”,而非“性能” Nim vs Rust: Language is a Matter of 'Coherence', Not 'Performance' (wintrover.github.io)
232. 适用于 Apple 网络服务器的 macOS 扩展包 v1.0 MacOS Extensions pack for the Apple Network Server v1.0 (oldvcr.blogspot.com)
236. C26的投票已经结束。遗憾的是,该提案未获通过/ Balloting has completed for C26. Unfortunately it was Disapproved/ (www.linkedin.com)
237. “多语言者的困境”:用十二种语言对十二份规范进行符合性测试 The Polyglot's Dilemma: Conformance Testing a Dozen Specs in as Many Languages (emptysqua.re)
239. enzyme:针对知识库的“本地优先”编译步骤。与前沿模型相比,成本降低350倍,速度提升1000倍 enzyme: Local-first compile step for knowledge bases. Save 350x cost, 1000x speed vs. frontier models (github.com)
244. 本周发现的“node2shell” Brotli 漏洞(CVE-2026-111497)可在 Python 以及其他使用 Brotli 的应用程序中被利用 This week's "node2shell" Brotli vulnerability (CVE-2026-111497) is exploitable in Python, other consumers of Brotli (www.aikido.dev)
251. 印度政府网站仍在提供已被撤销的eMudhra证书 Indian government sites are serving revoked eMudhra certificates (captnemo.in)
259. Next-Concept 建模:快速、并行的“由粗到细”文本生成 Next-Concept Modeling: Fast, Parallel Coarse-to-Fine Text Generation (arxiv.org)
261. 没有源代码?没问题!如果你需要移植一个程序,但手头只有二进制文件,该怎么办?(2003) No Source Code? No Problem! What if you have to port a program, but all you have is a binary? (2003) (queue.acm.org)
262. 分析 Org-HTML 形式语法并对其进行优化:orgwebalchemy Profiling Org-HTML formal grammar and optimizing it: orgwebalchemy (jointhefreeworld.org)
265. 网络安全专家表示,由人工智能发现的漏洞可能很快会引发新一轮的混乱 AI-discovered bugs may soon trigger fresh disruptions, cyber experts say (www.reuters.com)
266. Emacs 终于按照我的喜好进行了折叠:kirigami、tree-sitter、hide-show、Org、XML Emacs finally folds to my liking: kirigami, tree-sitter, hide-show, Org, XML (jointhefreeworld.org)
269. 软件运行缓慢是因为设计不佳,而不是因为编程语言本身运行缓慢 Software is slow because of bad design, not slow languages (www.seangoedecke.com)
272. 揭穿“比Rust更快”的谎言:Tov中的恶意基准测试 Debunking "Faster than Rust": Malicious Benchmarks in Tov (blog.fyralabs.com)
277. 利用跑长受限戈莱码实现可靠的无线电通信 Reliable Radio Communications using run-length limited Golaycodes (github.com)
279. 一种拙劣且一团糟的方法,用于从 C 语言外部以可移植的方式访问 errno a hacky fucked up way to portably access errno from outside of c (sebsite.pw)
281. 自vibecoding标签被移除以来,您对投稿质量有何看法? What is you opinion on submission quality since the vibecoding tag was removed? (lobste.rs)
286. 标头折叠面板:针对 HTTP/3 服务器的 QPACK 放大攻击 Header Accordions: QPACK amplification attacks against HTTP/3 servers (foxio.io)
296. 两家威尔士机构因网络攻击导致儿童信息泄露而受到谴责 Two Welsh organisations reprimanded after cyber-attack exposed children’s information (ico.org.uk)
297. 将并发分离逻辑扩展到硬件层,以在 RISC-V 平台上使用 AI 代理验证 xv6 操作系统内核 Extending concurrent separation logic to the hardware level to verify the xv6 OS kernel on RISC-V with AI agents (arxiv.org)
298. Garmin 全面升级并开放 Connect 开发者 API 计划 Garmin Revamps and Opens Up Connect Developer API Program (www.dcrainmaker.com)