5. 1996年,一臺搭載奔騰處理器的現代國際象棋引擎能否擊敗卡斯帕羅夫? Could a modern chess engine on a Pentium have defeated Kasparov in 1996? (nicholas.carlini.com)
6. Ubuntu 26.04 Rust 中的 sudo 與標準 sudo 不兼容 The Ubuntu 26.04 Rust sudo is not compatible with standard sudo (utcc.utoronto.ca)
16. 通往不透明軟件的道路,正是由良好的(工程)初衷鋪就的 The road to opaque software is paved with good (engineering) intentions (tomasp.net)
18. 權重空間編程的火花:大型語言模型(LLMs)能夠原生讀寫神經網絡權重 Sparks of Weight-Space Programming: LLMs can natively read & write neural network weights (rikiyat.github.io)
27. 僅僅為了調整時間,我就給車載導航系統越獄了 Jailbreaking my car's navigation system just so I can change the time (blog.nns.ee)
31. 保障互聯網關鍵軟件的安全:我們本可以如何在Bash中植入後門 Securing Internet-Critical Software: How We Could Have Backdoored Bash (www.hacktron.ai)
32. Polyend 發佈了 Tracker 固件源代碼 Polyend releases the Tracker firmware source code (backstage.polyend.com)
34. SuperVote:一款社交推薦應用的15年回顧 SuperVote: 15 year retrospective on a social endorsement app (callejas.com)
40. 我總下意識地認為我們的服務器需要越來越多的內存 My reflex of assuming our servers need ever-growing amounts of RAM (utcc.utoronto.ca)
42. Tyrtulia,一個專為終端設計的、無界面且無需密碼的論壇 Tyrtulia, a headless forum with no passwords, made for the terminal (git.andros.dev)
47. C 安全性的問題:現代 C 是一種思維方式,而非標準——MC 博客 The Problem with C Safety: Modern C Is a Mindset, Not a Standard – MC BLOG (www.modernescpp.com)
51. 使用 braindead-local-intelligence 輕鬆體驗本地人工智能 An easy way to try local AI with braindead-local-intelligence (dataswamp.org)
52. OpenBSD 版 GEFS(“足夠好”文件系統)的開發工作正在推進 Work on GEFS (the Good Enough File System) for OpenBSD progresses (www.undeadly.org)
55. Let's Encrypt 推出 64 天有效期的證書:您的 ACME 客戶端究竟何時才會續期? Let's Encrypt Goes to 64-Day Certificates: When Does Your ACME Client Actually Renew? (devops-daily.com)
65. 不使用人工智能,耗時52分鐘。手動用C語言編寫所有Linux文件處理工具 No AI, 52 min. Build all Linux Files utils in C by Hand (www.youtube.com)
67. 現代硬件性能計數器實現中的非確定性與計數溢出 Non-Determinism and Overcount on Modern Hardware Performance Counter Implementations (web.eece.maine.edu)
73. 一種遊戲腳本語言,其在CPU上運行語音轉文本的速度比lama.cpp快5倍 A game scripting language that runs speech-to-text 5x faster than llama.cpp on CPU (dasllama.io)
77. 通過排列迭代空間來加速 GPU 複製,或優化恆等函數 Speeding up GPU copies by permuting iteration spaces, or, optimising the identity function (futhark-lang.org)
80. CVE-2026-116155:ImageMagick 因經過特殊構造的 XMP 配置文件導致的內存洩漏 CVE-2026-116155: ImageMagick Memory Leak via Crafted XMP Profile (www.agilehunt.com)
89. 《Tactical-Retreat》:一款基於QuakeC、可免費獲取的多平臺《反恐精英》v1.5移植版 Tactical-Retreat: a freely available, multi-platform QuakeC-based Counter-Strike v1.5 port (www.frag-net.com)
90. 嵌入式項目陷入困境的十大原因(2002) The top ten reasons embedded projects get into trouble (2002) (www.ganssle.com)
91. 一位客戶反映只能看到黑屏的工單 The support case of a customer who said that all they could see was a black screen (devblogs.microsoft.com)
97. Linux 內核中一個 CVSS 評分為 9.8 的 TCP 漏洞影響 Ubuntu、Red Hat 及其他發行版 Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions (thehackernews.com)
101. 使用 Rust 和 Durable Objects 為代理構建細粒度版本控制 Building fine-grained version control for agents with Rust and Durable Objects (delta.dev)
105. 將 NixOS 的內存佔用和資源需求縮減到最低限度 Shrinking NixOS Ram footprint and resource requirements to the bare minimum (lowendspirit.com)
107. 關於 AO3 服務中斷的最新情況,2026 年 10 月 30 日 轉型作品組織 Update on AO3 Downtime, October 30, 2026 Organization for Transformative Works (www.transformativeworks.org)
108. Anthropic公司遭黑客攻擊,導致遠程訪問木馬被植入全球各地Claude開發者的筆記本電腦中 Anthropic hacked to deliver remote access trojan to Claude developer laptops worldwide (doublepulsar.com)
111. VS版Claude代碼中的後門,Cursor官方擴展 Backdoors in Claude Code for VS, Cursor official extensions (cyberplace.social)
112. VictoriaLogs 與 Loki、Elasticsearch、OpenSearch、SigNoz 和 ClickStack 在結構化日誌採集方面的對比 VictoriaLogs vs Loki, Elasticsearch, OpenSearch, SigNoz and ClickStack on structured log ingestion (victoriametrics.com)
113. arm64e 指針認證:PAC 密鑰、PACIASP、A12 arm64e pointer authentication: PAC keys, PACIASP, A12 (sigreturn.com)
116. Pidgin 3.0 Alpha 4 2.98.0 已發佈 Pidgin 3.0 Alpha 4 2.98.0 has been released (discourse.imfreedom.org)
117. gh-inbox:通過命令行批量清理 GitHub 通知 gh-inbox: clean up GitHub notifications in bulk from the command line (github.com)
119. 界面設計應以功能性為重,而非以熟悉度為重 Design the interface for functionality not familiarity (lapcatsoftware.com)
123. 網絡安全即將成為科技領域最大的問題 Cybersecurity Is About to Be the Biggest Problem in Tech (projectautonomy.substack.com)
124. noalloc:用於在 Go 語言中強制實現零堆分配的工具和庫 noalloc: Tooling and libraries to enforce zero heap allocations in Golang (github.com)
125. “開放固件”會成為電子音樂設備領域的下一個大趨勢嗎? Will Open Firmware Become the Next Big Trend in Electronic Music Gear? (www.synthtopia.com)
132. Azure 的最薄弱環節——五起完整的跨租戶安全事件 Azure’s Weakest Link - Five Full Cross-Tenant Compromises (www.binarysecurity.no)
135. “你根本不理解自己的代碼”:從“十種語言中的十種排序”以及各種 JavaScript 引擎中,我們可以窺見當下我們所經歷的抽象化趨勢 "You Already Don't Understand Your Code": What "ten sorts in ten languages" and various JS engines say about the abstraction we're living through now (george.mand.is)
137. NetBSD 新增了一款名為 atto 的、適合初學者的文本編輯器 NetBSD adds a new beginner-friendly text editor called atto (mastodon.sdf.org)
139. Qwenputer:Qwen3.5內部一款功能完備、確定性的RISC-V處理器 Qwenputer: a fully functioning, deterministic RISC-V CPU inside Qwen3.5 (divagr.com)
141. 2026 年的終端配置:Ghostty、tmux 和 Neovim My Terminal Setup in 2026: Ghostty, tmux, and Neovim (nick-liu.com)
142. 一條格式錯誤的 WAP 推送短信會導致 Android 系統上的 com.android.phone 崩潰,並中斷正在進行的通話(包括緊急呼叫) A single malformed WAP Push SMS crashes com.android.phone on Android, dropping active calls (including emergency calls) (smsofdeath.com)
155. GitLab 安全事件:有人試圖利用 CVE-2026-97229 漏洞 Alpine Linux GitLab security incident: attempted exploitation of CVE-2026-97229 Alpine Linux (alpinelinux.org)
158. OpenBSD Jumpstart 8.0:新用戶快速入門指南 OpenBSD Jumpstart 8.0: Quick Start Guide for New Users (openbsdjumpstart.org)
161. GOTO 被認為非常糟糕(用於 C 語言中的錯誤處理) GOTO Considered Totally Sick (for error handling in C) (thestateofinahaze.net)
165. 僅利用邏輯錯誤構建 Microsoft Edge 全鏈 Forging a Microsoft Edge Full Chain with Logic Bugs Only (blog.orange.tw)
166. 蘋果的 Git 仍然信任那些遭到洩露的 eMudhra 證書 Apple's git still trusts the compromised eMudhra certificates (emudhra.we-have-a-problem.com)
171. Peel:一款適用於 macOS 的免費開源卸載工具和清理工具 Peel: A free, open source uninstaller and cleaner for macOS (peel.tuguidragos.com)
173. UEFI 固件中的代碼執行漏洞影響了地球上絕大多數服務器 Code-execution flaw in UEFI firmware affects most servers on planet Earth (arstechnica.com)
179. 提醒:Lobsters NYC 聚會將於明天 5:30 在 Walker's 舉行 Reminder: Lobsters NYC Meetup Tomorrow 5:30 at Walker's (lobste.rs)
183. 修復 KIO 向 USB 閃存盤和網絡文件系統複製文件的問題 Fixing KIO copy to USB stick and network filesystems (blogs.kde.org)
185. 《與伯費德共度一晚:關於一塊餅乾如何被引誘、忍受並研究的故事》(1992) An Evening with Berferd: In Which a Cracker is Lured, Endured, and Studied (1992) (www.cheswick.com)
186. 模糊測試工具與人工智能:Fuzzilli 與 BigSleep 在 JavaScript 引擎上的對比 Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines (projectzero.google)
189. 現在,Python 和 TypeScript 中的 Protobuf 其實已經相當不錯了 Protobuf in Python and TypeScript is actually good now (buf.build)
197. EnsoJS——一款以原生優先為理念的微框架,用於構建聲明式 Web Components EnsoJS - native-first microframework for building declarative Web Components (ensojs.dev)
201. TypeScript 與 Haskell:聯合類型與單例(2024) TypeScript and Haskell: Unions & Singletons (2024) (garciat.com)
202. Code.org 優質的初學者編程課程在人工智能熱潮中被忽視了 Code.org's Excellent Beginner Programming Courses Gets Lost in the AI Hype (studio.code.org)
207. (VCF Midwest 2026) 為復古電腦打造一個“鮮活的90年代互聯網” (VCF Midwest 2026) Building a Living 90s Internet for Vintage Computers (www.youtube.com)
211. 指紋黑名單的侷限性:一種可復現的 Java 證書繞過方法 The Limits of Fingerprint Blocklists: A Reproducible Java Certificate Bypass (www.sonatype.com)
212. 仍在 Windows 11 上運行的最古老的 GUI 應用程序 Oldest GUI application that still runs on Windows 11 (blog.enlyth.com)
213. 一種更快的帶符號 64 位常數向下除法計算方法 A faster way to compute signed 64-bit floor division by constants (www.benjoffe.com)
217. 網頁爬蟲曝光——追蹤來自Contabo GmbH的請求 Web Page Crawler Revealed - tracking down requests from Contabo GmbH (bruceediger.com)
222. Shadow:虛假文件夾、明顯的溢出以及ROP鏈 Shadow: Dummy folders, an obvious overflow, and a ROP chain (chirp.tene7.com)
224. 從衝動購買到口袋錄音室:M-Vave FM-1 From impulse purchase to pocket studio: The M-Vave FM-1 (arstechnica.com)
233. OpenLDK:將 Java 世界引入 Common Lisp OpenLDK: Bringing the Java World into Common Lisp (atgreen.github.io)
238. 關於編譯器警告設計的兩點思考(2020) Two musings on the design of compiler warnings (2020) (quuxplusone.github.io)
242. glibc 更新意外導致 Chromium 音頻功能失效(2021) When a glibc update accidentally breaks Chromium's audio (2021) (refi64.dev)
248. 關於DeepSeek將其推理引擎DeepInfer開源的思考 Reflections on DeepSeek Open-Sourcing Its Inference Engine, DeepInfer (wukong123.substack.com)
249. Slurptop:一款由電動工具電池供電的自制便攜式電腦 The Slurptop: A home-built luggable that runs on power tool batteries (slurpburgers.com)
254. Nim 與 Rust:編程語言的關鍵在於“一致性”,而非“性能” Nim vs Rust: Language is a Matter of 'Coherence', Not 'Performance' (wintrover.github.io)
255. 適用於 Apple 網絡服務器的 macOS 擴展包 v1.0 MacOS Extensions pack for the Apple Network Server v1.0 (oldvcr.blogspot.com)
259. C26的投票已經結束。遺憾的是,該提案未獲通過/ Balloting has completed for C26. Unfortunately it was Disapproved/ (www.linkedin.com)
260. “多語言者的困境”:用十二種語言對十二份規範進行符合性測試 The Polyglot's Dilemma: Conformance Testing a Dozen Specs in as Many Languages (emptysqua.re)
262. enzyme:針對知識庫的“本地優先”編譯步驟。與前沿模型相比,成本降低350倍,速度提升1000倍 enzyme: Local-first compile step for knowledge bases. Save 350x cost, 1000x speed vs. frontier models (github.com)
267. 本週發現的“node2shell” Brotli 漏洞(CVE-2026-111497)可在 Python 以及其他使用 Brotli 的應用程序中被利用 This week's "node2shell" Brotli vulnerability (CVE-2026-111497) is exploitable in Python, other consumers of Brotli (www.aikido.dev)
274. 印度政府網站仍在提供已被撤銷的eMudhra證書 Indian government sites are serving revoked eMudhra certificates (captnemo.in)
282. Next-Concept 建模:快速、並行的“由粗到細”文本生成 Next-Concept Modeling: Fast, Parallel Coarse-to-Fine Text Generation (arxiv.org)
284. 沒有源代碼?沒問題!如果你需要移植一個程序,但手頭只有二進制文件,該怎麼辦?(2003) No Source Code? No Problem! What if you have to port a program, but all you have is a binary? (2003) (queue.acm.org)
285. 分析 Org-HTML 形式語法並對其進行優化:orgwebalchemy Profiling Org-HTML formal grammar and optimizing it: orgwebalchemy (jointhefreeworld.org)
288. 網絡安全專家表示,由人工智能發現的漏洞可能很快會引發新一輪的混亂 AI-discovered bugs may soon trigger fresh disruptions, cyber experts say (www.reuters.com)
289. Emacs 終於按照我的喜好進行了摺疊:kirigami、tree-sitter、hide-show、Org、XML Emacs finally folds to my liking: kirigami, tree-sitter, hide-show, Org, XML (jointhefreeworld.org)
292. 軟件運行緩慢是因為設計不佳,而不是因為編程語言本身運行緩慢 Software is slow because of bad design, not slow languages (www.seangoedecke.com)
295. 揭穿“比Rust更快”的謊言:Tov中的惡意基準測試 Debunking "Faster than Rust": Malicious Benchmarks in Tov (blog.fyralabs.com)
300. 利用跑長受限戈萊碼實現可靠的無線電通信 Reliable Radio Communications using run-length limited Golaycodes (github.com)