1. CVE-2026-1529 - Keycloak:通過不當邀請令牌驗證實現未授權組織註冊 CVE-2026-1529 - keycloak: unauthorized organization registration via improper invitation token validation (cvefeed.io)
4. 模塊化單體與微服務:模塊化才是真正關鍵(2023) Modular Monolith and Microservices: Modularity is what truly matters (2023) (binaryigor.com)
7. 實驗區協議歷經兩年多開發、620餘條評論後併入Wayland - Phoronix Experimental Zones Protocol Merged To Wayland After 2 Years, 620 Comments - Phoronix (www.phoronix.com)
14. 解析CVE-2026-25049:TypeScript類型如何導致n8n安全漏洞 Breaking Down CVE-2026-25049: How TypeScript Types Failed n8n''s Security (hetmehta.com)
15. 通過Proton Bridge為ProtonMail自定義域名提供的簡易郵件API simple email API for protonmail custom domains via proton bridge (github.com)
16. 希望並非安全策略:為何默認安全優於強化防護 Hope Is Not a Security Strategy: Why Secure-by-Default Beats Hardening (tuananh.net)
17. 谷歌Chrome 145版本發佈,新增對JPEG-XL圖像的支持 Google Chrome 145 Released With JPEG-XL Image Support (www.phoronix.com)
19. Hylo:一種專注於值語義與泛型編程的系統編程語言 Hylo: A Systems Programming Language All in on Value Semantics and Generic Programming (hylo-lang.org)
20. 如果連規格說明都寫不出來,說明驅動開發就行不通。 Spec-driven development doesn''t work if you''re too confused to write the spec (publish.obsidian.md)
26. 我七歲開始編程。如今五十歲了,我所熱愛的事物已然改變。 I Started Programming When I Was 7. I''m 50 Now, and the Thing I Loved Has Changed (www.jamesdrandall.com)
33. SSH代理轉發與tmux的正確使用(2023) SSH agent forwarding and tmux done right (2023) (blogsystem5.substack.com)
34. FreeBSD 家庭 NAS 第十篇:使用 VictoriaMetrics 和 Grafana 進行監控 FreeBSD Home NAS, part 10: monitoring with VictoriaMetrics and Grafana (rtfm.co.ua)
35. browser.html - 一款基於網絡技術構建的網頁瀏覽器,採用Servo作為網頁渲染引擎 browser.html - a web browser built with web technologies using Servo as web rendering engine (tangled.org)
37. Sarvam Arya:面向生產級代理的編排堆棧 Sarvam Arya: Orchestration stack for production-grade agents (www.sarvam.ai)
53. 急剎車事件作為道路路段事故風險的指標 Hard-braking events as indicators of road segment crash risk (research.google)
54. 這與API無關——Vulkan中快速、靈活且簡單的渲染 It''s Not About the API - Fast, Flexible, and Simple Rendering in Vulkan (gamesbymason.com)
58. 試用Thunderbird日程安排功能,靜候邀請函 Trying out Thunderbird Appointment While I Patiently Wait For An Invite (blog.matthewbrunelle.com)
65. 情境化Copyleft的必要性:開源訓練數據與生成式人工智能的許可問題 The Case for Contextual Copyleft: Licensing Open Source Training Data and Generative AI (arxiv.org)
75. SecretSpec 0.7:聲明式密鑰生成 - devenv SecretSpec 0.7: Declarative Secret Generation - devenv (devenv.sh)
79. 原始的vi是時代的產物(而它的時代已經過去) The original vi is a product of its time (and its time has passed) (utcc.utoronto.ca)
82. 關係編程在miniKanren中的應用:技術、應用與實現(2009) Relational Programming in miniKanren: Techniques, Applications, and Implementations (2009) (scholarworks.iu.edu)
97. 運行自己的自治系統:在FreeBSD上部署BGP,支持FRR、GRE隧道及策略路由 Running Your Own AS: BGP on FreeBSD with FRR, GRE Tunnels, and Policy Routing (blog.hofstede.it)
98. 一臺機器若設計得當,其潛力可謂無限(2022) One machine can go pretty far if you build things properly (2022) (rachelbythebay.com)
100. RustCast - 用Rust語言編寫的開源Raycast風格啟動器 RustCast -open-source Raycast-style launcher written in Rust (github.com)
101. 情境複雜性、大型語言模型與大規模架構 Circumstantial Complexity, LLMs and Large Scale Architecture (www.datagubbe.se)
103. 老調重彈:KDE Oxygen 和 Air 主題何去何從? Beating an old, but not dead horse: what to do with the KDE Oxygen and Air themes? (filipfila.wordpress.com)
105. NPM 和 NodeJS 應當進一步優化 ES 模塊的使用體驗(2024) NPM and NodeJS should do more to make ES Modules easy to use (2024) (borischerny.com)
108. Scriptovision超級微型腳本視頻字幕機幾乎就是一臺家用電腦 The Scriptovision Super Micro Script video titler is almost a home computer (oldvcr.blogspot.com)
115. 為何每個封裝外部工具的R包都需要一個sitrep()函數 Why Every R Package Wrapping External Tools Needs a sitrep() Function (drmowinckels.io)
116. 擔保:基於明確擔保參與的貢獻者信任管理系統 vouch: a contributor trust management system based on explicit vouches to participate (github.com)
119. 8VIM:一款受8pen和Vim啟發的虛擬安卓鍵盤 8VIM: a virtual Android keyboard drawing inspiration from 8pen and Vim (github.com)
121. DavMail POP/IMAP/SMTP/Caldav/Carddav/LDAP 交換網關 DavMail POP/IMAP/SMTP/Caldav/Carddav/LDAP Exchange Gateway (davmail.sourceforge.net)
124. 為雅達利2600平臺逆向工程《奪寶奇兵》 Reverse-engineering Raiders of the Lost Ark for the Atari 2600 (github.com)
126. (Bsky帖子) "這讓維護者變成了不知不覺的氛圍程序員" (Bsky thread) "This turns the maintainer into an unwitting vibe coder" (bsky.app)
129. Impl Rust - 基於 ANTLR 的 Rust 語言實現 Avro IDL 工具 Impl Rust - Avro IDL tool in Rust via ANTLR (youtu.be)
135. 法律論證異常:從法庭到Clojure - Sen LegalArgumentException: From Courtrooms to Clojure - Sen (www.youtube.com)
139. emacs-tramp-rpc:採用JSON-RPC替代shell解析的高性能TRAMP後端 emacs-tramp-rpc: High-performance TRAMP backend using JSON-RPC instead of shell parsing (github.com)
140. jasonisnthappy:基於Rust實現的可嵌入式文檔數據庫,提供ACID特性保證 jasonisnthappy: embeddable document database with acid guarantees in rust (github.com)
142. 太空蛻變——面向人工智能代理的大型多人在線遊戲 SpaceMolt - Massively Multiplayer Gaming for AI Agents (www.spacemolt.com)
144. 聲明式、可復現的Emacs:直用.el與use-package Declarative, Reproducible Emacs with straight.el and use-package (jakebox.github.io)
147. OpenRun:基於單主機或Kubernetes的聲明式Web應用部署 OpenRun: Declarative web app deployments on single-host or Kubernetes (github.com)
149. FOSDEM 2026 - 讓 Web Components 發揮作用:框架視角 FOSDEM 2026 - Making Web Components work: a framework''s perspective (fosdem.org)
151. 不同語言的"模板稅"負擔:4億行代碼分析 How much "boilerplate tax" different languages have: a 400M LOC analysis (boyter.org)
152. 3mdeb盛讚AMD openSIL及開源固件在保密計算領域的貢獻 - Phoronix 3mdeb Talks Up AMD openSIL & Open-Source Firmware Efforts For Confidential Compute - Phoronix (www.phoronix.com)
154. 塞爾塔尼:一個基於《神秘島》系列遊戲的在線共享文本類開源粉絲項目 Seltani: an online, shared, text-based, open-source fan project based on the Myst series of games (eblong.com)
155. canvas_ity:一個微型、類似單渲染管線的C 2D光柵化器 canvas_ity: A tiny, single-header -like 2D rasterizer for C (github.com)
160. 使用Python 3.14的zstd模塊進行文本分類 Text classification with Python 3.14''s zstd module (maxhalford.github.io)
161. Blinc:一個聲明式、響應式UI系統,具備一流狀態機、彈簧物理動畫和GPU加速渲染功能 Blinc: A declarative, reactive UI system with first-class state machines, spring physics animations, and GPU-accelerated rendering (github.com)
164. nix-run:無需nix3或flakes即可運行Nix推導 nix-run: run nix derivations without nix3 or flakes (tangled.org)
165. 不,真的,Bash遠遠不夠:為何大規模CI需要編排器 No, Really, Bash Is Not Enough: Why Large-Scale CI Needs an Orchestrator (iankduncan.com)
166. voxtral.c:Mistral Voxtral實時4B語音轉文本模型的純C語言推導 voxtral.c: Pure C inference of Mistral Voxtral Realtime 4B speech to text model (github.com)
167. 蒙蒂:一款採用Rust語言編寫的簡約安全Python解釋器,專為人工智能應用而設計 monty: A minimal, secure Python interpreter written in Rust for use by AI (github.com)
168. elfconv:Linux/ELF 到 WebAssembly 的 AOT 二進制翻譯器 elfconv: AOT binary translator of Linux/ELF - WebAssembly (github.com)
169. Olimex HoT 旨在成為輕量級、更易於使用的 Home Assistant 替代方案。 Olimex HoT aims to be lightweight, easier-to-use alternative to Home Assistant (www.cnx-software.com)
177. 組建一支由並行克勞德組成的團隊來構建C編譯器 Building a C compiler with a team of parallel Claudes (www.anthropic.com)
185. GitHub Actions正在慢慢殺死你的工程團隊 GitHub Actions Is Slowly Killing Your Engineering Team (iankduncan.com)
193. 所以啊,我用氛圍編碼做了個日誌著色器——感覺超棒 So yeah, I vibe-coded a log colorizer—and I feel good about it (arstechnica.com)
196. 有人用奧拉馬、樹莓派和3D打印機制作了BMO的實體模型。 Someone made a real life versoin of BMO with Ollama, a raspberry PI, and a 3d printer (www.youtube.com)
207. 通過 go-to-wheel 在 PyPI 上分發 Go 二進制文件(如 sqlite-scanner) Distributing Go binaries like sqlite-scanner through PyPI using go-to-wheel (simonwillison.net)
208. Sukr:一款採用Rust語言實現的極簡靜態網站編譯器,輸出完全不含JavaScript代碼 Sukr: A minimal static site compiler in Rust with zero-JS output (sukr.io)
212. 個人人工智能已然到來(而你可能尚未準備好) Personal AI is Already Here (And You’re Probably Not Ready) (www.robert-glaser.de)
217. LFS/BLFS 將不再開發 System V 版本 LFS/BLFS will no longer be developing the System V versions (lists.linuxfromscratch.org)
219. 我更傾向於通過標準輸入在程序之間傳遞秘密。 I prefer to pass secrets between programs through standard input (utcc.utoronto.ca)
220. 微軟六次終結小工具,為何它們總能捲土重來 Microsoft Has Killed Widgets Six Times. Here''s Why They Keep Coming Back (xakpc.dev)
222. rust-dlopen:一個完全用Rust實現的動態鏈接器 rust-dlopen: A dynamic linker fully implemented in Rust (github.com)
231. 馴服平坦化AST:零分配時代的人體工學實踐 Taming the Flat AST: Ergonomics in the Age of Zero Allocations (modern-c.blogspot.com)
240. FOSDEM 2026 - Amber Lang - 輕鬆用轉譯器編寫 Bash FOSDEM 2026 - Amber Lang - Easily write Bash with a transpiler (fosdem.org)
241. 在JavaScriptCore中實現Temporal提案 Implementing the Temporal proposal in JavaScriptCore (blogs.igalia.com)
242. FLOPPINUX - 單軟盤嵌入式Linux系統 - 2025版 FLOPPINUX - An Embedded Linux on a Single Floppy - 2025 Edition (krzysztofjankowski.com)
244. 小米:一項實用的內存安全與線程安全實驗 Millets: a practical memory-safety and thread-safety experiment (eagledot.xyz)
246. 黑客入侵Moltbook:人工智能社交網絡洩露150萬API密鑰 Hacking Moltbook: AI Social Network Reveals 1.5M API Keys (www.wiz.io)
247. WhatsApp加密技術、一場訴訟與諸多爭議 WhatsApp Encryption, a Lawsuit, and a Lot of Noise (blog.cryptographyengineering.com)
254. 我如何創建QZ——以及梯隊公司如何正在瓦解它(2025年) How I Built QZ—and How Echelon Is Now Breaking It (2025) (robertoviola.cloud)
260. 樹之遊戲樞紐的網頁界面現已上線。我們需要更多訂閱用戶。 Game of Trees Hub''s web interface is live. And we need more subscribers (opencollective.com)
262. Rust 1.93 在格式化函數及其相關功能中的性能提升 Rust 1.93 performance improvements in format! and friends (hachyderm.io)
263. Rust Coreutils持續推進100% GNU兼容性,證明質疑者錯誤 Rust Coreutils Continues Working Toward 100% GNU Compatibility, Proving Trolls Wrong (www.phoronix.com)
264. 惡意柯基:看似可愛的AI擴展程序洩露150萬開發者的代碼 MaliciousCorgi: The Cute-Looking AI Extensions Leaking Code from 1.5 Million Developers (www.koi.ai)
269. 技術:近乎完美的USB線纜測試器確實存在 Technology: The (nearly) perfect USB cable tester does exist (blog.literarily-starved.com)
271. 蘋果公司MacBook Pro的DFU端口文檔存在錯誤 Apple’s MacBook Pro DFU port documentation is wrong (lapcatsoftware.com)
287. Yak Power-Shears:大型語言模型在Emacs方面表現相當出色 Yak Power-Shears: LLMs are pretty good at Emacs (www.emoses.org)
288. 超越平滑化分析:按書本分析單純形法 Beyond Smoothed Analysis: Analyzing the Simplex Method by the Book (arxiv.org)
290. 我用OxCaml實現的(非常)快速零分配Web服務器 My (very) fast zero-allocation webserver using OxCaml (anil.recoil.org)
292. archive.today 正在對我博客發起分佈式拒絕服務攻擊 archive.today is directing a DDOS attack against my blog (gyrovague.com)
299. API工具危機:為何開發者紛紛棄用Postman及其克隆工具? The API Tooling Crisis: Why developers are abandoning Postman and its clones? (efpasia.github.io)
300. 使用 Azure Artifact 服務為 Windows 應用程序進行代碼簽名 Code signing Windows apps with Azure Artifact service (devclass.com)