1. Pip 26.2:–only-deps 解決了長達 16 年的應用部署“權宜之計” Pip 26.2: –only-deps solves 16 years of app deployment hacks (jamesoclaire.com)
7. 我檢查了我的“帶回家完成”面試項目。這簡直是一場大工程。 I Inspected My Take-Home Interview Project. It Was a Whole Operation (citizendot.github.io)
8. 保護我們的自由及開源軟件(FLOSS)公共資源免受大型語言模型(LLMs)的侵害 Protecting our FLOSS commons from LLMs (blog.codeberg.org)
9. Frag Gap(CVE-2026-53362、CVE-2026-53366) Frag Gap (CVE-2026-53362, CVE-2026-53366) (blog.qwerty.or.kr)
12. RefluXFS:Linux 內核中 XFS 文件系統下的本地權限提升至 root 漏洞(CVE-2026-64600) RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) (blog.qualys.com)
13. Dark Elevator:Windows 安裝服務本地權限提升漏洞(CVE-2026-50343) Dark Elevator: Windows Install Service Local Privilege Escalation (CVE-2026-50343) (blog.calif.io)
14. 隆重推出 Topcoat:一個用於使用 Rust 構建全棧響應式 Web 應用的框架 Announcing Topcoat: a framework for building full-stack reactive web apps with Rust (tokio.rs)
18. Oric Atmos 版《蛇廟》,僅用 10 行 BASIC 代碼編寫(2022) Snake Temple for Oric Atmos, in 10 lines of BASIC (2022) (bunsen.itch.io)
23. Notion 兩年來的向量搜索實踐:規模擴大 10 倍,成本降至十分之一 Two years of vector search at Notion: 10x scale, 1/10th cost (www.notion.com)
25. XDG RemoteDesktop 和 InputCapture 門戶中的 libei 集成 libei integrations in the XDG RemoteDesktop and InputCapture portals (who-t.blogspot.com)
36. OpenAI模型突破安全沙箱,入侵Hugging Face獲取數據以通過測試 OpenAI model breaks out of security sandbox, hacks Hugging Face for data to pass test (openai.com)
38. 您的 Agentic 工作流的緩存保持成本高出 8 倍 Your Agentic Workflow''s Cache Keepalive Costs 8x Too Much (blog.mempko.com)
41. 使用 Nagios 監控小型企業基礎設施 Using Nagios for small business infrastructure monitoring (tech.chrishardie.com)
43. “不使用人工智能”的聲明遠不止是簡單的聲明 “No AI” Statements Are Much More Than Mere Statements (journal.james-zhan.com)
50. lazy-tmux:延遲恢復 tmux 會話,並保留滾動歷史 lazy-tmux: restore tmux sessions lazily, with scrollback (lazy-tmux.xyz)
56. GitHub 突然拒絕了我的 SSH 密鑰(解決方法竟然是一個 .pub 文件?!) GitHub suddenly rejected my SSH key (the fix was a .pub file?!) (thorsell.io)
57. 告別 IntelliJ:Emacs Eglot 上的 Scala 和 Kotlin LSP Escape IntelliJ: Scala and Kotlin LSPs on Emacs Eglot (jointhefreeworld.org)
58. GGG——使用 Guile Scheme 和 SXML 生成聲明式 SVG 徽章 GGG – Declarative SVG badge generation using Guile Scheme and SXML (codeberg.org)
59. 面向企業的 KDE 需要強大的個人信息管理(PIM)基礎設施 KDE for Enterprise Needs a Strong PIM Infrastructure (ervin.ipsquad.net)
61. 每天30到70個PR:我們是如何避免搞垮系統的 30 to 70 PRs a Day: How We Managed to Not Wreck Our Systems (www.honeycomb.io)
65. 使用 SSH 跳板服務器,但僅在我“踏上草地”時才使用 Using a SSH bastion, but only when I''m touching grass (evertpot.com)
72. SleeperGem:RubyGems供應鏈攻擊瞄準了處於休眠狀態的維護者賬戶 SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts (www.aikido.dev)
75. 一場 Linux 內核 0-day 漏洞探索之旅——從受限的 UAF 到物理內存讀寫 A Linux Kernel 0-day Journey - From a limited UAF to Physical Memory R/W (1day.dev)
77. 在 TLA 中將 MVCC 擴展為可序列化(2024) Extending MVCC to be serializable, in TLA (2024) (surfingcomplexity.blog)
81. 歐盟即將為了實現免籤旅行,將我們最敏感的數據出售給美國 The EU is about to sell our most sensitive data to the US for visa-free travel (edri.org)
82. 4家編碼代理供應商共存在7處沙箱逃逸漏洞 7 Sandbox Escape Vulnerabilities Across 4 Coding Agent Vendors (www.pillar.security)
83. Rust for Morello:即使在不安全的代碼中,也能始終如一地保障內存安全 Rust for Morello: Always-On Memory Safety, Even in Unsafe Code (drops.dagstuhl.de)
84. 元垃圾回收:利用 OCaml 的垃圾回收器對 Rust 進行垃圾回收 Meta Garbage Collection: Using OCaml''s GC to GC Rust (soteria-tools.com)
85. 利用基於大型語言模型(LLM)的驗證技術消除Linux網絡堆棧中的錯誤 Using LLM-based Verification to Eliminate Bugs in Linux''s Network Stack (www.basis.ai)
92. 趣味模糊測試——snac2中的未認證拒絕服務漏洞 Fuzzing for fun - unauthenticated denial of service in snac2 (nullenvk.pl)
95. 舊版本軟件的錯誤報告應由誰負責? Who’s responsible for bug reports on old software versions? (pointieststick.com)
108. Skred 現已成為一款支持 MIDI 的合成器和鼓機構建套件 Skred is now a MIDI aware synth and drum machine construction kit (lobste.rs)
111. 更多模擬器的精彩內容:一款可啟動 Windows 的英特爾安騰(IA-64)模擬器 More emulation goodness, an Intel Itanium (IA-64) emulator that boots Windows (raymii.org)
112. 數學家們至今仍不清楚乘法運算的最快方法 Mathematicians still don’t know the fastest way to multiply numbers (www.scientificamerican.com)
114. 硬核 IndieWeb:每天僅需 0.01 美元,即可 100% 獨立運營自己的網站 Hardcore IndieWeb: Run your own website 100% independently for only 0.01/day (www.neatnik.net)
120. Gleam 已將其源代碼鏡像到 tangled(一個基於 AT 協議的代碼託管平臺)上 Gleam has mirrored its source code on tangled (an AT-protocol based forge) (tangled.org)
125. wp2shell:WordPress 核心中的身份驗證前遠程代碼執行漏洞 wp2shell: Pre Authentication RCE in WordPress Core (wp2shell.com)
134. NextBSD 項目重啟:基於 FreeBSD 內核的蘋果開源用戶空間工具 NextBSD project revived: Apple''s FOSS user-space tools on the FreeBSD kernel (nextbsd.org)
135. 2026 年的 SSH 上的 PowerShell:Windows 上的 OpenSSH、密鑰認證和 PowerShell 7 遠程處理 PowerShell over SSH in 2026: OpenSSH on Windows, Key Auth, and PowerShell 7 Remoting (mattmichie.com)
147. topcoat:一個用於構建 Web 應用的“開箱即用”框架 topcoat: A batteries-included framework for building web apps (github.com)
149. Lobsters 對 matheusmoreira 關於 Lone Lisp 的採訪 Lobsters Interview with matheusmoreira about Lone Lisp (alexalejandre.com)
151. 認知對等性:可重複性作為差分隱私的評估指標 Epistemic Parity: Reproducibility as an Evaluation Metric for Differential Privacy (cacm.acm.org)
155. 在網絡安全領域,領先的開放重量級模型距離前沿還有多遠? How Far Behind the Frontier are Leading Open Weight Models on Cyber? (www.aisi.gov.uk)
160. 在 Haskell 中採用廣度優先方式展開樹(2025) Unfolding trees breadth-first in Haskell (2025) (blog.poisson.chat)
161. PACT:面向網絡的匿名憑證 – Mozilla Hacks PACT: Anonymous Credentials for the Web – Mozilla Hacks (hacks.mozilla.org)
163. 地球自轉記錄促使10月舉行投票,以避免出現負閏秒 Earth Rotation Records Spur October Vote to Avert Negative Leap Second (www.techtimes.com)
164. 在全球範圍內阻止《GUARD法案》和年齡驗證法律的實施 — 自由軟件基金會 — 攜手共進,推動自由軟件發展 Stop the GUARD Act and age verification laws worldwide — Free Software Foundation — Working together for free software (www.fsf.org)
165. 我們正在用Rust開發Postgres。這就像是數據庫界的LLVM。 We''re building Postgres in Rust. Using the LLVM of databases (turso.tech)
166. 在寬指針環境下不使用跳板函數時使用 GCC 的嵌套函數(二) Using GCC''s Nested Functions with Wide Pointers and no Trampolines II (uecker.codeberg.page)
176. 一種基於概率、表現達到冠軍級別的全新計算機拼字遊戲引擎(2021) A novel computer Scrabble engine based on probability that performs at championship level (2021) (upcommons.upc.edu)
183. “內存編譯器”的真正含義:從位單元到GDS分塊 What "Memory Compiler" Actually Means: From Bitcells to GDS Tiling (thecloudlet.github.io)
188. 將現代包管理引入 Meson 的原生封裝生態系統 Bring modern package management to Meson''s native wrap ecosystem (collider.ee)
189. 用於未傳播內核安全補丁的過濾引擎和數據庫 A Filtering engine and DB for unpropagated kernel security patches (patchless.natey.sh)
190. 在 ActivityPub 實現端到端加密(E2EE)之前,還有大量工作待完成 The Long Tail of Work Left Until ActivityPub Has E2EE (soatok.blog)
196. elfuse:在 macOS Apple Silicon 上運行 Arm64/x86-64 Linux ELF 二進制文件 elfuse: Run Arm64/x86-64 Linux ELF binaries on macOS Apple Silicon (github.com)
198. 隨著Epic和解協議被撤銷,第三方應用商店將於下週登陸Google Play Third-party app stores coming to Google Play next week as Epic settlement withdrawn (arstechnica.com)
204. 《發明ELIZA——首個聊天機器人如何塑造了人工智能的未來》 Inventing ELIZA - How the First Chatbot Shaped the Future of AI (mitpress.mit.edu)
206. 微軟證實Windows GDID設備標識符無法禁用,該情況已在FBI案件文件中有所記載 Microsoft Confirms Windows GDID Device Identifier That Cannot Be Disabled, Documented in FBI Case Filing (www.ghacks.net)
207. FreeBSD 16 從其基礎系統中移除了最後一部分 GPL 代碼 FreeBSD 16 Retires The Last Of Its GPL Code From Its Base System (www.phoronix.com)
212. 《Over the Edge 2.0》:微軟的設計策略仍在削弱瀏覽器選擇權 Over the Edge 2.0: Microsoft’s Design Tactics Still Undermine Browser Choice (research.mozilla.org)
213. 數據的順序:默認值、性能、確定性與分頁 The Order of Data: defaults, performance, determinism & paging (binaryigor.com)
214. @clickhouse/rowbinary:當你的庫同時也是一個解析器編譯器時 @clickhouse/rowbinary: when your library is also a parser compiler (clickhouse.com)
217. 當軟件缺乏尊重時,同理心和愉悅感便毫無意義 Empathy and delight mean nothing when the software is disrespectful (productpicnic.beehiiv.com)
225. Emacs Docs:Emacs 值得擁有的現代化文檔網站 Emacs Docs: The modern documentation website Emacs deserves (emacsdocs.org)
227. 一款可靠的啟動密鑰(Ventoy的替代方案),獻給巴士底日 A Trusty Boot Key (Ventoy Alternative), for Bastille Day (codeberg.org)
231. 在 Linux 上測量輸入延遲:X11 與 Wayland、VRR 以及 DXVK Measuring input latency on Linux: X11 vs Wayland, VRR, and DXVK (marco-nett.de)
233. whatcable:一款 macOS 菜單欄應用,能用通俗易懂的英語告訴你,插入 Mac 的每根 USB-C 數據線究竟能做什麼 whatcable: macOS menu bar app that tells you, in plain English, what each USB-C cable plugged into your Mac can actually do (github.com)
243. 速度提升6倍的二進制搜索:從編譯代碼到機械共情 6 faster binary search: from compiled code to mechanical sympathy (pythonspeed.com)
245. git-absorb:類似 git commit --fixup,但自動執行 git-absorb: git commit --fixup, but automatic (github.com)
251. fred:一款所有功能均採用 C 語言實現的文本編輯器——2026 年手工網絡博覽會 fred: A text editor that uses C for everything - Handmade Network Expo 2026 (www.youtube.com)
255. 添加第二個中間件導致我們的 TypeScript 類型出現問題 Adding a second middleware broke our typescript types (www.inngest.com)
257. 告別 ARP:僅支持 IPv6 的網絡上的 IPv4 服務 A Farewell to ARPs: IPv4 Service on IPv6-Only Networks (labs.ripe.net)
258. FreeBSoD:利用語言模型發現並利用內核漏洞(共2部分,第1部分) FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 1 of 2) (www.praetorian.com)
259. FreeBSoD:利用語言模型發現並利用內核漏洞(共2部分,第2部分) FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 2 of 2) (www.praetorian.com)
264. 請勿在靜態文本元素上使用 aria-label(2024) Don’t Use aria-label on Static Text Elements (2024) (benmyers.dev)
265. 在 NFS 出現之前,早期 SunOS 是如何實現無盤工作站的 How early SunOS did diskless workstations before NFS (utcc.utoronto.ca)
271. 斯托布·克魯夫特指數:一臺滾動計算機收集“垃圾” The Stob Cruft Index: a rolling computer gathers "cruft" (www.doc.ic.ac.uk)
273. 一款可通過 PRQL 查詢任意 HTML 表格的 WebExtension WebExtension to query any HTML table with PRQL (avlasov.cabal.run)
274. 介紹 Bobbin:一款專為 Tangled 設計的無磁盤、僅支持 API 的 AppView Introducing Bobbin: A diskless, API-only AppView for Tangled (blog.tangled.org)
275. WWDC 27 專題:使用 SwiftUI 構建 Mac 應用的最新進展 A WWDC 27 Update on Building a Mac-assed App with SwiftUI (pfandrade.me)
276. 《黑客寓言》——一部可以像手冊頁一樣閱讀的諷刺性賽博朋克中篇小說 Hacker Fables - A satirical cyberpunk novella you can read as a man page (hacker-fables.onrender.com)
280. 不同操作系統的瀏覽器進行數學運算的方式各不相同;反機器人系統通過分析二進制數據來識別 Browsers Do Math Differently on Every OS; Anti-Bot Systems Read the Bits (scrapfly.dev)
282. 知己知彼:對人工智能輔助軟件開發的批判性探討 Know thine enemy: A critical engagement with AI-assisted software development (medium.com)
283. InfiniteDiffusion:在開放世界地形生成中實現學習精度與程序化實用性的融合 InfiniteDiffusion: Bridging Learned Fidelity and Procedural Utility for Open-World Terrain Generation (xandergos.github.io)
284. 使用 Rust 的 arena 機制解決一個存在三年的問題 Closing a three-year-old issue using Rust arenas (giacomocavalieri.me)
285. “慢軟件”:支持高延遲系統開發的論據 Slow Software: The Case for High-latency Systems Development (www.sigops.org)
290. ghostel.el - 基於 libghostty 的終端模擬器 ghostel.el - Terminal emulator powered by libghostty (dakra.github.io)
291. 破解蘋果——利用SQL注入實現遠程代碼執行 — ProjectDiscovery 博客 Hacking Apple - SQL Injection to Remote Code Execution — ProjectDiscovery Blog (projectdiscovery.io)
293. Haskell 中的數據驅動編程(SICP 2.4.3) Data-directed programming in Haskell (SICP2.4.3) (entropicthoughts.com)
300. 反應:一個守護進程,用於掃描程序輸出中的重複模式,並採取相應行動 reaction: A daemon that scans program outputs for repeated patterns, and takes action (framagit.org)