1. Rust 聲明式宏:組織結構、作用域及常見用例 Rust Declarative Macros: Organization, Scoping, and Common Use-Cases (sigseis.dev)
8. FreeBSD bhyve 實時遷移:在主機之間遷移虛擬機 FreeBSD bhyve Live Migration: Moving VMs Between Hosts (gyptazy.com)
12. 基於隨機種子生成的地形的 WebGL 飛行模擬器 WebGL Flight Simulator with seed generated terrain (baron.by.dai.studio)
21. goliath32.com - 創建可自啟動的 ZIP 壓縮包 goliath32.com - Creating a self booting ZIP archive (goliath32.com)
22. 一門課程在什麼情況下算作“商品”,又在什麼情況下取決於授課教師? When is a class a “commodity” and when does it depend on the instructor? (statmodeling.stat.columbia.edu)
24. 《生成式人工智能基礎小書:直觀的數學入門指南》 The Little Book of Generative AI Foundations: An Intuitive Mathematical Primer (arxiv.org)
26. 在 OxCaml 中編寫用於高性能並行編程的領域特定語言(DSL) Writing a DSL for high performance parallel programming in OxCaml (blog.janestreet.com)
27. 修復一個 WebKit 漏洞,以驗證“承諾”是否由鐵軌構成 Fixing a WebKit bug to see if promises are made of train tracks (alistair.sh)
30. 別費勁打補丁了:丹佛斯 AK-SM800A 存在多個遠程代碼執行漏洞 Don't bother patching: multiple remote code execution vulnerabilities in Danfoss AK-SM800A (www.midnightblue.nl)
42. 我是如何將一個存在22年的PostgreSQL類型混淆漏洞轉化為遠程代碼執行漏洞(CVE-2026-6460)的 How I Ended Up Turning a 22-Year-Old PostgreSQL Type-Confusion Primitive into RCE (CVE-2026-6460) (mehmetince.net)
44. e-means:在相同損失條件下,k-means 算法的運行速度提升 10 倍 e-means: 10x faster k-means at equal loss (e-means.github.io)
45. OccupySaaS —— 他們解僱了我們。我們正在重建他們的SaaS OccupySaaS — They laid us off. We're rebuilding their SaaS (occupysaas.com)
63. Humble Bundle 剛剛通過 vibecoding 徹底搞垮了他們大部分的安全措施 Humble Bundle just completely killed most of their security through vibecoding (forums.spacebattles.com)
66. 《猴島的秘密》:全部13個版本並排對比 The Secret of Monkey Island: all 13 versions side by side (monkeyisland.pages.dev)
67. 《Let Over Lambda》全書現已可在網上免費閱讀 The entirety of "Let Over Lambda" is now freely available online (letoverlambda.com)
76. 安德魯·肯斯勒(Andrew Kensler)的 permute() 函數,用於無狀態、常數時間偽隨機順序數組遍歷 Andrew Kensler's permute(), a function for stateless, constant-time pseudorandom-order array iteration (andrew-helmer.github.io)
78. 這是首次有C標準未能通過國家標準機構的審議 For the first time, a C standard failed to pass the national bodies (herecomesthemoon.net)
84. 一次虛假的煙霧警報如何險些讓簡街在紐約市唯一的數據中心陷入癱瘓 How a false smoke alarm almost drowned Jane Street's only NYC datacenter (michael.bacarella.com)
87. 你知道有哪些“不使用人工智能”的應用程序、公司或資源嗎? What are some "No AI" apps/companies/resources you know of? (lobste.rs)
88. 利用電壓突變充分釋放我的挖礦顯卡中A100的性能 Using voltage glitching to unleash the A100 in my mining card (blog.kate.land)
91. 2026 年的 deploy-rs:重振我們的 Nix 部署工具 deploy-rs in 2026: reviving our Nix deployment tool (serokell.io)
97. 修改 Linux 使其對每個進程都使用 SIGKILL 信號 Modding Linux to use SIGKILL on every process (vulpinecitrus.info)
109. 針對實際環境中網頁瀏覽器指紋識別的大規模測量與現實世界中的緩解措施 Large-Scale Measurement and Real-World Mitigation of Web Browser Fingerprinting in the Wild (fingerprinting.study)
112. Synaptics的專利主張導致DisplayLink驅動程序開發工作暫停 Synaptics patent claims stop work on DisplayLink drivers (lwn.net)
115. Ohme新推出的電動汽車充電樁隱私政策取消了“不出售數據”的承諾 Ohme’s new EV charger privacy policy drops its pledge not to sell data (blog.popey.com)
116. 超越編譯器:讓 IBM i 運行修改後的本機代碼——程序驗證價值 Beyond the compiler: Making IBM i run modified native code - Program Validation Value (blog.silentsignal.eu)
128. Docker 一直以來都使用微虛擬機(確切地說,是從 2016 年開始的) Docker has always used microVMs (well, since 2016) (dave.recoil.org)
129. 對一款老式二極管-晶體管邏輯芯片進行逆向工程 Reverse engineering a vintage diode-transistor logic chip (www.righto.com)
131. PyPI 重新設計的項目頁面現已上線,其中安全提示更加清晰 PyPI's redesigned project pages with clearer security signals are now live (blog.pypi.org)
132. DeepX 宣稱可在功耗低於 5 瓦的情況下進行高達 1000 億參數的推理 DeepX claims inference up to 100B parameters at less than 5 W (www.eetimes.com)
136. Terminal2Shell:關鍵漏洞可在所有主流操作系統上立即授予shell訪問權限 Terminal2Shell: Critical flaw grants instant shell access on every major OS (terminal2shell.com)
137. 在搭載 GentleOS 的經典 PC 上播放古典音樂 Playing classical music on a classic PC with GentleOS (www.youtube.com)
146. 使用樹莓派和PPS GPS實現微秒級精度的NTP(2021) Microsecond accurate NTP with a Raspberry Pi and PPS GPS(2021) (austinsnerdythings.com)
148. Sem86:一款不包含硬編碼語義的全系統 x86 模擬器 Sem86: a full-system x86 emulator without hardcoded semantics (liblisa.nl)
150. 當一種語言的創建者與其擁有者存在嚴重分歧時:C26 DIS階段後的情況、歷史經驗及未來發展路徑 When a language’s creator and its owners strongly disagree: C26 post-DIS, historical experience, and paths forward (isocpp.org)
153. 虛擬化 Redox:從 Virtio-FS 到雲虛擬機管理程序,以及更遠的未來 Virtualized Redox: from Virtio-FS to Cloud Hypervisor, and beyond (www.redox-os.org)
156. 在 Mac mini M5 Pro(48GB)上,我能實際利用本地 AI 做些什麼? What can I realistically do with local AI on a Mac mini M5 Pro (48GB)? (lobste.rs)
158. 誰願意通過眾包方式,利用大型語言模型(LLM)對提交至Lobste.rs的文章進行掃描? Who wants to crowdsource LLM scans of articles submitted to Lobste.rs? (lobste.rs)
159. SFLC.in 關於針對其 X 賬號及帖子的下架請求的聲明 SFLC.in Statement Regarding the Takedown Requests Against Its X Account and Posts (sflc.in)
160. 追蹤代碼中的“麵包屑”——意外提交的Ad-Hoc日誌揭示了開發者對代碼的理解程度 Following breadcrumbs in code - What accidentally committed Ad-Hoc logs reveal about developer comprehension (link.springer.com)
166. Nspawn 3.0:適用於 systemd-nspawn 容器的 Docker 兼容引擎 API Nspawn 3.0: A Docker-compatible Engine API for systemd-nspawn containers (blog.nspawn.org)
175. CHIMERA 通過聲學管模擬有機聲音 CHIMERA simulates organic sound with acoustic tubes (chimera-vocal-synth.vercel.app)
178. OpenBSD 的 top(1) 命令新增了一個選項,用於顯示 chroot、pledge 和 unveil 的狀態 OpenBSD top(1) adds flag to show chroot, pledge and unveil status (undeadly.org)
179. GhostMap:這個安卓漏洞會在你打開應用前就讓手機崩潰 GhostMap: The Android flaw that crashes your phone before you open the app (www.bitdefender.com)
180. M-VAVE FM-1 的開源固件,由其製造商提供,一站式彙總 Open-source firmwares for the M-VAVE FM-1, from their makers, in one place (thefirmwarehub.com)
181. Postgres 的 FOR UPDATE SKIP LOCKED 隊列究竟能處理到什麼程度? Just how far can the FOR UPDATE SKIP LOCKED Postgres queue go? (garbagecollected.io)
182. Alpine Linux:繞過 openssh-server 的密碼認證 Alpine Linux : openssh-server password authentication bypass (www.alpinelinux.org)
184. 你如何應對人工智能在網絡上帶來的種種負面影響? How are you dealing with all the negative side effects of AI on the web? (lobste.rs)
185. Meridian——一款基於 Servo 和 GPUI 構建的實驗性網絡瀏覽器 Meridian — an experimental web browser built on Servo and GPUI (op.tngl.io)
189. 不加質疑地轉發:Web 框架為何過度信任“Forwarded”標頭 Forwarded Without Question: How Web Frameworks Overtrust the Forwarded Header (www.lkoskela.fi)
193. Inform 是一種用於創作互動小說的編程語言 Inform is a programming language for creating interactive fiction (ganelson.github.io)
200. 凱文·布恩:使用 UEFI 進行裸機編程入門——系列目錄 Kevin Boone: Firststeps in bare-metal programming using UEFI – series index (kevinboone.me)
201. 我們如何在生產環境中持續驗證形式化規格說明 How we continuously validate formal specifications in production (www.datadoghq.com)
203. 從 Linux 到維基百科:志願者如何構建互聯網 From Linux to Wikipedia: How Volunteers Build the Internet (thereader.mitpress.mit.edu)
208. 以本地優先為特色的會議記錄工具。設備端轉錄,不存儲音頻,端到端加密同步 Local-first meeting notetaker. On-device transcription, no stored audio, E2E encrypted sync (hellonod.app)
209. 讓 musl 和 NVIDIA 專有驅動程序協同工作 Making musl and proprietary NVIDIA drivers work together (chimera-linux.org)
210. “2027計劃”:關於重建互聯網、科技經濟和數字基礎設施的RFC Project 2027: An RFC for rebuilding the internet, the tech economy, and digital infrastructure (joinproject2027.org)
213. Barracuda Networks 將成為您的新夥伴(Barracuda 電子郵件安全網關預認證遠程根權限遠程代碼執行漏洞 CVE-2026-116606 / CVE-2026-111560) Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) (labs.watchtowr.com)
220. 為什麼與人工智能代理合作如此令人疲憊(以及如何應對)——科技、工作與未來趨勢 Why working with AI agents is so tiring (and what to do about it) – Tech, work, and what comes next (constantin.glez.de)
222. SourceHut 禁用註冊繞過功能 CVE-2026-121728 SourceHut disabled registration bypass CVE-2026-121728 (blog.arusekk.pl)
225. Flink 的 Kafka 連接器如何將偏移量提交到 Kafka How Flink's Kafka connector commits offsets to Kafka (dalelane.co.uk)
232. 為什麼“搜索已登錄用戶”前面會有一個阿努比斯門? Why is there an Anubis gate in front of Search for logged-in users? (lobste.rs)
236. Ruffle:穩定版本、API、文本……以及其他一切 Ruffle: Stable Releases, API, Text... and Everything Else (ruffle.rs)
238. 每個單詞11納秒:對異序詞進行荒謬的過度優化 11 nanoseconds per word: Ridiculously Over-Optimizing Anagrams (wiredream.com)
248. 畫家施萊米爾捲土重來:Zig 對 libc 的重寫如何導致 SQLite 運行變慢 Shlemiel the Painter Is Back: How Zig’s libc Rewrite Made SQLite Slower (dennisforbes.ca)
251. 2026年11月如何加快Rust編譯器的運行速度 How to speed up the Rust compiler in November 2026 (nnethercote.github.io)
252. Debian 的 apt 中存在中間人攻擊導致的任意代碼執行漏洞 Man-in-the-middle arbitrary code execution in Debian’s apt (lists.debian.org)
253. //go:embed 的工作原理:從源文件到二進制文件 How //go:embed Works: From Source Files to Binary (internals-for-interns.com)
262. 電子投票背後的密碼學原理(以及為何紙質選票依然不可或缺) The cryptography behind electronic voting (and why paper ballots are still essential) (blog.trailofbits.com)
267. Postgres 19 REPACK:內置的在線表膨脹清理功能 Postgres 19 REPACK: Built-In Online Table Bloat Cleanup (www.snowflake.com)
269. macOS 27 Golden Gate 實際上並不支持 CoreStorage 卷 macOS 27 Golden Gate does not actually support CoreStorage volumes (wadetregaskis.com)
272. 關於DNSSEC的常見觀念經受考驗:邀請您對自己的假設進行事實核查 Common Beliefs About DNSSEC Put to the Test: An Invitation to Fact-Check Your Assumptions (circleid.com)
278. 1996年,一臺搭載奔騰處理器的現代國際象棋引擎能否擊敗卡斯帕羅夫? Could a modern chess engine on a Pentium have defeated Kasparov in 1996? (nicholas.carlini.com)
279. Ubuntu 26.04 Rust 中的 sudo 與標準 sudo 不兼容 The Ubuntu 26.04 Rust sudo is not compatible with standard sudo (utcc.utoronto.ca)
289. 通往不透明軟件的道路,正是由良好的(工程)初衷鋪就的 The road to opaque software is paved with good (engineering) intentions (tomasp.net)
291. 權重空間編程的火花:大型語言模型(LLMs)能夠原生讀寫神經網絡權重 Sparks of Weight-Space Programming: LLMs can natively read & write neural network weights (rikiyat.github.io)
300. 僅僅為了調整時間,我就給車載導航系統越獄了 Jailbreaking my car's navigation system just so I can change the time (blog.nns.ee)