1. gpg.fail事件後續:關於負責任的漏洞披露、GPG以及2026年的安全現狀 [32:37] The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026 [32:37] (media.ccc.de)
2. 真理能否經受住未來的考驗?論機械化證明的可能未來 Is truth futureproof? On the possible futures of mechanized proofs (khoury.northeastern.edu)
8. 我製作了一個構建分析工具,用於瞭解 Bun 的編譯時間 I made a build profiler to understand Bun’s compile times (lalitm.com)
13. fresh:基於終端的集成開發環境(IDE)和文本編輯器:簡單、強大且快速 fresh: Terminal based IDE & text editor: easy, powerful and fast (github.com)
14. Trail of Bits 如何幫助驗證您的 Signal 聊天記錄的完整性 How Trail of Bits helps verify the integrity of your Signal chats (blog.trailofbits.com)
16. 使用 CSS 為雙屏和可摺疊設備進行設計 Designing for Dual Screen and Foldable Devices With CSS (blog.stephaniestimac.com)
17. “罕見而非隨機:利用令牌效率進行密鑰掃描” Rare Not Random Using Token Efficiency for Secrets Scanning (lookingatcomputer.substack.com)
20. 防範人工智能的濫用:2026年9月 / Anthropic Countering misuse of AI: September 2026 / Anthropic (www.anthropic.com)
26. OpenAI的智能體對RubyGems發動了一次未公開的攻擊 OpenAI agents carried out an undisclosed attack on RubyGems (www.rubyhack.ai)
27. Septabee 教程——一款已投入超過 20,000 小時開發時間的免費數字音頻工作站(DAW) Tutorial for Septabee, a free DAW in the making for over 20,000 hours (www.youtube.com)
52. Forgejo 16.0.4 修復了一個關鍵安全漏洞(RCE——遠程代碼執行) Forgejo 16.0.4 has a critical security bug fix (RCE - Remote Code Execution) (codeberg.org)
56. Python 的集合和字典可能具有二次時間複雜度的性能 Python sets and dictionaries can have quadratic-time performance (lemire.me)
61. Windows XP 採用什麼算法來選擇用戶的初始頭像? What algorithm did Windows XP use to choose your initial user picture? (devblogs.microsoft.com)
62. 在 Shopify,原生應用已成為移動端的未來(2026) Native is now the future of mobile at Shopify (2026) (shopify.engineering)
64. 關於網絡釣魚的一番吐槽:這不怪用戶(也不怪DNS) A rant about phishing: It''s not the user''s fault (and not DNS either) (maurycyz.com)
67. CHERIoT 如何在沒有 MMU 的情況下提供強大且易於使用的隔離機制 How CHERIoT Provides Strong and Usable Isolation Without an MMU (queue.acm.org)
75. 關於 Apache Flink 中水印的方方面面:你一直想了解的一切 Absolutely Everything You Always Wanted to Know About Watermarks in Apache Flink (developer.confluent.io)
77. 如何在 Haskell 的惰性設置下避免正確性空間洩漏(2023) How to avoid correctness space leaks on a lazy setting in Haskell (2023) (epicandmonicisnotiso.blogspot.com)
78. Unix 負載平均值存在的一些(主要是歷史性的)問題 Some (mostly historical) issues with the Unix load average (utcc.utoronto.ca)
81. DIFF:一種用於大規模數據解釋的關係型接口 DIFF: A Relational Interface for Large-Scale Data Explanation (andrewxiwu.github.io)
82. 用於查詢非結構化數據的高效、精確系統 Efficient and accurate systems for querying unstructured data (stacks.stanford.edu)
92. 電子郵件,擺脫地點和方式的束縛:一款適用於 JS 和 TS 的跨運行時、跨服務商的電子郵件庫 Email, decoupled from where and how: A cross-runtime, cross-provider email library for JS & TS (hackers.pub)
93. 開源 3D 解剖學瀏覽器:2,234 個可選的 BodyParts3D 網格、系統層、搜索功能和爆炸視圖 Open-source 3D anatomy explorer: 2,234 selectable BodyParts3D meshes, system layers, search, and exploded views (github.com)
97. 介紹 CUDA Rust:編寫 GPU 內核的兩種路徑 Introducing CUDA Rust: Two Tracks for Writing GPU Kernels (developer.nvidia.com)
98. 為什麼 Emacs Consult 的異步搜索感覺很慢,以及如何加快其速度 Why Emacs Consult async searches feel slow and how to speed them up (www.jamescherti.com)
99. Qwen3.8 27B量化方案的基準測試:4位表現穩定,1位表現崩潰 Benchmarking Qwen3.8 27B quantizations: 4-bit holds up, 1-bit collapses (quesma.com)
104. 在Tenstorrent硬件上運行大型語言模型:深入解析vLLM TT插件 Serving LLMs on Tenstorrent Hardware: Inside the vLLM TT Plugin (vllm.ai)
106. 《為什麼約翰尼不會加密:對 PGP 5.0 的可用性評估》(1999) Why Johnny Can''t Encrypt: A Usability Evaluation of PGP 5.0 (1999) (www.usenix.org)
108. Patchwork-26:一個靈活、協作、以本地為先的工作空間 Patchwork-26: A malleable, collaborative, local-first workspace (youtu.be)
109. 《Sloc Cloc and Code》——我剛剛是不是被“巴斯特·斯克魯格”了? Sloc Cloc and Code - Did I just get Buster Scrugged? (boyter.org)
111. OpenNMC 是一款價格昂貴的 APC 管理卡的開源替代品 OpenNMC is an open replacement for expensive APC management cards (www.jeffgeerling.com)
114. 說到底,BigTechCompany 的產品到底哪裡不好呢? What makes BigTechCompany''s products bad, anyway? (herecomesthemoon.net)
115. 對我的電動滑板車進行逆向工程,並用Rust語言重寫固件 Reverse engineering my e-scooter and rewriting the firmware in rust (bensimms.moe)
116. NetBSD GSoC 2026 兼容性測試:Linux 系統調用測試 NetBSD GSoC 2026 Testing Compat Linux Syscall testing (blog.netbsd.org)
119. 三維不可壓縮歐拉方程、布西內斯克方程及IPM方程在光滑外力作用下的有限時間爆發 Finite-time blowup with smooth forcing for 3D incompressible Euler, Boussinesq, and IPM (mastodon.social)
123. 歐洲核子研究組織(CERN)從 CentOS Linux 遷移到 Debian 的路徑 CERN''s migration path from CentOS Linux to Debian (lwn.net)
124. 用 shell 腳本或 dinit 替代 startplasma(第 1 部分) Replacing startplasma with shell scripts or dinit (Part 1) (cukic.co)
127. 度過“黑色星期五”:藉助Falcon處理3290億次請求 Surviving Black Friday: 329 billion requests with Falcon (www.youtube.com)
130. 關於受迫三維歐拉方程有限時間爆發現象的聲明,以及OpenAI的行為 Statement on finite-time blowup for forced 3D Euler, and OpenAI''s conduct (cims.nyu.edu)
136. 我已經對一份證書頒發機構(CA)的RSA密鑰進行了因式分解……這份證書頒發機構可追溯至90年代 I’ve factored the RSA keys of a Certificate Authority…from the 90s (mcpherrin.ca)
149. 每位內核程序員都應瞭解的跳轉標籤知識 Wander Lairson Costa What every kernel programmer should know about Jump Labels Wander Lairson Costa (walac.github.io)
152. GEM for Linux 提供了一個經典的圖形化桌面環境,包含窗口、菜單、對話框以及一個 68K 模擬器 GEM for Linux provides a classic graphical desktop with windows, menus, dialogs & a 68K emulator (github.com)
167. 人工智能時代下的PL教育:專訪施里拉姆·克里希納穆爾蒂 PL Education in the Age of AI: Interview with Shriram Krishnamurthi (www.typetheoryforall.com)
170. C 和 Go 語言中的數據競爭以及 ThreadSanitizer 的侷限性 Data races and the limits of ThreadSanitizer in C and Go (theconsensus.dev)
171. 前沿實驗室是否將人工智能的安全與保障混為一談了? Have the frontier labs mixed up AI safety and security? (martinalderson.com)
174. 為什麼用處理後端的方式來處理前端會導致前端失敗 Why frontends fail when you approach them like a backend (marijkeluttekes.dev)
179. NetBSD 9.5 正式發佈,netbsd-9 達到生命週期終止(EOL) NetBSD 9.5 released and EOL for netbsd-9 (blog.netbsd.org)
184. 使用代碼生成在Forth中構建一個Brainfuck領域特定語言(DSL) Building a Brainfuck DSL in Forth using code generation (venko.blog)
188. 陶哲軒談僅憑純人工智能方法過早解決[一個數學]問題 Terence Tao on prematurely solving [a maths] problem by purely AI-powered methods (mathstodon.xyz)
190. Debian 代碼搜索:基於 Go SIMD 的高速 TurboPFor Debian Code Search: Fast TurboPFor with Go SIMD (michael.stapelberg.ch)
202. 您在 NAS/備份中使用的是哪種文件系統?為什麼選擇它? What filesystem are you running on your NAS/Backups, and why? (lobste.rs)
205. 指出錯誤:uutils 和 coreutils 中的編譯器風格診斷信息 Pointing at the error: compiler-style diagnostics in uutils coreutils (uutils.org)
209. 可視化 Rust 的虛函數表:dyn Trait 在內存中的工作原理 Visualizing Rust''s Vtables: How dyn Trait Works In Memory (sofiabelen.github.io)
212. 針對整個 Linux 發行版的信任-信任攻擊(通過 strip 工具) Trusting-Trust Attack against an Entire Linux Distribution (via the strip utility) (arxiv.org)
213. AI 處理事件,工程師與系統脫節 AI handles incidents, engineers lose touch with their systems (www.sylvainkalache.com)
214. Bespoke:一款專為會說“請”的人設計的編程語言 Bespoke: A Programming Language for People Who Say Please (blog.hofstede.it)
215. 要求開發者利用人工智能來審查他們親手編寫的代碼,這要求是否太高了? Is it too much to ask devs to use AI to review their hand-crafted code? (lobste.rs)
216. Plush 的新寄存器式解釋器快得離譜 Plush''s New Register-Based Interpreter Is Insanely Fast (pointersgonewild.com)
220. MISRust:將 MISRA-C 編碼指南映射到 Rust 編程語言 MISRust: Mapping MISRA-C Coding Guidelines to the Rust Programming Language (arxiv.org)
228. jank 重新構想了 C 錯誤處理機制,並獲得了官方的原生包倉庫 jank reimagines C errors and gets an official native package repo (jank-lang.org)
230. 全新的 Go JSON API:速度提升一倍,還是慢了 1.5 倍? The new Go JSON API: twice as fast, or 1.5x slower? (lemire.me)
234. FORCE_COLOR:讓您的命令行始終色彩豐富,即使在管道傳輸時也不例外——在日誌、輸出流等場景中保留文本顏色 FORCE_COLOR: Keep Your Command Line Colorful, Even when Piping - Retain Text Colors in Logs, Output Streams, and More (force-color.org)
240. 今年春天,OpenAI的智能體在一起此前未公開的AI“越界”事件中劫持了德國某網站 OpenAI agents hijacked German website in previously undisclosed AI breakout this spring (www.reuters.com)
241. smolts:一款面向教學語言的教學型集成開發環境(eighty-twenty news) smolts: a pedagogical IDE for a teaching language (eighty-twenty news) (eighty-twenty.org)
244. 《Haskell 懶惰求值不完全指南》(2015) The Incomplete Guide to Lazy Evaluation in Haskell (2015) (apfelmus.nfshost.com)
252. Web開發入門課程:在漸進增強方面可以做哪些微小調整? WebDev intro course: what small changes towards progressive enhancement? (lobste.rs)
258. 我是如何將BBC Micro Elite改裝成雙人遊戲的 How I converted BBC Micro Elite into a two-player game (elite.bbcelite.com)
259. 功能上的禪意 [保持 Python 代碼庫簡潔的七條準則] Functionally Zen [Seven tenets for keeping Python codebases simple] (testdouble.com)
260. 當你最喜歡的編程語言存在法西斯主義問題時,你會怎麼做? What do you do when your favorite programming language has a fascism problem? (codeandcake.dev)
272. Emacs 的“newcomers-presets”主題包含哪些內容? What''s in the Emacs newcomers-presets theme? (sachachua.com)
273. 作為長期使用RHEL的機構,歐洲核子研究組織(CERN)正將其工業計算機遷移至Debian系統 CERN transitioning industrial computers to Debian after being a longtime RHEL institution (www.phoronix.com)
276. 我認為軍用小賣部的冷凍櫃遭到了黑客攻擊 I Think the Military Commissary Freezers Were Hacked (signalandsilence.substack.com)
280. 美國政府在《紐約時報》版權案中支持OpenAI US government backs OpenAI in New York Times copyright case (www.reuters.com)
293. 在 C 和 Rust 標準庫中實現 FMA 並發現 bug Implementing FMA and finding bugs in C and Rust standard libraries (shnatsel.github.io)
298. “激進去中心化、激進賦權與Dynamicland”(2022) Radical Decentralization, Radical Empowerment, and Dynamicland (2022) (dynamicland.org)
299. PrusaSlicer 3.0 預覽版——為3D打印的未來而生 PrusaSlicer 3.0 Preview - Built for the Future of 3D Printing (blog.prusa3d.com)
300. PostgreSQL 正則表達式的新功能(pg_tre 和 pg_re2) New things for regular expressions in PostgreSQL (pg_tre and pg_re2) (www.depesz.com)