5. Humble Bundle 剛剛通過 vibecoding 徹底搞垮了他們大部分的安全措施 Humble Bundle just completely killed most of their security through vibecoding (forums.spacebattles.com)
8. 《猴島的秘密》:全部13個版本並排對比 The Secret of Monkey Island: all 13 versions side by side (monkeyisland.pages.dev)
9. 《Let Over Lambda》全書現已可在網上免費閱讀 The entirety of "Let Over Lambda" is now freely available online (letoverlambda.com)
18. 安德魯·肯斯勒(Andrew Kensler)的 permute() 函數,用於無狀態、常數時間偽隨機順序數組遍歷 Andrew Kensler's permute(), a function for stateless, constant-time pseudorandom-order array iteration (andrew-helmer.github.io)
20. 這是首次有C標準未能通過國家標準機構的審議 For the first time, a C standard failed to pass the national bodies (herecomesthemoon.net)
26. 一次虛假的煙霧警報如何險些讓簡街在紐約市唯一的數據中心陷入癱瘓 How a false smoke alarm almost drowned Jane Street's only NYC datacenter (michael.bacarella.com)
29. 你知道有哪些“不使用人工智能”的應用程序、公司或資源嗎? What are some "No AI" apps/companies/resources you know of? (lobste.rs)
30. 利用電壓突變充分釋放我的挖礦顯卡中A100的性能 Using voltage glitching to unleash the A100 in my mining card (blog.kate.land)
33. 2026 年的 deploy-rs:重振我們的 Nix 部署工具 deploy-rs in 2026: reviving our Nix deployment tool (serokell.io)
39. 修改 Linux 使其對每個進程都使用 SIGKILL 信號 Modding Linux to use SIGKILL on every process (vulpinecitrus.info)
51. 針對實際環境中網頁瀏覽器指紋識別的大規模測量與現實世界中的緩解措施 Large-Scale Measurement and Real-World Mitigation of Web Browser Fingerprinting in the Wild (fingerprinting.study)
54. Synaptics的專利主張導致DisplayLink驅動程序開發工作暫停 Synaptics patent claims stop work on DisplayLink drivers (lwn.net)
57. Ohme新推出的電動汽車充電樁隱私政策取消了“不出售數據”的承諾 Ohme’s new EV charger privacy policy drops its pledge not to sell data (blog.popey.com)
58. 超越編譯器:讓 IBM i 運行修改後的本機代碼——程序驗證價值 Beyond the compiler: Making IBM i run modified native code - Program Validation Value (blog.silentsignal.eu)
70. Docker 一直以來都使用微虛擬機(確切地說,是從 2016 年開始的) Docker has always used microVMs (well, since 2016) (dave.recoil.org)
71. 對一款老式二極管-晶體管邏輯芯片進行逆向工程 Reverse engineering a vintage diode-transistor logic chip (www.righto.com)
73. PyPI 重新設計的項目頁面現已上線,其中安全提示更加清晰 PyPI's redesigned project pages with clearer security signals are now live (blog.pypi.org)
74. DeepX 宣稱可在功耗低於 5 瓦的情況下進行高達 1000 億參數的推理 DeepX claims inference up to 100B parameters at less than 5 W (www.eetimes.com)
78. Terminal2Shell:關鍵漏洞可在所有主流操作系統上立即授予shell訪問權限 Terminal2Shell: Critical flaw grants instant shell access on every major OS (terminal2shell.com)
79. 在搭載 GentleOS 的經典 PC 上播放古典音樂 Playing classical music on a classic PC with GentleOS (www.youtube.com)
88. 使用樹莓派和PPS GPS實現微秒級精度的NTP(2021) Microsecond accurate NTP with a Raspberry Pi and PPS GPS(2021) (austinsnerdythings.com)
90. Sem86:一款不包含硬編碼語義的全系統 x86 模擬器 Sem86: a full-system x86 emulator without hardcoded semantics (liblisa.nl)
92. 當一種語言的創建者與其擁有者存在嚴重分歧時:C26 DIS階段後的情況、歷史經驗及未來發展路徑 When a language’s creator and its owners strongly disagree: C26 post-DIS, historical experience, and paths forward (isocpp.org)
95. 虛擬化 Redox:從 Virtio-FS 到雲虛擬機管理程序,以及更遠的未來 Virtualized Redox: from Virtio-FS to Cloud Hypervisor, and beyond (www.redox-os.org)
98. 在 Mac mini M5 Pro(48GB)上,我能實際利用本地 AI 做些什麼? What can I realistically do with local AI on a Mac mini M5 Pro (48GB)? (lobste.rs)
100. 誰願意通過眾包方式,利用大型語言模型(LLM)對提交至Lobste.rs的文章進行掃描? Who wants to crowdsource LLM scans of articles submitted to Lobste.rs? (lobste.rs)
101. SFLC.in 關於針對其 X 賬號及帖子的下架請求的聲明 SFLC.in Statement Regarding the Takedown Requests Against Its X Account and Posts (sflc.in)
102. 追蹤代碼中的“麵包屑”——意外提交的Ad-Hoc日誌揭示了開發者對代碼的理解程度 Following breadcrumbs in code - What accidentally committed Ad-Hoc logs reveal about developer comprehension (link.springer.com)
108. Nspawn 3.0:適用於 systemd-nspawn 容器的 Docker 兼容引擎 API Nspawn 3.0: A Docker-compatible Engine API for systemd-nspawn containers (blog.nspawn.org)
117. CHIMERA 通過聲學管模擬有機聲音 CHIMERA simulates organic sound with acoustic tubes (chimera-vocal-synth.vercel.app)
120. OpenBSD 的 top(1) 命令新增了一個選項,用於顯示 chroot、pledge 和 unveil 的狀態 OpenBSD top(1) adds flag to show chroot, pledge and unveil status (undeadly.org)
121. GhostMap:這個安卓漏洞會在你打開應用前就讓手機崩潰 GhostMap: The Android flaw that crashes your phone before you open the app (www.bitdefender.com)
122. M-VAVE FM-1 的開源固件,由其製造商提供,一站式彙總 Open-source firmwares for the M-VAVE FM-1, from their makers, in one place (thefirmwarehub.com)
123. Postgres 的 FOR UPDATE SKIP LOCKED 隊列究竟能處理到什麼程度? Just how far can the FOR UPDATE SKIP LOCKED Postgres queue go? (garbagecollected.io)
124. Alpine Linux:繞過 openssh-server 的密碼認證 Alpine Linux : openssh-server password authentication bypass (www.alpinelinux.org)
126. 你如何應對人工智能在網絡上帶來的種種負面影響? How are you dealing with all the negative side effects of AI on the web? (lobste.rs)
127. Meridian——一款基於 Servo 和 GPUI 構建的實驗性網絡瀏覽器 Meridian — an experimental web browser built on Servo and GPUI (op.tngl.io)
131. 不加質疑地轉發:Web 框架為何過度信任“Forwarded”標頭 Forwarded Without Question: How Web Frameworks Overtrust the Forwarded Header (www.lkoskela.fi)
135. Inform 是一種用於創作互動小說的編程語言 Inform is a programming language for creating interactive fiction (ganelson.github.io)
142. 凱文·布恩:使用 UEFI 進行裸機編程入門——系列目錄 Kevin Boone: Firststeps in bare-metal programming using UEFI – series index (kevinboone.me)
143. 我們如何在生產環境中持續驗證形式化規格說明 How we continuously validate formal specifications in production (www.datadoghq.com)
145. 從 Linux 到維基百科:志願者如何構建互聯網 From Linux to Wikipedia: How Volunteers Build the Internet (thereader.mitpress.mit.edu)
150. 以本地優先為特色的會議記錄工具。設備端轉錄,不存儲音頻,端到端加密同步 Local-first meeting notetaker. On-device transcription, no stored audio, E2E encrypted sync (hellonod.app)
151. 讓 musl 和 NVIDIA 專有驅動程序協同工作 Making musl and proprietary NVIDIA drivers work together (chimera-linux.org)
152. “2027計劃”:關於重建互聯網、科技經濟和數字基礎設施的RFC Project 2027: An RFC for rebuilding the internet, the tech economy, and digital infrastructure (joinproject2027.org)
155. Barracuda Networks 將成為您的新夥伴(Barracuda 電子郵件安全網關預認證遠程根權限遠程代碼執行漏洞 CVE-2026-116606 / CVE-2026-111560) Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) (labs.watchtowr.com)
162. 為什麼與人工智能代理合作如此令人疲憊(以及如何應對)——科技、工作與未來趨勢 Why working with AI agents is so tiring (and what to do about it) – Tech, work, and what comes next (constantin.glez.de)
164. SourceHut 禁用註冊繞過功能 CVE-2026-121728 SourceHut disabled registration bypass CVE-2026-121728 (blog.arusekk.pl)
167. Flink 的 Kafka 連接器如何將偏移量提交到 Kafka How Flink's Kafka connector commits offsets to Kafka (dalelane.co.uk)
174. 為什麼“搜索已登錄用戶”前面會有一個阿努比斯門? Why is there an Anubis gate in front of Search for logged-in users? (lobste.rs)
178. Ruffle:穩定版本、API、文本……以及其他一切 Ruffle: Stable Releases, API, Text... and Everything Else (ruffle.rs)
180. 每個單詞11納秒:對異序詞進行荒謬的過度優化 11 nanoseconds per word: Ridiculously Over-Optimizing Anagrams (wiredream.com)
190. 畫家施萊米爾捲土重來:Zig 對 libc 的重寫如何導致 SQLite 運行變慢 Shlemiel the Painter Is Back: How Zig’s libc Rewrite Made SQLite Slower (dennisforbes.ca)
193. 2026年11月如何加快Rust編譯器的運行速度 How to speed up the Rust compiler in November 2026 (nnethercote.github.io)
194. Debian 的 apt 中存在中間人攻擊導致的任意代碼執行漏洞 Man-in-the-middle arbitrary code execution in Debian’s apt (lists.debian.org)
195. //go:embed 的工作原理:從源文件到二進制文件 How //go:embed Works: From Source Files to Binary (internals-for-interns.com)
204. 電子投票背後的密碼學原理(以及為何紙質選票依然不可或缺) The cryptography behind electronic voting (and why paper ballots are still essential) (blog.trailofbits.com)
209. Postgres 19 REPACK:內置的在線表膨脹清理功能 Postgres 19 REPACK: Built-In Online Table Bloat Cleanup (www.snowflake.com)
211. macOS 27 Golden Gate 實際上並不支持 CoreStorage 卷 macOS 27 Golden Gate does not actually support CoreStorage volumes (wadetregaskis.com)
214. 關於DNSSEC的常見觀念經受考驗:邀請您對自己的假設進行事實核查 Common Beliefs About DNSSEC Put to the Test: An Invitation to Fact-Check Your Assumptions (circleid.com)
220. 1996年,一臺搭載奔騰處理器的現代國際象棋引擎能否擊敗卡斯帕羅夫? Could a modern chess engine on a Pentium have defeated Kasparov in 1996? (nicholas.carlini.com)
221. Ubuntu 26.04 Rust 中的 sudo 與標準 sudo 不兼容 The Ubuntu 26.04 Rust sudo is not compatible with standard sudo (utcc.utoronto.ca)
231. 通往不透明軟件的道路,正是由良好的(工程)初衷鋪就的 The road to opaque software is paved with good (engineering) intentions (tomasp.net)
233. 權重空間編程的火花:大型語言模型(LLMs)能夠原生讀寫神經網絡權重 Sparks of Weight-Space Programming: LLMs can natively read & write neural network weights (rikiyat.github.io)
242. 僅僅為了調整時間,我就給車載導航系統越獄了 Jailbreaking my car's navigation system just so I can change the time (blog.nns.ee)
246. 保障互聯網關鍵軟件的安全:我們本可以如何在Bash中植入後門 Securing Internet-Critical Software: How We Could Have Backdoored Bash (www.hacktron.ai)
247. Polyend 發佈了 Tracker 固件源代碼 Polyend releases the Tracker firmware source code (backstage.polyend.com)
249. SuperVote:一款社交推薦應用的15年回顧 SuperVote: 15 year retrospective on a social endorsement app (callejas.com)
255. 我總下意識地認為我們的服務器需要越來越多的內存 My reflex of assuming our servers need ever-growing amounts of RAM (utcc.utoronto.ca)
257. Tyrtulia,一個專為終端設計的、無界面且無需密碼的論壇 Tyrtulia, a headless forum with no passwords, made for the terminal (git.andros.dev)
262. C 安全性的問題:現代 C 是一種思維方式,而非標準——MC 博客 The Problem with C Safety: Modern C Is a Mindset, Not a Standard – MC BLOG (www.modernescpp.com)
266. 使用 braindead-local-intelligence 輕鬆體驗本地人工智能 An easy way to try local AI with braindead-local-intelligence (dataswamp.org)
267. OpenBSD 版 GEFS(“足夠好”文件系統)的開發工作正在推進 Work on GEFS (the Good Enough File System) for OpenBSD progresses (www.undeadly.org)
270. Let's Encrypt 推出 64 天有效期的證書:您的 ACME 客戶端究竟何時才會續期? Let's Encrypt Goes to 64-Day Certificates: When Does Your ACME Client Actually Renew? (devops-daily.com)
280. 不使用人工智能,耗時52分鐘。手動用C語言編寫所有Linux文件處理工具 No AI, 52 min. Build all Linux Files utils in C by Hand (www.youtube.com)
282. 現代硬件性能計數器實現中的非確定性與計數溢出 Non-Determinism and Overcount on Modern Hardware Performance Counter Implementations (web.eece.maine.edu)
288. 一種遊戲腳本語言,其在CPU上運行語音轉文本的速度比lama.cpp快5倍 A game scripting language that runs speech-to-text 5x faster than llama.cpp on CPU (dasllama.io)
292. 通過排列迭代空間來加速 GPU 複製,或優化恆等函數 Speeding up GPU copies by permuting iteration spaces, or, optimising the identity function (futhark-lang.org)
295. CVE-2026-116155:ImageMagick 因經過特殊構造的 XMP 配置文件導致的內存洩漏 CVE-2026-116155: ImageMagick Memory Leak via Crafted XMP Profile (www.agilehunt.com)