8. 通過 HTTP 提供文件的三種方式:同步、epoll 和 io_uring Serving files over HTTP three ways: synchronous, epoll, and io_uring (theconsensus.dev)
10. 必須安裝 uv 才能構建獨立的 Python 發行版 uv must be installed to build a standalone Python distribution (github.com)
11. 教宗利奧十四世《Magnifica Humanitas》通諭 Encyclical Letter of His Holiness Leo XIV Magnifica Humanitas (www.vatican.va)
29. JS Crossword——一款謎題提示等於 eval(答案) 的填字遊戲 JS Crossword - a crossword where the clue eval(answer) (lyra.horse)
35. 我的這款輕量級、內存安全的 Go 版 rsync 是如何規避安全漏洞的 How my minimal, memory-safe Go rsync steers clear of vulnerabilities (michael.stapelberg.ch)
38. 一萬行代碼之後:當一個工具演變為編譯器——羅布·達斯特——Gleam Gathering 2026 10,000 Lines Later: When a Tool Became a Compiler - Rob Durst - Gleam Gathering 2026 (www.youtube.com)
40. fht-compositor:一款支持動態平鋪的 Wayland 合成器 fht-compositor: A dynamic tiling Wayland compositor (github.com)
43. 批量 memmove 能否加快 std::remove_if 的執行速度?(不能。) Does bulk memmove speed up std::remove_if? (No.) (quuxplusone.github.io)
54. 對1980年“太空實驗室”計算機電路進行逆向工程 Reverse engineering circuitry in a Spacelab computer from 1980 (www.righto.com)
58. z386:基於原始微代碼構建的開源 80386 處理器 - Small Things Retro z386: An Open-Source 80386 Built Around Original Microcode - Small Things Retro (nand2mario.github.io)
59. 在 C 中仍然無法使用的 C 語言結構——以及少數發生變化的結構 C Constructs That Still Don’t Work in C — and a Few That Changed (lospino.so)
63. 使用 Gomobile 和 Gopherjs 實現動態二維碼數據傳輸 Animated QR data transfer with Gomobile and Gopherjs (divan.dev)
67. 惠普收購了Hyperspace,並曾提供過3種不同的預啟動或啟動過程中操作系統,其中包括Quickweb HP bought Hyperspace, & once offered 3 different pre-boot or in-boot OSs, including Quickweb (gekk.info)
71. 一套用於編輯和發佈RFC的全新現代化工具即將推出 A new suite of modern tools coming for editing and publishing RFCs (www.ietf.org)
75. SPy:一種用於靜態類型化 Python 變體的解釋器和編譯器 SPy: an interpreter and a compiler for a statically typed variant of Python (github.com)
78. 在四款老舊CPU上對比LZ4解壓縮器 Comparing an LZ4 Decompressor on four legacy CPUs (bumbershootsoft.wordpress.com)
80. CVE-2026-46529:Linux PDF 閱讀器(XReader/Evince/Atril)中存在一個已存在 10 年的遠程代碼執行漏洞 CVE-2026-46529: 10-year-old RCE in Linux PDF Viewer (XReader/Evince/Atril) (medeiros.zip)
83. account-center:用於內部服務和知識庫文章的自託管、支持 OIDC 身份驗證的門戶 account-center: Self-hosted, OIDC-authenticated portal for internal services and knowledge base articles (git.sr.ht)
85. 在所有64位整數中,只有17%是由兩個32位整數相乘得到的 Only 17% of all 64-bit Integers are products of two 32-bit integers (lemire.me)
86. Apple corecrypto 形式驗證藍圖 A blueprint for formal verification of Apple corecrypto (security.apple.com)
87. 開源領域的職業倦怠:一個我們可以共同解決的結構性問題 Burnout in Open Source: A Structural Problem We Can Fix Together (opensourcepledge.com)
89. 《Qud洞穴》(2019)中的端到端程序化生成 End-to-End Procedural Generation in Caves of Qud (2019) (www.youtube.com)
95. 巨齒鯊:利用 CI 工作流對大量 GitHub 倉庫植入後門 Megalodon: Mass GitHub Repo Backdooring via CI Workflows (safedep.io)
96. 安全啟動與證書頒發機構輪換——致各發行版的提醒 Secure Boot and CA Rollover - a heads-up for distributions (blog.einval.com)
97. 這個博客在 Ubuntu 16.04 上運行了 10 年。我已將其遷移至 FreeBSD This blog ran on Ubuntu 16.04 for 10 years. I migrated it to FreeBSD (crocidb.com)
99. 《離散事件仿真與分佈式併發控制中的虛擬時間》(1985) Virtual Time for discrete event simulation and distributed concurrency control (1985) (worrydream.com)
101. 美國聯邦貿易委員會(FTC)將要求考克斯傳媒集團支付近100萬美元,以了結其就“主動傾聽”人工智能營銷服務誤導客戶的指控 FTC to Require Cox Media Group to Pay Nearly 1million to Settle Charges They Deceived Customers About “Active Listening” AI-Powered Marketing Service (www.ftc.gov)
102. 即使您已刪除 Google API 密鑰,它們仍會繼續生效,時間之長足以被不法分子利用 Google API keys keep working after you delete them long enough to be exploited (www.aikido.dev)
103. Gnutella:一種比其誕生的世界更長久的協議 Gnutella: A Protocol Outlives the World That Created It (rickcarlino.com)
107. 利用通過 USB/IP 連接 WebUSB 的瀏覽器內 Linux 虛擬機,讓舊掃描儀重獲新生 Reviving old scanners with an in-browser Linux VM bridged to WebUSB over USB/IP (yes-we-scan.app)
108. CVE-2026-47243:Kata Containers 通過 virtiofs 實現從 guest-root 到 host-root 的權限提升 CVE-2026-47243: Kata Containers guest-root to host-root escape via virtiofs (www.openwall.com)
113. 依賴冷卻時間不公平;我們應該改用分階段推出 Dependency cooldowns are unfair; we should use phased rollouts instead (illegalcode.net)
117. Gobee:使用 Go 語言編寫 eBPF 程序,並通過 clang 進行轉譯 Gobee: write eBPF programs in Go, transpiled via clang (github.com)
118. Ursula:面向 HTTP 事件流的、採用“每個核心一個線程”架構的多 Raft 運行時(Rust 實現) Ursula: thread-per-core, multi-Raft Rust runtime for HTTP event streams (github.com)
121. Go 語言中的 L1 指令緩存集衝突、關聯度與代碼對齊 L1 instruction cache set conflicts, associativity, and code alignment in Go (blog.andr2i.com)
124. Python 3.15:那些未被廣泛報道的新特性 Python 3.15: features that didn''t make the headlines (blog.changs.co.uk)
129. [RFC] LLVM 基金會關於支持標準文檔開放獲取的聲明 [RFC] LLVM Foundation statement in favor of open access to standards documents (discourse.llvm.org)
132. 那些咄咄逼人的AI爬蟲,讓運營維基變得有點讓人頭疼 Aggressive AI scrapers are making it kinda suck to run wikis (weirdgloop.org)
133. Waterfox 6.6.13 版本移除了 Startpage 作為默認搜索提供商 Waterfox Release 6.6.13 removes Startpage as default search provider (www.waterfox.com)
136. OpenAI的一個模型推翻了離散幾何學中的一項核心猜想 An OpenAI model has disproved a central conjecture in discrete geometry (openai.com)
141. Chromium在4年後發佈了針對該漏洞的修復補丁,結果發現該漏洞實際上並未得到修復 Chromium publishes fixed exploit 4 years later, turns out it''s actually unfixed (infosec.exchange)
142. 圍繞用戶修改智能電視軟件權利的多年之爭即將進入庭審階段 Yearslong fight over users'' right to tweak smart TV software heads to trial (arstechnica.com)
143. XSS 對密鑰而言致命:認證機制的隱性風險 XSS Is Deadly for Passkeys: The Hidden Risk of Attestation None (scotthelme.co.uk)
144. Linux 內核中 __ptrace_may_access() 函數的邏輯漏洞 (CVE-2026-46333) Logic bug in the Linux kernel''s __ptrace_may_access() function (CVE-2026-46333) (cdn2.qualys.com)
146. glibc 的 malloc 中如何實現跨線程雙重釋放檢測 How cross-thread double free detection could work in glibc malloc (kallus.org)
150. modulejail:通過將所有當前未使用的模塊加入黑名單,主動縮小 Linux 主機的內核模塊攻擊面 modulejail: Proactively shrink a Linux host''s kernel-module attack surface by blacklisting every module not currently in use (github.com)
151. Grafana Labs 的 GitHub 倉庫因 TanStack npm 供應鏈攻擊而遭到入侵 Grafana Labs GitHub repos breached via TanStack npm supply chain attack (grafana.com)
162. GitHub 源代碼洩露事件——TeamPCP 聲稱已獲取內部源代碼 GitHub Source Code Breach - TeamPCP Claims Access to Internal Source Code (cybersecuritynews.com)
163. 如果你就那樣坐在那裡無所事事,那至少要把這無所事事做得像樣點 If you''re just going to sit there doing nothing, at least do nothing correctly (devblogs.microsoft.com)
165. 我建立了一個虛擬博物館,裡面幾乎囊括了你能想到的所有操作系統 I''ve built a virtual museum with nearly every operating system you can think of (www.youtube.com)
173. 關於基於屬性的測試在驗證形式化規格說明方面的“不可思議的有效性” On the Unreasonable Effectiveness of Property-Based Testing for Validating Formal Specifications (proofsandintuitions.net)
174. pg_deltax:一款基於Apache許可證的PostgreSQL時間序列擴展 pg_deltax: Apache-licensed time-series extension for PostgreSQL (github.com)
178. 我們在強化 Turso 安全性的過程中,如何利用 Quint 發現 SQLite 中超過 10 個漏洞 How we used Quint to find over 10 bugs in SQLite while hardening Turso (turso.tech)
179. 技術揭秘:構建實時和絃識別器 Under the Hood: Building a Real-Time Chord Recognizer (whatchord.earthmanmuons.com)
186. 一個用 C 語言編寫的自平衡跳躍表(又稱“splay-list”)庫 A self-balancing skip-list (aka "splay-list") library in C (codeberg.org)
187. Lime,一款可在運行時合併語法的解析器生成器 Lime, a parser generator that can merge grammars at runtime (codeberg.org)
188. Noxu DB,Berkeley DB Java Edition 的 Rust 移植版 Noxu DB, a Rust port of Berkeley DB Java Edition (codeberg.org)
189. ProseMirror 模型在富文本轉換中的超乎尋常的有效性 The Unreasonable Effectiveness of ProseMirror Model in Rich Text Transformation (smoores.dev)
190. Windows DLL 加載器鎖:Rust 線程如何導致 JVM 掛起 The Windows DLL loader lock: how a Rust thread can hang your JVM (questdb.com)
195. 利用代數和大型語言模型在Lean中驗證飛行計劃漏洞修復 Using algebra and LLMs to verify a flight-plan bug fix in Lean (jameshaydon.github.io)
199. Casuarina Linux 簡介:一款基於 glibc 的 Chimera Linux 衍生版 Introducing Casuarina Linux: A glibc-Based Chimera Linux Derivative (casuarina.org)
201. CISA管理員在GitHub上洩露了AWS GovCloud密鑰 CISA Admin Leaked AWS GovCloud Keys on Github (krebsonsecurity.com)
204. cargo-crap:在 AI 生成的 Rust 代碼中發現未經測試的複雜性 cargo-crap: Finding Untested Complexity in AI-Generated Rust Code (minikin.me)
209. Flathub究竟是如何運作的?CDN 和緩存層 How does Flathub even work? The CDN and caching layer (barthalion.blog)
215. 瀏覽器標籤頁中的類Linux內核——深入解析BrowserPod架構 A Linux-like kernel in a browser tab - deep dive in the BrowserPod architecture (labs.leaningtech.com)
219. 使用 OpenCode、Llama.cpp 和 Qwen 3.6 查找您代碼中的錯誤 Find bugs in YOUR code using OpenCode, Llama.cpp and Qwen3.6 (wtarreau.blogspot.com)
220. FediMeteo、HAProxy 與不浪費 snac 線程的藝術 FediMeteo, HAProxy, and the art of not wasting snac threads (it-notes.dragas.net)
222. Calvin - 決定論、分佈式 ACID 事務(2020) Calvin - Determinism, Distributed ACID transactions (2020) (www.mydistributed.systems)
225. 研究人員稱微軟在BitLocker中秘密植入了後門 Researcher says Microsoft secretly built a backdoor into BitLocker (www.techspot.com)
226. 使用 Claude Code 對 Android 惡意軟件進行逆向工程 Reverse engineering Android malware with Claude Code (zanestjohn.com)
227. 在 Mac 上反轉《Grateful Dead: D2S2》(2022) Reversing ‘Grateful Dead: D2S2’ on Mac (2022) (blog.os9.ca)
240. 克勞德·科德成功讓 Adobe Lightroom 在 Linux 上運行起來 Claude Code managed to get Adobe Lightroom working on Linux (github.com)
244. Fast16:這款早於“震網”病毒的破壞工具旨在破壞核武器模擬系統 Fast16: Pre-Stuxnet Sabotage Tool Was Built to Subvert Nuclear Weapons Simulations (www.security.com)
247. DeepSeek-V4-Flash 意味著大型語言模型(LLM)的引導技術再次引起關注 DeepSeek-V4-Flash means LLM steering is interesting again (www.seangoedecke.com)
251. 多語言Lisp:Common Lisp、Racket、Clojure、Emacs Lisp Hyperpolyglot Lisp: Common Lisp, Racket, Clojure, Emacs Lisp (hyperpolyglot.org)
255. Tomy Tutor 與 1983 年的家用電腦現狀 The Tomy Tutor and the state of 1983 home computers (oldvcr.blogspot.com)
262. triad:面向 River Wayland 合成器的數據導向型窗口管理器 triad: data-oriented window manager for the River Wayland compositor (github.com)
263. 近期內核漏洞利用、攻擊面縮減、IPSEC示例 Recent Kernel exploits, attack surface reduction, example IPSEC (www.openwall.com)
264. 《系統編程入門》第一部分:程序員編寫程序(2025) Starting Systems Programming, Pt 1: Programmers Write Programs (2025) (eblog.fly.dev)
265. 一款適用於 Unix/Linux 系統的 X11 平臺、風格類似 90 年代 Keygen 的工具 A 90''s era Keygen-like for X11 for Unix/Linux (github.com)
268. 第13屆“Virtual Bevy”線上聚會的錄像現已發佈在YouTube上 Virtual Bevy Meetup 13 Recordings now on YouTube (rustunit.com)
270. 廉價智能門鈴存在全車隊賬戶接管和通話劫持漏洞 Cheap smart doorbell allows fleet-wide account takeover and call hijacking (www.abgeo.dev)
274. 使用 Rust 解析 Godot 的 .tres 文件並遍歷資源圖 Using Rust to parse Godot .tres files and walk the resource graph (assethoard.com)
278. CVE-2026-40369:通過 NtQuerySystemInformation 實現內核地址任意遞增 CVE-2026-40369: Arbitrary Kernel Address Increment via NtQuerySystemInformation (github.com)
284. 針對 Pixel 10 的零點擊漏洞利用鏈:一扇門關上,另一扇窗打開 A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens (projectzero.google)
286. 錯誤考古學:藉助大型語言模型破解一個長達十年的 Swift/C 謎題 Bug Archeology: Solving a decade-old Swift/C mystery (with LLMs) (samkhawase.com)
291. 舊的科技世界正在消亡,而新的卻無法誕生 The old world of tech is dying and the new cannot be born (www.baldurbjarnason.com)
295. claude-for-legal:一套用於法律工作流的插件 claude-for-legal: A suite of plugins for legal workflows (github.com)
296. Volkswagen——可檢測測試在持續集成(CI)服務器上運行時的情況,並確保測試通過(2015) Volkswagen- detects when your tests are being run in a CI server, and makes them pass (2015) (github.com)