工程趣聞 ★ Latest
2026-10-21 — int 6 取代不了 ud2：trap 回報的是下一條指令
primary=https://devblogs.microsoft.com/oldnewthing/20261019-00/ primary=https://devblogs.microsoft.com/oldnewthing/20260910-00/
1 min read Read →
charlie@blog:~/posts $ cat README.md
Dev notes on
Linux, Docker
& backend.
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
Posts
1379
Topics
10
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-10-2
» 2026-10-2
» 2026-10-2
» 2026-10-2
charlie@arch:~/blog$
All articles
1379 total2026-10-21 — wasmtime Cranelift 值索引溢位，惡意 Wasm 可逃出沙箱
primary=https://rustsec.org/advisories/RUSTSEC-2026-0380.html primary=https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-897f-g5gm-fmxm primary=https://github.com/bytecodealliance/wasmtime/pull/12613
1 min Read →
2026-10-21 — Pillow 縮圖遇 lossless JPEG 堆積溢位
primary=https://github.com/advisories/GHSA-8g5g-8vmr-9782 primary=https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75 primary=https://github.com/python-pillow/Pillow/releases/tag/13.0.0
1 min Read →
2026-10-21 — eMudhra 八張中繼 CA 私鑰可被還原，信任庫須更新
primary=https://blog.cloudflare.com/emudhra-certificate-compromise/ primary=https://emudhra.we-have-a-problem.com/
1 min Read →
2026-10-21 — tsrs：TypeScript 7 型別檢查器的 Rust 移植版問世
primary=https://blog.cloudflare.com/typescript-rust-port/ primary=https://github.com/oxc-project/tsrs primary=https://building.owner.com/tsrs
1 min Read →
2026-10-21 — TypeScript 7.1 Beta：ambient module 可依 import attributes 宣告
primary=https://devblogs.microsoft.com/typescript/announcing-typescript-7-1-beta/ primary=https://github.com/microsoft/TypeScript/pull/63931
1 min Read →
2026-10-21 — Vault 2.2 PKI 支援公有 CA 並加入 ML-DSA
primary=https://www.hashicorp.com/blog/modernize-pki-improve-crypto-agility-and-prepare-for-post-quantum-readiness primary=https://developer.hashicorp.com/vault/docs/secrets/transit#crypto-agility primary=https://developer.hashicorp.com/vault/docs/secrets/pki/considerations
1 min Read →
2026-10-21 — Jepsen 測 Orkes Conductor：工作流會消失或假完成
primary=https://jepsen.io/analyses/orkes-conductor-5.3.2 primary=https://github.com/conductor-oss/java-sdk/pull/175
1 min Read →
2026-10-21 — C++26 加入 #embed，內嵌二進位檔不必再靠 xxd
primary=https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2025/p1967r14.html primary=https://www.sandordargo.com/blog/2026/08/05/cpp26-embed
1 min Read →
2026-10-21 — Mistral 釋出 Voxtral 3，轉錄與 TTS 併入同一組 API
primary=https://mistral.ai/news/voxtral-3/ primary=https://docs.mistral.ai/models/voxtral-mini-transcribe-realtime-3-0
1 min Read →
2026-10-21 — DeepSeek 開源 DeepInfer 推論引擎，先放離線推論
primary=https://github.com/deepseek-ai/DeepInfer primary=https://huggingface.co/deepseek-ai/DeepSeek-V4.1-Flash-1017
2 min Read →
2026-10-19 — 8087 浮點加減法拆解：1648 條微碼裡的對齊與正規化
primary=https://www.righto.com/2026/10/8087-addition-subtraction-microcode.html primary=https://archive.org/details/8086familyusersm00inte/page/n16/mode/1up primary=https://github.com/a-mcego/granite/tree/main/tools/8087mc
1 min Read →
2026-10-19 — Apache Camel 一次修 38 個 CVE，OAuth 驗證失敗會放行請求
primary=https://www.openwall.com/lists/oss-security/2026/10/18/2 primary=https://camel.apache.org/security/CVE-2026-83531.html primary=https://camel.apache.org/security/CVE-2026-80312.html
1 min Read →
2026-10-19 — pgBackRest 2.60.0：還原遇壞頁即中止，並新增預取
primary=https://pgbackrest.org/release.html#2.60.0 primary=https://www.postgresql.org/about/news/pgbackrest-2600-released-3416/
1 min Read →
2026-10-19 — Valen 的借用檢查器改成從函式尾端往回掃
primary=https://verdagon.dev/blog/reverse-borrow-checking primary=https://github.com/valen-lang/valen
1 min Read →
駕馭 LLM｜用唯讀 subagent 隔離探索 context
把「大量搜尋、讀檔」的工作交給一個唯讀的 subagent，主對話只收到摘要，既保護 context，也用工具白名單擋住誤改檔案。
4 min Read →
2026-10-17 — NIST 橢圓曲線種子之謎解開：來自 1997 年時間戳記
primary=https://words.filippo.io/seeds-solved/ primary=https://www.anthropic.com/research/ecdsa-curve-origins
1 min Read →
2026-10-17 — BeyondTrust Remote Support 認證繞過遭利用，CISA 列入 KEV
primary=https://www.cisa.gov/news-events/alerts/2026/10/16/cisa-urges-patching-critical-vulnerability-beyondtrust-remote-support primary=https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust
1 min Read →
2026-10-17 — Spotify 將生成式推薦推論從 vLLM 搬到 TensorRT-LLM
primary=https://engineering.atspotify.com/2026/10/advancing-generative-recommendation-inference-our-collaboration-with-nvidia-on-tensorrt-llm/ primary=https://arxiv.org/abs/2510.07784 primary=https://github.com/NVIDIA/TensorRT-LLM/pull/15424
1 min Read →
2026-10-17 — Vue 3.6.0-rc.12 修正 watch 清理時機回歸，Vapor 補轉場案例
primary=https://github.com/vuejs/core/releases/tag/v3.6.0-rc.12 primary=https://github.com/vuejs/core/blob/minor/CHANGELOG.md primary=https://github.com/vuejs/core/issues/15765 primary=https://github.com/vuejs/core/pull/15766
1 min Read →
2026-10-17 — n8n 遷官方 Helm chart，main pod 關閉持久化
primary=https://www.cncf.io/blog/2026/10/16/deploying-maintaining-and-migrating-production-n8n-on-eks/ primary=https://github.com/husne-fairwinds/n8n-sample
1 min Read →
2026-10-17 — DuckDB 一次把 JSON 字串欄位轉成型別欄位
primary=https://duckdb.org/2026/10/16/json-to-typed-columns.html
2 min Read →
2026-10-17 — gopls 加入互動式重構，LSP 提案讓語言伺服器能向使用者提問
primary=https://go.dev/blog/interactive-refactoring primary=https://github.com/microsoft/language-server-protocol/issues/1164
1 min Read →
2026-10-17 — Reflection 開源 Beam：501B MoE，Apache 2.0
primary=https://huggingface.co/blog/reflection-beam primary=https://huggingface.co/reflection/Beam-1.0-501B-A23B
1 min Read →
2026-10-16 — CGPM 決議廢除閏秒：UTC 自 2027 年 5 月 20 日起連續
primary=https://www.bipm.org/en/cgpm-2026/resolution-5 primary=https://www.doi.org/10.59161/CGPM2026RES5E
1 min Read →