工程趣聞 ★ Latest
2026-08-22 — Kobo 變迷你電腦、意外攔截美軍電話路由、開源 TTS 首字延遲壓到 50 毫秒
primary=https://bandarlabs.github.io/Cobalt/ primary=https://lina.sh/blog/hijacking-e164-arpa primary=https://nari-labs.com/blog/qwen3-tts-speed-cost-frontier/
1 min read Read →
charlie@blog:~/posts $ cat README.md
Dev notes on
Linux, Docker
& backend.
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
Posts
924
Topics
9
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-08-2
» 2026-08-2
» 2026-08-2
» 2026-08-2
charlie@arch:~/blog$
All articles
924 total2026-08-22 — JSONata、Hydra 爆任意程式碼執行漏洞，libgit2 SSH 指令注入本週隨 Debian 更新修補
primary=https://github.com/advisories/GHSA-66mm-25pp-rfff primary=https://github.com/advisories/GHSA-2cp2-2r3c-7p7r primary=https://github.com/libgit2/libgit2/security/advisories/GHSA-qqwh-747c-fpx2 primary=https://lists.debian.org/debian-security-announce/2026/msg00364.html
1 min Read →
2026-08-22 — GitHub Actions 用 microVM 隔離 AI Agent、OpenTelemetry 把慢查詢轉成可排序指標
primary=https://github.com/github/gh-aw/pull/45006 primary=https://docs.docker.com/ai/sandboxes/architecture/ primary=https://www.docker.com/blog/running-ai-agents-in-github-actions-with-docker-sandboxes/ primary=https://opentelemetry.io/docs/specs/semconv/database/ primary=https://github.com/causely-oss/slow-query-lab primary=https://www.cncf.io/blog/2026/08/21/how-to-turn-slow-queries-into-actionable-reliability-metrics-with-opentelemetry/
1 min Read →
2026-08-22 — ClickHouse 以 cgroup 隔離 Postgres 背景服務、26.7 片語搜尋索引加速 40 倍，DuckDB Java Driver 支援分塊讀取
primary=https://clickhouse.com/blog/protect-postgres-from-supporting-processes primary=https://clickhouse.com/blog/clickhouse-release-26-07 primary=https://github.com/duckdb/duckdb-java/pull/682 primary=https://duckdb.org/2026/08/21/chunked-query-results-java-driver.html
2 min Read →
2026-08-22 — 黑箱信心校準、LLM 服務叢集剖析與方向感知動量更新三篇新論文
primary=https://arxiv.org/abs/2608.19323 primary=https://arxiv.org/abs/2608.19659 primary=https://arxiv.org/abs/2608.19491
1 min Read →
2026-08-22 — Rust 編譯器雙重進展：新一代 trait solver 上 nightly、函式多載進入試驗
primary=https://blog.rust-lang.org/2026/08/21/enabling-next-solver-on-nightly/ primary=https://github.com/rust-lang/rust/issues/160895 primary=https://blog.rust-lang.org/inside-rust/2026/08/19/overloading-experiment/ primary=https://github.com/rust-lang/rust/issues/153629 primary=https://github.com/rust-lang/rust/pull/160882 primary=https://github.com/rust-lang/rust/pull/158645
1 min Read →
2026-08-22 — WHATWG HTML 三項規範修正:模組對照表清理、command/popover IDL 反射修正、表單控制項置中改用 CSS
primary=https://github.com/whatwg/html/commit/508a037333d8a1806504303aeb489d931fabbef6 primary=https://github.com/whatwg/html/commit/a95983cf5eed71e8984898061e538232a0f56869 primary=https://github.com/whatwg/html/commit/6543b51274ce6e6acb8942967a442339422f6076 primary=https://github.com/w3c/csswg-drafts/issues/14190
2 min Read →
📡 科技日報 — 2026-08-22
🚨 今日科技重點 Apple 大砍 Siri、Vision …
2 min Read →
2026-08-21 — 從 Find My 逆向工程到面試木馬，再到 AliExpress 用 WebAudio 偷做裝置指紋
primary=https://zerotistic.blog/posts/find-my-people-linux/ primary=https://www.codedge.de/posts/how-to-compromise-your-system-with-a-job-interview primary=https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html
1 min Read →
2026-08-21 — Mailpit 兩起 WebSocket 與 SMTP 記憶體漏洞同日修補，gettext-converter 原型污染同步揭露
primary=https://github.com/advisories/GHSA-8r62-w5wh-fc5m primary=https://github.com/advisories/GHSA-r553-m4fv-5v97 primary=https://github.com/axllent/mailpit/commit/8720c6bd8281fc00d458081908f1dbef8e59a98c primary=https://github.com/advisories/GHSA-f4jp-rw7w-ccwg
1 min Read →
2026-08-21 — Cloudflare OAuth 開放可選 scope 同意,Microsoft Go 1.27.0-1 讓 systemcrypto 轉為預設
primary=https://blog.cloudflare.com/task-based-oauth-consent/ primary=https://devblogs.microsoft.com/go/go-1-27-0-1-microsoft-build-now-available/
1 min Read →
2026-08-21 — Kubernetes 三分支同步修補、Docker Verified Publisher 開放自助申請、CNCF 談雲原生資料主權
primary=https://github.com/kubernetes/kubernetes/releases/tag/v1.36.4 primary=https://github.com/kubernetes/kubernetes/releases/tag/v1.35.8 primary=https://github.com/kubernetes/kubernetes/releases/tag/v1.34.11 primary=https://www.docker.com/blog/docker-verified-publisher-applications-are-now-self-serve/ primary=https://www.cncf.io/blog/2026/08/20/german-ciphers-telegrams-and-cloud-native-data-sovereignty/
1 min Read →
2026-08-21 — NVMe 讓 Postgres 快 9 倍、Shopify 靠 ClickHouse 收攏 observability、DuckDB v2.0 換上 PEG parser
primary=https://clickhouse.com/blog/posette-talk-recap-postgres-isnt-slow-your-storage-is primary=https://clickhouse.com/blog/shopify-observability-at-global-scale primary=https://duckdb.org/2026/08/20/duckdb-20-peg-parser.html
1 min Read →
2026-08-21 LiquidAI 推測解碼技術 DSpark 加速 LFM2.5，Bounded Agents 論文以代理主體鏈框住多代理委派風險
primary=https://huggingface.co/blog/LiquidAI/lfm25-dspark primary=https://huggingface.co/papers/2608.15888
1 min Read →
2026-08-21 — Rust 供應鏈攻擊、1.98.0 發布與 CppCon 效能工程齊聚後端動態
primary=https://cppcon2026.sched.com/event/2RT6C/in-pursuit-of-a-6000-fps-game-boy-emulator primary=https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/ primary=https://blog.rust-lang.org/2026/08/20/Rust-1.98.0/
1 min Read →
2026-08-21 — Bun 1.4 完成 Rust 重寫、HTML 新增宣告式亂序串流、Svelte 5.56.10 修正 CSS 與 SSR 衍生值
primary=https://bun.sh/blog/bun-v1.4 primary=https://github.com/whatwg/html/commit/2ff023fbe4306f79bca8ef3aec27473455d2e190 primary=https://github.com/sveltejs/svelte/releases/tag/svelte%405.56.10
2 min Read →
📡 科技日報 — 2026-08-21
🚨 今日科技重點 NSA／CISA／FBI 聯合預警：駭客用…
1 min Read →
2026-08-20 — 玩笑網域捲入俄烏戰事、GPU 暴力破解渡假村定位、Google 用表單取代 Git tag 發原始碼
primary=https://sprocketfox.io/xssfox/2026/08/19/sondehub-and-war/ primary=https://windbornesystems.com/blog/ua-1093 primary=https://yassa9.github.io/osint/gralhix-004/ primary=https://github.com/yassa9/geoint/tree/main/gralhix_004 primary=https://gralhix.com/list-of-osint-exercises/osint-exercise-004/ primary=https://grapheneos.social/@GrapheneOS/117057099753905023 primary=https://www.androidauthority.com/google-pixel-kernel-code-forms-3696441/
1 min Read →
2026-08-20 — SearXNG MCP、Moby BuildKit 與 Ceph 同日修補多起高風險漏洞
primary=https://github.com/advisories/GHSA-q87f-qc2r-2gw4 primary=https://github.com/advisories/GHSA-wppf-h75h-6pm6 primary=https://github.com/advisories/GHSA-hjwh-xvfw-qrwj primary=https://github.com/advisories/GHSA-72x6-4j93-7w86 primary=https://github.com/advisories/GHSA-7236-3392-c5c6 primary=https://www.openwall.com/lists/oss-security/2026/08/19/4 primary=https://github.com/ceph/ceph/releases/tag/v20.2.4 primary=https://github.com/ceph/ceph/releases/tag/v19.2.6
2 min Read →
2026-08-20 — Cloudflare Workers 遠端計時器側信道攻擊解密，VS Code MSSQL v1.45 帶來 SQL 格式化與 Azure 佈建 GA
primary=https://arxiv.org/abs/2608.17043 primary=https://blog.cloudflare.com/revisiting-spectre-attacks-on-workers/ primary=https://devblogs.microsoft.com/azure-sql/vscode-mssql-august2026/ primary=https://github.com/microsoft/vscode-mssql/releases
1 min Read →
2026-08-20 — Kyverno 轉型平台原語，ngrok 拆解 Kubernetes probe 底層機制
primary=https://www.cncf.io/blog/2026/08/19/kyverno-is-a-platform-primitive-not-a-security-tool/ primary=https://ngrok.com/blog/probes primary=https://github.com/ngrok/webernetes
1 min Read →
2026-08-20 — OpenAI 因網路攻擊能力風險暫停前沿 RL 訓練，LiquidAI 以量化感知蒸餾發布 LFM2.5 Q4_0 邊緣模型
primary=https://openai.com/index/pacing-model-development-cyber-capabilities/ primary=https://huggingface.co/blog/LiquidAI/qad primary=https://huggingface.co/LiquidAI/LFM2.5-2.6B-GGUF
1 min Read →
2026-08-20 — Go 1.27 泛型方法與 goroutine 洩漏偵測正式上線，Rust 開放 FFI 重載 nightly 實驗
primary=https://go.dev/doc/go1.27 primary=https://blog.rust-lang.org/inside-rust/2026/08/19/overloading-experiment/ primary=https://github.com/rust-lang/rust/issues/153629
1 min Read →
2026-08-20 — MicroLighter 2.1.0：用 CSS Custom Highlight API 打造 2KB 語法高亮器
primary=https://daverupert.com/2026/08/microlighter/ primary=https://github.com/davatron5000/microlighter primary=https://davatron5000.github.io/microlighter/custom-element.html
1 min Read →
2026-08-19 — 從救磚筆電到火車掃描機，工程師的三則硬體與開機安全奇聞
primary=https://quantum5.ca/2026/08/16/fixing-bricked-amd-7040-series-framework-13-laptop-with-20-tools/ primary=https://philo.gay/linecam/ primary=https://www.openwall.com/lists/oss-security/2026/08/18/1
1 min Read →