工程趣聞 ★ Latest
2026-09-18 — 十二年前救急寫的 174 行 PHP，今天正式棄用
primary=https://jakeasmith.com/blog/http-build-url/ primary=https://github.com/jakeasmith/http_build_url
1 min read Read →
charlie@blog:~/posts $ cat README.md
Dev notes on
Linux, Docker
& backend.
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
Posts
1101
Topics
9
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-09-1
» 2026-09-1
» 2026-09-1
» 2026-09-1
charlie@arch:~/blog$
All articles
1101 total2026-09-18 — Perl Imager 一次修兩洞：PNG 寫越界、EXIF 讀越界
primary=https://www.openwall.com/lists/oss-security/2026/09/17/6 primary=https://www.openwall.com/lists/oss-security/2026/09/17/5
1 min Read →
2026-09-18 — CoreDNS 自訂傳輸層繞過驗證，恐當機或遭竄改記錄
primary=https://github.com/advisories/GHSA-mrg3-qvqr-jw29 primary=https://github.com/advisories/GHSA-9gm5-9rfh-m6vx
1 min Read →
2026-09-18 — Grav CMS 單日七個安全公告，未驗證 RCE 與權限提升最嚴重
primary=https://github.com/advisories/GHSA-r94f-hx44-8jqf primary=https://github.com/advisories/GHSA-xhfv-7758-r9hx primary=https://github.com/advisories/GHSA-q2j8-x8hf-63ch primary=https://github.com/advisories/GHSA-f8wv-xp27-6gq7 primary=https://github.com/advisories/GHSA-vfmf-q6x9-cw96 primary=https://github.com/advisories/GHSA-4v9q-p283-qc2m primary=https://github.com/advisories/GHSA-jq29-c7v8-rg55
1 min Read →
2026-09-18 — Uber 導入錯誤歸屬機制，讓重試不再互相放大
primary=https://www.uber.com/en-US/blog/protecting-against-retry-storms/ primary=https://www.uber.com/us/en/blog/automated-dependency-analysis/
1 min Read →
2026-09-18 — Chrome 提案 rangegroup 元素，多滑塊 range 原生免手刻
primary=https://chromestatus.com/feature/5199707839266816 primary=https://open-ui.org/components/enhanced-range-input.explainer/ primary=https://github.com/openui/open-ui/pull/1173
2 min Read →
2026-09-18 — HCP Vagrant 分階段停用，三個日期決定遷移期限
primary=https://www.hashicorp.com/blog/hcp-vagrant-deprecation-important-dates-and-migration-guidance primary=https://developer.hashicorp.com/vagrant/vagrant-cloud/hcp-vagrant/storage-providers
1 min Read →
2026-09-18 — 指標管線捨棄 gostatsd，Atlassian 改採 OTel Collector
primary=https://www.cncf.io/blog/2026/09/17/opentelemetry-everywhere-migrating-a-metrics-platform-at-scale/
1 min Read →
2026-09-18 — ClickHouse 收編官方 Airflow provider，SQL operator 取代自訂 hook
primary=https://clickhouse.com/blog/clickhouse-airflow-provider primary=https://pypi.org/project/apache-airflow-providers-clickhousedb/ primary=https://airflow.apache.org/docs/apache-airflow-providers-clickhousedb/1.0.0/
2 min Read →
2026-09-18 — Verus 為 Rust 補上形式驗證，把正確性從測試變成證明
primary=https://www.amazon.science/blog/developing-provably-correct-rust-code-with-verus primary=https://github.com/verus-lang/verus
1 min Read →
2026-09-18 — GLM 推論導入 EPD 分離架構，吞吐衝到 3 倍
primary=https://z.ai/blog/glm-built-its-inference-infrastructure primary=https://github.com/fla-org/flash-linear-attention/pull/1180
1 min Read →
📡 科技日報 — 2026-09-18
🚨 今日科技重點 Cisco ISE曝滿分零時差漏洞，攻擊者…
1 min Read →
2026-09-17 — 用稀有掉落機率逆推《異星工廠》的亂數狀態
primary=https://gegell.github.io/posts/factorio-rng/
1 min Read →
2026-09-17 — BIND 9 修補14漏洞，一個請求癱瘓 named
primary=https://www.openwall.com/lists/oss-security/2026/09/16/4
1 min Read →
2026-09-17 — KVM/arm64 巢狀虛擬化型別截斷：主機分頁被寫壞
primary=https://www.openwall.com/lists/oss-security/2026/09/16/14
1 min Read →
2026-09-17 — djust 單日爆 12 個安全公告，最高 CVSS 8.8
primary=https://github.com/advisories/GHSA-7prp-2623-8g45 primary=https://github.com/advisories/GHSA-xhhm-f6hp-2qwj primary=https://github.com/advisories/GHSA-c7c5-5j6r-q957
2 min Read →
2026-09-17 — MSVC 改用 LLVM-libc，數學函式達成位元級一致
primary=https://devblogs.microsoft.com/cppblog/bringing-correctly-rounded-math-to-production-with-llvm-libc/
1 min Read →
2026-09-17 — FFI 模組轉為預設啟用，不再需要實驗旗標
primary=https://nodejs.org/en/blog/release/v26.9.0
1 min Read →
2026-09-17 — OpenBao靠CNPG達成RPO=0，憑證輪替藏斷線陷阱
primary=https://www.cncf.io/blog/2026/09/16/running-openbao-on-kubernetes-with-a-cloudnativepg-postgresql-backend/
1 min Read →
2026-09-17 — ClickHouse dbt adapter 改用 Rust 引擎，進 public beta
primary=https://clickhouse.com/blog/clickhouse-is-now-available-on-the-dbt-platform
1 min Read →
2026-09-17 — Go 1.27：小物件配置換成專用配置函式
primary=https://go.dev/blog/size-specialized-allocations
1 min Read →
2026-09-17 — Vera Rubin首測：推論輸出比GB300快最高3.7倍
primary=https://blogs.nvidia.com/blog/vera-rubin-nvl72-mlperf-inference/
1 min Read →
📡 科技日報 — 2026-09-17
🚨 今日科技重點 一個惡意瀏覽器擴充功能就能同時挾持 Chr…
1 min Read →
2026-09-16 — 電子紙相框：鳥鳴辨識結果即時拼成十九世紀鳥類插畫
primary=https://github.com/arnegiacomo/fugleramme primary=https://github.com/arnegiacomo/fugleramme/releases/tag/v0.21.3 primary=https://github.com/arnegiacomo/fugleramme/blob/main/docs/hardware.md primary=https://github.com/arnegiacomo/fugleramme/blob/main/src/fugleramme/render/dither.py primary=https://github.com/arnegiacomo/fugleramme/blob/main/src/fugleramme/render/collage.py primary=https://github.com/arnegiacomo/fugleramme/blob/main/src/fugleramme/picks.py primary=https://github.com/arnegiacomo/fugleramme/blob/main/src/fugleramme/panel.py primary=https://news.ycombinator.com/item?id=49711544
1 min Read →
2026-09-16 — @zereight/mcp-gitlab 唯讀模式、身分驗證、傳輸防護一次被攻破
primary=https://github.com/advisories/GHSA-5648-rgj9-v224 primary=https://github.com/advisories/GHSA-2h44-8472-frjj primary=https://github.com/advisories/GHSA-vmp7-252j-cwp7
2 min Read →