工程趣聞 ★ Latest
2026-10-07 Project Zero 談緊急修補：不等完整更新，先用四種手段止血
primary=https://projectzero.google/2026/10/emergency-patching.html
1 min read Read →
charlie@blog:~/posts $ cat README.md
Dev notes on
Linux, Docker
& backend.
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
Posts
1284
Topics
10
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-10-0
» 2026-10-0
» 2026-10-0
» 2026-10-0
charlie@arch:~/blog$
All articles
1284 total2026-10-07 Payload CMS 在 SQLite 與 Postgres 有 CVSS 9.8 SQL 注入
primary=https://github.com/advisories/GHSA-v49j-62m6-pgrr primary=https://github.com/payloadcms/payload/commit/a742140ab4fca3160f7f83e9e7d996552ffc3b5a primary=https://github.com/payloadcms/payload/releases/tag/v3.88.0
1 min Read →
2026-10-07 OpenSSH 10.6 停用 LZ77 壓縮，封堵跨通道明文回復
primary=https://www.openwall.com/lists/oss-security/2026/10/06/2 primary=https://www.openssh.com/releasenotes.html primary=https://arxiv.org/abs/2609.07709
1 min Read →
2026-10-07 Django 同日修補四個 CVE，formset 可被偽造 POST 越權
primary=https://www.djangoproject.com/weblog/2026/oct/06/security-releases/ primary=https://www.openwall.com/lists/oss-security/2026/10/06/3
2 min Read →
2026-10-07 DNS 根區 10 月 11 日改用 KSK-2024 簽章
primary=https://blog.cloudflare.com/root-ksk-2024-rollover/ primary=https://www.icann.org/resources/pages/ksk-rollover-en
1 min Read →
2026-10-07 WHATWG HTML 把 width 從 img 相關變動清單移除
primary=https://github.com/whatwg/html/commit/ba3400bb4f3d86477a5c8cfc07ff91fc0caaf21c primary=https://github.com/whatwg/html/issues/9371 primary=https://github.com/servo/servo/pull/48599 primary=https://github.com/whatwg/html/pull/5900
1 min Read →
2026-10-07 Kubernetes 淘汰 cgroup v1：v1.35 起 kubelet 預設拒絕啟動
primary=https://kubernetes.io/blog/2026/10/06/kubernetes-cgroups-v2-shift/ primary=https://kubernetes.io/blog/2026/01/30/new-cgroup-v1-to-v2-cpu-conversion-formula/
2 min Read →
2026-10-07 Polars 2.0 預設改走 streaming，不保證列順序
primary=https://pola.rs/posts/release-polars-2/ primary=https://docs.pola.rs/releases/upgrade/2/ primary=https://github.com/pola-rs/polars-2.0-benchmark
1 min Read →
2026-10-07 C++26 std::hive 實測：取代 std::list，不取代 vector
primary=https://lemire.me/blog/2026/08/02/how-fast-is-c26s-stdhive/ primary=https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2024/p0447r28.html primary=https://isocpp.org/blog/2026/10/how-fast-is-cpp26s-stdhive-daniel-lemire
1 min Read →
2026-10-07 Reflection 推出 501B 開放權重模型 Beam
primary=https://reflection.ai/blog/introducing-beam
1 min Read →
2026-10-07 Mistral Large 4 公開預覽：1T 參數 MoE，權重預計月底釋出
primary=https://mistral.ai/news/mistral-large-4/ primary=https://docs.mistral.ai/models/mistral-large-4
1 min Read →
2026-10-06 — CedarDB 以純 SQL 重做 Doom：邏輯與渲染全在資料庫
primary=https://cedardb.com/blog/sqldoom/
1 min Read →
2026-10-06 — Struts 舊版 RESTful mapper 的 OGNL 注入可達 RCE
primary=https://www.openwall.com/lists/oss-security/2026/10/05/10 primary=https://cwiki.apache.org/confluence/display/WW/S2-075
1 min Read →
2026-10-06 — Tinypool 2.1.1 修補 worker 選項原型污染，可致 RCE
primary=https://github.com/advisories/GHSA-5gmw-xhrv-c9v3 primary=https://github.com/tinylibs/tinypool/pull/134 primary=https://github.com/tinylibs/tinypool/releases/tag/v2.1.1
1 min Read →
2026-10-06 — vm2 沙箱逃逸：循環 AggregateError 繞過清洗達成 RCE
primary=https://github.com/advisories/GHSA-x965-fc75-jpqh primary=https://github.com/patriksimek/vm2/commit/c8c232530b860cfecf6f94bc8d0d0890aa381460
1 min Read →
2026-10-06 — COOP 與 COEP 標頭改為必須是 structured field 型別
primary=https://github.com/whatwg/html/commit/bf84f3c5a9cf87ac0a9f6461f32151971ad2279b primary=https://github.com/web-platform-tests/wpt/pull/63239
1 min Read →
2026-10-06 — Kubernetes 節點 swap 實測：gVisor 沙箱 pod 密度最高提升 3 倍
primary=https://kubernetes.io/blog/2026/10/05/scaling-kubernetes-workloads-with-node-swap/
1 min Read →
2026-10-06 — pgvector 0.8.7 修補 IVFFlat 建索引緩衝區溢位
primary=https://www.postgresql.org/about/news/pgvector-087-released-3392/ primary=https://github.com/pgvector/pgvector/issues/1036 primary=https://github.com/pgvector/pgvector/blob/master/CHANGELOG.md
1 min Read →
2026-10-06 — mold 3.0.0 以 Rust 重寫，改用 Cargo 建置
primary=https://github.com/rui314/mold/releases/tag/v3.0.0 primary=https://github.com/rui314/mold/releases/tag/v2.42.1
1 min Read →
2026-10-06 — Google 提出以情境完整性約束 AI agent 的資料流
primary=https://research.google/blog/open-and-emergent-problems-in-agentic-privacy-and-security-a-contextual-angle/ primary=https://research.google/pubs/open-and-emergent-problems-in-agentic-privacy-and-security-a-contextual-angle/
1 min Read →
2026-10-05 — 頁表隨連線數線性膨脹：Postgres 共享記憶體的隱藏成本
primary=https://frn.sh/pagetables/ primary=https://lkml.rescloud.iu.edu/hypermail/linux/kernel/2201.2/03246.html primary=https://clickhouse.com/blog/huge-pages-clickhouse-managed-postgres primary=https://www.percona.com/blog/why-linux-hugepages-are-super-important-for-database-servers-a-case-with-postgresql/
1 min Read →
2026-10-05 — Xray-core 憑證釘選繞過先被靜默修補，後又出現 CA 釘選缺口
primary=https://github.com/net4people/bbs/issues/672 primary=https://github.com/XTLS/Xray-core/commit/4632984b66a4f2ab3d4eda8deb9c48ac9911933c primary=https://github.com/XTLS/Xray-core/security/advisories/GHSA-5wf9-h793-w73c primary=https://github.com/XTLS/Xray-core/releases/tag/v26.2.6
1 min Read →
2026-10-05 — Workers KV Instant 改用 Quicksilver，讀取 p99 降到 1.62ms
primary=https://blog.cloudflare.com/workers-kv-instant/ primary=https://blog.cloudflare.com/quicksilver-v2-evolution-of-a-globally-distributed-key-value-store-part-1/ primary=https://developers.cloudflare.com/kv/api/
1 min Read →
2026-10-05 — 字串版 setTimeout 的 Trusted Types 違規改為同步丟例外
primary=https://github.com/whatwg/html/commit/6992cb519a02db34f653ddd54c50fad2565285f5
1 min Read →
2026-10-05 — 容器沙箱 gVisor 捐贈給 CNCF，治理轉向多方維護
primary=https://gvisor.dev/blog/2026/10/02/gvisor-cncf/ primary=https://github.com/cncf/sandbox/issues/521
1 min Read →