charlie@blog:~/posts $ cat README.md

Dev notes on
Linux, Docker
& backend.

Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.

Posts
907
Topics
9
AI 前沿 Daily News 前端前線 工程趣聞 平台與維運 後端工坊 產業脈動 資安雷達 資料與儲存
zsh — charlie@arch — 82×24
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-08-2
» 2026-08-2
» 2026-08-2
» 2026-08-2
charlie@arch:~/blog$

工程趣聞 ★ Latest

2026-08-20 — 玩笑網域捲入俄烏戰事、GPU 暴力破解渡假村定位、Google 用表單取代 Git tag 發原始碼

primary=https://sprocketfox.io/xssfox/2026/08/19/sondehub-and-war/ primary=https://windbornesystems.com/blog/ua-1093 primary=https://yassa9.github.io/osint/gralhix-004/ primary=https://github.com/yassa9/geoint/tree/main/gralhix_004 primary=https://gralhix.com/list-of-osint-exercises/osint-exercise-004/ primary=https://grapheneos.social/@GrapheneOS/117057099753905023 primary=https://www.androidauthority.com/google-pixel-kernel-code-forms-3696441/

1 min read Read →

All articles

907 total
資安雷達

2026-08-20 — SearXNG MCP、Moby BuildKit 與 Ceph 同日修補多起高風險漏洞

primary=https://github.com/advisories/GHSA-q87f-qc2r-2gw4 primary=https://github.com/advisories/GHSA-wppf-h75h-6pm6 primary=https://github.com/advisories/GHSA-hjwh-xvfw-qrwj primary=https://github.com/advisories/GHSA-72x6-4j93-7w86 primary=https://github.com/advisories/GHSA-7236-3392-c5c6 primary=https://www.openwall.com/lists/oss-security/2026/08/19/4 primary=https://github.com/ceph/ceph/releases/tag/v20.2.4 primary=https://github.com/ceph/ceph/releases/tag/v19.2.6

2 min Read →
資安雷達

2026-08-19 — CPython urllib 認證外洩、Lemur SSRF 連環公告與 moby/go-archive 解壓縮路徑穿越三則資安修補

primary=https://www.openwall.com/lists/oss-security/2026/08/18/3 primary=https://github.com/python/cpython/pull/155696 primary=https://github.com/advisories/GHSA-xpmj-wjcp-6pww primary=https://github.com/advisories/GHSA-f3qq-49m6-rw8f primary=https://github.com/advisories/GHSA-v5rc-cpwc-cfpr primary=https://github.com/advisories/GHSA-hfg8-hc9c-6c3h

2 min Read →
平台與維運

2026-08-19 — Agent 沙盒逃逸攻陷 Hugging Face、Cursor 環境變數投毒漏洞,以及 Grafana 前端 Session Replay

primary=https://huggingface.co/blog/agent-intrusion-technical-timeline primary=https://www.docker.com/blog/ai-agent-security-systems-problem/ primary=https://www.pillar.security/blog/the-agent-security-paradox-when-trusted-commands-in-cursor-become-attack-vectors primary=https://github.com/cursor/cursor/security/advisories/GHSA-82wg-qcm4-fp2w primary=https://www.docker.com/blog/coding-agent-horror-stories-the-command-you-already-approved/ primary=https://grafana.com/blog/visual-playback-of-the-user-journey-introducing-session-replay-in-grafana-cloud-frontend-observability

1 min Read →
資安雷達

2026-08-18 — vm2 沙箱四洞齊爆、AI Autofix 引入注入漏洞攻陷 Snowflake Jira、MLflow 授權與 SSRF 三連環洞同日修補

primary=https://github.com/advisories/GHSA-m283-3h24-438v primary=https://github.com/advisories/GHSA-cfcw-xp6x-25gj primary=https://github.com/advisories/GHSA-m5w8-4gq2-6f8x primary=https://github.com/advisories/GHSA-v836-6xw4-9cx3 primary=https://www.wiz.io/blog/red-agent-snowflake-copilot-cicd-bug primary=https://github.com/advisories/GHSA-gqch-g4w5-7qcw primary=https://github.com/advisories/GHSA-3p64-6gvh-82v5 primary=https://github.com/advisories/GHSA-7gwp-5pfp-969j

3 min Read →
產業脈動

2026-08-18 — Google 以 ADK 打造零信任 Agent 防線,Claude 在 Microsoft Foundry 補齊五項工具能力

primary=https://developers.googleblog.com/en/build-zero-trust-ai-agents-with-googles-agent-development-kit/ primary=https://adk.dev/ primary=https://github.com/GoogleCloudPlatform/generative-ai/tree/main/agents/adk/zero-trust-agents primary=https://devblogs.microsoft.com/foundry/five-new-claude-capabilities-now-available-in-foundry/ primary=https://platform.claude.com/docs/en/build-with-claude/claude-in-microsoft-foundry primary=https://platform.claude.com/docs/en/agents-and-tools/tool-use/web-search-tool primary=https://platform.claude.com/docs/en/agents-and-tools/tool-use/web-fetch-tool

1 min Read →