工程趣聞 ★ Latest
2026-10-16 — CGPM 決議廢除閏秒：UTC 自 2027 年 5 月 20 日起連續
primary=https://www.bipm.org/en/cgpm-2026/resolution-5 primary=https://www.doi.org/10.59161/CGPM2026RES5E
1 min read Read →
charlie@blog:~/posts $ cat README.md
Dev notes on
Linux, Docker
& backend.
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
Posts
1355
Topics
10
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-10-1
» 2026-10-1
» 2026-10-1
» 2026-10-1
charlie@arch:~/blog$
All articles
1355 total2026-10-16 — rustls 0.23.46 修四則漏洞，含 PQ 降級
primary=https://rustsec.org/advisories/RUSTSEC-2026-0346.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0347.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0348.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0349.html
1 min Read →
2026-10-16 — Linux 七條 stable 同日修補 IPv4 校驗和漏洞 CVE-2026-99999
primary=https://lwn.net/Articles/1100611/ primary=https://lwn.net/ml/all/2026101533-CVE-2026-99999-beee%40gregkh/ primary=https://www.kernel.org/doc/html/latest/networking/checksum-offloads.html
1 min Read →
2026-10-16 — WhatsApp 世足決賽破每秒 3000 萬則訊息，Meta 如何撐住
primary=https://engineering.fb.com/2026/10/15/production-engineering/2026-world-cup-record-traffic-reliability-at-scale/ primary=https://engineering.fb.com/2018/05/22/open-source/open-sourcing-katran-a-scalable-network-load-balancer/ primary=https://engineering.fb.com/2014/11/05/production-engineering/introducing-proxygen-facebook-s-c-http-framework/
1 min Read →
2026-10-16 — JPEG XL 全面支援，實測網頁圖片仍以 AVIF 為先
primary=https://jakearchibald.com/2026/jpeg-xl-vs-avif/ primary=https://github.com/jakearchibald/image-codec-bench
1 min Read →
2026-10-16 — Job 卡在 Pending：先查 Kueue admission，再用 Headlamp 追
primary=https://kubernetes.io/blog/2026/10/14/tracing-kueue-admission-with-headlamp/ primary=https://github.com/headlamp-k8s/plugins/tree/main/kueue primary=https://kueue.sigs.k8s.io/docs/concepts/workload/
1 min Read →
2026-10-16 — Netflix 讓 Cassandra 直接讀 S3 備份，取代 Kafka/Flink 冷資料串流
primary=https://netflixtechblog.com/timeseries-tiered-storage-journey-kafka-flink-streams-to-native-cassandra-cold-reads-e59d597c9d60 primary=https://cassandra.apache.org/_/blog/Apache-Cassandra-4.1-Features-Pluggable-Memtable-Implementations.html
1 min Read →
2026-10-16 — NGINX 1.31.7 內建 GeoIP2 讀 MMDB，HTTP/2 改採 RFC 9218 優先權
primary=https://nginx.org/en/CHANGES primary=https://github.com/nginx/nginx/pull/1655 primary=https://github.com/nginx/nginx/pull/1520 primary=https://blog.nginx.org/blog/nginx-1-31-7-native-geoip2-support-http-2-priorities-and-quic-improvements
2 min Read →
2026-10-16 — Meta 釋出 Muse Spark Open 權重：816B MoE，收費門檻改看營收
primary=https://research.meta.ai/blog/muse-spark-open primary=https://huggingface.co/meta-models/Muse-Spark-Open-816B-A42B primary=https://research.meta.ai/static/muse-spark-open-evaluation-methodology
1 min Read →
2026-10-15 — curl HTTP/2 上傳 UAF 被證明可轉成 RCE
primary=https://daniel.haxx.se/blog/2026/10/14/a-uaf-turned-rce/ primary=https://curl.se/docs/CVE-2026-92392.html primary=https://daniel.haxx.se/blog/2026/10/14/curl-8-23-0/
1 min Read →
2026-10-15 — Linux vhost 快取未清除，本機可提權、guest 可逃逸
primary=https://www.openwall.com/lists/oss-security/2026/10/14/2 primary=https://git.kernel.org/linus/de845981da67a6b049080c87e605130b0c30adc5
1 min Read →
2026-10-15 — 多個 TLS 函式庫對 X.509 Name Constraints 判斷不一致
primary=https://www.openwall.com/lists/oss-security/2026/10/14/11 primary=https://kb.cert.org/vuls/id/573195 primary=https://github.com/pyca/cryptography/security/advisories/GHSA-m959-cc7f-wv43
1 min Read →
2026-10-15 — GitLab 正規表示式編譯器整數溢位，免登入 RCE（CVSS 10.0）
primary=https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/ primary=https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/
1 min Read →
2026-10-15 — Hyperdrive MySQL 快取 bug：節點寫入的位元組格式不一致
primary=https://blog.cloudflare.com/hyperdrive-mysql/ primary=https://dev.mysql.com/doc/dev/mysql-server/9.7.2/page_protocol_com_reset_connection.html
1 min Read →
2026-10-15 — React 四條支線改 Flight 協定，回覆解碼免掃描
primary=https://github.com/react/react/releases/tag/v19.3.1 primary=https://github.com/facebook/react/pull/37845
1 min Read →
2026-10-15 — Harbor 接上 Docker Sandboxes，agent 評測改在 microVM 跑
primary=https://www.docker.com/blog/harbor-docker-sandboxes-run-safe-reproducible-agent-evals/ primary=https://www.docker.com/blog/why-microvms-the-architecture-behind-docker-sandboxes/ primary=https://docs.harborframework.com/
1 min Read →
2026-10-15 — pg_vectorsearch 推出 PRISM 索引，挑戰 pgvector HNSW
primary=https://github.com/timescale/pg_vectorsearch primary=https://www.tigerdata.com/blog/announcing-pg_vectorsearch-scalable-open-source-vector-search-postgresql primary=https://github.com/timescale/pg_vectorsearch/blob/main/docs/maintenance.md
1 min Read →
2026-10-15 — Go 1.27 讓 HTTP/1 關閉未讀 body 時也能重用連線
primary=https://go.dev/blog/http-connection-reuse primary=https://go.dev/doc/go1.27
1 min Read →
2026-10-15 — DoSA 以分數上界略過全頭計分，1M TTFT 近減半
primary=https://arxiv.org/abs/2610.13990 primary=https://github.com/llm-sys/flash-indexer
1 min Read →
2026-10-14 — Rust 借用檢查器 11 年舊洞，欄位賦值可繞過 ‘static
primary=https://github.com/rust-lang/rust/issues/164250 primary=https://github.com/rust-lang/rust/pull/164277 primary=https://github.com/rust-lang/rust/issues/128225
2 min Read →
2026-10-14 — Nix 與 Lix 修補多個本機提權漏洞，repair 旗標可覆寫 store
primary=https://www.openwall.com/lists/oss-security/2026/10/13/11 primary=https://github.com/NixOS/nix/security/advisories/GHSA-jwvx-xq5j-gc56
1 min Read →
2026-10-14 — Kestrel HTTP/1 請求走私，CVE-2026-88092 評 9.4
primary=https://github.com/advisories/GHSA-rv87-ccxw-8ggf primary=https://github.com/dotnet/aspnetcore/security/advisories/GHSA-rv87-ccxw-8ggf primary=https://github.com/dotnet/announcements/issues/472
1 min Read →
2026-10-14 — Ivanti Connect Secure 零時差遭利用
primary=https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure primary=https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/
1 min Read →
2026-10-14 — Anthropic 以自研 Scion 取代 git 管理 monorepo
primary=https://www.anthropic.com/engineering/redesigning-source-control
1 min Read →
2026-10-14 — HTML 規格改成邊解析邊消毒，不再先建 fragment
primary=https://github.com/whatwg/html/commit/94857062b437b45c4dc891b130be83b40f7ae999 primary=https://github.com/whatwg/html/issues/12560 primary=https://github.com/whatwg/html/issues/12543
1 min Read →