工程趣聞 ★ Latest
2026-09-29 — 反推亂數種子：讓 CPython 吐出指定的偽隨機序列
primary=https://github.com/frazerpearce/TimeLord
1 min read Read →
charlie@blog:~/posts $ cat README.md
Dev notes on
Linux, Docker
& backend.
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
Posts
1208
Topics
9
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-09-2
» 2026-09-2
» 2026-09-2
» 2026-09-2
charlie@arch:~/blog$
All articles
1208 total2026-09-29 — jackson-databind 補丁不完整，DNS SSRF 缺口未補上
primary=https://github.com/advisories/GHSA-vvgp-rfg2-7rr6 primary=https://github.com/advisories/GHSA-hgj6-7826-r7m5
1 min Read →
2026-09-29 — CVE-2026-19444：kubectl cp 在 Windows 上路徑穿越可寫任意檔案
primary=https://www.openwall.com/lists/oss-security/2026/09/28/1 primary=https://github.com/kubernetes/kubernetes/issues/141294
1 min Read →
2026-09-29 — Apache Karaf 同日修補六弱點，指令注入最嚴重
primary=https://www.openwall.com/lists/oss-security/2026/09/28/3 primary=https://www.openwall.com/lists/oss-security/2026/09/28/2 primary=https://www.openwall.com/lists/oss-security/2026/09/28/10
1 min Read →
2026-09-29 — BEACON 資料集開放：SQL 查詢數十億筆真實效能量測
primary=https://blog.cloudflare.com/how-fast-is-the-web/ primary=https://rumarchive.com/docs/querying/
1 min Read →
2026-09-29 — cf CLI 上線，取代 wrangler.toml 設定
primary=https://blog.cloudflare.com/cloudflare-cf-cli-launch/ primary=https://github.com/cloudflare/cf
1 min Read →
2026-09-29 — Vinext 1.0：Next.js 建置改用 Vite
primary=https://blog.cloudflare.com/vinext-nextjs-on-vite/ primary=https://vinext.dev
1 min Read →
2026-09-29 — iframe/frame 插入時 javascript: URL 的 load 事件修正
primary=https://github.com/whatwg/html/commit/cbc0d17ed0ba08982c9829e948c3d65db0098f96 primary=https://github.com/web-platform-tests/wpt/pull/62993
2 min Read →
2026-09-29 — Terraform 1.16：Actions 補上銷毀生命週期，import 進駐子模組
primary=https://www.hashicorp.com/blog/terraform-116-completes-actions-lifecycles-and-brings-imports-into-child-modules
1 min Read →
2026-09-29 — 失控查詢壓測：RDS 存活率 0%，ClickHouse Postgres 撐住
primary=https://clickhouse.com/blog/can-your-postgres-survive-a-bad-query
1 min Read →
2026-09-29 — Git 2.56：–resolved 讓解決衝突更安全
primary=https://github.com/git/git/blob/v2.56.0/Documentation/RelNotes/2.56.0.adoc primary=https://lwn.net/Articles/1097213/
1 min Read →
2026-09-29 — Sonnet 5.5 上線：官方稱同代最快、最省
primary=https://www.anthropic.com/claude-sonnet-5-5
1 min Read →
📡 科技日報 — 2026-09-29
🚨 今日科技重點 NVIDIA 發表 Open Agent …
1 min Read →
2026-09-28 — 把 LM 呼叫搬進 OTP：Elixir 版 DSPy 現身
primary=https://github.com/deepfates/imp
1 min Read →
2026-09-28 — LuaRocks 遭 bytecode 攻擊，全庫外洩
primary=https://luarocks.org/security-incident-september-2026
1 min Read →
2026-09-28 — NetScaler 兩個在野漏洞：修補前得先抓鑑識痕跡
primary=https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway primary=https://www.cisa.gov/news-events/alerts/2026/09/27/cisa-adds-two-known-exploited-vulnerabilities-catalog primary=https://support.citrix.com/external/article/CTX697096/citrix-netscaler-adc-and-citrix-netscale.html
1 min Read →
2026-09-28 — Istio sidecar 憑證解析失敗會悄悄退回明文傳輸
primary=https://istio.io/latest/news/releases/1.31.x/announcing-1.31.1/ primary=https://github.com/istio/istio/security/advisories/GHSA-qm8v-g4f9-qhjx
1 min Read →
2026-09-28 — llama.cpp 提示詞查找解碼快取重構，加速上看140倍
primary=https://github.com/jadidbourbaki/llama.cpp/pull/2 primary=https://github.com/jadidbourbaki/llama.cpp/pull/7 primary=https://github.com/jadidbourbaki/llama.cpp/pull/12
2 min Read →
📡 科技日報 — 2026-09-28
🚨 今日科技重點 Citrix NetScaler 爆兩個未…
1 min Read →
2026-09-27 — 龍芯 LA664 核心無屏障原子指令會遺失更新
primary=https://jia.je/hardware/2026/09/24/loongson-cpu-erratum-en/
1 min Read →
2026-09-27 — libextractor 提權漏洞：外掛路徑變數未查特權
primary=https://www.openwall.com/lists/oss-security/2026/09/25/25 primary=https://www.openwall.com/lists/oss-security/2026/09/26/2
1 min Read →
2026-09-27 — CVE-2025-39964：AF_ALG 競爭寫入提權漏洞
primary=https://idnsec.com/research/linux-local-privilege-escalation-with-af-alg/ primary=https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1b34cbbf4f011a121ef7b2d7d6e6920a036d5285
2 min Read →
2026-09-27 — Chrome 擴大 +xml MIME 類型判定範圍
primary=https://chromestatus.com/feature/5092584283308032 primary=https://chromium-review.googlesource.com/c/chromium/src/+/8301932 primary=https://issues.chromium.org/issues/362282752 primary=https://mimesniff.spec.whatwg.org/#xml-mime-type primary=https://github.com/web-platform-tests/wpt/pull/62420
1 min Read →
2026-09-27 — GDB 18.1 新增 local-environment，子行程環境不再綁死於除錯器本身
primary=https://sourceware.org/gdb/news/ primary=https://lists.gnu.org/archive/html/info-gnu/2026-09/msg00008.html
1 min Read →
2026-09-27 — DSec：分層鏡像加 CPU 超賣，撐住 38 萬沙盒並發
primary=https://arxiv.org/abs/2609.22978
1 min Read →