工程趣聞 ★ Latest
2026-09-30 — Deser：用堆積 sink 取代遞迴 visitor 的 Rust 序列化庫
primary=https://lucumr.pocoo.org/2026/9/29/deser/ primary=https://github.com/mitsuhiko/deser
1 min read Read →
charlie@blog:~/posts $ cat README.md
Dev notes on
Linux, Docker
& backend.
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
Posts
1216
Topics
9
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-09-3
» 2026-09-3
» 2026-09-3
» 2026-09-3
charlie@arch:~/blog$
All articles
1216 total2026-09-30 — libpng 1.6.59 修補 zlib 殘留指標 UAF
primary=https://www.openwall.com/lists/oss-security/2026/09/29/4 primary=https://github.com/pnggroup/libpng/security/advisories/GHSA-qvg3-h654-xq3j primary=https://github.com/pnggroup/libpng/commit/aa77ef38c17ab2fc1b41bec09fb973c6a386641d
1 min Read →
2026-09-30 — Cloudflare 用 LLM 變異攻擊測自家 WAF，補上 SSRF 缺口
primary=https://blog.cloudflare.com/adaptive-ai-waf-testing/
1 min Read →
2026-09-30 — Firefox 157 改版介面，對話框與表單改跟隨頁面配色
primary=https://www.firefox.com/en-US/firefox/157.0/releasenotes/ primary=https://lwn.net/Articles/1097495/
1 min Read →
2026-09-30 — ClickHouse 可直接寫入 OneLake 的 Iceberg 目錄
primary=https://clickhouse.com/blog/clickhouse-now-writes-to-microsoft-onelake primary=https://clickhouse.com/docs/use-cases/data-lake/onelake-catalog
1 min Read →
2026-09-30 — Boost 1.92 收緊 Beast HTTP 解析，拒絕 CL 加 TE 請求
primary=https://www.boost.org/releases/1.92.0/ primary=https://isocpp.org/blog/2026/09/boost-1.92.0-is-out
1 min Read →
2026-09-30 — NVIDIA 釋出 Kumo Tabular，表格預測不再需要逐表訓練
primary=https://huggingface.co/blog/nvidia/kumo-tabular primary=https://huggingface.co/nvidia/Kumo-Tabular primary=https://github.com/NVIDIA/structured-data-models
1 min Read →
📡 科技日報 — 2026-09-30
今日無高影響科技更新
1 min Read →
2026-09-29 — 反推亂數種子：讓 CPython 吐出指定的偽隨機序列
primary=https://github.com/frazerpearce/TimeLord
1 min Read →
2026-09-29 — jackson-databind 補丁不完整，DNS SSRF 缺口未補上
primary=https://github.com/advisories/GHSA-vvgp-rfg2-7rr6 primary=https://github.com/advisories/GHSA-hgj6-7826-r7m5
1 min Read →
2026-09-29 — CVE-2026-19444：kubectl cp 在 Windows 上路徑穿越可寫任意檔案
primary=https://www.openwall.com/lists/oss-security/2026/09/28/1 primary=https://github.com/kubernetes/kubernetes/issues/141294
1 min Read →
2026-09-29 — Apache Karaf 同日修補六弱點，指令注入最嚴重
primary=https://www.openwall.com/lists/oss-security/2026/09/28/3 primary=https://www.openwall.com/lists/oss-security/2026/09/28/2 primary=https://www.openwall.com/lists/oss-security/2026/09/28/10
1 min Read →
2026-09-29 — BEACON 資料集開放：SQL 查詢數十億筆真實效能量測
primary=https://blog.cloudflare.com/how-fast-is-the-web/ primary=https://rumarchive.com/docs/querying/
1 min Read →
2026-09-29 — cf CLI 上線，取代 wrangler.toml 設定
primary=https://blog.cloudflare.com/cloudflare-cf-cli-launch/ primary=https://github.com/cloudflare/cf
1 min Read →
2026-09-29 — Vinext 1.0：Next.js 建置改用 Vite
primary=https://blog.cloudflare.com/vinext-nextjs-on-vite/ primary=https://vinext.dev
1 min Read →
2026-09-29 — iframe/frame 插入時 javascript: URL 的 load 事件修正
primary=https://github.com/whatwg/html/commit/cbc0d17ed0ba08982c9829e948c3d65db0098f96 primary=https://github.com/web-platform-tests/wpt/pull/62993
2 min Read →
2026-09-29 — Terraform 1.16：Actions 補上銷毀生命週期，import 進駐子模組
primary=https://www.hashicorp.com/blog/terraform-116-completes-actions-lifecycles-and-brings-imports-into-child-modules
1 min Read →
2026-09-29 — 失控查詢壓測：RDS 存活率 0%，ClickHouse Postgres 撐住
primary=https://clickhouse.com/blog/can-your-postgres-survive-a-bad-query
1 min Read →
2026-09-29 — Git 2.56：–resolved 讓解決衝突更安全
primary=https://github.com/git/git/blob/v2.56.0/Documentation/RelNotes/2.56.0.adoc primary=https://lwn.net/Articles/1097213/
1 min Read →
2026-09-29 — Sonnet 5.5 上線：官方稱同代最快、最省
primary=https://www.anthropic.com/claude-sonnet-5-5
1 min Read →
📡 科技日報 — 2026-09-29
🚨 今日科技重點 NVIDIA 發表 Open Agent …
1 min Read →
2026-09-28 — 把 LM 呼叫搬進 OTP：Elixir 版 DSPy 現身
primary=https://github.com/deepfates/imp
1 min Read →
2026-09-28 — LuaRocks 遭 bytecode 攻擊，全庫外洩
primary=https://luarocks.org/security-incident-september-2026
1 min Read →
2026-09-28 — NetScaler 兩個在野漏洞：修補前得先抓鑑識痕跡
primary=https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway primary=https://www.cisa.gov/news-events/alerts/2026/09/27/cisa-adds-two-known-exploited-vulnerabilities-catalog primary=https://support.citrix.com/external/article/CTX697096/citrix-netscaler-adc-and-citrix-netscale.html
1 min Read →
2026-09-28 — Istio sidecar 憑證解析失敗會悄悄退回明文傳輸
primary=https://istio.io/latest/news/releases/1.31.x/announcing-1.31.1/ primary=https://github.com/istio/istio/security/advisories/GHSA-qm8v-g4f9-qhjx
1 min Read →