工程趣聞 ★ Latest
2026-10-14 — Rust 借用檢查器 11 年舊洞，欄位賦值可繞過 ‘static
primary=https://github.com/rust-lang/rust/issues/164250 primary=https://github.com/rust-lang/rust/pull/164277 primary=https://github.com/rust-lang/rust/issues/128225
2 min read Read →
charlie@blog:~/posts $ cat README.md
Dev notes on
Linux, Docker
& backend.
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
Posts
1336
Topics
10
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-10-1
» 2026-10-1
» 2026-10-1
» 2026-10-1
charlie@arch:~/blog$
All articles
1336 total2026-10-14 — Nix 與 Lix 修補多個本機提權漏洞，repair 旗標可覆寫 store
primary=https://www.openwall.com/lists/oss-security/2026/10/13/11 primary=https://github.com/NixOS/nix/security/advisories/GHSA-jwvx-xq5j-gc56
1 min Read →
2026-10-14 — Kestrel HTTP/1 請求走私，CVE-2026-88092 評 9.4
primary=https://github.com/advisories/GHSA-rv87-ccxw-8ggf primary=https://github.com/dotnet/aspnetcore/security/advisories/GHSA-rv87-ccxw-8ggf primary=https://github.com/dotnet/announcements/issues/472
1 min Read →
2026-10-14 — Ivanti Connect Secure 零時差遭利用
primary=https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure primary=https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/
1 min Read →
2026-10-14 — Anthropic 以自研 Scion 取代 git 管理 monorepo
primary=https://www.anthropic.com/engineering/redesigning-source-control
1 min Read →
2026-10-14 — HTML 規格改成邊解析邊消毒，不再先建 fragment
primary=https://github.com/whatwg/html/commit/94857062b437b45c4dc891b130be83b40f7ae999 primary=https://github.com/whatwg/html/issues/12560 primary=https://github.com/whatwg/html/issues/12543
1 min Read →
2026-10-14 — Gentoo 打包者呼籲：純 Python 專案別用 uv-build
primary=https://blogs.gentoo.org/mgorny/2026/10/12/a-plea-not-to-use-uv-build/ primary=https://github.com/bytecodealliance/rustix/issues/1700 primary=https://pypi.org/project/uv-build/ primary=https://peps.python.org/pep-0517/
1 min Read →
2026-10-14 — ClickHouse 26.9 合併原生協定尾端訊息，省下閒置一個 RTT
primary=https://clickhouse.com/blog/chasing-32ms-tail-latency-clickhouse primary=https://github.com/ClickHouse/ClickHouse/pull/111034
1 min Read →
2026-10-14 — curl 8.23.0 提速並瘦身：easy handle 縮小 28%
primary=https://daniel.haxx.se/blog/2026/10/13/a-slightly-faster-slimmer-curl/ primary=https://daniel.haxx.se/blog/2026/08/14/curl-performance-2/
1 min Read →
2026-10-14 — Gemini 4 Argon 發表，長上下文領先但終端機基準落後
primary=https://deepmind.google/models/gemini/ primary=https://storage.googleapis.com/deepmind-media/gemini/gemini_4_argon_model_evaluation.pdf
1 min Read →
2026-10-13 — Unreal 編輯器啟動：著色器雜湊由 SHA-1 換成 xxHash，耗時降八倍
primary=https://larstofus.com/2026/10/11/speeding-up-the-unreal-editor-by-not-using-unnecessarily-secure-hash-methods/ primary=https://github.com/EpicGames/UnrealEngine/pull/15237
1 min Read →
2026-10-13 — quinn-proto 一天六則遠端 DoS 公告，五個封包就能 panic
primary=https://rustsec.org/advisories/RUSTSEC-2026-0338.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0340.html primary=https://rustsec.org/packages/quinn-proto.html
1 min Read →
2026-10-13 — Docker Hub 帳號轉組織會把 PAT 過戶給受害者
primary=https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/ primary=https://ghostpat.com
1 min Read →
2026-10-13 — Meta 的 Instagram Live 上傳改走 MoQ，取代自家 RUSH
primary=https://engineering.fb.com/2026/10/12/video-engineering/shipping-media-over-quic-at-meta-scale-for-instagram-live-ingest/ primary=https://datatracker.ietf.org/doc/draft-ietf-moq-transport/ primary=https://github.com/facebookexperimental/moxygen primary=https://datatracker.ietf.org/doc/draft-kpugin-rush/
1 min Read →
2026-10-13 — WHATWG HTML 新增 appendHTML、beforeHTML 等定位插入方法
primary=https://github.com/whatwg/html/commit/e88f8aa8eb303d5048b05cc3125fdde58a584ac7
1 min Read →
2026-10-13 — OTel 與 Prometheus 互通調查：易用度升至 3.6
primary=https://opentelemetry.io/blog/2026/otel-prometheus-interoperability/ primary=https://opentelemetry.io/blog/2024/prometheus-compatibility-survey/ primary=https://github.com/prometheus/proposals/pull/67
1 min Read →
2026-10-13 — free-threaded Python 以惰性檢視解析 JSON 達 65.7 GB/s
primary=https://lemire.me/blog/2026/10/12/parsing-json-at-tens-of-gigabytes-per-second-in-python/ primary=https://pypi.org/project/fastsimdjson/
1 min Read →
2026-10-13 — Meta 發布 Muse Wonder：1M 上下文，主打長時程代理任務
primary=https://research.meta.ai/blog/muse-wonder primary=https://research.meta.ai/static/muse-wonder-model-card
1 min Read →
2026-10-11 — 把 Go 的 defer 塞進 typescript-go，作者卻說不該上線
primary=https://healeycodes.com/adding-defer-to-the-typescript-compiler primary=https://github.com/healeycodes/typescript-go/tree/defer-v1 primary=https://github.com/tc39/proposal-explicit-resource-management primary=https://www.typescriptlang.org/docs/handbook/release-notes/typescript-5-2.html#using-declarations-and-explicit-resource-management
1 min Read →
2026-10-11 — pgjdbc 修補 requireAuth 全排除反而不設限的漏洞
primary=https://www.postgresql.org/about/news/2026-10-07-postgresql-jdbc-42714-security-update-for-multiple-cves-3399/ primary=https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-rhp9-mr79-r74h primary=https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-f64h-wr5q-3qf3 primary=https://jdbc.postgresql.org/changelogs/2026-10-07-42.7.14-release/
1 min Read →
2026-10-11 — Telegram Desktop 一鍵讀走本機檔案，7.2.9 靜默修補
primary=https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/ primary=https://github.com/telegramdesktop/tdesktop/commit/db3405699f8fc3ae28a58d2348b7d13a43c0590a primary=https://www.cve.org/CVERecord?id=CVE-2026-107181
1 min Read →
2026-10-11 — 微軟公開 AX Playbook：用評測檢驗 coding agent 懂不懂你的產品
primary=https://developer.microsoft.com/blog/introducing-the-agent-experience-ax-practitioner-playbook/ primary=https://developer.microsoft.com/blog/knowledge-cutoff-is-a-poor-proxy-for-model-capability/
1 min Read →
2026-10-11 — Bun 內建 bun check，型別檢查比 tsc 7 快 3 至 6.4 倍
primary=https://bun.com/blog/bun-v1.4.3 primary=https://github.com/microsoft/typescript-go
1 min Read →
2026-10-11 — 微軟 MXC 正式 GA：用 OS 層政策容器關住 AI agent
primary=https://blogs.windows.com/windowsdeveloper/2026/10/07/microsoft-execution-containers-policy-driven-containment-for-ai-agents/ primary=https://github.com/microsoft/mxc/tree/main primary=https://commandline.microsoft.com/local-models-sandboxed-tools-github-windows/
1 min Read →
2026-10-11 — DuckDB CLI 新增 Agent Mode，管線輸出改為給模型讀
primary=https://duckdb.org/2026/10/09/agent-mode.html primary=https://github.com/duckdb/duckdb/pull/26167
1 min Read →