charlie@blog:~/posts $ cat README.md

Dev notes on
Linux, Docker
& backend.

Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.

Posts
869
Topics
9
AI 前沿 Daily News 前端前線 工程趣聞 平台與維運 後端工坊 產業脈動 資安雷達 資料與儲存
zsh — charlie@arch — 82×24
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-08-1
» 2026-08-1
» 2026-08-1
» 2026-08-1
charlie@arch:~/blog$

All articles

869 total
資安雷達

2026-08-15 s2n-quic 的 CRYPTO 幀重組緩衝區未設上限導致記憶體耗盡攻擊,Token Optimizer MCP 則同時修補 dashboard API 路徑穿越與 smart_user 指令注入

primary=https://github.com/advisories/GHSA-9q54-f358-3fqf primary=https://github.com/aws/s2n-quic/compare/v1.81.0...v1.82.0 primary=https://github.com/advisories/GHSA-76pc-mqxp-3rq5 primary=https://github.com/advisories/GHSA-49mq-fc6q-3h46 primary=https://github.com/ooples/token-optimizer-mcp/commit/b4ee96dac799cbfba0a9f9c17844ce9d613cbcc7

2 min Read →
平台與維運

2026-08-15 Docker 官方教學釘死 ESP-IDF 版本並用 Sandboxes 隔離開發、Kairos 用 NodeOpUpgrade 打造零人力 K8s 升級管線、OpenTelemetry 以 entity events 補上基礎設施拓樸的事件溯源串流

primary=https://docs.espressif.com/projects/esp-idf/en/stable/esp32/api-guides/tools/idf-docker-image.html primary=https://docs.docker.com/ai/sandboxes/ primary=https://kairos.io/docs/operator/nodeop-upgrade/ primary=https://github.com/kairos-io/kairos-operator primary=https://github.com/open-telemetry/opentelemetry-specification/blob/v1.58.0/oteps/entities/0256-entities-data-model.md primary=https://opentelemetry.io/docs/specs/otel/entities/entity-events/

2 min Read →
AI 前沿

2026-08-15 Claude 推出文字浮水印技術以 SynthID-Text 路線做可驗證溯源,Hugging Face 夏季報告揭露中國實驗室主導開源大模型規模與 Qwen 生態系稱霸,UIUC 團隊發布 LLMRouter 統一 LLM 路由開發與評測框架

primary=https://www.anthropic.com/news/claude-text-watermark primary=https://www.nature.com/articles/s41586-024-08025-4 primary=https://huggingface.co/blog/state-of-open-models-summer-2026 primary=https://arxiv.org/abs/2608.06867 primary=https://github.com/ulab-uiuc/LLMRouter

1 min Read →
後端工坊

2026-08-15 — C++ 記憶體同步從第一性原理重新推導、BPF 持續整合補齊但穩定核心測試仍有缺口、Python 打包治理迎來首屆 Packaging Council 選舉

primary=https://cppcon2026.sched.com/event/2RT5M/what-are-we-synchronizing primary=https://lwn.net/Articles/1087823/ primary=https://github.com/kernel-patches/vmtest primary=https://peps.python.org/pep-0772/ primary=https://pyfound.blogspot.com/2026/08/announcing-packaging-council-election.html primary=https://www.python.org/nominations/elections/2026-python-packaging-council/nominees/

2 min Read →
資安雷達

2026-08-14 — vLLM completions 端點缺少 prompt 陣列上限導致資源耗盡,Apache HttpComponents 非同步傳輸主機名驗證靜默失效使 TLS 遭中間人繞過,已退役的 Apache Shindig 因 XStream 反序列化可被觸發任意程式碼執行

primary=https://github.com/advisories/GHSA-87x5-vmc3-756j primary=https://github.com/vllm-project/vllm/commit/675f4295cdfe0d870471c2b51bfeca3a68a9569e primary=https://www.openwall.com/lists/oss-security/2026/08/13/6 primary=https://www.openwall.com/lists/oss-security/2026/08/13/7

1 min Read →
產業脈動

2026-08-14 — Google 開源 C2PA 內容憑證函式庫 Credentio,Spotify 釐清 LLM 代打 A/B 測試須滿足代理性與可比性假設,Cloudflare CT 監控服務轉為正式版並解決警報疲勞問題

primary=https://developers.googleblog.com/en/introducing-credentio-open-source-c-library-for-c2pa-content-credentials-from-google/ primary=https://engineering.atspotify.com/2026/8/when-can-llms-replace-humans-in-a-b-tests primary=https://blog.cloudflare.com/certificate-transparency-monitoring-ga/

1 min Read →
平台與維運

2026-08-14 — Packer 1.16 加入可驗證映像來源簽署,Dragonfly 推出免資料庫的輕量 P2P 佈署模式,Docker 攜手 Snyk、Keycard 發布企業級 Agent 安全基線

primary=https://www.hashicorp.com/blog/packer-v1160-brings-verifiable-provenance-to-machine-images primary=https://www.cncf.io/blog/2026/08/13/lightweight-dragonfly-deployment-p2p-distribution-without-the-database-stack/ primary=https://www.docker.com/blog/a-new-security-baseline-for-enterprise-agentic-adoption/

1 min Read →
資料與儲存

2026-08-14 — PostgreSQL 同步發布 18.6/17.11/16.15/15.19/14.24 與 19 Beta 3 修補 28 個安全性漏洞,ClickHouse Grafana 外掛 4.20 推出精簡查詢模式,plx 讓開發者用熟悉語言撰寫 Postgres 函式

primary=https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/ primary=https://clickhouse.com/blog/clickhouse-grafana-plugin-4-20 primary=https://www.postgresql.org/about/news/plx-write-postgresql-functions-in-the-language-you-already-know-3358/

1 min Read →
產業脈動

2026-08-13 — WhatsApp 裝置端詐騙偵測、NuGet API 金鑰效期縮短、Azure DevOps Remote MCP Server GA

primary=https://engineering.fb.com/2026/08/12/security/how-were-building-scam-alert-whatsapp/ primary=https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ primary=https://learn.microsoft.com/nuget/nuget-org/trusted-publishing primary=https://devblogs.microsoft.com/devops/azure-devops-remote-mcp-server-ga/ primary=https://learn.microsoft.com/en-us/azure/devops/mcp-server/remote-mcp-server primary=https://github.com/microsoft/azure-devops-mcp

2 min Read →
AI 前沿

2026-08-13 — DeepMind WeatherNext 颶風預報登上 Nature、NVIDIA 發布 Nemotron 3.5 Lightning 與代理路由庫 Switchyard、Mendel Gödel Machine 以比較演化改寫自我改進程式代理

primary=https://deepmind.google/blog/weathernext-ai-model-achieves-breakthrough-in-forecasting-cyclones primary=https://arxiv.org/abs/2506.10772 primary=https://blogs.nvidia.com/blog/nemotron-lightning-switchyard-rtx-dgx/ primary=https://huggingface.co/nvidia/NVIDIA-Nemotron-3.5-Lightning-30B-A3B-BF16 primary=https://arxiv.org/abs/2608.07645

1 min Read →