工程趣聞 ★ Latest
2026-10-06 — CedarDB 以純 SQL 重做 Doom：邏輯與渲染全在資料庫
primary=https://cedardb.com/blog/sqldoom/
1 min read Read →
charlie@blog:~/posts $ cat README.md
Dev notes on
Linux, Docker
& backend.
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
Posts
1273
Topics
10
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-10-0
» 2026-10-0
» 2026-10-0
» 2026-10-0
charlie@arch:~/blog$
All articles
1273 total2026-10-06 — Struts 舊版 RESTful mapper 的 OGNL 注入可達 RCE
primary=https://www.openwall.com/lists/oss-security/2026/10/05/10 primary=https://cwiki.apache.org/confluence/display/WW/S2-075
1 min Read →
2026-10-06 — Tinypool 2.1.1 修補 worker 選項原型污染，可致 RCE
primary=https://github.com/advisories/GHSA-5gmw-xhrv-c9v3 primary=https://github.com/tinylibs/tinypool/pull/134 primary=https://github.com/tinylibs/tinypool/releases/tag/v2.1.1
1 min Read →
2026-10-06 — vm2 沙箱逃逸：循環 AggregateError 繞過清洗達成 RCE
primary=https://github.com/advisories/GHSA-x965-fc75-jpqh primary=https://github.com/patriksimek/vm2/commit/c8c232530b860cfecf6f94bc8d0d0890aa381460
1 min Read →
2026-10-06 — COOP 與 COEP 標頭改為必須是 structured field 型別
primary=https://github.com/whatwg/html/commit/bf84f3c5a9cf87ac0a9f6461f32151971ad2279b primary=https://github.com/web-platform-tests/wpt/pull/63239
1 min Read →
2026-10-06 — Kubernetes 節點 swap 實測：gVisor 沙箱 pod 密度最高提升 3 倍
primary=https://kubernetes.io/blog/2026/10/05/scaling-kubernetes-workloads-with-node-swap/
1 min Read →
2026-10-06 — pgvector 0.8.7 修補 IVFFlat 建索引緩衝區溢位
primary=https://www.postgresql.org/about/news/pgvector-087-released-3392/ primary=https://github.com/pgvector/pgvector/issues/1036 primary=https://github.com/pgvector/pgvector/blob/master/CHANGELOG.md
1 min Read →
2026-10-06 — mold 3.0.0 以 Rust 重寫，改用 Cargo 建置
primary=https://github.com/rui314/mold/releases/tag/v3.0.0 primary=https://github.com/rui314/mold/releases/tag/v2.42.1
1 min Read →
2026-10-06 — Google 提出以情境完整性約束 AI agent 的資料流
primary=https://research.google/blog/open-and-emergent-problems-in-agentic-privacy-and-security-a-contextual-angle/ primary=https://research.google/pubs/open-and-emergent-problems-in-agentic-privacy-and-security-a-contextual-angle/
1 min Read →
2026-10-05 — 頁表隨連線數線性膨脹：Postgres 共享記憶體的隱藏成本
primary=https://frn.sh/pagetables/ primary=https://lkml.rescloud.iu.edu/hypermail/linux/kernel/2201.2/03246.html primary=https://clickhouse.com/blog/huge-pages-clickhouse-managed-postgres primary=https://www.percona.com/blog/why-linux-hugepages-are-super-important-for-database-servers-a-case-with-postgresql/
1 min Read →
2026-10-05 — Xray-core 憑證釘選繞過先被靜默修補，後又出現 CA 釘選缺口
primary=https://github.com/net4people/bbs/issues/672 primary=https://github.com/XTLS/Xray-core/commit/4632984b66a4f2ab3d4eda8deb9c48ac9911933c primary=https://github.com/XTLS/Xray-core/security/advisories/GHSA-5wf9-h793-w73c primary=https://github.com/XTLS/Xray-core/releases/tag/v26.2.6
1 min Read →
2026-10-05 — Workers KV Instant 改用 Quicksilver，讀取 p99 降到 1.62ms
primary=https://blog.cloudflare.com/workers-kv-instant/ primary=https://blog.cloudflare.com/quicksilver-v2-evolution-of-a-globally-distributed-key-value-store-part-1/ primary=https://developers.cloudflare.com/kv/api/
1 min Read →
2026-10-05 — 字串版 setTimeout 的 Trusted Types 違規改為同步丟例外
primary=https://github.com/whatwg/html/commit/6992cb519a02db34f653ddd54c50fad2565285f5
1 min Read →
2026-10-05 — 容器沙箱 gVisor 捐贈給 CNCF，治理轉向多方維護
primary=https://gvisor.dev/blog/2026/10/02/gvisor-cncf/ primary=https://github.com/cncf/sandbox/issues/521
1 min Read →
2026-10-05 — Cloudflare Basin GA，查詢補上 JOIN
primary=https://blog.cloudflare.com/cloudflare-basin/
2 min Read →
2026-10-05 — Go 1.27 新增 archsimd，用 SIMD 不必寫組語
primary=https://go.dev/blog/archsimd
1 min Read →
2026-10-05 — Kolibri-1 開放權重，78B MoE 只啟用 3.46B
primary=https://aleph-alpha.com/en/blog/kolibri-has-landed-a-sovereign-open-weight-model/ primary=https://huggingface.co/Aleph-Alpha/Kolibri-1 primary=https://github.com/Aleph-Alpha/aleph-alpha-inference
1 min Read →
駕馭 LLM｜先讀 trace 再寫 eval
先逐筆讀 trace 再決定寫哪一個 eval：用 error analysis 把「一個失敗模式、一個 eval」做出來，並在 Claude Code 驗證這個流程。
4 min Read →
2026-10-04 — 釣魚專案包夾帶 .git：post-checkout hook 下載木馬
primary=https://frankwiles.com/posts/i-got-targeted/ primary=https://git-scm.com/docs/githooks
1 min Read →
2026-10-04 — Wasmtime 非同步元件 callback 缺驗證，CVSS 9.3 堆疊溢位
primary=https://rustsec.org/advisories/RUSTSEC-2026-0327.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0326.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0325.html
1 min Read →
2026-10-04 — Quick Tunnels 支援郵件白名單驗證
primary=https://blog.cloudflare.com/protected-quick-tunnels/ primary=https://developers.cloudflare.com/tunnel/get-started/quick-tunnels/
1 min Read →
2026-10-04 — TC39 將三個 Iterator 方法推進 Stage 4，不必再先轉陣列
primary=https://github.com/tc39/proposals/commit/ee92ecf4754feca09a333fcf615b75422bf2c0f9 primary=https://github.com/tc39/proposals/commit/3c1e9eed79faced589802cd3d1a6c9110747d540 primary=https://github.com/tc39/proposals/commit/3c956df47516ecf49b7a50590ee0d2c3e57c8c0c primary=https://github.com/tc39/proposal-iterator-chunking primary=https://github.com/tc39/proposal-iterator-includes primary=https://github.com/tc39/proposal-iterator-join
1 min Read →
2026-10-04 — Tempo 3.1 預設 vParquet5，拒絕寫入 vParquet3
primary=https://grafana.com/blog/tempo-3-1-release-all-the-latest-features/ primary=https://grafana.com/docs/tempo/latest/release-notes/v3-1/
1 min Read →
2026-10-04 — pg_clickhouse 0.11 新增編碼容錯與更多型別對應
primary=https://clickhouse.com/blog/pg_clickhouse-chdb primary=https://github.com/ClickHouse/pg_clickhouse/releases/tag/v0.11.0 primary=https://github.com/ClickHouse/pg_chdb/releases/tag/v0.1.2
1 min Read →
2026-10-04 — Rust 實驗 Generic Const Args，const 引數可含泛型
primary=https://blog.rust-lang.org/inside-rust/2026/10/02/generic-const-args-and-you/ primary=https://github.com/rust-lang/goals/issues/100
2 min Read →