工程趣聞 ★ Latest
2026-10-17 — NIST 橢圓曲線種子之謎解開：來自 1997 年時間戳記
primary=https://words.filippo.io/seeds-solved/ primary=https://www.anthropic.com/research/ecdsa-curve-origins
1 min read Read →
charlie@blog:~/posts $ cat README.md
Dev notes on
Linux, Docker
& backend.
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
Posts
1363
Topics
10
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-10-1
» 2026-10-1
» 2026-10-1
» 2026-10-1
charlie@arch:~/blog$
All articles
1363 total2026-10-17 — BeyondTrust Remote Support 認證繞過遭利用，CISA 列入 KEV
primary=https://www.cisa.gov/news-events/alerts/2026/10/16/cisa-urges-patching-critical-vulnerability-beyondtrust-remote-support primary=https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust
1 min Read →
2026-10-17 — Spotify 將生成式推薦推論從 vLLM 搬到 TensorRT-LLM
primary=https://engineering.atspotify.com/2026/10/advancing-generative-recommendation-inference-our-collaboration-with-nvidia-on-tensorrt-llm/ primary=https://arxiv.org/abs/2510.07784 primary=https://github.com/NVIDIA/TensorRT-LLM/pull/15424
1 min Read →
2026-10-17 — Vue 3.6.0-rc.12 修正 watch 清理時機回歸，Vapor 補轉場案例
primary=https://github.com/vuejs/core/releases/tag/v3.6.0-rc.12 primary=https://github.com/vuejs/core/blob/minor/CHANGELOG.md primary=https://github.com/vuejs/core/issues/15765 primary=https://github.com/vuejs/core/pull/15766
1 min Read →
2026-10-17 — n8n 遷官方 Helm chart，main pod 關閉持久化
primary=https://www.cncf.io/blog/2026/10/16/deploying-maintaining-and-migrating-production-n8n-on-eks/ primary=https://github.com/husne-fairwinds/n8n-sample
1 min Read →
2026-10-17 — DuckDB 一次把 JSON 字串欄位轉成型別欄位
primary=https://duckdb.org/2026/10/16/json-to-typed-columns.html
2 min Read →
2026-10-17 — gopls 加入互動式重構，LSP 提案讓語言伺服器能向使用者提問
primary=https://go.dev/blog/interactive-refactoring primary=https://github.com/microsoft/language-server-protocol/issues/1164
1 min Read →
2026-10-17 — Reflection 開源 Beam：501B MoE，Apache 2.0
primary=https://huggingface.co/blog/reflection-beam primary=https://huggingface.co/reflection/Beam-1.0-501B-A23B
1 min Read →
2026-10-16 — CGPM 決議廢除閏秒：UTC 自 2027 年 5 月 20 日起連續
primary=https://www.bipm.org/en/cgpm-2026/resolution-5 primary=https://www.doi.org/10.59161/CGPM2026RES5E
1 min Read →
2026-10-16 — rustls 0.23.46 修四則漏洞，含 PQ 降級
primary=https://rustsec.org/advisories/RUSTSEC-2026-0346.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0347.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0348.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0349.html
1 min Read →
2026-10-16 — Linux 七條 stable 同日修補 IPv4 校驗和漏洞 CVE-2026-99999
primary=https://lwn.net/Articles/1100611/ primary=https://lwn.net/ml/all/2026101533-CVE-2026-99999-beee%40gregkh/ primary=https://www.kernel.org/doc/html/latest/networking/checksum-offloads.html
1 min Read →
2026-10-16 — WhatsApp 世足決賽破每秒 3000 萬則訊息，Meta 如何撐住
primary=https://engineering.fb.com/2026/10/15/production-engineering/2026-world-cup-record-traffic-reliability-at-scale/ primary=https://engineering.fb.com/2018/05/22/open-source/open-sourcing-katran-a-scalable-network-load-balancer/ primary=https://engineering.fb.com/2014/11/05/production-engineering/introducing-proxygen-facebook-s-c-http-framework/
1 min Read →
2026-10-16 — JPEG XL 全面支援，實測網頁圖片仍以 AVIF 為先
primary=https://jakearchibald.com/2026/jpeg-xl-vs-avif/ primary=https://github.com/jakearchibald/image-codec-bench
1 min Read →
2026-10-16 — Job 卡在 Pending：先查 Kueue admission，再用 Headlamp 追
primary=https://kubernetes.io/blog/2026/10/14/tracing-kueue-admission-with-headlamp/ primary=https://github.com/headlamp-k8s/plugins/tree/main/kueue primary=https://kueue.sigs.k8s.io/docs/concepts/workload/
1 min Read →
2026-10-16 — Netflix 讓 Cassandra 直接讀 S3 備份，取代 Kafka/Flink 冷資料串流
primary=https://netflixtechblog.com/timeseries-tiered-storage-journey-kafka-flink-streams-to-native-cassandra-cold-reads-e59d597c9d60 primary=https://cassandra.apache.org/_/blog/Apache-Cassandra-4.1-Features-Pluggable-Memtable-Implementations.html
1 min Read →
2026-10-16 — NGINX 1.31.7 內建 GeoIP2 讀 MMDB，HTTP/2 改採 RFC 9218 優先權
primary=https://nginx.org/en/CHANGES primary=https://github.com/nginx/nginx/pull/1655 primary=https://github.com/nginx/nginx/pull/1520 primary=https://blog.nginx.org/blog/nginx-1-31-7-native-geoip2-support-http-2-priorities-and-quic-improvements
2 min Read →
2026-10-16 — Meta 釋出 Muse Spark Open 權重：816B MoE，收費門檻改看營收
primary=https://research.meta.ai/blog/muse-spark-open primary=https://huggingface.co/meta-models/Muse-Spark-Open-816B-A42B primary=https://research.meta.ai/static/muse-spark-open-evaluation-methodology
1 min Read →
2026-10-15 — curl HTTP/2 上傳 UAF 被證明可轉成 RCE
primary=https://daniel.haxx.se/blog/2026/10/14/a-uaf-turned-rce/ primary=https://curl.se/docs/CVE-2026-92392.html primary=https://daniel.haxx.se/blog/2026/10/14/curl-8-23-0/
1 min Read →
2026-10-15 — Linux vhost 快取未清除，本機可提權、guest 可逃逸
primary=https://www.openwall.com/lists/oss-security/2026/10/14/2 primary=https://git.kernel.org/linus/de845981da67a6b049080c87e605130b0c30adc5
1 min Read →
2026-10-15 — 多個 TLS 函式庫對 X.509 Name Constraints 判斷不一致
primary=https://www.openwall.com/lists/oss-security/2026/10/14/11 primary=https://kb.cert.org/vuls/id/573195 primary=https://github.com/pyca/cryptography/security/advisories/GHSA-m959-cc7f-wv43
1 min Read →
2026-10-15 — GitLab 正規表示式編譯器整數溢位，免登入 RCE（CVSS 10.0）
primary=https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/ primary=https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/
1 min Read →
2026-10-15 — Hyperdrive MySQL 快取 bug：節點寫入的位元組格式不一致
primary=https://blog.cloudflare.com/hyperdrive-mysql/ primary=https://dev.mysql.com/doc/dev/mysql-server/9.7.2/page_protocol_com_reset_connection.html
1 min Read →
2026-10-15 — React 四條支線改 Flight 協定，回覆解碼免掃描
primary=https://github.com/react/react/releases/tag/v19.3.1 primary=https://github.com/facebook/react/pull/37845
1 min Read →
2026-10-15 — Harbor 接上 Docker Sandboxes，agent 評測改在 microVM 跑
primary=https://www.docker.com/blog/harbor-docker-sandboxes-run-safe-reproducible-agent-evals/ primary=https://www.docker.com/blog/why-microvms-the-architecture-behind-docker-sandboxes/ primary=https://docs.harborframework.com/
1 min Read →
2026-10-15 — pg_vectorsearch 推出 PRISM 索引，挑戰 pgvector HNSW
primary=https://github.com/timescale/pg_vectorsearch primary=https://www.tigerdata.com/blog/announcing-pg_vectorsearch-scalable-open-source-vector-search-postgresql primary=https://github.com/timescale/pg_vectorsearch/blob/main/docs/maintenance.md
1 min Read →