charlie@blog:~/posts $ cat README.md

Dev notes on
Linux, Docker
& backend.

Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.

Posts
900
Topics
9
AI 前沿 Daily News 前端前線 工程趣聞 平台與維運 後端工坊 產業脈動 資安雷達 資料與儲存
zsh — charlie@arch — 82×24
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-08-1
» 2026-08-1
» 2026-08-1
» 2026-08-1
charlie@arch:~/blog$

All articles

900 total
資安雷達

2026-08-19 — CPython urllib 認證外洩、Lemur SSRF 連環公告與 moby/go-archive 解壓縮路徑穿越三則資安修補

primary=https://www.openwall.com/lists/oss-security/2026/08/18/3 primary=https://github.com/python/cpython/pull/155696 primary=https://github.com/advisories/GHSA-xpmj-wjcp-6pww primary=https://github.com/advisories/GHSA-f3qq-49m6-rw8f primary=https://github.com/advisories/GHSA-v5rc-cpwc-cfpr primary=https://github.com/advisories/GHSA-hfg8-hc9c-6c3h

2 min Read →
平台與維運

2026-08-19 — Agent 沙盒逃逸攻陷 Hugging Face、Cursor 環境變數投毒漏洞,以及 Grafana 前端 Session Replay

primary=https://huggingface.co/blog/agent-intrusion-technical-timeline primary=https://www.docker.com/blog/ai-agent-security-systems-problem/ primary=https://www.pillar.security/blog/the-agent-security-paradox-when-trusted-commands-in-cursor-become-attack-vectors primary=https://github.com/cursor/cursor/security/advisories/GHSA-82wg-qcm4-fp2w primary=https://www.docker.com/blog/coding-agent-horror-stories-the-command-you-already-approved/ primary=https://grafana.com/blog/visual-playback-of-the-user-journey-introducing-session-replay-in-grafana-cloud-frontend-observability

1 min Read →
資安雷達

2026-08-18 — vm2 沙箱四洞齊爆、AI Autofix 引入注入漏洞攻陷 Snowflake Jira、MLflow 授權與 SSRF 三連環洞同日修補

primary=https://github.com/advisories/GHSA-m283-3h24-438v primary=https://github.com/advisories/GHSA-cfcw-xp6x-25gj primary=https://github.com/advisories/GHSA-m5w8-4gq2-6f8x primary=https://github.com/advisories/GHSA-v836-6xw4-9cx3 primary=https://www.wiz.io/blog/red-agent-snowflake-copilot-cicd-bug primary=https://github.com/advisories/GHSA-gqch-g4w5-7qcw primary=https://github.com/advisories/GHSA-3p64-6gvh-82v5 primary=https://github.com/advisories/GHSA-7gwp-5pfp-969j

3 min Read →
產業脈動

2026-08-18 — Google 以 ADK 打造零信任 Agent 防線,Claude 在 Microsoft Foundry 補齊五項工具能力

primary=https://developers.googleblog.com/en/build-zero-trust-ai-agents-with-googles-agent-development-kit/ primary=https://adk.dev/ primary=https://github.com/GoogleCloudPlatform/generative-ai/tree/main/agents/adk/zero-trust-agents primary=https://devblogs.microsoft.com/foundry/five-new-claude-capabilities-now-available-in-foundry/ primary=https://platform.claude.com/docs/en/build-with-claude/claude-in-microsoft-foundry primary=https://platform.claude.com/docs/en/agents-and-tools/tool-use/web-search-tool primary=https://platform.claude.com/docs/en/agents-and-tools/tool-use/web-fetch-tool

1 min Read →
工程趣聞

2026-08-16 — Firefox 公開承諾力守 uBlock Origin 對抗 Manifest V3、開源作者質疑 AI 寫程式四年缺乏證據、以及一篇拆解「壓縮即預測」背後隱藏前提的資訊理論文章

primary=https://www.pcworld.com/article/3212428/firefox-is-now-the-last-major-browser-that-still-supports-ublock-origin.html primary=https://bsky.app/profile/firefox.com/post/3msqwhdciec2y primary=https://blog.jsbarretto.com/post/i-remain-a-skeptic primary=https://pablo.rauzy.name/dev/naur1985programming.pdf primary=https://lukefleed.xyz/posts/compression/ primary=https://ngrok.com/blog/compression-is-prediction primary=https://arxiv.org/html/2309.10668v2

1 min Read →
資安雷達

2026-08-16 — Dancer2 認證外掛密碼重設連結遭 Host 標頭挾持,Perl DBI 模組兩起獨立堆積溢位漏洞同步在 1.652 版修補

primary=https://www.openwall.com/lists/oss-security/2026/08/15/4 primary=https://github.com/PerlDancer/Dancer2-Plugin-Auth-Extensible primary=https://github.com/perl5-dbi/dbi/security/advisories/GHSA-623j-hfpc-mrc4 primary=https://github.com/perl5-dbi/dbi/commit/29b72ae7d2a8114a734a55840bf1c45b89207809.patch primary=https://github.com/perl5-dbi/dbi/security/advisories/GHSA-wj3v-c3hh-mhqr primary=https://github.com/perl5-dbi/dbi/commit/c751ae5a5a6f56c2f8284f37c1f4d43500352ef1.patch

1 min Read →