工程趣聞 ★ Latest
2026-10-04 — 釣魚專案包夾帶 .git：post-checkout hook 下載木馬
primary=https://frankwiles.com/posts/i-got-targeted/ primary=https://git-scm.com/docs/githooks
1 min read Read →
charlie@blog:~/posts $ cat README.md
Dev notes on
Linux, Docker
& backend.
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
Posts
1255
Topics
10
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-10-0
» 2026-10-0
» 2026-10-0
» 2026-10-0
charlie@arch:~/blog$
All articles
1255 total2026-10-04 — Wasmtime 非同步元件 callback 缺驗證，CVSS 9.3 堆疊溢位
primary=https://rustsec.org/advisories/RUSTSEC-2026-0327.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0326.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0325.html
1 min Read →
2026-10-04 — Quick Tunnels 支援郵件白名單驗證
primary=https://blog.cloudflare.com/protected-quick-tunnels/ primary=https://developers.cloudflare.com/tunnel/get-started/quick-tunnels/
1 min Read →
2026-10-04 — TC39 將三個 Iterator 方法推進 Stage 4，不必再先轉陣列
primary=https://github.com/tc39/proposals/commit/ee92ecf4754feca09a333fcf615b75422bf2c0f9 primary=https://github.com/tc39/proposals/commit/3c1e9eed79faced589802cd3d1a6c9110747d540 primary=https://github.com/tc39/proposals/commit/3c956df47516ecf49b7a50590ee0d2c3e57c8c0c primary=https://github.com/tc39/proposal-iterator-chunking primary=https://github.com/tc39/proposal-iterator-includes primary=https://github.com/tc39/proposal-iterator-join
1 min Read →
2026-10-04 — Tempo 3.1 預設 vParquet5，拒絕寫入 vParquet3
primary=https://grafana.com/blog/tempo-3-1-release-all-the-latest-features/ primary=https://grafana.com/docs/tempo/latest/release-notes/v3-1/
1 min Read →
2026-10-04 — pg_clickhouse 0.11 新增編碼容錯與更多型別對應
primary=https://clickhouse.com/blog/pg_clickhouse-chdb primary=https://github.com/ClickHouse/pg_clickhouse/releases/tag/v0.11.0 primary=https://github.com/ClickHouse/pg_chdb/releases/tag/v0.1.2
1 min Read →
2026-10-04 — Rust 實驗 Generic Const Args，const 引數可含泛型
primary=https://blog.rust-lang.org/inside-rust/2026/10/02/generic-const-args-and-you/ primary=https://github.com/rust-lang/goals/issues/100
2 min Read →
2026-10-04 — ThinkingBox 以資料庫終態驗證 agent 可靠度
primary=https://huggingface.co/blog/microsoft/thinkingbox primary=https://arxiv.org/abs/2608.19741
1 min Read →
2026-10-03 — arm64 新增 idle=nop，處理 M4 上 WFI 遺失暫存器
primary=https://yuka.dev/blog-2026-10-02-linux-m4.html primary=https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d97afae6f16a4f8ac7d50af0070816270b5380c1 primary=https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=baaa9b126b875b40ffd9356da52c7c871917e5bb primary=https://github.com/AsahiLinux/m1n1/pull/672
1 min Read →
2026-10-03 — OpenOffice 4.1.16 以前開惡意文件可執行任意程式碼
primary=https://www.openwall.com/lists/oss-security/2026/10/02/2 primary=https://github.com/apache/openoffice/commit/95923fd437e06edd38a4f0e139a27c755a6f3ba6.patch primary=https://github.com/apache/openoffice/commit/c699bed3f75e79bd64ddec9dec49f9e210eed281.patch
1 min Read →
2026-10-03 — Wasmtime 元件回呼未驗證，原生堆疊溢位
primary=https://rustsec.org/advisories/RUSTSEC-2026-0327.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0326.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0320.html
1 min Read →
2026-10-03 — Streamline 讓自訂影片管線不必自架主機
primary=https://blog.cloudflare.com/streamline/ primary=https://github.com/cloudflare/streamline
1 min Read →
2026-10-03 — HTML 規格移除 MessagePort 的 close 事件，GC 語意退回舊版
primary=https://github.com/whatwg/html/commit/5facb53a8b013f209aa789ea0726e404f12c83d9 primary=https://github.com/whatwg/html/issues/10201 primary=https://github.com/whatwg/html/commit/cc2634fed12737f342da865f1f5c4f751c2da601
1 min Read →
2026-10-03 — Cloudflare Traces 公開測試：一條請求的 span 貫穿整個平台
primary=https://blog.cloudflare.com/cloudflare-tracing/ primary=https://blog.cloudflare.com/one-observability-platform/
1 min Read →
2026-10-03 — ClickHouse Postgres 備份改用 direct I/O，不再沖掉 page cache
primary=https://clickhouse.com/blog/direct-io-managed-postgres-backups primary=https://github.com/wal-g/wal-g/blob/master/docs/PostgreSQL.md
1 min Read →
2026-10-03 — Rust 1.100 起 i686 Windows 目標降為 std-only
primary=https://blog.rust-lang.org/2026/10/02/demoting-i686-windows-targets-to-std-only/ primary=https://github.com/rust-lang/rfcs/pull/3999
1 min Read →
2026-10-03 — Zig 0.17 重定義 @bitCast，extern 型別轉型被禁
primary=https://ziglang.org/download/0.17.0/release-notes.html
1 min Read →
2026-10-03 — Ai2 開源 8B 模型 AstaBrief，一次生成帶引用的研究報告
primary=https://allenai.org/blog/astabrief primary=https://huggingface.co/allenai/AstaBrief_8B
1 min Read →
2026-10-02 — IANA 解釋 example.com 改版：頁面拆出 JS 以省頻寬
primary=https://www.oliverdunk.com/2026/09/30/iana-reply primary=https://iana.org/help/example-domains primary=https://www.rfc-editor.org/rfc/rfc2606.html primary=https://example.com/s.js
1 min Read →
2026-10-02 — APISIX saml-auth 簽章驗證失效，可冒充任何使用者
primary=https://www.openwall.com/lists/oss-security/2026/10/01/4 primary=https://cveawg.mitre.org/api/cve/CVE-2026-94212 primary=https://apisix.apache.org/docs/apisix/plugins/saml-auth/
1 min Read →
2026-10-02 — vm2 的 nesting 防護被空陣列繞過，require: [] 即可 RCE
primary=https://github.com/advisories/GHSA-8hr7-r645-pc6w primary=https://github.com/patriksimek/vm2/commit/05894eca1dc6a2b1a986f312c88255288a983d22 primary=https://github.com/patriksimek/vm2/releases/tag/v3.11.7
2 min Read →
2026-10-02 — Apache httpd 2.4.69 修補 mod_http2 use-after-free
primary=https://www.openwall.com/lists/oss-security/2026/10/01/19 primary=https://httpd.apache.org/security/vulnerabilities_24.html primary=https://downloads.apache.org/httpd/CHANGES_2.4
1 min Read →
2026-10-02 — LinkedIn 把三套指標中繼資料系統併入單一 ClickHouse
primary=https://clickhouse.com/blog/linkedin-observability-at-scale
1 min Read →
2026-10-02 — SvelteKit 3 發布：設定搬進 vite.config，$lib 改為 #lib
primary=https://svelte.dev/docs/kit/service-workers primary=https://svelte.dev/blog/sveltekit-3-is-here primary=https://svelte.dev/docs/kit/migrating-to-sveltekit-3 primary=https://svelte.dev/docs/kit/environment-variables
2 min Read →
2026-10-02 — WSL 內建容器 wslc 正式 GA，不必再裝 Docker Desktop
primary=https://blogs.windows.com/windowsdeveloper/2026/09/29/wsl-containers-now-generally-available/ primary=https://devblogs.microsoft.com/commandline/wslc-architecture-deep-dive/ primary=https://github.com/microsoft/wsl/releases
1 min Read →