charlie@blog:~/posts $ cat README.md

Dev notes on
Linux, Docker
& backend.

Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.

Posts
878
Topics
9
AI 前沿 Daily News 前端前線 工程趣聞 平台與維運 後端工坊 產業脈動 資安雷達 資料與儲存
zsh — charlie@arch — 82×24
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-08-1
» 2026-08-1
» 2026-08-1
» 2026-08-1
charlie@arch:~/blog$

工程趣聞 ★ Latest

2026-08-16 — Firefox 公開承諾力守 uBlock Origin 對抗 Manifest V3、開源作者質疑 AI 寫程式四年缺乏證據、以及一篇拆解「壓縮即預測」背後隱藏前提的資訊理論文章

primary=https://www.pcworld.com/article/3212428/firefox-is-now-the-last-major-browser-that-still-supports-ublock-origin.html primary=https://bsky.app/profile/firefox.com/post/3msqwhdciec2y primary=https://blog.jsbarretto.com/post/i-remain-a-skeptic primary=https://pablo.rauzy.name/dev/naur1985programming.pdf primary=https://lukefleed.xyz/posts/compression/ primary=https://ngrok.com/blog/compression-is-prediction primary=https://arxiv.org/html/2309.10668v2

1 min read Read →

All articles

878 total
資安雷達

2026-08-16 — Dancer2 認證外掛密碼重設連結遭 Host 標頭挾持,Perl DBI 模組兩起獨立堆積溢位漏洞同步在 1.652 版修補

primary=https://www.openwall.com/lists/oss-security/2026/08/15/4 primary=https://github.com/PerlDancer/Dancer2-Plugin-Auth-Extensible primary=https://github.com/perl5-dbi/dbi/security/advisories/GHSA-623j-hfpc-mrc4 primary=https://github.com/perl5-dbi/dbi/commit/29b72ae7d2a8114a734a55840bf1c45b89207809.patch primary=https://github.com/perl5-dbi/dbi/security/advisories/GHSA-wj3v-c3hh-mhqr primary=https://github.com/perl5-dbi/dbi/commit/c751ae5a5a6f56c2f8284f37c1f4d43500352ef1.patch

1 min Read →
資料與儲存

2026-08-16 — ClickHouse 把 ClickStack 觀測資源收進 Terraform 版控並與 Hud 以 trace ID 串接函式層根因,PostgreSQL 社群則推出免 agent 的 Dasha 儀表板新增 Schema 健檢

primary=https://github.com/ClickHouse/terraform-provider-clickhouse primary=https://registry.terraform.io/providers/ClickHouse/clickhouse/latest/docs#clickstack-alpha primary=https://docs.hud.io/docs/clickhouse-clickstack-integration primary=https://github.com/dbulashev/dasha primary=https://github.com/dbulashev/dasha/blob/main/CHANGELOG.md

2 min Read →
AI 前沿

2026-08-16 — VIDRAFT_LAB 上線瘧疾藥物開放評分擂台、UGM 攜手 Indosat 與 NVIDIA 啟用印尼首座大學 AI 中心、LoKiFormer 論文以局部注意力與知識記憶模組解耦讓預訓練收斂快 1.33 倍

primary=https://huggingface.co/blog/FINAL-Bench/open-discovery-challenge primary=https://blogs.nvidia.com/blog/ugm-indosat-nvidia-ai-technology-center/ primary=https://ugm.ac.id/id/berita/ugm-indosat-dan-nvidia-resmi-luncurkan-ai-technology-center/ primary=https://arxiv.org/abs/2608.12419

1 min Read →
前端前線

2026-08-16 — Node.js Interactive 2026 揭露一年一大版號新政策與 node:quic 進度,WHATWG 修正 hint popover 內開啟對話框的自動關閉規格,Node.js 26.7.0 則新增 STORE loader 私鑰與 Perfetto 追蹤支援

primary=https://nodejs.org/en/blog/events/nodejs-interactive-2026 primary=https://github.com/whatwg/html/commit/ac0389a3aca0331055bf4bf23f509c2913e3f795 primary=https://github.com/whatwg/html/issues/12763 primary=https://nodejs.org/en/blog/release/v26.7.0

2 min Read →
資安雷達

2026-08-15 s2n-quic 的 CRYPTO 幀重組緩衝區未設上限導致記憶體耗盡攻擊,Token Optimizer MCP 則同時修補 dashboard API 路徑穿越與 smart_user 指令注入

primary=https://github.com/advisories/GHSA-9q54-f358-3fqf primary=https://github.com/aws/s2n-quic/compare/v1.81.0...v1.82.0 primary=https://github.com/advisories/GHSA-76pc-mqxp-3rq5 primary=https://github.com/advisories/GHSA-49mq-fc6q-3h46 primary=https://github.com/ooples/token-optimizer-mcp/commit/b4ee96dac799cbfba0a9f9c17844ce9d613cbcc7

2 min Read →
平台與維運

2026-08-15 Docker 官方教學釘死 ESP-IDF 版本並用 Sandboxes 隔離開發、Kairos 用 NodeOpUpgrade 打造零人力 K8s 升級管線、OpenTelemetry 以 entity events 補上基礎設施拓樸的事件溯源串流

primary=https://docs.espressif.com/projects/esp-idf/en/stable/esp32/api-guides/tools/idf-docker-image.html primary=https://docs.docker.com/ai/sandboxes/ primary=https://kairos.io/docs/operator/nodeop-upgrade/ primary=https://github.com/kairos-io/kairos-operator primary=https://github.com/open-telemetry/opentelemetry-specification/blob/v1.58.0/oteps/entities/0256-entities-data-model.md primary=https://opentelemetry.io/docs/specs/otel/entities/entity-events/

2 min Read →
AI 前沿

2026-08-15 Claude 推出文字浮水印技術以 SynthID-Text 路線做可驗證溯源,Hugging Face 夏季報告揭露中國實驗室主導開源大模型規模與 Qwen 生態系稱霸,UIUC 團隊發布 LLMRouter 統一 LLM 路由開發與評測框架

primary=https://www.anthropic.com/news/claude-text-watermark primary=https://www.nature.com/articles/s41586-024-08025-4 primary=https://huggingface.co/blog/state-of-open-models-summer-2026 primary=https://arxiv.org/abs/2608.06867 primary=https://github.com/ulab-uiuc/LLMRouter

1 min Read →
後端工坊

2026-08-15 — C++ 記憶體同步從第一性原理重新推導、BPF 持續整合補齊但穩定核心測試仍有缺口、Python 打包治理迎來首屆 Packaging Council 選舉

primary=https://cppcon2026.sched.com/event/2RT5M/what-are-we-synchronizing primary=https://lwn.net/Articles/1087823/ primary=https://github.com/kernel-patches/vmtest primary=https://peps.python.org/pep-0772/ primary=https://pyfound.blogspot.com/2026/08/announcing-packaging-council-election.html primary=https://www.python.org/nominations/elections/2026-python-packaging-council/nominees/

2 min Read →
資安雷達

2026-08-14 — vLLM completions 端點缺少 prompt 陣列上限導致資源耗盡,Apache HttpComponents 非同步傳輸主機名驗證靜默失效使 TLS 遭中間人繞過,已退役的 Apache Shindig 因 XStream 反序列化可被觸發任意程式碼執行

primary=https://github.com/advisories/GHSA-87x5-vmc3-756j primary=https://github.com/vllm-project/vllm/commit/675f4295cdfe0d870471c2b51bfeca3a68a9569e primary=https://www.openwall.com/lists/oss-security/2026/08/13/6 primary=https://www.openwall.com/lists/oss-security/2026/08/13/7

1 min Read →
產業脈動

2026-08-14 — Google 開源 C2PA 內容憑證函式庫 Credentio,Spotify 釐清 LLM 代打 A/B 測試須滿足代理性與可比性假設,Cloudflare CT 監控服務轉為正式版並解決警報疲勞問題

primary=https://developers.googleblog.com/en/introducing-credentio-open-source-c-library-for-c2pa-content-credentials-from-google/ primary=https://engineering.atspotify.com/2026/8/when-can-llms-replace-humans-in-a-b-tests primary=https://blog.cloudflare.com/certificate-transparency-monitoring-ga/

1 min Read →
平台與維運

2026-08-14 — Packer 1.16 加入可驗證映像來源簽署,Dragonfly 推出免資料庫的輕量 P2P 佈署模式,Docker 攜手 Snyk、Keycard 發布企業級 Agent 安全基線

primary=https://www.hashicorp.com/blog/packer-v1160-brings-verifiable-provenance-to-machine-images primary=https://www.cncf.io/blog/2026/08/13/lightweight-dragonfly-deployment-p2p-distribution-without-the-database-stack/ primary=https://www.docker.com/blog/a-new-security-baseline-for-enterprise-agentic-adoption/

1 min Read →
資料與儲存

2026-08-14 — PostgreSQL 同步發布 18.6/17.11/16.15/15.19/14.24 與 19 Beta 3 修補 28 個安全性漏洞,ClickHouse Grafana 外掛 4.20 推出精簡查詢模式,plx 讓開發者用熟悉語言撰寫 Postgres 函式

primary=https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/ primary=https://clickhouse.com/blog/clickhouse-grafana-plugin-4-20 primary=https://www.postgresql.org/about/news/plx-write-postgresql-functions-in-the-language-you-already-know-3358/

1 min Read →