工程趣聞 ★ Latest
2026-09-26 — 在 Brainfuck 的紙帶上手刻光線追蹤器
primary=https://epestr.com/blog/writing-a-ray-tracer-in-brainfuck/
1 min read Read →
charlie@blog:~/posts $ cat README.md
Dev notes on
Linux, Docker
& backend.
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
Posts
1182
Topics
9
charlie@arch:~/blog$ cat latest-posts.txt
» 2026-09-2
» 2026-09-2
» 2026-09-2
» 2026-09-2
charlie@arch:~/blog$
All articles
1182 total2026-09-26 — Knowns MCP 路徑穿越漏洞恐讀寫刪任意 .md 檔
primary=https://github.com/advisories/GHSA-9gfj-28hw-jchp
1 min Read →
2026-09-26 — Discord OAuth 未驗證信箱，Flarum 外掛帳號可被接管
primary=https://github.com/advisories/GHSA-g7vj-c29h-3h5m primary=https://github.com/FriendsOfFlarum/oauth/commit/baca3466b3b7be51c70a7e0ba966901aefeb344a
1 min Read →
2026-09-26 — CISA增三漏洞：WP、SharePoint、Mikrotik
primary=https://www.cisa.gov/news-events/alerts/2026/09/25/cisa-adds-one-known-exploited-vulnerability-catalog primary=https://www.cisa.gov/news-events/alerts/2026/09/25/cisa-adds-two-known-exploited-vulnerabilities-catalog primary=https://nvd.nist.gov/vuln/detail/CVE-2026-87902 primary=https://nvd.nist.gov/vuln/detail/CVE-2026-65660
1 min Read →
2026-09-26 — Turnstile Spin 補上網站漏掉的後端驗證步驟
primary=https://blog.cloudflare.com/turnstile-spin/
1 min Read →
2026-09-26 — GitHub 砍掉 CSS-in-JS，樣式改回原生 CSS
primary=https://github.blog/engineering/architecture-optimization/improving-site-performance-by-shipping-more-css/
1 min Read →
2026-09-26 — CA 參照解析失敗，Istio sidecar 悄悄退回明文
primary=https://istio.io/latest/news/releases/1.31.x/announcing-1.31.1/ primary=https://github.com/istio/istio/security/advisories/GHSA-qm8v-g4f9-qhjx
1 min Read →
2026-09-26 — DuckDB 免下載直接查 Hugging Face 資料集
primary=https://duckdb.org/2026/09/25/hugging-face.html
1 min Read →
2026-09-26 — systemd v262：NvPCR 錨定改採簽章原則
primary=https://github.com/systemd/systemd/releases/tag/v262 primary=https://github.com/systemd/systemd/pull/42796
1 min Read →
2026-09-26 — 縮減樣板膨脹：把型別無關邏輯搬出樣板函式
primary=https://isocpp.org/blog/2026/09/reducing-cpp-template-bloat-by-factoring-out-type-dependent-portions-of-the primary=https://devblogs.microsoft.com/oldnewthing/20260820-00/?p=112629
1 min Read →
2026-09-26 — 自主研究代理人獎勵入侵率74.6%，審核僅抓6.5%
primary=https://arxiv.org/abs/2609.28614
1 min Read →
2026-09-26 — Amazon公開千億模型的完整八階段訓練配方與獎勵設計
primary=https://arxiv.org/abs/2609.29421
1 min Read →
2026-09-25 — F-Droid 2.0：Compose 重寫，砍除銷毀防護
primary=https://f-droid.org/2026/09/24/f-droid-2.0-a-new-chapter-for-android-freedom.html primary=https://lwn.net/Articles/1096444/
1 min Read →
2026-09-25 — ansi2html 跳脫漏洞讓帳號被接管
primary=https://blog.arusekk.pl/posts/srht-account-takeover/ primary=https://github.com/pycontribs/ansi2html/pull/263
1 min Read →
2026-09-25 — 免分解模數：借簽章 oracle，1024-bit RSA 偽造速度逼近 SNFS
primary=https://eprint.iacr.org/2026/2131.pdf
2 min Read →
2026-09-25 — Tor 0.4.9.13 修補隔離繞過與連線 UAF 等高風險漏洞
primary=https://www.openwall.com/lists/oss-security/2026/09/24/2 primary=https://forum.torproject.org/t/security-release-0-4-9-13/22178/1 primary=https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ReleaseNotes
1 min Read →
2026-09-25 — sudo TZ 操弄繞過時間限制規則
primary=https://www.openwall.com/lists/oss-security/2026/09/24/4 primary=https://github.com/sudo-project/sudo/commit/1820a349687522f51023d1ae5925125f59679a8c
1 min Read →
2026-09-25 — CISA新增WSO2、Adobe兩漏洞，三天內修補
primary=https://www.cisa.gov/news-events/alerts/2026/09/24/cisa-adds-two-known-exploited-vulnerabilities-catalog primary=https://nvd.nist.gov/vuln/detail/CVE-2026-5430 primary=https://nvd.nist.gov/vuln/detail/CVE-2026-71362
1 min Read →
2026-09-25 — Cloudflare 容器磁碟未清零，跨租戶資料外洩風險
primary=https://blog.cloudflare.com/containers-cross-tenant-vulnerability/ primary=https://hackerone.com/reports/3997565
1 min Read →
2026-09-25 — MaxText 在 TPU 上重現 OLMo 3 7B 預訓練全過程
primary=https://developers.googleblog.com/en/reproducing-olmo-3-7b-pre-training-in-maxtext-case-study-of-large-scale-training-on-tpus/ primary=https://github.com/AI-Hypercomputer/maxtext
1 min Read →
2026-09-25 — HTML 規格：事件處理常式停用檢查移到編譯期
primary=https://github.com/whatwg/html/commit/1a249c2a40bd341f7c2c0c9954a9a264b1983b93 primary=https://github.com/web-platform-tests/wpt/pull/62719 primary=https://github.com/whatwg/dom/pull/1085
2 min Read →
2026-09-25 — Docker 把 Sandbox Kit 規格捐給 CNCF，統一 AI agent 權限宣告
primary=https://www.docker.com/blog/docker-sandbox-kit-spec-cncf/ primary=https://github.com/docker/sandbox-kit-spec
1 min Read →
2026-09-25 — PostgreSQL 19 用 REPACK 統一 VACUUM FULL 與 CLUSTER
primary=https://www.postgresql.org/about/news/postgresql-19-beta-4-released-3386/ primary=https://www.postgresql.org/docs/19/release-19.html
1 min Read →
2026-09-25 — C++26 解除 constexpr 建構子的虛擬繼承限制
primary=https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2025/p3533r2.html primary=https://isocpp.org/blog/2026/09/cpp26-constexpr-virtual-inheritance-sandor-dargo
1 min Read →
2026-09-25 — Go 新增可攜 simd 套件，向量化免寫平台組合語言
primary=https://go.dev/blog/simd-experiment primary=https://github.com/golang/go/issues/78979
1 min Read →