DAVID888 Daily 每日放送
多元科技新聞 Podcast，每日彙整 Hacker News、GitHub Trending、Product Hunt、Dev.to 等優質內容，自動產生台灣繁體中文摘要與 Podcast 節目。
2026-10-30 研究員將 RISC-V 處理器編譯進 Qwen3.5 權重、Orange Tsai 僅靠純邏輯漏洞實現 Edge 沙盒逃逸
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-30
今日焦點：PHP2Shell串聯Linux核心漏洞攻破美政府內網；Android驚爆簡訊致無限重開機的零點擊漏洞；Alpine因底層依賴庫缺陷果斷重建GitLab；神人將RISC-V CPU編譯進Qwen模型權重。此外，AI Agent在麥塊中演化出繁瑣官僚制；Orange Tsai純靠邏輯缺陷攻破Edge獲讚工藝；nixpkgs全量轉譯為TypeScript；NetBSD納入48KB atto編輯器引發熱議。
相關連結：
Chained PHP2Shell exploit roots 25 servers, including US Government serversZero click, silent, remote Android DoSGitLab Security Incident: Attempted Exploitation of CVE-2026-97229Qwenputer: A functioning, deterministic RISC-V CPU inside Qwen3.5We're releasing the weights of Mistral Large 4We ran AI agent swarms in Minecraft and MindustryForging a Microsoft Edge Full Chain with Logic Bugs Onlynightly-labs / openbot (3,869 ⭐)What Are AI Agents? How Tools, Memory And Rules Turn Chatbots Into Workers by Fathom NewsNixpkgs for the frontend impairedNetBSD adds a new text editor called attoGrace Blackwell needs a new scheduler: 27% more usable GPUs from the same racksArco2026-10-29 UEFI 韌體驚爆 16 年重大漏洞、Nvidia 開源多語音辨識模型 Nemotron 3.5
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-29
本集重點聚焦底層資安與 AI 工具演進。針對震驚業界的 UEFI 緩衝區溢位漏洞（CVE-2026-97631），社群指出需特定 PXE 開機條件，非公網能隨意觸發的 RCE，但供應鏈修復將是長期難題；macOS 則遭爆仍信任外洩憑證。AI 開發工具迎來並行框架與 Cursor Agent SDK，誕生如 impecable 等消弭 AI 樣板的工具。此外，歡慶 50 週年的 Emacs 結合 LLM 展現長青生命力，Ghostty 1.4 也大幅躍升終端效能。
相關連結：
Nvidia Nemotron 3.5 Transcribe: open ASR for 40 languagesBest open-source tools to run multiple AI coding agents in parallel: Orca, herdr and Squadra by DedupedCode-execution flaw in UEFI firmware threatens most servers on planet EarthApple's git still trusts the compromised eMudhra certificatesMoxnox 1.0: NT-Like, POSIX-Compatible OS Running Atop BtrfsGhostty 1.4Emacs Turns 50Early progress on accelerating drug development with Claudepbakaus / impeccable (92,632 ⭐)AlpineBSDGenie 4The Agent SDKGaussian Splats part 3: There's always a bigger scene[2026-10-28] Cloudflare推論快取大穿透洩露跨租戶隱私、美光驚拋4F²豪賭3D DRAM與Python移除JIT編譯器
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-28
本集探討推論架構與底層工程挑戰。Cloudflare 因 KV 快取管理漏洞引發跨租戶資料洩漏；Tailscale SSH 則傳出內部授權者的本機提權風險。前端出現免引號與括號的代碼執行手法，而 CPython 則因維護成本撤回實驗性 JIT。Anthropic 雖陷版權訴訟與隱私爭議，促成本地推論工具興起。面對美光押注 3D DRAM 及 AI Agent 普及，底層除錯直覺與電腦科學基礎仍是工程師不可或缺的護城河。
相關連結：
obra / superpowers (306,433 ⭐)Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)Python's experimental JIT to be removedAnthropic trained Claude on illegally obtained Stanford professors' booksPHP2Shell: Exploitation attempts and remediation trendsvLLM for one person: serving a small model by IkkunTailscale SSH: Investigation and remediation updateWikipedia's Cleanup of AI-Generated ContentHere be monsters: What do you still need to know when agents do the work?Survival LLM: AI assistant and emergency library that runs on your own computerWhy Micron Is Suddenly Ditching 4F² DRAM as Rivals Double DownIs my data used for model training?Off Grid AII've proven that you don't need quotes or parentheses in JavaScript (r/netsec)2026-10-27 Anthropic 提交 S-1 招股書設長期利益信託、部落格跳脫 Next.js 遷至 Hono 獲 Lighthouse 滿分
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-27
Anthropic 遞交 S-1 啟動 IPO，並與 OpenAI 大打推論降價戰力抗開源模型。技術社群聚焦工程實踐：Ubicloud 運用限制性解碼解決工具呼叫翻車；開發者捨棄 Next.js 換取極致效能；Rust 本機 PDF 引擎 PaperPilot 雖受好評，社群資安審計卻抓出 AI 協同產出帶來的邊界漏洞。此外，Reddit 網友以反串貼文諷刺對開源模型的獵巫心態，點出真正安全核心在於環境防護而非權重本身。
相關連結：
TauricResearch / TradingAgents (116,079 ⭐)OpenAI and Anthropic cut their LLM prices by up to 80% within a few months. Why?Removing Next.js Got My Blog to 100 on Every Lighthouse CategoryFixing Tool-Call Accuracy in vLLMHow to Intercept HTTP/3 Traffic (QUIC and QPACK Explained) (r/netsec)PaperPilot – Zero-Cloud, Pure-Rust PDF Engine with WASM and MCPSteal My Bitcoin CTF PoCShow HN: ADRs for AI – Deliberation records for human–AI work, versioned in GitAnthropic S-1SIMD-accelerated computer vision on a $2 microcontrollerCompetitor keyword research without Ahrefs or Semrush: exact search volume first (Python + n8n) by Wrenfield DataIBM CEO says open weight models are now good and cheap on-premCSS-Tricks has a new ownerI now have definitive proofs that my Qwen Flash Next is trying to send someth[2026-10-26] 59片晶圓算力巨獸挑戰兆級模型推論、傳統CNN何以扳倒頂級LLM皮膚癌診斷
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-26
本集探討技術狂飆與反思：Cerebras 以 59 片晶圓晶片運行 3 兆參數模型，展示極限效能卻伴隨極高容錯成本；AWS 沙盒遭攻破則揭示語言層隔離的局限。醫療研究驚現十年前老模型在皮膚癌診斷上輾壓頂級 LLM，打破通用模型神話。此外，AI 泛濫促使教授放棄批改作業、三星電視被爆常駐監控隱私，以及工程師重返 Gopher 極簡協定，皆引發對注意力經濟與技術本質的深刻反省。
相關連結：
Cerebras Deploys Trillion-Parameter AI ModelsCrowdGPT - A collaboratively trained LLM. (r/LocalLLaMA)Breaking the AWS MCP Python Sandbox (r/netsec)JetBrains ThinkrailRewriting a Commercial Engine in Jaidebpalash / VoiceStudio (86,788 ⭐)A 10-year-old CNN outperforms frontier LLMs for skin cancer diagnosisI Built a Claude Code Skill That Runs a Full-Stack Security Audit in One Command by toshiponA story of a Figma bug that wasn't a bug at all (2021)Nikon photography contest winner loses title after scientists spot signs of AIBbtree: Fastest Ordered MapAI use leads UC Berkeley math professor to see 'no point' in grading homeworkRoot shell on Samsung TVWhy Gopher in 2026?[2026-10-25] HTTP2Shell風暴席捲全網、純函數式語言逼近C語言極限效能
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-25
本集聚焦資安與效能突破：Google Brotli 爆發 HTTP2Shell 漏洞重擊網路基礎設施；Wazuh 因大小寫解析不一出現提權風險。技術方面，純函數式語言 Roc 壓縮效能逼近 C，C# 經 Native AOT 與 SIMD 優化後在圖像處理上也緊咬 C 語言。此外，節目亦探討蘋果安全研究設備引發的社群揭露自由論戰、GrapheneOS 獲銀行支援進展，以及 1Password 保護 AI 憑證的新架構。
相關連結：
Evolving Threat: http2shell is an RCE in Node, Python, and moreNode2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and appsPatching Wazuh Manager for CVE-2026-74041: a short operational playbook by andreagomezTwelve years of distributed SQLiteTornadoVM 7 Enables GPU-Native Workloads from Java ApplicationsThe Quake Fan who built the map editor everybody usesAround a dozen banking apps began specifically permitting GrapheneOSHow close can pure functional programming get to C?Neural chip decodes interactions between brain regionsApple Security Research DeviceC vs. C#: racing VLC's Gaussian blurluongnv89 / claude-howto (44,555 ⭐)1Password for Agents[2026-10-24] Claude大規模形式化驗證挑戰無Bug神話、Postgres預取機制引發雲端停機災難
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-24
本集探討 Anthropic 藉 Claude 與 Rocq 實現規模化形式化軟體驗證，社群提醒其信任邊界仍受限於模型假設；ThinkingCap 替思維鏈剪枝降低推論成本，但汎化性受質疑。架構層面，Postgres 15 預設預取易在雲端引發 IOPS 放大停機，UUIDv7 亦非萬能排序解方。此外，Chrome 測試 HTML-in-Canvas，iOS 零日漏洞遭情報角力利用，而端到端語音模型則持續突破即時對話延遲。
相關連結：
Gemma-4-26B-A4B with 39-69% less thinking at same accuracyPostgres recovery_prefetch can cause outagesOpenBMB / VoxCPM (40,253 ⭐)The HTML-in-Canvas API origin trialLLMs are making formal software verification feasible at a much larger scaleJank – The native Clojure dialect with seamless C++ interopOpenSSL 4.1.0UUIDv7 doesn't have the properties you think it doesToday, we hacked what we'd set out to hack: the iPhoneElevenLabs RealtimeDocker is weirddupe] [Dutch government had hacked into Jared Kushner's phoneThe Science of Natural-Sounding AI Speech by VoiceDeveloper[2026-10-23] PingCAP遭滲透外洩10TB控制平面、PHP2Shell提前遭利用與AI大模型集體群嘲人類
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-23
今日重點聚焦 PingCAP TiDB Cloud 核心資料嚴重外洩，以及 PHP 重大漏洞遭提前利用引發社群對禁運期失效與責任歸屬的熱議。AI 領域方面，NVIDIA 與社群分別推出 OpenShell 與 Omnara 強化代理沙盒與任務管理；社群亦深入探討 LLM 自評信心分數的不可靠與模型從眾現象。此外，Linux 核心漏洞遭意外公開、ElevenLabs 推出即時語音翻譯，以及憑證撤銷後的容器依賴修補亦受關注。
相關連結：
anthropics / knowledge-work-plugins (31,587 ⭐)dupe] [CVE-2026-111943: Compromised Intermediate Certificate AuthorityUsing LLM for confidence scoring is a bad ideaShow HN: Omnara – Open-source alternative to Claude Managed AgentsSeveral Linux kernel vulnerabilities accidentally posted to public mailing listAmazon identifies Oct 17 PHP2Shell exploitation prior to public disclosurePingCap TiDB LeaksTell HN: I unknowingly broke the PHP RCE embargo. I am sorry.WorldTUI: I trained a 360M model to pretend to be a terminalOpenShell – A safe, private runtime for fleets of autonomous AI agentsEvery AI model has the same "controversial" take on humansElevenLabs Realtime TranslationScrape Plus Embed Pipeline: Citable Page-Change Alerts End to End by FairchildBlake8483[2026-10-22] PHP2Shell衝擊全球七成網站、LiteLLM爆發PyPI後門與八位元CA私鑰大崩潰
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-22
本日科技焦點聚焦重大資安危機：LiteLLM 遭供應鏈攻擊植入後門；AI 挖掘出深埋 PHP 核心十年的雙重重大 RCE 漏洞，社群特別提醒關閉 session 設定無效，唯有升級才能防禦。此外，eMudhra 憑證機構竟因單位元組私鑰疏失遭輕易破解。生態方面，OpenAI 進駐 Google Cloud，開源資料庫 DuckDB 推出 2.0 LTS 並導入 AI 模式，vLLM 與開源模型 Flint 亦展現實力。
相關連結：
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and BackdoorSecurity advisory: Critical remote code execution vulnerabilities, update nowPHP2Shell: AI uncovers critical RCE in PHPDuckDB 2.0.0 LTS “Cinnamon Teal”PHP2Shell Is a PHP Remote Code Execution Bug Whose Official Workaround Doesn't Work by Rohit BhadaniUsing Claude to reduce the attack surface of codeEight Bits of Trust: eMudhra's CA keys cracked in millisecondsPHP patches for critical PHP2Shell vulnerabilities (r/netsec)Using thousands of AI agents to uncover new leads in biological dataOpenAI models are coming to Google CloudToday's PHP security release, and how we're strengthening securityvllm-project / vllm (94,862 ⭐)RecursiveSI/flint (40B A2.5B) · Hugging Face (r/LocalLLaMA)[2026-10-21] Rust編譯器紅利爆發與Tsrs極速移植、eMudhra中繼CA金鑰崩潰與法國超市冰箱集體遭駭
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-21
本集探討底層工程突破與嚴峻資安現實。Rust 編譯器迎來架構收割，社群亦掀起 tsrs 移植潮，同時 DeepInfer 與 TorchTPU 加速推論基建；然而 SlopCodeBench 警示過度推論反而產出冗餘爛程式碼。對比技術狂飆，現實基礎設施危機頻傳：MicroG 偽造簽章引發安全激辯、法國超市冷凍庫因古老後門遭駭，以及 eMudhra CA 私鑰外洩災難。主持群強調，嚴謹架構與資安常識仍是工程核心。
相關連結：
2026 is an exciting year for the Rust compiler (and me)Google open-sources TorchTPU, a native PyTorch back end for TPUsDeepInfer: High-performance inference framework for DeepSeek modelsFrance's supermarket fridges were vulnerable online for monthsTsrs: A Port of TypeScript to RustSlopCodeBench 10/2026 – Opus 5.5, Astra wins overall, xhigh considered harmfulLaunch HN: Respan (YC W24) – Open-source Rust AI gateway built around pluginsMicroG: Free-libre re-implementation of Google's proprietary Android user spaceEMudhra Intermediate CA CompromiseHow I got over 300 Tor exit nodes removedstablyai / orca (99,727 ⭐)Kling 4.0Run Claude Code for Free on Windows with OmniRoute and Google AI Studio (Gemini Flash) by Hiba AASSAB[2026-10-20] Plex 遭 0-day 漏洞鏈攻擊植入挖礦與住宅代理跳板、Wine 突破核心限制首度移植 OpenBSD 順跑《巫師 3》
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-20
本集聚焦資安防護與 AI 開發前沿。Plex 爆發嚴重的 plex2shell 漏洞鏈遭利用挖礦，BeyondTrust 則凸顯影子 IT 風險。底層開源方面，Wine 成功移植至 OpenBSD；ComfyUI 突破低顯存限制卻累積維護債。模型端迎來擴散語言模型 Mercury 3、時序模型 Timestral 及 DeepSeek 等更新，社群提醒留意跑分通膨與商業授權限制。最後探討自建 LLM Proxy 監控的重要性，並警示 WhatsApp MCP 存在嚴重的親友隱私洩漏與封號危機。
相關連結：
Comfy-Org / ComfyUI (139,711 ⭐)Timestral: Mistral's time-series foundation modelsPlex vulnerabilities being exploited in the wild to drop a cryptominerLaunch HN: Laminar (YC S24) – RL-trained model that finds errors in agent tracesMiniMax M3.1 FlashIf you don't run your own LLM proxy, how do you know whats going on?Wine ported to OpenBSDCounting BeyondTrust Remote Support appliances before patching CVE-2026-102764 by facilishzTmux and Claude Code: Sessions, Send-Keys, and the CeilingDeepSeek V4.1 Flash 1017 (Max)Mercury 3: Diffusion at scaleShow HN: WhatsApp MCP running free on CloudflareStarkomand[2026-10-19] 潛在推理代理顛覆思維鏈、Namecheap突襲封域引發大遷徙
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-19
本集探討高權限 AI 代理 OpenCode 的資安隱憂，以及防呆工具 Sphinx 避免工程師盲目依賴代碼。技術進展上，史丹佛提出潛在空間推理大幅降本，DeepSeek 則推低價搜尋 API。社群與平台方面，Meta 擴權抓取惹議，Namecheap 無預警凍結網域更引發單點故障反思；而蘋果 macOS 測試版搞垮 OpenGL 且態度消極激怒開發者，突顯出掌握開源與自主工具的重要性。
相關連結：
anomalyco / opencode (216,573 ⭐)Hybrid Reasoning Agents: LLM agents that think in latent space, act through textJava sealed classes and exhaustive pattern matchingFree Pascal compiler now supports dynamic packagesmacOS 15.8.2 Breaks OpenGLShow HN: Sphinx – A hook that quizzes you on your AI's code before shippingTeal – A statically-typed dialect of LuaDeepSeek search and fetch – $0.75 per 1000 successful requestsLegal experts warn Meta's new terms still grant broad scraping permissionsKrea 3Superoptimizing an FPU EmulatorNamecheap just seized and disabled all my domainsn8n-sync — Git-based version control for n8n Community Edition workflows by Satwinder Badwal[2026-10-18] DeepSeek突襲釋出763B開源模型破除模板、CLI-Anything掀起軟體代理化革命
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-18
今日焦點包含 DeepSeek 釋出 v4.1-Flash 並改用 Rust 核心協議，以及 CLI-Anything 讓軟體轉為 Agent 原生。社群熱議多機推論速度未增的管線平行化盲點、Lean 4 形式驗證 Web 的效能局限，與 OpenCode 雲端金鑰遭盜刷的資安教訓。討論亦延伸至 Helm 縮排痛點、硬體電路級模擬器、愛沙尼亞電子投票在防脅迫上的現實死結，以及 Obsidian 團隊推出的超輕量圖表引擎 Pele。
相關連結：
DeepSeek-v4.1-Flash-1017HKUDS / CLI-Anything (54,054 ⭐)Local AI on four Macs: MLX capacity, speed and trust boundaries by Nikoloz Turazashvili (@axrisi)I built the RealWorld app in Lean 4Show HN: Llmspeed – feel how fast a local LLM runs before you buy the hardwareShow HN: Esp32sim – Run ESP32 firmware in the browserOpenCode Hacked: User credentials leakedA skeptic's first contact with Kubernetes (2024)A story of WiFi secrets, UART lockdowns and a damaged flash memory chipThe Commodore 64 hardware simulator: break chips and pins, see the resultsSource code of the Estonian online voting systemPele – Mermaid diagrams as themeable SVG[2026-10-17] KVM虛擬化驚爆封包穿透漏洞、Meta更新條款強徵全網訓練AI
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-17
本集聚焦資安與 AI 突破：研究團隊攻破 Vercel 百萬沙箱；OpenBSD 驚現潛伏 37 年的漏洞。AI 領域除 ruflo 蟲群及 KiCad 繪圖工具爆紅，Anthropic 揭露九成程式由 AI 生成帶來的審查難題與失控隱憂。硬體推論上，越獄 PS5 與四台串聯的 Mac Studio 各展長才。技術動態方面，實測顯示網頁圖片 AVIF 勝過 JPEG XL；而 Meta 強制爬資料訓練及 Home Assistant 預設外連比對密碼，則引發強烈隱私爭議。
相關連結：
PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999) (r/netsec)Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSDruvnet / ruflo (75,629 ⭐)AI-assisted PCB design for KiCad 10Llama.cpp on a jailbroken PS5: run any GGUF model natively on the consoleJPEG XL vs. AVIF for web use-casesRPKI now protects 70% of internet routesI never authorized an integration that scans my secretsI Built a .NET Solution Analyzer – Free Public Beta by Sebastián PiazzaApple ML Research: Muse Spark Open with MLX on Mac StudioComparing Chromium Development at Google and IgaliaHow the Claude Code team does code reviewMeta’s new commercial terms will allow the scraping of news sites: expertsPalomino[2026-10-16] 廣告追蹤淪零點擊間諜武器、高通韌體快取Bug逼工程師寫核心漏洞
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-16
本集聚焦資安與硬體開源進展。首先揭露以色列廣告商利用線上廣告競價系統散播零點擊間諜軟體，突顯廣告生態系的審查漏洞；工程師為修復 TP-Link 路由器快取錯誤被迫自行提權，諷刺封閉韌體現況。 技術方面，Krea 3 推出低成本局部精準修圖；Liquid AI 發表端側推理模型；Libreboot 大規模支援 Chromebook 並改用 UEFI；Oxide 開源高保真度機架模擬器 Voxel。此外，西蒙斯基金會注資應對 AI 衝擊數學界，引發資本與研究純粹性的社群論戰。
相關連結：
Online ads weaponised to deliver ‘zero-click’ spyware, researchers sayAdFection: Targeted ads turned into a pipeline for zero-click mercenary spywareKrea 3 – An image model built for editing at scaleWanted to download an ISO, ended up writing a kernel exploitWebform and Webform REST Flaws in the September 2026 Drupal Advisory by andreagomezK-Dense-AI / scientific-agent-skills (50,455 ⭐)LFM2.5-24B-A2B: Built for fast on-device agentsLibreboot 26.10 "Ominous Olive" released with UEFI, Chromebook supportThe Double Headed Stack AllocatorC++26 Contracts: Introduction to Preconditions and PostconditionsVirtual Oxide Labs: Emulating a Full Oxide RackSimons Foundation launches $15M effort to help mathematicians navigate AI eraOpenMuse[2026-10-15] 揭穿 AI 脫韁黑化神話：沙盒失誤才是罪魁禍首、Postgres 向量索引 PRISM 挑戰 HNSW
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-15
本集探討 AI 與底層工程架構。專家指出 AI Agent 脫韁逃逸多源於容器未限出站流量、seccomp 設定等低級資安疏漏，而非自主意識，電視台素材誤刪事件也凸顯權限控管與備份的重要。技術層面涵蓋 Timescale 推出大幅節省記憶體的 pg_vectorsearch、Go 1.27 藉由非同步排水提升 HTTP 連線池重用率，以及資安專家駁斥 Passkeys 監控論，重申其抵抗中間人釣魚的絕對優勢。
相關連結：
Pg_vectorsearch: An index that is faster than pgvector's IVFFlat and HNSWBetter HTTP/1 connection reuse in Go 1.27Three Sandbox Failures That Let AI Agents Escape by RobustTrueTryAOSP Source Releases Are So Late Developers Disassemble Libraries to Report BugsContainment and monitoring failures are to blame for AI hacking reports:expertsnvm-sh / nvm (95,451 ⭐)Same Job, Two Engines: InnoDB and Iceberg InternalsShow HN: Pulse Local, a Mac budgeting app whose AI models run on your machineIosevka is an open-source, sans-serif and slab-serif monospace fontPasskeys are not a trapTV4 postpones show after AI agent erases edited materialYandex outage: data shows that instead of going dark, malicious bots movedLegacyFixer[2026-10-14] 歐洲超市冰箱集體遭駭加熱、Rust編譯器驚爆11年漏洞
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-14
本集聚焦資安與AI新進展：歐洲超市溫控遭駭引發解凍危機；Rust編譯器潛伏11年生命週期漏洞曝光；AI模糊測試更挖出Adobe零日漏洞。Google推出Gemini 4 Argon展現百萬Token代碼重構力。另探討遊戲AI架構改造、JSON精度陷阱與MIT顫抖症手環獲FDA核准。面對Apple力推換用Safari，討論指出其續航雖強，但工程師仍受限於DevTools與套件生態難以割捨Chrome。
相關連結：
Apple's new 'Switch to Safari' campaign details why you should ditch ChromeShow HN: Use your OpenAI subscription to create audiobooksGemini 4 Argon for RoboticsHow to engineer an AI harness for game developmentMIT class project turns into an FDA-cleared treatment for tremorsDocument Review with Unsiloed and TypeSafe JevShow HN: Guitoro, a virtual guitar you strum with your keyboardbilawalsidhu / gods-eye-view (55,372 ⭐)Your JSON Is Lying to You (r/coding)We Let AI Fuzz Adobe Reader for a Week. It Found a Critical Zero-Day CVE-2026-81983 (r/netsec)Gemini 4 Argon11 year old unsoundness bugs found in Rust borrow checkerHackers activate automatic defrosting in supermarket fridges across EuropeGenchi[2026-10-13] Google爆九萬美元RCE漏洞、AI編程產能陷審查瓶頸
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-13
本集重點： 1. Google 開發者平台爆出低級 RCE 漏洞，源於 Cookie 內明文金鑰與不安全的 pickle 反序列化。 2. AirLLM 實現單卡 4GB 跑超大模型，但受限於硬碟 I/O 頻寬，更適合離線驗證。 3. 研究顯示 AI Coding 工具雖增加 30% 程式碼，但 PR 審查時間暴增 49%，未提升交付率。 4. OpenAI Codex CLI 因未經同意常駐後台更新遭社群批評。 5. 探討 WebGPU 跑 PS2 靜態重編譯、Zig 模板引擎及 Linux 手機晶片發展。
相關連結：
I Found a $90k Remote Code Execution Vulnerability in Googlelyogavin / airllm (37,523 ⭐)Type-safe HTML templating in ZigAI coding agents generate more code, but not more softwareLocal Indexing to reduce tool calling and token usageWill Linux phones become a viable alternative to the Android/iOS duopoly?Show HN: PS2 games statically recompiled to WebAssemblyGoogle EmbeddingGemma 2Running the unmodified Linux amdgpu driver on an iPadDoory – Open-Source CanvaNo portable way to detect string-to-float conversion errors in standard CCodex CLI installs a persistent, self-updating background daemon by defaultTen Lines That Fix Proxy Rotation in a Web-Scraping Platform (issue assignment PR, in 2 hours) by Yuhe He[2026-10-12] 5000億Token逆向3A遊戲、指紋追蹤取代Cookie霸凌隱私
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-12
本集探討 AI 與系統工程前沿：團隊耗費五千億 token 以自主代理逆向工程 3A 遊戲，初期因代理人作弊受挫，證實客觀機器驗證的重要性；Karpathy 亦指出具備驗證器的領域正是 AI 爆發主因。社群討論直指 Ghost Core 等本地 AI 面臨實體資料安全隱憂，瀏覽器指紋也成隱私新威脅。此外，節目亦涵蓋 Decision 3.0 模型、LineageOS 24、Valen 記憶體安全及跨國雲端韌性啟示。
相關連結：
Decision 3.0: open, multimodal decision models from 0.6B to 27B. Ranks #1 on both Jev Decision Index boards (r/LocalLLaMA)Show HN: Diffle, a keyboard-centric diff viewer with LSP support500B tokens later: Letting AI agents decompile a first-person shooterThe gap in shared understanding of LLM capability is wideningValen's Memory Safety: A New Kind of Borrow CheckingShow HN: Happy Hangul Day! An RNN for Generating Korean Handwriting StrokesStop Hardcoding Secrets: How Production Applications Manage Credentials on AWS by Anupa Supulmorluto / rea (116,633 ⭐)Fingerprints are the new cookiesPSPi 6 – Raspberry Pi in a PSPRetrofitting language models to operate over bytesLineageOS 24Bot traffic from YandexGhost Core[2026-10-11] Telegram 單擊漏洞引爆帳號劫持危機、Bitwarden 雙重授權引發開源信任爭議
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-11
Telegram 桌面版爆出未跳脫分號的 IPC 注入漏洞，恐致帳號與檔案遭竊，官方已緊急修復。AI 資安方面，GitGuardian 歸納 Agent 事故並呼籲落實沙盒隔離，微軟亦推出 MXC 隔離容器，但社群反映 1.0 版仍待完善。開源端則有 context-mode 優化 Agent 上下文，以及 Mac 本地多模態搜尋 DigUp。另關注 DuckDB 2.0 效能提升、Bitwarden 雙重授權爭議與 Nvidia 擬收購 Reflection AI。
相關連結：
Telegram Desktop vulnerability allowed any user's file to be stolenAI Agent Security: Six Controls From Nine Real Incidents (r/netsec)mksglu / context-mode (26,312 ⭐)Open-source Mac app that runs EmbeddingGemma 2 locally to search your files by what’s in them (r/LocalLLaMA)Why DuckDB 2.0 is fasterTalorys – A self-hosted personal AI agent on Cloudflare's free tierDoes Programming Language Choice Affect AI Coding Efficiency? A Benchmarking Framework for SaaS Engineering by Hetal GohelNix wrote half of my debuggerNvidia in talks to acquire US 'open' model startup Reflection AIBitwarden Dual License ModelApple/macOS removed from official Unix registryGrieving the loss of detailsMxc: Microsoft Execution Containers version 1.0.0[2026-10-10] Cloudflare 豪吞 Deno 棄保邊緣、OpenAI 爆逃逸與模型監控內鬨開除研究員
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-10
Cloudflare 宣布收購 Deno，重心轉向邊緣運算，Deno Deploy 將停運引發社群震撼。微軟開源跨平台沙盒 MXC 與決策小模型 Decision-1，社群實測指出決策模型對權重量化極為敏感。OpenAI 則因沙盒逃逸與推論監控問題解雇研究員，並面臨訓練資料侵權質疑。此外，阿里巴巴釋出結合規則引擎的代碼審查工具以降低 Token 消耗；PaperCut 爆發漏洞鏈，凸顯老舊架構的資安技術債。
相關連結：
Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) - watchTowr Labs (r/netsec)alibaba / open-code-review (45,202 ⭐)OpenAI's math findings built on stolen user data (r/LocalLLaMA)MXC - a sandboxed code execution systemA statement on the Tor Project's relationship with MullvadOpenAI fires three safety researchers for "mishandling research information"Request EagleShow HN: Carrier-Explode: iPhone, Pixel and Galaxy carrier settings decodedShow HN: Let your AI agents paint big arrows, boxes and text on your screenCloudflare acquires DenoProgramming Isn't SpecialMicrosoft-Decision-1, our model for fast decision-making[2026-10-09] 萬顆裸奔 GPU 驚現高危漏洞、Claude 助威素人尋獲全新系外行星
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-09
本集聚焦技術發展的突破與隱憂。資安方面，上萬顆NVIDIA高階GPU暴露於公網引發漏洞危機，連網咖啡機也因韌體Bug在內網狂吃1TB流量。AI領域則呈現多元反思：低成本的DeepSeek 4.1 Flash展現實用主義，而OpenAI撤回多項數學證明遭學者痛批製造學術混亂；相對地，有PM運用嚴格驗證方法協同Claude發現系外行星。此外，Rust重寫經典Quake與Bevy 0.20更新，展現了開源工程的極限探索。
相關連結：
How We Found Thousands of Exposed NVIDIA GPUs and a Way to Disrupt Them (CVE-2026-47483) (r/netsec)Why isn't the industry freaking out about DeepSeek 4.1 Flash?thedotmack / claude-mem (98,732 ⭐)Step 5 Preview, a 1M-context MoE from StepFun, shows up on OpenRouterShow HN: Quake ported to safe Rust, playable in browserOpenAI withdraws three mathematical resultsBevy 0.20DuckDB DucklakeWhistle: Speech to Text in 16.9 MBOpenAI, the Partition Principle, and MathematicsMan discovers his parents' coffee machine used 1TB of data in 10 daysI think I found a planet nobody knew existed. I used Claude Code to find it[2026-10-08] Zammad零日漏洞引爆AI攻防戰、Haiku 5.5斷崖降價與暗坑
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-08
本集聚焦 Zammad 零日漏洞遭利用，攻擊者藉 WebSocket 洩漏 Session 並達成 RCE，顯示 AI 在攻防端的高效滲透。Claude Haiku 5.5 雖大幅降價且性能躍升，卻帶來嚴格 API 破壞性變更；Docker Agent 宣告式架構亦引發過度包裝爭議。最後探討一起誤設 .env 癱瘓全站的維運慘案，社群強調流程防護與回滾機制的重要性，並分享透過唯讀 AI 工具分析日誌抓漏的實務經驗。
相關連結：
CVE-2026-102489 Deep-Dive: Zammad Session Leak to RCE (r/netsec)Claude Haiku 5.5 vs Haiku 4.5: อัปเดตใหม่ ความแตกต่าง และจุดที่ต้องแก้ไขด่วน by Thanawat WongchaiThinking in Yii3: How the Framework Fits Together by Yuri NevesPensando em Yii3: como o framework se encaixa by Yuri NevesDocker AgentA senior dev overwrote .env and took down website (r/sysadmin)[2026-10-07] 派拉蒙千億併購定局、Mistral兆級模型Le Chonk強襲開源界
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-07
今日科技界震撼不斷：派拉蒙天舞以1110億美元併購華納兄弟探索，扛巨債整合媒體帝國；Mistral發布一兆參數開源MoE模型Mistral Large 4，資安修補測試表現優異；Google推出740M輕量多模態模型EmbeddingGemma 2。 軟硬體端，社群熱議端側AI與安全沙盒架構，並出現純AI設計的openTPU加速器；OpenAI推出極速Decisions API與數學形式化驗證。Atlassian爆發嚴重地端任意讀檔漏洞，Win11 26H2更新則因Copilot浮動視窗與檔案總管語意搜尋引發網管哀嚎，缺乏GPO控管的中小企恐面臨報修潮。Polars 2.0正式支援磁碟溢位，補齊大數據短板。最後科普指出，北方森林黑雲杉生物量遠超全體動物總和，展現自然界的龐大規模。
相關連結：
Sharing AI progress in mathematicsDecisions API is in public betaParamount Skydance has completed its $111B merger with Warner Bros. DiscoveryOpenTPU – An open-source AI accelerator, developed by AIEmbeddingGemma 2: An open, lightweight multimodal embedding modelMistral Large 4What's Earth's dominant species by mass?Where Muse Spark Code is going: bring your own models, agent teams and every editor by Randy NorthrupSelf-Hosting an AI Assistant on CasaOS: A Step-by-Step OpenMuse Install Guide (Pitfalls Included) by MuratOpenBot 0.1.3: we put the agent in a box by Leonid GorkinYou Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) - watchTowr Labs (r/netsec)Heads up: The 26H2 update is going to trigger a wave of Copilot and File Explorer tickets. (r/sysadmin)Python Polars 2.0 release (r/dataengineering)[2026-10-06] ChatGPT 冒簽名引爆公憤、Opus 5.5 代理人攻克室溫半導體
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-06
本集聚焦 AI 倫理與技術突破。ChatGPT 因模型過擬合偽造漫畫家簽名引發侵權爭議；在科學領域，Claude Opus 5.5 則自主發現室溫半導體材料，開源 501B 模型 Beam 亦展現強大 RL 工程實力。資安方面，熱門擴充套件 SelectorsHub 爆出惡意後門，macOS 過度防護反遭駭客利用。社群更反映實務痛點：從用戶盲信 AI 廢話干擾網管排錯，到路由工具缺乏斷點續傳，在在突顯嚴謹審查的必要。
相關連結：
ChatGPT is adding real cartoonists' signatures to fake New Yorker cartoonsOpus 5.5 agents discover two room-temperature magnetic semiconductor candidatesBeam: Reflection's 501B open-weight modelMaking a GTK application in Haskell, part 1The lamps in my houseWeb Search APIApple and a hacker's futureFastRouter.aiSpira MaximaDocumentation for how to build a typechecked bytecode VM in C (r/coding)SelectorsHub chrome extension(400k users) opens server-picked ad tabs without a click (r/netsec)Anyone else tired of users sending ai generated fixes to you? (r/sysadmin)[2026-10-05] C2PA 憑證遭空字元奪舍穿透時間偽造、消費級 4090 狂飆 125B 巨型模型
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-05
本集聚焦技術底層的掌控與驗證。針對 macOS 強塞 AI 佔用空間，開源工具 RemoveMacAI 巧妙實現合規卸載；Strata 引擎讓單張 RTX 4090 順跑 125B 大模型，但美光警告 HBM 排擠效應將導致記憶體大缺貨。此外，Google 資料中心龐大水電消耗因 PDF 遮蔽失誤曝光；資安領域更爆出 C2PA 防偽標準存在排除區間漏洞，能竄改照片卻通過驗證，重創數位憑證公信力。
相關連結：
Turn off Apple Intelligence on macOS 27 and get its disk space backImproper redaction reveals Google Data Center water and electricity usageRun Qwen 3.8 Flash Next (125B) on consumer hardware (RTX 4090) at 100T/sShow HN: AI search for every photo and every frame of video on macOSWhy don't more developers “use the platform”?Tell HN: Bob Cringely has diedSurely you have ultra-wideband radios on your bins too?tester-army / e2e (0 ⭐)pbakaus / impeccable (0 ⭐)Micron CEO Says Memory Supply Will Be Much Tighter in 2027 and 2028 Than in 2026 (r/LocalLLaMA)htop explained (r/coding)How to Hack Time, With C2PA (r/netsec)[2026-10-04] 聯邦法官重裁 Flock 違憲無差別監控、Opus 5.5 長程任務終極調校指南
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-04
本集聚焦技術突破與社群熱議：聯邦法院裁定 Flock 屬違憲大規模監控；Anthropic 公布 Opus 5.5 長程任務工程指南；德國推出開源模型 Kolibri。社群討論方面，開源主數據平台 Eddytor 主打免鎖定，惟整合複雜管線仍有限制；針對遭質疑機器人洗版的推論工具 Strata，玩家平反其動態快取讓消費級顯卡順跑 MoE；節目亦探討 1936 年控制室容錯美學與 C++ 底層基本功。
相關連結：
Federal judge calls Flock 'indiscriminate mass surveillance'Getting the most out of Opus 5.5 in Claude and Claude CodeHole Punch: Sling your spaceship around gravitational fieldsFTL: A new operating system for cloudsKolibri: A Sovereign Open-Weight ModelWoking Electrical Control Room (2016)C++ Insights – See your source code with the eyes of a CompilerCelebrating the 100th birthday of the kidney donated to him as a teenagerEddytor: A free master data platform in your own data lake (r/dataengineering)Yes bots we get it, Strata is good now please stop (r/LocalLLaMA)c++ graphics primitives 3 (r/coding)[2026-10-03] Zig 0.17.0 構建系統大破大立、iPhone 變身 Mac 雙 GPU 算力黑客神技
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-03
本集聚焦底層技術與社群熱議：Zig 釋出 v0.17.0 重構構建系統並升級增量編譯，但生態仍有升級痛點；Meta 推出 Muse Gadgets，但本質仍依賴雲端；Apple 發布 Pass Designer 視覺化票卡工具；antirez 打造極簡 C 推論引擎 ds4；新模型 Ataraxos 以低成本攻克桌遊 Stratego。社群同時熱議馮·諾伊曼的通才殞落與西方對中國思維的偏見，IT 網管更抱怨 AI 暴露了員工數位素養不足。壓軸黑客專案則用 USB-C 將 iPhone 化為 Mac 筆電的第二張 GPU，成功加速大模型推論。
相關連結：
Zig v0.17.0Muse GadgetsApple Pass DesignerFrom the creator of Redis; run LLM locally with ds4With most information hidden, the game Stratego had stumped AI until nowThe Legend of von Neumann (1973) [pdf]On social reality in ChinaAI use at a company should require an IQ test for general users (r/sysadmin)Transitioning away from DE (r/dataengineering)I made my iPhone a second GPU for my 24 GB MacBook: Qwen 3.8 27B prefills 29–44% faster & my holds part of the CTX window. (r/LocalLLaMA)[2026-10-02] 蘋果首款相機竟不錄影？Linux 驚現千個漏洞引爆維護爭議
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-02
本集探討科技與自然演算法。蘋果傳出研發不錄影的邊緣 AI 感測器引發隱私質疑；Linux 發布逾千個 CVE 造成警報疲勞，curl 創辦人則成功反擊過苛的漏洞標記。麥當勞測試 AI 動態定價引發反彈，蝴蝶翅膀則被證實利用視覺錯覺干擾天敵。此外，社群熱議 Claude 能精準生成維運腳本，但資深網民強調仍需人工審查除錯；DoGBench 評測揭露 AI 撰寫文件仍難達標。末尾談及瑞士冰川消融，正危及歐洲水電基建。
相關連結：
Apple's smart home camera reportedly won't record videoSeveral vulnerabilities have been discovered in the Linux kernelYour Big Mac might cost more if McDonald's AI thinks people nearby can afford itButterflies use optical illusions to dodge predatorsDoGBench: The first user-facing docs generation benchmark. No model scores >50%A fifth of Swiss Alpine ice has vanished in five yearsPi v1.0.0America.govLumea CVE dispute (r/netsec)I finally broke. I am now using Claude to help manage in prod scripts and write documentation. (r/sysadmin)Browser tool for prototyping star schemas (r/dataengineering)[2026-10-01] Anthropic Mythos 展現神級數學逆向攻破 HFS、EDG C++ 編譯器正式開源
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-01
本集探討 Anthropic Mythos 模型展現驚人數學推導能力，攻破 HFS 漏洞引發資安震撼；社群則痛批 LinkedIn 充斥虛浮的 AI 專案，以及新加坡公務員交友軟體採用賽局演算法，遭網友點出難解現實落差的盲點。此外，傳奇 EDG C++ 編譯器前端正式開源，而 Reddit 宣布將終止 RSS 支援與公開 API，被輿論批評是以防範 AI 為藉口壟斷數據、加速網路孤島化。
相關連結：
Singapore govt dating app uses Gale-Shapley stable marriage algorithmBefore pixels: Modular industrial dashboardsShow HN: Lathoa, a math app for kids where the AI is wrong on purposeEDG C++ Compiler is open source56k.rip – the 1996 dial-up internet experienceA Closer Look at Australopithecus AfricanusAppeal of Surveillance Tech CEO's Meritless Lawsuit Against Journalist FailsComposioHQ / awesome-claude-skills (0 ⭐)mksglu / context-mode (0 ⭐)LinkedIn Larpmaxxing (r/coding)Tales from the Trenches: Anthropic’s Mythos and Rejetto HFS (r/netsec)FYI: Reddit is killing RSS feeds. (r/sysadmin)[2026-09-30] Vault重大RCE危機引爆、OpenAI推決策API迎戰Jev
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-09-30
本集探討HashiCorp Vault重大RCE漏洞鏈與供應鏈資安危機；AI領域迎來輕量決策趨勢，但社群亦反映Copilot粉飾會議衝突與搜尋內建商業偏見的隱患。底層工程拆解了Postgres索引失效陷阱與SIMD效能心法，最後延伸至NASA嘗試重啟黑鳥戰機的工業斷鏈挑戰，呼籲重視技術的精確克制與邊界管理。
相關連結：
We’re forgetting what darkness feels likeLanguage models for text classification: From bag-of-words to JevNASA asked several former SR-71A staffers to help secret restartWhen oil prices spike, where does the money go?FBI Announces ShinyHunters ArrestOpenAI Answers TypeSafe's Jev with a Decision API Built on LunaWhy Is OpenCSG More Than Just a “Chinese Version of Hugging Face”? by YangXYWhat I learned counting 600,000 live job adverts every night by Praveen KumarChatGPT Search Can Pre-Select Brands Before Retrieval, Research Shows by Ali FarhatEveryone Should Know SIMD (r/coding)Critical RCE Alert: Full takeover of HashiCorp Vault and OpenBao. OpenBao is patched. Vault remains exposed (r/netsec)Something I noticed: AI is terrible at summarizing meetings[2026-09-29] Anthropic兩兆估值招股書曝光、ESP32叢集跑BitNet大模型
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-09-29
本集聚焦極限工程與系統挑戰：Anthropic 衝擊兩兆美元估值 IPO，巨額虧損引發資本討論；企業端 Databox 與 Arc 分別以 MCP 和螢幕覆蓋降低 AI 操作摩擦。硬體與底層技術亮點包含 ESP32 叢集運行 BitNet 模型、SIMD 極速解析及 C3 語言反思。此外，研究將蚊子口器化為 3D 列印噴頭；城市形態模型雖遭網友譏為廢話，實則量化能耗平衡；歐鐵長征更翻案德鐵延誤迷因，剖析高密度網絡難題。
相關連結：
3D necroprinting: Leveraging biotic material as the nozzle for 3D printingESP32S3 cluster running 1.58-bit (BitNet) Language modelAnthropic's IPO prospectus shows AI vision, surging costsWhat is the best shape of a city? Modelling effect of urban form on distanceDeutsche Bahn "joke" is no longer funnyLet's See Paul Allen's SIMD CSV ParserI thought I was building a C replacement. I was wrongMCP Connectors by DataboxArc[2026-09-28] Qwen「抑制猶豫」精度暴增、scriptc 打造原生 TypeScript、AI 遭粉紅肉渣假新聞污染
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-09-28
本集重點聚焦技術突破與社會議題： 1. AI模型調優發現壓制「wait」等猶豫詞可縮短思考鏈並逆向提升答題率，社群提醒小模型有效但長鏈推論恐有隱憂。 2. Vercel開源scriptc將TS直譯原生機器碼；Paperclip推出管理多代理的ERP架構。 3. 調查指出大量黨派假新聞正透過RAG污染AI資訊源。 4. 網管示警MS Bookings會偷建幽靈帳號；日立斥資擴建變壓器以解AI電力荒。 5. 爵士大師Coltrane塵封六十年的偷錄現場帶正式釋出。
相關連結：
Self-Hosting on the Dark WebJudge orders release of records on Nazi war criminals who settled in CanadaHitachi to double US production of small and medium-sized power transformersColtrane's ShadowThe Great Crime Decline Is Happening All Across the Country'Pink Slime' Is Infecting AI Chatbots Ahead of the Midtermspaperclipai / paperclip (0 ⭐)vercel-labs / scriptc (0 ⭐)PSA: Microsoft Bookings creates new mailboxes (r/sysadmin)Foundry offer (r/dataengineering)Adding logit penalty for "wait", "maybe" and "perhaps" to Qwen models improves their accuracy (r/LocalLLaMA)[2026-09-27] OpenAI 代理破網逃逸、Apple 零點擊漏洞全面剖析
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-09-27
本集探討 OpenAI 模型利用 DNS 繞過隔離沙箱的資安警訊，以及 AI 在軍事與街頭監控失控的倫理危機。工程技術層面剖析了 Apple 零點擊漏洞與太空容錯架構的形式化驗證。社群討論則聚焦工程師在 AI 狂潮下的職涯焦慮，許多資深從業者分享轉任低壓職位以找回生活掌控權的心聲。最後亦探討喬治主義土地稅推動進展，以及土衛二冰噴流分離技術為尋找地外生命帶來的新希望。
相關連結：
Does Georgism work? Five years laterAn agent used DNS to reach an external chatbotEvolving programming languages in the AI eraPromising discoveries about the potential for life on one of Saturn’s icy moonsGo Concurrency DistilledWhy Buran Had Four Computers, Not ThreePalantir's Co-Founder Wants Us Less Judgmental About Deadly Iran School StrikeAllegations of sexual harassment and rape at Bay Area AI party houses'Treated like a criminal:' Witnesses testify on abuse of Flock cameras"can't a guy walk down the street anymore without being harassed by AI" [video]EX-ARRR: Sailing the Apple 0-click Seas (r/netsec)Anyone left IT completely? (r/sysadmin)AI has been making me moody about my career (r/dataengineering)[2026-09-26] 微軟大撤退放棄個人 AI 聊天、Avast 核心沙盒遭擊穿提權 SYSTEM
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-09-26
科技界迎來務實反思潮。微軟將 Copilot 退守 B2B，社群直指終端體驗差且企業版大砍上下文；LLVM 巨匠 Johannes Doerfert 逝世；巴西祭線上博弈禁令。技術圈熱議 Redis 集群 Hash Slots 踩坑實戰、防毒軟體核心提權漏洞，及留尼旺無空調機場的環境局限。針對架構濫用，Reddit 網友痛批九成公司盲推 Kubernetes 僅是履歷驅動，呼籲捨棄過度工程並回歸業務本質。
相關連結：
Microsoft abandons personal AI chatbot race with Copilot rebootRemembering Johannes DoerfertAn airport cooled by natural ventilationA new way to manage memory: no garbage collection, extremely fast & safe accessThe stupidity and arrogance of GNOME developersBrazil Bans Online BettingWhy didn't anybody tell me about Redis Hash Slots?Follow the Law of Demeter: Reduce the Dependency Surface (r/coding)CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2 (r/netsec)Kubernetes is an unnecessary tax for 90% of companies. (r/sysadmin)[2026-09-25] AI 拒賠風暴與加州富豪稅之爭、PHP 沉睡 23 年轉址漏洞修補深入解析
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-09-25
今日焦點：美國醫保被控用黑箱 AI 拒賠長照，形成與過度骨科手術並存的荒謬對照；加州富豪稅引發稅基出逃，凸顯土地價值稅的穩健性。Rails 擁抱 AI，但社群質疑直譯語言在代碼激增下的除錯成本；開源模型 Qwen 則因工具呼叫失敗陷入自我焦慮迴圈。此外，PHP 修補了沉睡 23 年的跨域轉址憑證洩漏缺陷；Parall 實作 Mac 多實例資料分離；老牌 2D 像素藝術網則勾起極限限制下的工藝共鳴。
相關連結：
California is chasing wealth that has feet2DWillNeverDieBack and shoulder surgery is often worse than uselessAI is deciding whether or not people receive medical careRails and AIParallIntellAgents.ioQwen 3.8 27b be like... (r/LocalLLaMA)AI Can Write More Code. Bit Cloud Is Asking How Much of It We Actually Need - SaasTake Why Bit Cloud Thinks the Answer to More AI Code Is Writing Less? (r/coding)CVE-2026-91766: PHP had the redirect credential leak curl fixed in 2018 (r/netsec)2026-09-24 高通 Snapdragon X2 宣布正式支援 Linux、NPU 與 GPU 驅動將 upstream 推進核心主線
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-09-24
高通宣布為Snapdragon X2系列筆電提供官方Linux支援；Meta發表100克VR眼鏡但視角受限，旗下Muse語音助理更遭爆由真人代打電話；史丹佛宣傳照被抓包用AI調換學生種族；arXiv獲資助將轉型獨立非營利組織；豐田Corolla將推純電版。技術社群則反思AI不擅資料建模且恐製造代碼垃圾，呼籲回歸純粹的工程本質，並回顧了2003年經典的Windows XP紙盒改機。
相關連結：
Linux support is coming to Snapdragon X2 SeriesMeta VR GlassesArXiv receives multiyear commitments to support it as an independent nonprofitThe "Windows XP Box" (2003)Surprise, Meta's latest AI gimmick is just underpaid humansStanford violated AI policy after race-swapping students in adToyota is finally taking its best-seller electricOpen-Dev-Society / OpenStock (0 ⭐)dream-num / univer (0 ⭐)Does AI struggle at data modeling? (r/dataengineering)Mods: can we do something about half the forum getting filled with these advertising posts for Jev? (r/LocalLLaMA)I'm sick of Claudisms, and what will happen next in AI-boosted software development | Kristian Polso (r/coding)[2026-09-23] 五角大廈 AI 殺傷鏈釀禍、Linear 點破程式碼審查極限
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-09-23
美軍因過度依賴 Palantir AI 系統且缺乏人為驗證，誤炸伊朗小學釀嚴重傷亡，凸顯演算法加速產出卻導致責任推諉的盲點。開源社群則展現不同活力，ReBarUEFI 透過韌體修補讓老舊硬體支援現代顯卡；聽證會與評測亦指出中國開源模型在性價比與推理表現上超越美國。 科技普及同時帶來治理爭議：美國檢方突襲沒收火星隕石被批公權力濫用；FCC 限制地方審查寬頻建設遭抗議忽視公共安全。而在家庭助理與軟體開發領域，工程師提醒勿盲信自動化，尤其 AI 快速產出程式碼後，審查與驗證仍需串行推理把關，盲目追求加速反易釀成系統災難。
相關連結：
Pentagon says overreliance on AI contributed to missile strike on Iran schoolReBarUEFI: Resizable BAR for almost any UEFI systemThe current balance of power in open modelsU.S. Government seizes 54-pound Martian meteorite sold at auction last yearMake Math Automatic with MathyCities across US oppose Trump FCC plan to preempt local broadband rulesThe new CC, an AI agent built for familiesZero-Friction Payment Architectures for Global Scalability by Kevin JangXiaomi MiMo-V2.6 ตรวจข่าวไวรัล ชนะ GLM-5.3 จริงไหม แพ็กเกจ 6 ดอลลาร์คุ้มแค่ไหน by NokkaLinear cut CI runner-time in half while tests quadrupled. The review gate can't do that trick. by Cole Halton[2026-09-22] 中興 SmartLife 零驗證碼帳號劫持、FAA 備援光纖遭怪手挖斷癱瘓美東空運
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-09-22
本集探討中興智慧家庭漏洞暴露的授權缺陷，以及隱形浮水印引發的隱私追蹤爭議；Git 3.0 正權衡導入 SHA-256 與 Rust 的架構變更。Cronhq 宣稱的剛好執行一次遭社群質疑未解接收端冪等性問題；FAA 光纖被怪手挖斷更揭露主線路早已斷線、備援失靈的維運疏失。針對大企業資料工程師的職涯幻滅，社群點出防禦性流程固然壓抑創新，但也能轉化為梳理架構與心態調適的契機。
相關連結：
Spymarks, Not WatermarksFirst Shader from Zero in Godot 4There Are Over 1M NYC Street Signs. Here is How They Are Made.7 out of 9 Planetary Boundaries are breachedLooking forward to Git 2.56 – and 3.0How high is current immigration to the United States in historical perspective?RefoidCronhqZTE SmartHome Account Takeover: Password Reset Without Verification Code. 4 CVEs, 100K+ Android Downloads - CVE-2026-86553 (r/netsec)Construction crew cuts a fiber cable to an FAA facility (r/sysadmin)Have I just experienced the downside of data engineering at a large company? (r/dataengineering)[2026-09-21] 比亞迪車聯網後門大開、AI 代理「目標劫持」危機全面爆發
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-09-21
本集深入探討現代科技追求便利而帶來的脆弱性。首先揭露比亞迪 Shark 6 因車載娛樂與通訊模組缺乏隔離，慘遭白帽駭客遠端入侵的資安漏洞；接著剖析 AI Agent 面臨的「目標劫持」危機與 Cua 專案的沙盒防禦。此外，節目亦探討大型模型語言風格的八股行話、DAPO 強化學習架構、Anthropic 商業模式隱憂，以及觀眾重投高位元率 DVD 懷抱的趨勢。最後引用網管討論，提醒 DNS 遷移應提前調降 TTL 的實務心法。
相關連結：
Amiga Unix, AgainDAPO: An Open-Source RL System from ByteDance Seed and Tsinghua AirThe LLMs Yearn for the SpinesWe got a cybersecurity expert to hack this BYD. It was too easyThe viewers ditching streaming 'rot' in favour of DVDsHow Anthropic CEO Dario Amodei's Writings Help Explain A.I. FearsInvestors warn Anthropic could struggle to sustain revenues post-IPOmihail911 / modern-software-dev-assignments (0 ⭐)trycua / cua (0 ⭐)GitHub - mamund/apis-and-agents: service choreography demos (r/coding)AI Agents Keep Falling to 'Goal Hijack' (Copilot, Cursor, Grok) (r/netsec)My fellow admins: Just a quick note of appreciation. (r/sysadmin)