1. NPM debug and chalk packages compromised (www.aikido.dev)
The popular packages debug and chalk on npm have been compromised with malicious code
2025-09-08
45 篇热帖
2. Meta suppressed research on child safety, employees say (www.washingtonpost.com)
The company’s lawyers intervened to shape research that might have shed light on risks in virtual reality, four current and former staffers have told Congress. Meta denies the allegations.
3. Immich – High performance self-hosted photo and video management (github.com)
High performance self-hosted photo and video management solution. - immich-app/immich
4. How RSS beat Microsoft (buttondown.com)
Massive tech companies tried to own syndication. They failed.
5. Pico CSS – Minimal CSS Framework for Semantic HTML (picocss.com)
Minimalist and lightweight starter kit that prioritizes semantic syntax, making every HTML element responsive and elegant by default.
6. Experimenting with Local LLMs on macOS (blog.6nok.org)
A developer's guide to downloading and running LLMs on macOS, for experimentation and privacy.
7. VMware's in court again. Customer relationships rarely go this wrong (www.theregister.com)
Opinion: Have you ever seen the 'Are we the baddies' sketch, Broadcom?
8. Formatting code should be unnecessary (maxleiter.com)
and we knew this back in the 80s
9. Doorbell prankster that tormented residents of apartments turns out to be a slug (www.theguardian.com)
在德国巴伐利亚州施瓦巴赫地区，一栋公寓楼的居民长期受深夜反复响起的门铃声困扰。他们最初怀疑这是青少年恶作剧（类似“按门铃就跑”的游戏），甚至因此报警。然而，警察到场后，尽管没有发现按门铃者且运动传感器也未触发，门铃依然持续作响。
经过仔细检查，居民和警察发现真凶竟然是一只蛞蝓（德语称 Nacktschnecke，意为“裸蜗牛”）。这只软体动物在门铃的金属板上来回爬行，其黏液轨迹清晰可见，从而触发了门铃。警方在声明中幽默地表示，该动物已被“进行教育并请离现场”，并被放置在附近的草地上。
这一事件从一场令人不安的“恶作剧”最终演变为一个意外的自然趣闻。
10. The demo scene is dying, but that's alright (www.datagubbe.se)
11. A clickable visual guide to the Rust type system (rustcurious.com)
A complete map of the Rust type system
12. Google gets away almost scot-free in US search antitrust case (www.computerworld.com)
This? This is it? Instead of being broken up, Google gets a slap on the wrist.
13. Will Amazon S3 Vectors kill vector databases or save them? (zilliz.com)
AWS S3 Vectors aims for 90% cost savings for vector storage. But will it kill vectordbs like Milvus? A deep dive into costs, limits, and the future of tiered storage.
14. Building my childhood dream PC (fabiensanglard.net)
15. 14 Killed in protests in Nepal over social media ban (www.tribuneindia.com)
Nepali police fire tear gas and rubber bullets at protesters outside parliament.
16. Intel Arc Pro B50 GPU Launched at $349 for Compact Workstations (www.guru3d.com)
Intel has officially expanded its professional GPU portfolio with the launch of the Arc Pro B50, designed specifically for small-form-factor workstations. The card is based on the Battlemage BMG-G21 GPU, configured with 16 Xe2 cores.
17. Keeping secrets out of logs (2024) (allan.reyes.sh)
There's no silver bullet, but if we put some "lead" bullets in the right places, we have a good shot at keeping sensitive data out of logs.
18. Clankers Die on Christmas (remyhax.xyz)
I’m sorry, but I can’t help with that. We acheived AGI. The clankers died on Christmas.
This post is scheduled to automatically publish: 2025-12-25. Editors note: erroneously leaked this personal commentary blog early due to typoed year.
19. ICEBlock handled my vulnerability report in the worst possible way (micahflee.com)
Last week, I wrote about how Joshua Aaron's ICEBlock app, which allows people to anonymously report ICE sightings within a 5-mile radius, is – unfortunately, and despite apparent good intentions – activism theater. This was based on Joshua's talk at HOPE where he made it clear that he isn't taking the advice
20. Clojure's Solutions to the Expression Problem (www.infoq.com)
Chris Houser presents the expression problem showing how to solve it using multimethods and protocols in Clojure, mentioning pros and cons of each method.
21. Using Claude Code to modernize a forgotten Linux kernel driver (dmitrybrant.com)
22. Job mismatch and early career success (www.nber.org)
Founded in 1920, the NBER is a private, non-profit, non-partisan organization dedicated to conducting economic research and to disseminating research findings among academics, public policy makers, and business professionals.
23. Everything from 1991 Radio Shack ad I now do with my phone (2014) (www.trendingbuffalo.com)
24. How Britain built some of the world’s safest roads (ourworldindata.org)
The death rate per mile driven has declined 22-fold since 1950.
25. Classic GTK1 GUI Library (gitlab.com)
Classic GTK1 GUI Library for Windows, Linux and MacOS.
26. Taco Bell AI Drive-Thru (aidarwinawards.org)
Taco Bell boldly deployed voice AI-powered ordering systems across more than 500 drive-through locations, convinced that artificial intelligence could finally s
27. AI might yet follow the path of previous technological revolutions (www.economist.com)
28. Removing yellow stains from fabric with blue light (phys.org)
Sweat and food stains can ruin your favorite clothes. But bleaching agents such as hydrogen peroxide or dry-cleaning solvents that remove stains aren't options for all fabrics, especially delicate ones. Now, researchers in ACS Sustainable Chemistry & Engineering report a simple way to remove yellow stains using a high-intensity blue LED light. They demonstrate the method's effectiveness at removing stains from orange juice, tomato juice and sweat-like substances on multiple fabrics, including silk.
29. Creative Technology: The Sound Blaster (www.abortretry.fail)
The Sound Blaster
30. How inaccurate are Nintendo's official emulators? [video] (www.youtube.com)
31. Go for Bash Programmers – Part II: CLI Tools (github.com)
Go for Bash Programmers II - CLI Tools. Contribute to go-monk/from-bash-to-go-part-ii development by creating an account on GitHub.
32. A desktop environment without graphics (tmux-like) (github.com)
A desktop environment without graphics. Contribute to Julien-cpsn/desktop-tui development by creating an account on GitHub.
33. No Silver Bullet: Essence and Accidents of Software Engineering (1986) [pdf] (www.cs.unc.edu)
34. Dietary omega-3 polyunsaturated fatty acids as a protective factor of myopia (bjo.bmj.com)
35. US Visa Applications Must Be Submitted from Country of Residence or Nationality (travel.state.gov)
36. Hashed sorting is typically faster than hash tables (reiner.org)
Benchmarks and theoretical explanation of why and when hashed radix sort beats hash tables.
37. De-Clouding: Music (rosswintle.uk)
I’m going through a phase of figuring out what I can get out of the cloud and “own”. Particularly with regard to streaming services. I’ve never paid for Spotify. But I’ve had iTunes Match so that I can take all of the weird, not-on-streaming music that I have (I wrote about this back in 2013!!!!), […]
38. Anscombe's Quartet (en.wikipedia.org)
39. Indiana Jones and the Last Crusade Adventure Prototype Recovered for the C64 (www.gamesthatwerent.com)
Cancelled & Unreleased Video Games
40. AMD claims Arm ISA doesn't offer efficiency advantage over x86 (www.techpowerup.com)
During the IFA 2025 in Berlin, AMD hosted a media discussion, where one of the topics was the ongoing x86 vs. Arm debate. AMD has argued that x86 processors, both their own and Intel's SKUs, can offer competitively long battery life in the notebook form factor while maintaining the decades-old x86 s...
41. I solved a distributed queue problem after 15 years (www.dbos.dev)
Learn how queues make horizontal scaling, scheduling, and flow control easier in cloud systems, and how to make them durable and observable.
42. After nearly half a century in deep space, every ping from Voyager 1 is a bonus (www.theregister.com)
: Powered by plutonium, running on pure stubbornness
43. The Helix Text Editor (2024) (jonathan-frere.com)
I’ve come to accept that I’m just a sucker for shiny nerd things. I use Rust, despite never having had a professional reason to use it in my life. I switched to Linux in my student years and I’ve never looked back since, even though it constantly breaks and I can’t get my Bluetooth headphones to connect. I have a split keyboard with home row mods set up because I read some random blog posts and it looked cool to me. I literally learned to program because I figured I should learn how to do more nerd stuff.
44. A critique of package managers (www.gingerbill.org)
n.b. This is a written version of a dialogue from a YouTube video: 2 Language Creators vs 2 Idiots | The StandupPackage managers (for programming languages) are evil The term “evil” is being used partially hyperbolic to make a point..To start, I need to make a few distinctions between concepts a lot of programmers mix up:A packagePackage RepositoriesBuild SystemsPackage ManagersThese are all separate and can have no relation to one another. I have nothing wrong with packages, in fact Odin has packages built into the language. I have nothing wrong ...
45. Writing code is easy, reading it isn't (idiallo.com)
LLM can generate infinite code for us. But it cannot understand it for us. Our new challenge is to build technology that can help us understand as fast as we can generate.