2025-09-10

37 篇热帖

1. I replaced Animal Crossing's dialogue with a live LLM by hacking GameCube memory (joshfonseca.com)

How I replaced Animal Crossing's dialogue with a live LLM by bridging GameCube memory to a cloud AI, with no game code changes required.

2. iPhone Air (www.apple.com)

Apple today debuted the all-new iPhone Air, the thinnest iPhone ever made, with pro performance.

3. ICE is using fake cell towers to spy on people's phones (www.forbes.com)

ICE is using a controversial spy tool to locate smartphones, court records show.

4. OrioleDB Patent: now freely available to the Postgres community (supabase.com)

Supabase is explicitly making available a non-exclusive license of the OrioleDB patent to all OrioleDB users in accordance with the OrioleDB license.

5. We can’t circumvent the work needed to train our minds (zettelkasten.de)

Debunking the myth that search engines and AI eliminate the need for memory. Building deep knowledge through active learning remains essential for critical thinking, despite promises of instant information access.

6. Memory Integrity Enforcement (security.apple.com)

Memory Integrity Enforcement (MIE) is the culmination of an unprecedented design and engineering effort spanning half a decade that combines the unique strengths of Apple silicon hardware with our advanced operating system security to provide industry-first, always-on memory safety protection across our devices — without compromising our best-in-class device performance. We believe Memory Integrity Enforcement represents the most significant upgrade to memory safety in the history of consumer operating systems.

7. Immunotherapy drug clinical trial results: half of tumors shrink or disappear (www.rockefeller.edu)

The researchers demonstrate that an engineered antibody improves a class of drugs that has struggled to make good on its early promise.

8. E-paper display reaches the realm of LCD screens (spectrum.ieee.org)

Modos' open source e-paper display controller enables high refresh rates, transforming e-paper into a viable option for dynamic computing tasks.

9. Microsoft is officially sending employees back to the office (www.businessinsider.com)

摘要:

微软公司正式要求员工返回办公室工作,结束了其作为大型科技公司中较为灵活的远程办公政策。根据公司人力资源主管艾米·科尔曼于周二发送的内部邮件,微软将要求员工每周至少在办公室工作三天。

新政策主要内容与时间表:

  1. 分阶段实施:政策将分三步推行。首先从2026年2月底开始,针对居住在西雅图地区、距微软办公室50英里范围内的员工。
  2. 随后将扩展至美国其他办公地点
  3. 最后将在国际范围内推行。邮件中提及2月23日为一个可能的启动日期,但尚未最终确定。

政策背景与变化原因:

  • 微软此前在疫情期间采取了灵活的混合办公模式,政策相对宽松。此举使其政策与Meta、谷歌等公司看齐,要求员工大部分时间每周到办公室工作三天。
  • 公司在内部邮件中解释,数据表明,当人们更频繁地面对面协作时,他们更有活力、能交付更强有力的成果。在AI时代,构建突破性技术需要实时协作和共同解决问题所产生的动力与势头。
  • 文章指出,微软似乎已删除一篇以往宣传远程办公有助于留住员工和提高生产力的旧博客文章,新链接指向一篇讨论混合办公带来新挑战及AI如何解决这些挑战的文章,这反映了公司立场的转变。
  • 此次政策调整也被视为微软加强对员工绩效压力的最新迹象,公司今年已解雇了数千名被认定为表现不佳的员工。

员工应对与例外情况:

  • 员工可以申请例外,截止日期为9月19日
  • 艾米·科尔曼在邮件中强调,此政策变化并非为了减少员工数量,而是为了以更协作的方式满足客户需求。
  • 各业务部门将根据自身情况制定具体计划,部分团队可能会偏离公司整体要求。
  • 对于西雅图地区以外的员工,目前无需采取行动,除非收到其高管的进一步通知。国际员工的详细计划将在2026年开始制定。
11. NASA finds Titan's lakes may be creating vesicles with primitive cell walls (www.sciencedaily.com)

Saturn’s moon Titan may be more alive with possibilities than we thought. New NASA research suggests that in Titan’s freezing methane and ethane lakes, simple molecules could naturally arrange themselves into vesicles—tiny bubble-like structures that mimic the first steps toward life. These compartments, born from splashing droplets and complex chemistry in Titan’s atmosphere, could act like primitive cell walls.

12. Made for People, Not Cars: Reclaiming European Cities (www.greeneuropeanjournal.eu)

By prioritising residents over private vehicles, a Spanish municipality has overcome one of the biggest challenges facing Europe’s cities.

13. Zoox robotaxi launches in Las Vegas (zoox.com)

Ride in Zoox’s purpose-built autonomous robotaxi. Now serving Las Vegas. Download the app and ride in a Zoox.

15. Performance Improvements in .NET 10 (devblogs.microsoft.com)

Take a tour through hundreds of performance improvements in .NET 10.

17. Kerberoasting (blog.cryptographyengineering.com)

I learn about cryptographic vulnerabilities all the time, and they generally fill me with some combination of jealousy ("oh, why didn't I think of that") or else they impress me with the brilliance of their inventors. But there's also another class of vulnerabilities: these are the ones that can't possibly exist in important production software,…

20. Show HN: Vicinae – A native, Raycast-compatible launcher for Linux (github.com)

A focused launcher for your desktop - native, fast, extensible - vicinaehq/vicinae

21. A cryptography expert on how Web3 started, and how it’s going (spectrum.ieee.org)

Web3的起源、现状与密码学的核心作用

本文探讨了Web3的概念起源、当前演变,以及密码学和硬件安全在其发展中的关键角色,并基于对密码学专家Riad Wahby的采访进行了阐述。

Web3的起源与初衷 Web3一词由以太坊联合创始人Gavin Wood于2014年左右提出。其核心理念是构建一个基于区块链和点对点网络的去中心化互联网,旨在取代由谷歌、Facebook等大型科技公司主导的Web 2.0模式。在Web 2.0时代,用户隐私被侵蚀,个人数据被用作商品。因此,Web3最初的革命性目标是夺回数据主权和隐私控制权,利用加密货币和区块链技术让用户真正拥有自己的数据。

Web3定义的演变 然而,Web3的内涵已发生显著变化。如今,它更广泛地指代围绕加密货币和区块链技术的生态系统。Wahby指出,最初的革命性精神已逐渐消退,Web3更多地与金融产品和投机性投资(如模因币)关联。尽管目标发生了转变,但两者的一个关键连接点在于:密码学始终是Web3的技术基石,无论是为了实现数据主权还是支撑加密货币交易。

密码学的中心地位与影响 密码学对于确保区块链交易的安全至关重要。每一次交易都通过数字签名机制来完成身份验证和授权,即使用私钥生成唯一签名,并用对应的公钥进行验证。Web3的兴起极大地改变了密码学的研究与应用格局:

  • 积极影响:Web3激发了密码学领域的创新热情,并为相关研究带来了大量资金和动力,使得许多以往仅存于理论的高级密码学技术得以走向实际应用。
  • 潜在风险:Web3快速的产品化节奏也给密码学部署带来了压力,可能增加安全漏洞出现的风险。尽管大部分资金损失源于欺诈而非密码学本身被攻破,但快速迭代确实带来了挑战。

硬件安全:Web3的未来保障 Wahby及其公司Cubist的工作重点是利用硬件安全来解决Web3中的核心风险——私钥安全。传统上,私钥(如存储在硬盘上)容易被恶意软件窃取,且区块链交易不可逆转。

  • 硬件安全模块(HSM):这是一种成熟的物理设备,能在其内部安全地生成和存储密钥,并执行签名操作,确保密钥永不离开硬件,将数据安全转化为物理安全。
  • 针对Web3的演进:传统HSM无法完全满足Web3的需求,例如高频交易所需的高性能和可编程的策略控制(如限制交易对象、遵守制裁名单)。为此,Cubist结合了硬件安全模块(HSM)可信执行环境(TEE),并增加了可编程策略层。这创造了一个专为Web3设计的新一代硬件安全解决方案,它不仅保管密钥,还能根据预设策略对签名请求进行合规性检查,从而在保障安全的同时支持复杂的业务逻辑。

结论 Web3从一个旨在重塑互联网隐私和主权的愿景,演变为以加密货币和区块链为核心的生态系统。密码学是其不可或缺的技术基础,而硬件安全,特别是增强型HSM,正成为保障Web3资产安全、推动其在更复杂场景中应用的关键发展方向。

22. How Ruby executes JIT code (railsatscale.com)

Where does JIT-compiled code live? How does Ruby switch between bytecode and native execution? Why does TracePoint slow everything down? This post answers the JIT questions most Ruby developers have but rarely see explained.

23. Show HN: Small Transfers – charge from 0.000001 USD per request for your SaaS (smalltransfers.com)

Small Transfers is an online payment platform that lets SaaS and API providers bill their customers as little as 0.000001 USD per request.

25. Dropbox Paper mobile App Discontinuation (help.dropbox.com)

The Dropbox Paper app is being discontinued October 9. Learn what that means for your Paper documents and mobile editing.

26. I still love PHP and JavaScript (2022) (the.scapegoat.dev)

Over the last twenty years, I have used over a dozen languages professionally, from C to Common Lisp, from Java to Python, from C++ to Typescript.

Yet, I ...

27. R-Zero: Self-Evolving Reasoning LLM from Zero Data (arxiv.org)

Abstract page for arXiv paper 2508.05004: R-Zero: Self-Evolving Reasoning LLM from Zero Data

29. Show HN: TailGuard – Bridge your WireGuard router into Tailscale via a container (github.com)

Easy Tailscale to WireGuard bridge in a container. Contribute to juhovh/tailguard development by creating an account on GitHub.

30. Microsoft PowerToys (learn.microsoft.com)

Microsoft PowerToys includes 25+ free Windows utilities including FancyZones, PowerToys Run, Color Picker, PowerRename, and more. Boost productivity for power users on Windows 10/11.

31. The value of bringing a telephoto lens (avidandrew.com)

They usually aren't light, and they certainly aren't small, but the unique perspective a telephoto lens brings makes it an indispensable part of your kit, even when traveling. Let's review some shots taken with a telephoto to see how we can justify its size and weight.

34. Tarsnap is cozy (til.andrew-quinn.me)

Tarsnap:为真正偏执者打造的“舒适”在线备份服务

Tarsnap 是一项主打安全与隐私的在线备份服务,其宣传语为“为真正偏执者打造的在线备份”。用户最近因其“2025年个人数字韧性审计”而首次实际使用该服务,并对其整体体验给予了高度评价。

核心体验与特点

  • 使用感受“cozy”(舒适):尽管备份对象通常是极度敏感的数据,但Tarsnap的方方面面都经过深思熟虑,兼顾了Unix系统管理员的易用性和产品设计。
  • 客户端设计:其命令行客户端工具 tarsnap 的用法与经典的 tar 命令相似,降低了学习成本。
  • 预付费与匿名性:采用预付费模型。用户可以随时通过销毁密钥文件并让账户余额耗尽的方式,确保数据被彻底删除且操作可保持匿名,这使得将其设置为定期自动任务(如cronjob)非常安心。

定价与辅助工具

  • 作者指出许多人对其定价感到困惑,因此创建了一个非官方的Tarsnap费用估算器网页工具。
  • 根据估算,如果仅用于备份数MB量级的“核心珍宝”数据,初始充值(如5美元)的额度可能足以使用超过一千年。

产品改进构想与总结

  • 作者唯一想到的潜在改进是支持硬件密钥而非纯密钥文件,并推测开发者Dr. Colin Percival可能已有相关考量。
  • 最终,作者对Tarsnap及其创始人Dr. Colin Percival表达了赞赏,称其为一个“梦想产品”。整个业务目前主要由Percival兄弟两人运营。
36. The Socratic Journal Method: A Simple Journaling Method That Works (mindthenerd.com)

Discover The Socratic Journal Method, a simple yet powerful way to make journaling stick. Learn how asking yourself questions can boost clarity, reduce stress, and help you build a consistent habit backed by psychology and philosophy.

37. Apple Debuts iPhone 17 (www.apple.com)

Apple today announced iPhone 17, featuring the new Center Stage front camera, a 48MP Fusion Main camera, and a new 48MP Fusion Ultra Wide camera.