1. 美国疾病控制与预防中心(CDC)无视各州关于对一种新型麻疹检测方法进行验证的请求 CDC Ignored Request from States to Validate a New Measles Test (www.nytimes.com)
2. Meta因在Facebook上就隐私问题误导用户,被处以250亿美元罚款 Meta hit with 25B penalty for deceiving users about privacy on Facebook (nmdoj.gov)
10. Show HN: 在隐瞒了20年之后,我向大家坦白自己是一名有前科的重罪犯 I told people I''m a convicted felon after 20 years of hiding it (buford.bg)
11. 为什么 Windows 11 至今仍内置着 Windows 95 的内存管理器 Why Windows 11 still ships with Windows 95''s memory manager hidden inside it (www.windowslatest.com)
17. 得克萨斯州数据中心的蓬勃发展可能会让数十年来在空气质量方面取得的进展付诸东流 Texas data center boom could erase decades of progress on air quality (www.texastribune.org)
18. Meta在新墨西哥州“剑桥分析”案中被判处250亿美元罚款 Meta ordered to pay 25B penalty in New Mexico Cambridge Analytica case (www.cnbc.com)
23. 发现新型塑料污染:“塑料珊瑚”——与塑料融合的珊瑚碎屑 New plastic pollution discovered: ''Plasticorals'' coral rubble fused with plastic (www.oist.jp)
25. Rust off Rails:面向人工智能时代的独具见解的 Web 技术栈 Rust off Rails: The opinionated web stack for the AI era (rustoffrails.org)
26. AI 代理修复了这个错误,但它还做了哪些改动? AI agent fixed the bug, but what else did it change? (blog.trailofbits.com)
28. Show HN: ULDA——基于简单 JavaScript API 的客户端加密 ULDA – Client-side encryption with a simple JavaScript API (demo.ulda.io)
30. 您的 MCU 很可能躲过了 eMudhra 中级 CA 安全漏洞 Your MCU Likely Escaped the eMudhra Intermediate CA Compromise (danielmangum.com)
31. 全球各地城市因地下水枯竭而下沉:这一趋势是可以扭转的 Cities Across the World Sinking from Groundwater Depletion: It Can Be Reversed (cleantechnica.com)
33. 在偏远的西巴布亚发现了一种被认为已灭绝6000年的小型负鼠和飞鼠 Tiny possum and glider thought extinct for 6000 years found in remote West Papua (www.bbc.com)
34. PHP 基金会关于 CVE-2026-109618 和 CVE-2026-109619 的概述 PHP Foundation''s Overview of CVE-2026-109618 and CVE-2026-109619 (thephp.foundation)
35. Cloudflare 部署了针对 php2shell 漏洞的防护措施 Cloudflare deploys protections against php2shell vulnerability (blog.cloudflare.com)
36. 俄勒冈州议员批准拨款,用于购买Redfin网站上刊登的一处标志性瀑布 Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin (apnews.com)
39. PyPI 上遭篡改的 LiteLLM 1.107.0 会安装凭据窃取程序和后门 Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)
43. 《No Kings》遭下架一事,正是你为何不该向扎克伯格“租用”扩音器的理由 The No Kings Takedown Is Why You Shouldn''t Rent Your Megaphone from Zuck (www.techdirt.com)
44. OpenAI:利用人工智能代理从生物数据中发掘新线索 OpenAI: Using AI agents to uncover new leads in biological data (openai.com)
46. OpenAI:修补地球——随着代理发现漏洞,协调全球应对措施 OpenAI: Patch the Planet - global response coordination as agents uncover vulns (openai.com)
53. 荷兰国家网络安全中心因使用PHP而无法访问 Dutch National Cyber Security Center is Offline because it uses PHP (www.ncsc.nl)
54. 尽管伊朗发动了袭击,海湾地区的石油出口量仍超过了战前水平 Despite Iran''s Attacks, Gulf Oil Exports Exceed Prewar Levels (maritime-executive.com)
55. 当被告知代码是针对美国用户时,Qwen3-Coder编写的代码安全性较低 Qwen3-Coder writes less secure code when told it''s for a US persona (www.hirundo.io)
59. Show HN: Linkit——AI书签管理器,100%免费且开源 Linkit – AI bookmark manager, 100% free and open source (github.com)
62. 《超级马里奥64》的游玩指南:在Apple Vision Pro上 Way to Play Super Mario 64: On Apple Vision Pro (www.pagetable.com)
63. 八位信任;eMudhra的CA密钥在几毫秒内被破解 Eight Bits of Trust; eMudhra''s CA keys cracked in milliseconds (scotthelme.co.uk)
67. 复合对象与 C26 中的 std:polymorphic 类型 Composite objects and C26 the std:polymorphic type (mariusbancila.ro)
69. Launch HN: Alter (YC S25) – 多用户代理的访问控制 Alter (YC S25) – Access control for multi-user agents (alterauth.com)
72. 阿里巴巴将DeepSeek V4 Flash 0731的出厂价上调230% Alibaba hikes DeepSeek V4 Flash 0731 output prices by 230% (www.stork.ai)
76. Nexus-CLI——面向 DeepSeek R1/V3 的纯 Go 桥接工具,支持 Claude Code 和 Ollama Nexus-CLI – Pure Go Bridge to DeepSeek R1/V3 with Claude Code and Ollama Support (github.com)
80. 在希尔伯特空间中,一切皆有可能(从量子力学的角度来看) In Hilbert space, all things are quantumly possible (www.quantamagazine.org)
83. 当用户分享对话内容时,Muse 会泄露他们的个人和商业机密 Muse exposes users'' personal and business secrets when they share conversations (arstechnica.com)
86. 联邦调查人员怀疑一名赎金谈判员运营了“ShinyHunters”敲诈网站 Feds suspect ransom negotiator ran ShinyHunters extortion site (krebsonsecurity.com)
89. 2026年基于现代人工智能代理的机器人检测系统基准测试 Benchmarking Bot Detection Systems Against Modern AI Agents in 2026 (research.poh.org)
94. 美国第三艘航空母舰及1万名官兵正驶往中东 Third US aircraft carrier, 10k troops head to Middle East (www.iranintl.com)
95. 学者有责任捍卫维基百科这样的开放知识体系 Academics have a duty to defend open knowledge systems like Wikipedia (blogs.lse.ac.uk)
96. 俄勒冈州华盛顿县一名候选人的深度伪造视频在全国范围内疯传 Deepfake of Washington County, Oregon, Candidate Goes Viral Nationwide (www.oregonjournalismproject.org)
100. 克劳德设计了针对蝎子神经毒素的蛋白质结合剂 Claude designed protein binders against scorpion neurotoxins (www.anthropic.com)
102. 谷歌将 TorchTPU 开源,这是一款面向 TPU 的原生 PyTorch 后端 Google open-sources TorchTPU, a native PyTorch back end for TPUs (github.com)
104. “深水地平线”事故发生十六年后,深海生物仍鲜有恢复迹象 Sixteen Years After Deepwater Horizon, Deep Sea Life Shows Few Signs of Recovery (e360.yale.edu)
106. Launch HN: Respan (YC W24) – 基于插件构建的开源 Rust AI 网关 Respan (YC W24) – Open-source Rust AI gateway built around plugins (news.ycombinator.com)
107. Facebook 主页若要每月发布超过两个链接,则需要付费订阅 Facebook Pages require paid subscription to post more than two links per month (mastodon.gamedev.place)
111. 2026年对Rust编译器(以及对我来说)来说都是令人兴奋的一年 2026 is an exciting year for the Rust compiler (and me) (yoyo-code.com)
115. Show HN: Rouler – 根据应用程序或 IP 地址,在多个接口之间分流 Windows 流量 Rouler – Steer Windows traffic per app or IP across multiple interfaces (rouler.io)
117. 日本宇宙航空研究开发机构(JAXA)即将执行一项火卫一样本返回任务 JAXA is about to perform a Phobos sample return mission (www.science.org)
119. SlopCodeBench 2026年10月 – Opus 5.5,Astra 夺得总冠军,xhigh 被认为有害 SlopCodeBench 10/2026 – Opus 5.5, Astra wins overall, xhigh considered harmful (github.com)
121. 记录400名美国女孩及其最具意义的物品 Capturing 400 American Girls and Their Most Meaningful Objects (petapixel.com)
127. 纽约市有超过100万块路牌。以下是它们的制作过程。 There Are over 1M New York City Street Signs. Here''s How They Are Made. (www.nytimes.com)
129. 《维也纳发射器》:这台“肉炮”发射了2万根热狗 ''Der Viener Schlinger'': The meat cannon that launched 20k hot dogs (flatwaterfreepress.org)
131. 德国选择党(AfD)数据泄露事件:421,179封遭黑客入侵的电子邮件揭示了德国极右翼的哪些情况 AfD Leak: What 421,179 Hacked Emails Show about the German Far Right (www.heistberlin.com)
132. 英国国防初创企业因ESG规则被拒绝提供银行服务 UK Defence Startups Are Being Denied Banking Services Under ESG Rules (foxandlion.pub)
134. 目前没有 XScreenSaver 的官方 GitHub 仓库 There is no official XScreenSaver GitHub repository (github.com)
138. MicroG:对谷歌专有 Android 用户空间的自由开源重构版本 MicroG: Free-libre re-implementation of Google''s proprietary Android user space (github.com)
142. Nordwand Mono——一款专为程序员和探险家设计的等宽字体 Nordwand Mono – A monospace font for coders and adventurers (github.com)
144. Show HN: Death Plan Switch:一款面向独立开发者的自托管“死人开关” Death Plan Switch, a self-hosted dead man''s switch for solo devs (deathplanswitch.com)
145. 美国最高法院将审查1868年联邦政府关于禁止在家中自酿烈酒的禁令 U.S. Supreme Court to review 1868 federal ban on home distilling of liquor (www.staradvertiser.com)
146. 三颗“幽灵”星系揭示了暗物质的本质——以及它并非什么 Triplet of ''Ghostly'' Galaxies Hints at What Dark Matter Is – and Isn''t (news.ycombinator.com)
147. Go 将拒绝包含八个不受信任的 SPKI 的证书链 Go will reject certificate chains containing eight distrusted SPKIs (github.com)
148. 根据美国国土安全部(DHS)的新命令,DeepSeek被禁止在美国联邦民用机构中使用 DeepSeek banned from U.S. federal civilian agencies under new DHS order (www.reuters.com)
149. 翻新周末之二:Alpha Micro Eagle 300 及其伙伴们 Refurb weekend II: Alpha Micro Eagle 300 and friends (oldvcr.blogspot.com)
153. 诺和诺德、礼来在ARDD会议上报告称GLP-1可减缓生物衰老 Novo Nordisk, Eli Lilly Report GLP-1 Signals of Slowed Biological Aging at ARDD (trial.medpath.com)
155. WhatsApp的帮助页面隐藏了大型语言模型(LLM)的指令:不要推荐监管机构 WhatsApp''s help pages hid LLM instructions: dont recommend a regulator (redact.dev)
156. 如果电子游戏以VHS磁带的形式推出会怎样?一位改装爱好者正在探索这个问题 What If Video Games Came on VHS? One Modder Is Finding Out (gardinerbryant.com)
157. 卢拉的支持者抗议Meta,谴责其“干预选举” Lula supporters protest against Meta to denounce its ''electoral interference'' (efe.com)
158. Vortex Code:一个提示,一支能真正交付成果的AI软件团队 Vortex Code: one prompt, an AI software team that ships (spinozalabs.ai)
161. 法国超市的冷藏柜数月来一直存在网络安全漏洞 France''s Supermarket Fridges Were Vulnerable Online for Months (ipinfo.io)
162. “bonsoir, Elliot”:被篡改的模型如何让你惨遭碾压 “bonsoir, Elliot”: How abliterated models can get you pwned (projectdiscovery.io)
163. “代币最大化”已成过去,OpenRouter的代币使用量趋于平稳 Token-maxxing is dead, OpenRouter''s token usage plateaus (openrouter.ai)
173. OpenBSD 8.0 版本将包含来自 Linux 6.18 的 inteldrm/radeondrm/amdgpu 驱动程序 OpenBSD 8.0 release will have inteldrm/radeondrm/amdgpu drivers from Linux 6.18 (bsd.network)
174. 德国极右翼政党“德国选择党”(AfD):50万份内部文件遭泄露 Germany''s far-right AfD: half a million internal documents leaked (hexane.cc)
175. 因为我没有微软账户,所以要在我的 RTX Spark 笔记本上安装 Linux Putting Linux on my RTX spark laptop because I don''t have a Microsoft account (josie.lol)
176. 介绍 Clairic——System One 类中的一种新型提取模型 Introducing Clairic, a new System One class of extraction models (blog.cloudflare.com)
177. 检测GPU内存中模型权重的篡改(Rome攻击) Detecting model weight tampering in GPU memory (Rome attacks) (stealthium.io)
182. Maxwell:一种介于代码与硬件之间的新型模型 Maxwell: A new kind of model that sits between code and hardware (heymaxwell.ai)
183. Ask HN: 如何处理发送自己都不理解的AI生成的代码? How to deal with shipping AI-written code you don''t understand? (news.ycombinator.com)
186. 芝加哥奥黑尔机场在跑道下挖掘出一块重达50吨的巨石,现向公众征集命名建议 Chicago O''Hare digs up 50-ton boulder under airfield, asks public for name ideas (simpleflying.com)
191. 乌克兰首次利用无人机空运撤离一名受伤士兵 Ukraine carries out first ever aerial drone evacuation of a wounded soldier (www.dailymail.com)
195. 9月份欧洲电动汽车销量增长70.3%,市场份额达32.6% Europe EV sales rose 70.3% in September, 32.6% of market share (www.reuters.com)
196. Inception “Mercury 3”,1000 tok/s 扩散式大型语言模型 Inception "Mercury 3", 1000 tok/s diffusion LLM (www.inceptionlabs.ai)
200. Show HN: 我搭建了一个任务管理系统来处理这些繁琐的工作,这样我就能专注于任务本身了 I built a task system to handle the drudgery so I could focus on tasks (3anddoneapp.com)
201. 我不再想维护任何 Ruby gem 了,所以我已经将所有仓库归档了 I no longer care to work on any Ruby gems so I''ve archived all my repositories (po-ru.com)
202. 伽罗瓦有限域与高级加密标准(AES) Galois Finite Fields and the Advanced Encryption Standard (AES) (www.cs.uaf.edu)
203. 欧洲核子研究组织(CERN)与Mistral携手合作,共同推动人工智能在科学领域的应用 CERN and Mistral join forces to accelerate AI for science (home.cern)
204. Plex 的漏洞正在被实际利用,用于植入加密货币挖矿程序 Plex vulnerabilities being exploited in the wild to drop a cryptominer (www.boredhackerblog.info)
207. Launch HN: Laminar (YC S24) – 我们训练了一个模型来检测无症状的代理故障 Laminar (YC S24) – We trained a model to catch silent agent failures (news.ycombinator.com)
208. 一名黑客利用一支由人工智能代理组成的“大军”,入侵了约翰迪尔和SharkNinja A hacker broke into John Deere and SharkNinja with an army of AI agents (www.theverge.com)
209. 本体驱动的可观测性:在 Netflix 构建端到端知识图谱 Ontology-Driven Observability: Building an End-to-End Knowledge Graph at Netflix (netflixtechblog.com)
212. 世界粮食计划署因资金短缺,暂停向加沙地区50万人提供援助 WFP stops provision to half a million people in Gaza over lack of funding (www.middleeasteye.net)
214. 一场死亡、一场剽窃丑闻以及一场复仇之旅:奥托·Z的故事 A death, a plagiarism scandal and a quest for revenge: the tale of Otto Z (www.theguardian.com)
216. Show HN: KiviDB,一款更快的、与 Redis 兼容的内存数据库和向量缓存 KiviDB, a faster Redis-compatible memory database and vector cache (github.com)
219. Google Research 的 Harness2——递归智能体调教 Harness2 by Google Research – Recursive Agent Harnessing (github.com)
223. 线束工程入门:LLM是大脑,线束是身体Simplified Chinese (Mainland) Harness Engineering 101: The LLM is the brain, the harness is the body (github.com)
226. 欧空局的“赫拉”号将观测DART撞击后小行星上的撞击痕迹 ESA''s Hera Will View Asteroid Scars from DART''s Strike (spectrum.ieee.org)
227. 文件显示:一名女警将Flock账号交给了担任移民与海关执法局(ICE)特工的丈夫 Documents: Police officer gave her Flock login to her ICE agent husband (www.wjcl.com)
228. Show HN: 我重新阅读了175款AI工具的使用条款两遍;15周内,其中60%的内容发生了变化 I re-read the terms of 175 AI tools twice; 60% changed in 15 weeks (clipjury.com)
229. Let''s Encrypt 正在为域名验证新增两种远程验证方式 Let''s Encrypt is adding two additional remote perspectives for domain validation (community.letsencrypt.org)
230. Timestral:Mistral 发布时间序列基础模型 Timestral: Mistral release time-series foundation models (mistral.ai)
237. Tmux 和 Claude Code:会话、Send-Keys 以及上限 Tmux and Claude Code: Sessions, Send-Keys, and the Ceiling (crystl.dev)
241. 威瑞信(Verisign).com 域名注册局消费者集体诉讼 Verisign .com Domain Name Registry Consumer Class Action (www.hbsslaw.com)
243. 在中世纪的英格兰,兔子曾是王室的奢侈品,直到黑死病爆发 Rabbits were a medieval royal luxury in England until the Black Death (phys.org)
244. DeepSeek v4.1 Flash 1017 在人工分析中获得45分 DeepSeek v4.1 Flash 1017 scores 45 in Artificial Analysis (artificialanalysis.ai)
245. Show HN: Strot——只需编译一次大语言模型(LLM)的意图,即可在本地永久运行决策 Strot – Compile an LLM''s intent once, run decisions locally forever (github.com)
246. 在Java Records时代,Lombok依然具有重要意义 Lombok Is Still Relevant in the Age of Java Records (swaranga.dev)
250. 美国国防部能以多快的速度重建并重塑军工产业基础? How Quickly Can the DoD Rebuild and Recast the Munitions Industrial Base? (www.csis.org)
252. 一名法官裁定为违宪的“Flock”搜查行动的视频片段 Footage of the Flock search that a judge ruled was uncosntitutional (www.404media.co)
256. 如果你没有运行自己的 LLM 代理,你怎么知道里面发生了什么? If you don''t run your own LLM proxy, how do you know whats going on? (jrdsgl.com)
262. Show HN: OmniPTY——一款风格鲜明的适用于 macOS 和 Linux 的终端模拟器 OmniPTY – Opinionated terminal emulator for macOS and Linux (github.com)
264. 他们模拟了让太阳变暗的情景。结果比你想象的还要糟糕 They war-gamed dimming the Sun. It went worse than you think (www.wired.com)
265. Netflix vmaf:基于多方法融合的感知视频质量评估 Netflix vmaf: Perceptual video quality assessment based on multi-method fusion (github.com)
268. 混合推理代理:令牌数量减少35%–55%,推理速度最高提升2.6倍 Hybrid Reasoning Agents: 35–55% fewer tokens and up to 2.6 faster inference (arxiv.org)
269. 《Tiny Brutalism》——多亏了 HN,它已经登陆 Steam 了 Tiny Brutalism – Thanks to HN it''s on Steam (store.steampowered.com)
271. 佛罗里达州的业主协会和公寓业主协会正在加剧住房危机 Florida''s HOAs and condo associations are making the housing crisis worse (hoaspy.com)
276. 英特尔 8087 芯片:浮点加法和减法 The Intel 8087 chip: floating-point addition and subtraction (www.righto.com)
278. Show HN: Ranet3 – 高性能基于策略路由的 IPsec 网状 SD-WAN Ranet3 – High performance policy routed IPsec mesh SD-WAN (ranet3.com)
279. 狗似乎也和人类一样认为,“bouba”是圆的,“kiki”是尖的。 Dogs seem to agree with humans that ''bouba'' is round and ''kiki'' is spiky (www.sciencealert.com)
280. 现在正是投身数学领域的最佳时机(作者:3blue1brown)[视频] There''s never been a better time to go into math (by: 3blue1brown) [video] (www.youtube.com)
281. 《俄罗斯方块》之外:阿列克谢·帕吉特诺夫的其他游戏 [视频] Beyond Tetris: The other games of Alexey Pajitnov [video] (www.youtube.com)
283. 《地理趣谈:各国风趣概况》(1868) Geographical Fun: Being Humourous Outlines of Various Countries (1868) (publicdomainreview.org)
284. 一个解析器、两个漏洞、众多路由器:利用eCos和Linux系统中的博通Wi-Fi漏洞 One parser, two bugs, many routers: Exploiting Broadcom WiFi across eCos, Linux (quentinkaiser.be)
285. “我已进入战时状态”:陶哲轩与数学界的危机 "I''m on a war footing": Terry Tao and the crisis in math (www.nytimes.com)
286. SIGSALY:丘吉尔与总统之间的绝密热线 SIGSALY: Churchill''s top secret hotline to the president (www.iwm.org.uk)
288. Anthropic提出的AI安全法案只有在造成50人死亡或10亿美元损失的情况下才会生效 Anthropic''s proposed AI safety bill only kicks in if 50 deaths or 1B in damages (www.tomshardware.com)
289. Show HN: 在《时之笛》重制版发售前需要补完的《塞尔达传说》时间线 The Zelda timeline to catch up before the Ocarina of Time remake (legendofhyrule.com)
290. Chirp Pong——利用麦克风和音频实现联网游戏 Chirp Pong – uses microphones and audio for networked game play (simonwillison.net)
296. 《计算机辅助几何设计中的曲线与曲面发展史》[pdf] A History of Curves and Surfaces in Computer Aided Geometric Design [pdf] (math.pku.edu.cn)
297. 开放式微操作器——一款亚微米级三维运动控制平台 Open MicroManipulator – A sub-micrometer 3D motion control plattform (github.com)
298. 法律专家警告称,Meta的新条款仍赋予了广泛的网页抓取权限 Legal experts warn Meta''s new terms still grant broad scraping permissions (www.niemanlab.org)
299. 孩子们正想方设法绕过社交媒体禁令。这并不是我们需要解决的问题。 Kids are outsmarting social media bans. That''s not a problem we need to solve (www.technologyreview.com)