廣告追蹤淪零點選間諜武器，高通韌體快取 Bug 逼工程師寫核心漏洞

詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-16

本集聚焦資安與硬體開源進展。首先揭露以色列廣告商利用線上廣告競價系統散播零點選間諜軟體，突顯廣告生態系的審查漏洞；工程師為修復 TP-Link 路由器快取錯誤被迫自行提權，諷刺封閉韌體現況。 技術方面，Krea 3 推出低成本區域性精準修圖；Liquid AI 發表端側推理模型；Libreboot 大規模支援 Chromebook 並改用 UEFI；Oxide 開源高保真度機架模擬器 Voxel。此外，西蒙斯基金會注資應對 AI 衝擊數學界，引發資本與研究純粹性的社群論戰。

相關連結：

• Online ads weaponised to deliver ‘zero-click’ spyware, researchers say
• AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware
• Krea 3 – An image model built for editing at scale
• Wanted to download an ISO, ended up writing a kernel exploit
• Webform and Webform REST Flaws in the September 2026 Drupal Advisory by andreagomez
• K-Dense-AI / scientific-agent-skills (50,455 ⭐)
• LFM2.5-24B-A2B: Built for fast on-device agents
• Libreboot 26.10 "Ominous Olive" released with UEFI, Chromebook support
• The Double Headed Stack Allocator
• C++26 Contracts: Introduction to Preconditions and Postconditions
• Virtual Oxide Labs: Emulating a Full Oxide Rack
• Simons Foundation launches $15M effort to help mathematicians navigate AI era
• OpenMuse