Firecracker 微虛擬機器逃逸漏洞曝光，Blender 介面分離框架引發 Rust UI 效能競賽

詳細網頁版與參考連結：https://podcast.david888.com/post/2026-11-07

本集聚焦微虛擬機器 Firecracker 逃逸漏洞，社群提醒開啟 Jailer 才能落實縱深防禦；Tata 汽車則爆出寫死憑證的低階失誤。荷蘭 ASN 銀行因依賴 Google 認證封殺 GrapheneOS，遭批外包數位主權。此外，Google 推出平價 Gemini 影片生成模型，卻因介面混亂被開發者痛批；Rust 生態持續火熱，高效 Firebase 模擬器與挑戰 Zed GPUI 的 BUI 框架皆引發社群熱議。

相關連結：

• Firecracker VM Escape: PwnEscape Part 2
• Hardcoded credentials and other issues in Tata Motors App
• AI is dramatically accelerating AI research
• We've built an open-source feature flag server for 11 years
• Rune: A native GPU-rendered Rust UI framework for macOS, Windows, Linux and web
• Show HN: Firenook – Firebase emulators in Rust: 40× faster writes, 10× less RAM
• AES-GCM nonce uniqueness is a deployment control by Ioneyrezende
• A Jev that can ask Opus for help gives Opus accuracy at 4x lower cost
• Gemini Omni 1.2 Flash
• Dutch 'idealist' bank ASN blocks non-Google Android, including GrapheneOS
• Blender's UI and Runtime: Much Faster Than GPUI
• Translucent AI
• zed-industries / zed (93,619 ⭐)