HTTP2Shell 風暴席捲全網、純函式式語言逼近 C 語言極限效能

詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-25

本集聚焦資安與效能突破：Google Brotli 爆發 HTTP2Shell 漏洞重擊網路基礎設施；Wazuh 因大小寫解析不一齣現提權風險。技術方面，純函式式語言 Roc 壓縮效能逼近 C，C# 經 Native AOT 與 SIMD 最佳化後在影像處理上也緊咬 C 語言。此外，節目亦探討蘋果安全研究裝置引發的社群揭露自由論戰、GrapheneOS 獲銀行支援進展，以及 1Password 保護 AI 憑證的新架構。

相關連結：

• Evolving Threat: http2shell is an RCE in Node, Python, and more
• Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps
• Patching Wazuh Manager for CVE-2026-74041: a short operational playbook by andreagomez
• Twelve years of distributed SQLite
• TornadoVM 7 Enables GPU-Native Workloads from Java Applications
• The Quake Fan who built the map editor everybody uses
• Around a dozen banking apps began specifically permitting GrapheneOS
• How close can pure functional programming get to C?
• Neural chip decodes interactions between brain regions
• Apple Security Research Device
• C vs. C#: racing VLC's Gaussian blur
• luongnv89 / claude-howto (44,555 ⭐)
• 1Password for Agents