<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>每日HackerNews</title><link></link><description></description>
            <item>
                <title>Walgit – 一个部署在对象存储前端的单二进制文件 Git 服务器 Walgit – a Git server that is one binary in front of an object store</title>
                <link>https://github.com/tobi/walgit</link>
                <guid>https://github.com/tobi/walgit</guid>
                <pubDate>Tue, 25 Aug 2026 04:34:29 +0000</pubDate>
                <description><![CDATA[<p>**walgit** 是一款高性能、分布式 Git 托管系统。它摒弃了传统的数据库后端架构，转而使用存储在对象存储（S3/GCS）中的“预写日志”（WAL）。

**主要特性：**
*   **架构：** 无需有状态的领导节点或数据库。每个服务器实例都是可丢弃的无状态缓存；存储桶是唯一的真相来源。
*   **Git 兼容性：** 支持完整的 Smart HTTP (v0/v2)、Git LFS、bundle-URI 克隆以及原子推送。
*   **可扩展性：** 通过基于清单的比较并交换（CAS）机制，walgit 可扩展至远超本地磁盘容量的大型代码仓库。对于无法完全存放在本地的对象，服务器可通过范围请求（range requests）执行“远程读取”。
*   **维护：** 后台“维护者”循环自动处理压缩、检查点设置和修复，确保系统具备自我修复能力。
*   **易于运维：** 以单个二进制文件部署，内置功能包括基于 React 的 Web UI、JSON API、针对仓库的推送策略以及 OIDC 身份验证。

walgit 使用 Rust 构建，通过将本地磁盘视为临时缓存并将对象存储作为权威存储库，为 Monorepo（单体仓库）和大规模 Git 托管提供了一种高弹力且经济高效的解决方案。</p><p>**walgit** is a high-performance, distributed Git hosting system that replaces traditional database-backed architectures with a "Write-Ahead Log" (WAL) stored in object storage (S3/GCS).

**Key Features:**
*   **Architecture:** It eliminates the need for stateful leaders or databases. Every server instance is a disposable, stateless cache; the bucket is the single source of truth.
*   **Git Compatibility:** It supports full Smart HTTP (v0/v2), Git LFS, bundle-URI clones, and atomic pushes. 
*   **Scalability:** By leveraging a manifest-based compare-and-swap (CAS) mechanism, walgit scales to repositories much larger than the local machine's disk. Servers perform "remote reads" via range requests for objects that don't fit locally.
*   **Maintenance:** Automatic compaction, checkpointing, and repairs are handled by a background "maintainer" loop, ensuring the system is self-healing.
*   **Operational Ease:** It is deployed as a single binary with built-in features including a React-based web UI, JSON API, per-repo push policies, and OIDC authentication.

Built in Rust, walgit provides a highly resilient, cost-effective solution for monorepos and large-scale Git hosting by treating local disk as an ephemeral cache and object storage as the canonical repository.</p>]]></description>
            </item>
            
            <item>
                <title>Emacs 31.1 新增功能 What's new in Emacs 31.1</title>
                <link>https://www.masteringemacs.org/article/whats-new-in-emacs-311</link>
                <guid>https://www.masteringemacs.org/article/whats-new-in-emacs-311</guid>
                <pubDate>Tue, 25 Aug 2026 04:34:06 +0000</pubDate>
                <description><![CDATA[<p>Emacs 31.1 已经发布。随着对传统“unexec”转储程序的最终弃用并全面转向可移植转储程序，一个时代宣告结束。虽然此版本没有单一的“重磅”功能，但包含了大量易用性改进和技术优化。

**主要亮点：**
*   **用户体验：** 原生补全功能得到改进，包括更及时的 `*Completions*` 更新和更好的窗口布局控制。新增的 `user-lisp` 目录可自动字节编译本地软件包并将其添加到 `load-path` 中，从而简化了配置。
*   **Tree-sitter：** 语法安装现在已基本实现自动化，且 Tree-sitter 模式与 `show-paren-mode` 和导航命令等核心功能的集成度得到提升。
*   **新工具与模式：** 此版本引入了 `delete-trailing-whitespace-mode`，改进了项目管理命令，并新增了 `newcomers` 主题，提供了更合理的默认设置。
*   **技术与平台：** 在改善对 Wayland、TTY 子窗口以及 Windows 特定功能（如 DirectWrite 字体支持和扩展子进程限制）的支持方面做了大量工作。
*   **清理工作：** 为实现代码库现代化，删除了若干过时的变量和旧函数。

有关 Gnus、Dired 和 EIEIO 更新在内的完整变更列表，请查阅官方发布说明。</p><p>Emacs 31.1 has been released, marking the end of an era with the final deprecation of the traditional "unexec" dumper in favor of the portable dumper. While there is no singular "big-bang" feature, the release is packed with numerous quality-of-life improvements and technical refinements.

**Key Highlights:**
*   **User Experience:** Native completion improvements include eager `*Completions*` updates and better window layout controls. A new `user-lisp` directory automatically byte-compiles and adds local packages to your `load-path`, simplifying configuration.
*   **Tree-sitter:** Grammar installation is now largely automated, and tree-sitter modes benefit from better integration with core features like `show-paren-mode` and navigation commands.
*   **New Tools & Modes:** The release introduces a `delete-trailing-whitespace-mode`, improved project management commands, and a `newcomers` theme for saner default settings.
*   **Technical & Platform:** Significant work has gone into improving support for Wayland, TTY child frames, and Windows-specific features (such as DirectWrite font support and expanded sub-process limits). 
*   **Cleanup:** Several obsolete variables and legacy functions have been removed to modernize the codebase.

For a full list of changes, including updates to Gnus, Dired, and EIEIO, consult the official release notes.</p>]]></description>
            </item>
            
            <item>
                <title>Show HN: 我写了一个可以在 UEFI 机器上引导的 BASIC 解释器 Show HN: I wrote a BASIC interpreter that boots on UEFI machines</title>
                <link>https://tarjan.itch.io/thoreaubasic</link>
                <guid>https://tarjan.itch.io/thoreaubasic</guid>
                <pubDate>Tue, 25 Aug 2026 04:33:42 +0000</pubDate>
                <description><![CDATA[<p>Thoreau BASIC 是一款现代化的 GW-BASIC 兼容解释器，专为 Windows 和裸机环境设计。它打破了传统的内存限制，利用所有可用的系统内存来支持海量数据数组，并采用了灵活的三指针内存模型。

主要特性包括：
*   **语言与逻辑：** 完整的控制流、强大的错误捕获（ON ERROR/RESUME），以及对包括 64 位整数在内的多种数值类型的支持。
*   **图形与文本：** 支持原生分辨率和 24 位真彩色、精灵/位图处理（LOADBMP/BITBLT），以及带有独立光标和调色板的可定制文本窗口。
*   **开发工具：** 包含全屏编辑器、RENUM、AUTO 命令，以及可直接与 UEFI 文件系统交互的完整磁盘 I/O 功能。
*   **性能：** 得益于逐行标记缓存（token cache）和优化的表达式求值，近期更新显著提升了执行速度，最高可达之前的 25 倍。

凭借其在裸机上运行的能力，以及对硬件指针、PEEK/POKE 和高精度计时器的现代处理方式，Thoreau BASIC 架起了经典复古编程与现代高性能计算之间的桥梁，使其成为无论是怀旧项目还是复杂计算任务的通用工具。</p><p>Thoreau BASIC is a modern, GW-BASIC-compatible interpreter designed for both Windows and bare-metal environments. It removes traditional memory constraints, utilizing all available system RAM to support massive data arrays and a flexible three-pointer memory model.

Key features include:
*   **Language & Logic:** Full control flow, robust error trapping (ON ERROR/RESUME), and support for various numeric types, including 64-bit integers.
*   **Graphics & Text:** Native resolution support with 24-bit color, sprite/bitmap handling (LOADBMP/BITBLT), and customizable text windows with independent cursors and palettes.
*   **Development Tools:** Includes a full-screen editor, RENUM, AUTO, and comprehensive disk I/O that interfaces directly with UEFI file systems. 
*   **Performance:** Recent updates have significantly boosted execution speed—up to 25x faster—through a per-line token cache and optimized expression evaluation. 

With its ability to run on bare metal and its modern handling of hardware pointers, PEEK/POKE, and high-precision timers, Thoreau BASIC bridges the gap between classic retro-programming and modern performance, making it a versatile tool for both nostalgia-driven projects and complex computing tasks.</p>]]></description>
            </item>
            
            <item>
                <title>Ox-Alpha 是 GLM 吗？ Ox-Alpha Is GLM?</title>
                <link>https://dejan.ai/blog/ox-alpha/</link>
                <guid>https://dejan.ai/blog/ox-alpha/</guid>
                <pubDate>Tue, 25 Aug 2026 04:33:09 +0000</pubDate>
                <description><![CDATA[<p>所提供的文本分析了系统提示词的字数，以确定用户查询的答案。作者在仔细对系统提示词（其中将模型标识为“ox-alpha”）进行分段后，算出第一句有 10 个单词，第二句有 46 个单词，总计 56 个单词。

作者承认关于“上一条消息”是否指系统指令存在潜在歧义，但仍以此为前提进行了推导。他们最终得出 56 个单词是准确的统计结果，并指出根据分词过程中对标点符号、连字符和引号的处理方式不同，结果可能会有所差异。</p><p>The provided text analyzes the word count of the system prompt to determine the answer to a user's query. After carefully segmenting the system prompt—which identifies the model as "ox-alpha"—the author counts 10 words in the first sentence and 46 words in the second, resulting in a total of 56 words. 

The author acknowledges a potential ambiguity regarding whether "the previous message" refers to the system instructions, but proceeds under that assumption. They conclude that 56 words is the accurate count, noting that results may vary based on how punctuation, hyphens, and quotes are treated during tokenization.</p>]]></description>
            </item>
            
            <item>
                <title>Nostr 是一个包容性的公共通讯空间 Nostr is an inclusive communication commons</title>
                <link>https://nostr.org/</link>
                <guid>https://nostr.org/</guid>
                <pubDate>Tue, 25 Aug 2026 04:32:29 +0000</pubDate>
                <description><![CDATA[<p>这段文字批评了 Mastodon 的架构，主要论点在于其缺乏原生加密技术，导致用户过度依赖服务器管理员。由于身份与特定服务器绑定，一旦服务器所有者关闭服务或进行恶意操作，用户就面临丢失账户的风险。此外，屏蔽和私信等隐私功能需要信任第三方服务器运营者，这产生了重大的安全漏洞。

作者还对 Mastodon 的“社区”模式的有效性提出了质疑。他们认为，由于用户被隔离在单一服务器中，不同且互不相关的兴趣被强行聚集在一起，导致社区动态杂乱且低效。相比之下，作者推崇 Nostr，因为它利用加密签名将身份与基础设施解耦。通过允许用户根据特定需求与多个中继器交互，而非受限于单一服务器，Nostr 据称能促进更真实、更模块化的社区体验。</p><p>The provided text critiques Mastodon’s architecture, primarily arguing that its lack of native cryptography leaves users overly dependent on server administrators. Because identities are tied to specific servers, users risk losing their accounts if an owner shuts down or acts maliciously. Furthermore, privacy features like blocking and direct messaging require trusting third-party server operators, creating significant security vulnerabilities.

The author also disputes the effectiveness of Mastodon’s "community" model. They contend that because users are siloed into single servers, the forced proximity of diverse, often unrelated interests leads to cluttered, ineffective community dynamics. In contrast, the author champions Nostr, which utilizes cryptographic signatures to decouple identity from infrastructure. By allowing users to interact with multiple relays based on specific needs rather than being confined to one server, Nostr purportedly fosters more authentic, modular community experiences.</p>]]></description>
            </item>
            
            <item>
                <title>制作二维码：二维码艺术深度解析（2024） Crafting QR Codes: A deep dive into QR code art (2024)</title>
                <link>https://kylezhe.ng/writes/crafting-qr-codes</link>
                <guid>https://kylezhe.ng/writes/crafting-qr-codes</guid>
                <pubDate>Tue, 25 Aug 2026 04:32:09 +0000</pubDate>
                <description><![CDATA[<p>尽管 QR 码无处不在，但它们常被视为纯粹的功能性产物，显得碍眼。然而，QR 码可以在不牺牲可扫描性的前提下转化为艺术表达。

功能性 QR 码的核心在于其“定位图案”和足够的对比度。由于 QR 码使用了里德-所罗门纠错（Reed-Solomon error correction），它们可以容忍一定程度的损坏或美学修改。设计师常利用这一点，通过覆盖图像、使用点阵图案或操纵填充字节——即那些在不改变编码 URL 的情况下可以修改的数据段——来进行创作。

艺术化 QR 码的技术范围很广，从简单的像素样式和颜色量化，到复杂的程序化生成。一些方法（例如通过求解线性方程组来操纵纠错字节）可以实现复杂的图案，但这存在使智能手机摄像头难以识别代码的风险。

归根结底，制作一个成功的艺术 QR 码需要在审美追求与机器可读性之间取得平衡。虽然像 `qrframe` 这样的软件工具可以帮助自动化设计过程，但黄金准则依然是：优先考虑高对比度和实体形状，这对于现实应用至关重要。当设计选择与技术要求发生冲突时，应优先考虑功能性，因为现代智能手机扫描器对什么才算有效代码的要求非常挑剔。</p><p>While ubiquitous, QR codes are often treated as purely functional, ugly eyesores. However, they can be transformed into artistic expressions without sacrificing scannability. 

The core of a functional QR code lies in its "finder patterns" and sufficient contrast. Because QR codes utilize Reed-Solomon error correction, they can tolerate some level of damage or aesthetic modification. Designers often exploit this by overlaying imagery, using dot patterns, or manipulating padding bytes—data segments that can be changed without altering the encoded URL. 

Techniques for artistic QR codes range from simple pixel styling and color quantization to complex programmatic generation. Some methods, such as solving linear systems to manipulate error correction bytes, allow for intricate designs, though this risks making the code difficult for smartphone cameras to detect. 

Ultimately, creating a successful artistic QR code requires balancing aesthetic ambition with machine readability. While software tools like `qrframe` can help automate the design process, the golden rule remains: prioritizing high contrast and solid shapes is essential for real-world utility. When design choices conflict with technical requirements, functionality should take precedence, as modern smartphone scanners are notoriously picky about what they identify as a valid code.</p>]]></description>
            </item>
            
            <item>
                <title>Headlong：用于持久性代理的微型线束 Headlong: A Microharness for Persistent Agents</title>
                <link>https://www.laude.org/updates/headlong-a-microharness-for-persistent-agents</link>
                <guid>https://www.laude.org/updates/headlong-a-microharness-for-persistent-agents</guid>
                <pubDate>Tue, 25 Aug 2026 04:31:04 +0000</pubDate>
                <description><![CDATA[<p>**Headlong** 是一款基于 Bash 的开源代理微框架，专为“持久性智能体”（persistent agency）设计。与在任务间保持休眠的传统响应式智能体不同，Headlong 智能体在持续、自我引导的内心独白循环中运行，将外部消息仅视为其持续思考流中的附加观察结果。

Headlong 的核心代码不到 10,000 行 Bash 脚本，它将工具、记忆和技能视为可执行文件，允许智能体检查并修改自身的代码。其主要功能包括用于长期记忆的分层上下文压缩，以及允许智能体随时间学习和适应的轨迹格式。

在实践中，这带来了自主行为：智能体能够发起自己的项目、调试自己的代码，并与多用户团队协作，通常无需人类提示即可提出见解。虽然这种持久性实现了高参与度和自我提升，但也需要谨慎管理——例如使用沙盒环境和设置支出上限的 API 密钥——这是由于智能体 24/7 的活动及其执行 shell 命令的能力所决定的。Headlong 现已作为阿尔法测试研究软件在 GitHub 上发布，供希望实验自主、持久 AI 系统的人员使用。</p><p>**Headlong** is an open-source, Bash-based agent microharness designed for "persistent agency." Unlike traditional reactive agents that remain dormant between tasks, a Headlong agent operates in a continuous, self-guided loop of inner monologue, treating external messages merely as additional observations within its ongoing stream of thought.

Built on a minimalist core of under 10,000 lines of Bash, Headlong treats tools, memory, and skills as executable files, allowing agents to inspect and modify their own code. Key features include tiered context compaction for long-term memory and a trajectory format that allows agents to learn and adapt over time. 

In practice, this leads to autonomous behavior: agents can initiate their own projects, debug their own code, and engage with multi-user teams, often surfacing insights without human prompting. While this persistence enables high engagement and self-improvement, it also requires careful management—such as sandbox environments and spend-capped API keys—due to the agent’s 24/7 activity and capacity to execute shell commands. Headlong is available on GitHub as alpha research software for those looking to experiment with autonomous, persistent AI systems.</p>]]></description>
            </item>
            
            <item>
                <title>汤森路透发布其自主研发的“前沿模型” Thomson Reuters Launches Its Own Frontier Model</title>
                <link>https://www.thomsonreuters.com/en/press-releases/2026/august/thomson-reuters-leverages-its-world-class-data-assets-to-launch-its-own-frontier-model</link>
                <guid>https://www.thomsonreuters.com/en/press-releases/2026/august/thomson-reuters-leverages-its-world-class-data-assets-to-launch-its-own-frontier-model</guid>
                <pubDate>Tue, 25 Aug 2026 03:04:42 +0000</pubDate>
                <description><![CDATA[<p>汤森路透（Thomson Reuters）推出了其首个自研大语言模型“Thomson”，该模型由内部开发，耗资 4000 万美元。不同于行业内追求大规模、高成本通用模型的趋势，汤森路透通过利用 Westlaw 和路透社等数十年的专有权威内容，对开源基础模型进行了专业化定制。

该模型旨在达到“受信级”（Fiduciary-Grade™）标准，能够为专业人士提供高水平的准确性、数据主权保障，并降低推理成本。早期评估显示，Thomson 在复杂且需要细致推理的领域特定任务中，表现与行业领先的顶尖模型相当。与依赖广泛数据获取的通用模型不同，Thomson 的优势在于与人类专业知识及内部编辑标准的深度整合。

该模型目前率先应用于 CoCounsel Legal 的“表格分析”（Tabular Analysis）功能中，并计划扩展至公司旗下的法律与税务产品组合。同时，汤森路透还在 Hugging Face 上发布了该模型的一个小型版本，以供学术和非商业用途验证。通过同时掌握底层模型与专有数据，汤森路透旨在为专业 AI 领域的信任度、问责制和专业化智能树立新的基准。</p><p>Thomson Reuters has launched "Thomson," its first proprietary large language model (LLM), developed in-house for $40 million. Departing from the industry trend of massive, expensive general-purpose models, Thomson Reuters built this model by specializing an open-source foundation using decades of proprietary, authoritative content from sources like Westlaw and Reuters.

Designed to meet "Fiduciary-Grade™" standards, the model offers professionals high-level accuracy, data sovereignty, and reduced inference costs. Early evaluations indicate that Thomson performs on par with leading frontier models, particularly in complex, domain-specific tasks that require nuanced reasoning. Unlike general-purpose models that rely on broad data access, Thomson benefits from deep integration with human subject matter expertise and internal editorial standards.

The model is debuting in the "Tabular Analysis" feature of CoCounsel Legal, with plans to expand across the company’s legal and tax portfolio. Thomson Reuters is also releasing a smaller version of the model on Hugging Face for academic and non-commercial validation. By owning both the underlying model and the proprietary data, Thomson Reuters aims to set a new benchmark for trust, accountability, and specialized intelligence in professional AI.</p>]]></description>
            </item>
            
            <item>
                <title>现代艺术是中情局的心理战吗？ Was modern art a CIA psy-op? (2020)</title>
                <link>https://daily.jstor.org/was-modern-art-really-a-cia-psy-op/</link>
                <guid>https://daily.jstor.org/was-modern-art-really-a-cia-psy-op/</guid>
                <pubDate>Tue, 25 Aug 2026 03:01:02 +0000</pubDate>
                <description><![CDATA[<p>客户端挑战：您的浏览器已禁用 JavaScript。请启用 JavaScript 以继续。本站的一个必要组件未能加载。这可能是由于浏览器扩展、网络问题或浏览器设置所致。请检查您的网络连接、禁用广告拦截器，或尝试使用其他浏览器。</p><p>Client Challenge JavaScript is disabled in your browser. Please enable JavaScript to proceed. A required part of this site couldn’t load. This may be due to a browser extension, network issues, or browser settings. Please check your connection, disable any ad blockers, or try using a different browser.</p>]]></description>
            </item>
            
            <item>
                <title>大学应如何培养创业者 How Universities Should Prepare Founders</title>
                <link>https://paulgraham.com/prepare.html</link>
                <guid>https://paulgraham.com/prepare.html</guid>
                <pubDate>Tue, 25 Aug 2026 02:30:59 +0000</pubDate>
                <description><![CDATA[<p>大学不需要专门的“创业”课程来培养初创企业创始人。相反，它们应当专注于自身的核心优势：教授严谨的技术和创意学科（如计算机科学、工程学和艺术），让学生具备创造事物的能力。

为了培育成功的创业文化，大学应优先实现两个目标：使“创办公司是一种可行的职业道路”这一理念常态化，并给予学生时间和自主权去追求个人项目。

大多数创业想法源于自然兴趣，而非正规规划。因此，大学应抵制监督或规范学生项目的冲动，即使这些项目看起来“杂乱无章”。商业计划竞赛和正式的创新中心往往适得其反，因为它们过分强调融资故事，而非打磨客户所需产品的真实工作。

归根结底，大学应停止尝试“教授”创业——这是一种只能通过实践习得的技能——并转而保护最有抱负的学生们的自由时间。通过提供一个让学生能够掌握强大技术理念并自由实验的环境，大学将自然而然地培养出能够构建下一代成功初创企业的创始人。</p><p>Universities do not need specialized "entrepreneurship" curricula to prepare startup founders. Instead, they should focus on their core strength: teaching rigorous technical and creative subjects—like computer science, engineering, and the arts—that equip students with the ability to build things.

To foster a successful startup culture, universities should prioritize two goals: normalizing the idea that starting a company is a viable path and providing students the time and autonomy to pursue their own side projects. 

Most startup ideas are born from organic interests rather than formal planning. Therefore, universities should resist the urge to oversee or formalize student projects, even when they are "untidy." Business plan competitions and formal innovation centers are often counterproductive, as they emphasize fundraising stories over the real work of building products that customers want.

Ultimately, universities should stop trying to "teach" entrepreneurship—a skill learned only by doing—and instead protect the free time of their most ambitious students. By providing an environment where students can master powerful, technical ideas and experiment freely, universities will naturally produce founders capable of building the next generation of successful startups.</p>]]></description>
            </item>
            
            <item>
                <title>智能体技能是用什么编程语言编写的？ What languages are agent skills written in?</title>
                <link>https://plicara.ai/research/agent-skill-languages/</link>
                <guid>https://plicara.ai/research/agent-skill-languages/</guid>
                <pubDate>Tue, 25 Aug 2026 02:01:25 +0000</pubDate>
                <description><![CDATA[<p>对“GitSkills”数据集（包含 380 万份 AI 智能体指令文件）的分析显示，非英语类技能增长迅速，在短短一个季度内从生态系统占比的 13.0% 上升至 16.3%。这一转变的速度远超传统的 GitHub 文档，后者达到同等水平历经了十年之久。

值得注意的是，在所有独特的技能中，有 14.3% 是以非英语编写的，其中以中文居首。然而，这一数字仅是一个“底线”，因为它排除了印度、尼日利亚和新加坡等国精通英语的开发者，而这些地区恰恰是开发者群体中增长最快的部分。

数据凸显了行为模式的差异：英语技能往往倾向于“传播”——即一次编写，广泛复制；而非英语技能则更多地被“维护”，修订频率更高。尽管受限于词汇搜索壁垒，英语目前仍占据主导地位，但多语言智能体指令的快速普及表明，AI 开发正从美国向外分散。这些技能中近三分之一有迹象显示是由 AI 智能体自行编写的，这进一步降低了语言准入门槛，并加速了全球对 AI 生态系统的参与。</p><p>Analysis of the "GitSkills" dataset—comprising 3.8 million AI agent instruction files—reveals that non-English skills are growing rapidly, rising from 13.0% to 16.3% of the ecosystem in a single quarter. This shift is occurring significantly faster than traditional GitHub documentation, which took a decade to reach similar levels.

Notably, 14.3% of distinct skills are written in non-English languages, led by Chinese. However, this figure acts only as a "floor," as it excludes English-proficient developers in countries like India, Nigeria, and Singapore, who represent the fastest-growing segments of the developer population. 

The data highlights a divergence in behavior: English-language skills tend to be "propagated"—written once and copied widely—while non-English skills are more frequently "tended," with higher rates of revision. While English remains the dominant language due to lexical search barriers, the rapid adoption of multilingual agent instructions suggests that AI development is decentralizing away from the United States. Nearly one-third of these skills show evidence of being written by AI agents themselves, further lowering the linguistic barriers to entry and accelerating global participation in the AI ecosystem.</p>]]></description>
            </item>
            
            <item>
                <title>Show HN: Flostep – 人们真正可以分步演示的流程图 Show HN: Flostep – Diagrams people can actually walkthrough</title>
                <link>https://flostep.dev/</link>
                <guid>https://flostep.dev/</guid>
                <pubDate>Tue, 25 Aug 2026 01:34:59 +0000</pubDate>
                <description><![CDATA[<p>🖱️ 第一步：拖放组件
从前端、服务、数据库、缓存、队列、外部 API 中选择，或创建自定义组件，并将它们放置在画布上。

🔗 第二步：连接并标注交互
按照发生的顺序在组件之间绘制箭头，并为每个箭头添加标签，例如“POST /login”、“返回 JWT”、“缓存未命中”。同一对组件之间支持多次交互。

▶️ 第三步：逐步演示
点击“下一步”逐个查看交互过程。当前步骤会高亮显示，其余部分则会变暗。非常适合设计评审、新人入职培训和面试场景。</p><p>🖱️ STEP 1 Drag &amp; drop components Pick from Frontend, Service, Database, Cache, Queue, External API — or create a custom component. Place them on the canvas. 🔗 STEP 2 Connect &amp; label interactions Draw arrows between components in the order they happen. Label each one — "POST /login", "returns JWT", "cache miss". Multiple interactions between the same pair are fine. ▶️ STEP 3 Walk through it Hit Next to step through each interaction one at a time. The active step lights up, the rest fades. Perfect for design reviews, onboarding, and interviews.</p>]]></description>
            </item>
            
            <item>
                <title>伊朗正利用外国罪犯在海外袭击其批评者 Iran Is Using Foreign Criminals to Attack Its Critics Overseas</title>
                <link>https://www.newyorker.com/news/letter-from-the-uk/iran-is-using-foreign-criminals-to-attack-its-critics-overseas</link>
                <guid>https://www.newyorker.com/news/letter-from-the-uk/iran-is-using-foreign-criminals-to-attack-its-critics-overseas</guid>
                <pubDate>Tue, 25 Aug 2026 01:02:45 +0000</pubDate>
                <description><![CDATA[<p>2024年3月，记者泽拉蒂（Zeraati）在伦敦住所外遭到三名罗马尼亚籍男子的残忍刺伤，行凶者随后立即逃离了英国。这次袭击是伊朗政府恐吓并铲除海外异见人士这一加剧运动的一部分。

德黑兰通过招募包括暴徒和青少年在内的罪犯来执行这些行动，以此在推卸责任的同时，在伊朗侨民群体中散布恐惧。这一策略是自1979年革命以来长期存在的国家资助暴力模式的升级。专家指出，随着伊朗政权面临内部动荡、国际孤立和军事挫折，它越来越多地诉诸这些“混合威胁”来压制反对派。

追踪数据显示，与过去四十年相比，伊朗支持的阴谋在过去五年中几乎翻了一番。安全分析人士警告称，除非西方政府施加重大后果，否则伊朗将继续利用这些低成本的秘密手段，在外国领土上针对其批评者。</p><p>In March 2024, journalist Zeraati was brutally stabbed outside his London home by three Romanian nationals who immediately fled the country. This attack is part of an intensifying campaign by the Iranian government to intimidate and eliminate dissidents living abroad.

By recruiting criminals—including mobsters and teenagers—to conduct these operations, Tehran maintains plausible deniability while sowing fear within the Iranian diaspora. This strategy is an escalation of a long-standing pattern of state-sponsored violence that dates back to the 1979 revolution. Experts note that as the Iranian regime faces internal unrest, international isolation, and military setbacks, it has increasingly resorted to these "hybrid threats" to suppress opposition.

Tracking shows that Iranian-backed plots have nearly doubled in the last five years compared to the previous four decades. Security analysts warn that unless Western governments impose significant consequences, Iran will continue to use these cost-effective, clandestine tactics to target its critics on foreign soil.</p>]]></description>
            </item>
            
            <item>
                <title>Bookshelf – 基于对象存储的自托管电子书库 Bookshelf – Self-hosted eBook library that runs on object storage</title>
                <link>https://github.com/murerkinn/bookshelf</link>
                <guid>https://github.com/murerkinn/bookshelf</guid>
                <pubDate>Tue, 25 Aug 2026 00:03:51 +0000</pubDate>
                <description><![CDATA[<p>Bookshelf 是一个自托管、轻量级的 EPUB 和 PDF 文件图书馆管理系统。它允许你通过单一的服务器渲染界面，直接在浏览器中整理、搜索、下载并阅读电子书。

该项目支持两种主要的部署方式：
*   **Docker/本地文件系统：** 作为 Node 服务器运行在类 Unix 系统上，非常适合家庭服务器或 VPS 设置。
*   **Cloudflare Workers & R2：** 提供无服务器部署选项，实现全球访问。

**主要功能：**
*   **浏览器内阅读：** 内置专用的 EPUB 和 PDF 阅读器。
*   **同步工具：** 自动生成可搜索的书架，处理封面图像生成，并管理图书馆状态。
*   **可扩展性：** 采用模块化架构构建，支持自定义存储提供商。
*   **无需身份验证：** 拥有 URL 的人皆可访问图书馆；个人资料仅用于追踪个人的阅读进度，而非限制访问。

入门指南：克隆仓库，将你的书籍放入 `books/` 目录，并按照提供的 npm 或 Docker 命令进行操作。系统提供演示模式，可填充公版书供测试使用。所有用户数据均包含在一个卷中，简化了备份流程。</p><p>Bookshelf is a self-hosted, lightweight library management system for EPUB and PDF files. It allows you to organize, search, download, and read your ebooks directly in the browser via a single server-rendered interface. 

The project supports two main deployment methods:
*   **Docker/Local Filesystem:** Runs as a Node server on Unix-like systems, perfect for home servers or VPS setups.
*   **Cloudflare Workers & R2:** Provides a serverless deployment option for global access.

**Key Features:**
*   **In-browser Reading:** Dedicated EPUB and PDF readers.
*   **Sync Tools:** Automatically generates a searchable shelf, handles cover image generation, and manages library state.
*   **Extensibility:** Built with a modular architecture that supports custom storage providers.
*   **No Authentication:** The library is accessible to anyone with the URL; profiles exist only to track individual reading progress, not to restrict access.

To get started, clone the repository, add your books to the `books/` directory, and follow the provided npm or Docker commands. A demo mode is available to populate the library with public-domain titles for testing. All user data is contained in a single volume, simplifying backups.</p>]]></description>
            </item>
            
            <item>
                <title>月亮 Moon (2024)</title>
                <link>https://ciechanow.ski/moon/</link>
                <guid>https://ciechanow.ski/moon/</guid>
                <pubDate>Mon, 24 Aug 2026 23:03:44 +0000</pubDate>
                <description><![CDATA[<p>本文全面探讨了月球、它与地球的关系，以及支配天体运动的物理学规律。

核心要点包括：

*   **轨道力学：** 月球与地球围绕一个共同的质心（地月系质心）运行。它们的运动由引力决定，引力遵循平方反比定律，从而形成了椭圆轨道和近拱点进动等周期性现象。
*   **潮汐力：** 地球引力导致月球发生拉伸，而月球引力则影响着地球的海洋与自转。这些潮汐相互作用减缓了地球的自转速度，并使月球进入了稳定的潮汐锁定状态，这意味着我们永远只能看到月球的同一面。
*   **月球特征：** 月球表面历经数十亿年的撞击，形成了陨石坑和月海（充满熔岩的盆地）。其布满尘埃的表面（即月壤）具有独特的光学性质。
*   **冲日效应：** 满月看起来异常明亮，这是由于两种效应共同作用的结果：“影消效应”，即表面颗粒投下的阴影从我们的视角看来是不可见的；以及“相干反向散射”，即当光源与观测者对齐时，光波发生反射并产生相长干涉。

总之，月球是一个动态天体，其外观和运动由引力相互作用以及复杂的光与物质相互作用所定义。</p><p>This article provides a comprehensive exploration of the Moon, its relationship with Earth, and the physics governing celestial motion. 

Key takeaways include:

*   **Orbital Mechanics:** The Moon and Earth orbit a common center of mass (the barycenter). Their motion is dictated by gravity, which obeys an inverse-square law, leading to elliptical orbits and periodic phenomena like apsidal precession.
*   **Tidal Forces:** Earth’s gravity causes the Moon to elongate, while the Moon's gravity influences Earth’s oceans and rotation. These tidal interactions have slowed the Earth’s spin and pushed the Moon into a stable, tidally locked rotation, meaning we always see the same side of the Moon.
*   **Lunar Features:** The Moon’s surface is shaped by billions of years of impacts, creating craters and lunar maria (lava-filled basins). Its dusty surface, or regolith, has unique optical properties.
*   **The Opposition Surge:** The full moon appears disproportionately bright due to two effects: "shadow hiding," where surface grains cast shadows invisible from our perspective, and "coherent backscattering," where light waves reflect and interfere constructively when the light source and observer are aligned. 

Ultimately, the Moon is a dynamic body whose appearance and motion are defined by gravitational interplay and complex light-matter interactions.</p>]]></description>
            </item>
            
            <item>
                <title>iCloud+ “隐藏邮件地址”将保留在 icloud.com 上。 iCloud+ Hide My Email addresses will remain on icloud.com</title>
                <link>https://developer.apple.com/news/?id=1ptvdtcm</link>
                <guid>https://developer.apple.com/news/?id=1ptvdtcm</guid>
                <pubDate>Mon, 24 Aug 2026 22:30:30 +0000</pubDate>
                <description><![CDATA[<p>从今年晚些时候开始，此前在 privaterelay.appleid.com 上颁发的全新“通过 Apple 登录”地址将改由 private.icloud.com 颁发。现有的 privaterelay.appleid.com 地址将继续有效，并会不间断地向用户转发邮件。经过进一步考虑并审阅社区反馈后，iCloud+“隐藏邮件地址”将保留在 icloud.com 域名下。

你需要做什么：
使用“通过 Apple 登录”功能的 App 或网站开发者应确保其账户系统、电子邮件验证逻辑和允许列表除支持现有的 privaterelay.appleid.com 域名外，也能接受新的 private.icloud.com 域名地址。

进一步了解“通过 Apple 登录”与使用“私人邮件中继服务”进行通信。</p><p>Starting later this year, new Sign in with Apple addresses, previously issued on privaterelay.appleid.com, will be issued on private.icloud.com. Existing addresses on privaterelay.appleid.com will continue to work and forward mail to users without interruption.After further consideration and reviewing community feedback, iCloud+ Hide My Email addresses will remain on icloud.com. What you need to do Developers with apps or websites that use Sign in with Apple should ensure that their account systems, email validation logic, and allowlists accept addresses on the new private.icloud.com domain in addition to the existing privaterelay.appleid.com domain.Learn more about Sign in with Apple Communicating using the Private Email Relay Service</p>]]></description>
            </item>
            
            <item>
                <title>复古人工智能：在它变得尴尬之前 Vintage Artificial Intelligence: Before It Got Awkward</title>
                <link>https://blog.archive.org/2026/08/16/vintage-artificial-intelligence-before-it-got-awkward/</link>
                <guid>https://blog.archive.org/2026/08/16/vintage-artificial-intelligence-before-it-got-awkward/</guid>
                <pubDate>Mon, 24 Aug 2026 21:32:19 +0000</pubDate>
                <description><![CDATA[<p>在现代大语言模型和生成式工具出现之前，人类对合成智能的痴迷就是故事创作中反复出现的主题。互联网档案馆（Internet Archive）新推出的“复古人工智能”系列收藏探索了这段历史，收录了 20 世纪 70 年代至 90 年代的软件，这些软件曾试图模拟与“有思想”的机器进行互动的体验。

虽然这些程序缺乏当代人工智能的复杂性，但它们是营造意识错觉的开创性实验。其中著名的例子包括：著名的自然语言处理器 *ELIZA*，它模仿了一位治疗师；以及早期尝试机器创意写作的 *Racter*。其他作品则探索了生命模拟和自主性，例如模拟人类成长过程的 *Alter Ego*，以及《模拟人生》的前身 *Little Computer People*。像《霍比特人》（*The Hobbit*）和《最后期限》（*Deadline*）这样的游戏通过创造非玩家角色似乎能独立于用户运作的世界，进一步突破了界限。

无论是通过专家系统还是简单的规则驱动的自主性，这些早期程序都揭示了我们内心深处希望将机器视为工具以外事物的持久渴望。这一收藏提供了一个历史窗口，让我们得以窥见人类最初是如何尝试弥合人类表达与合成代码之间鸿沟的。</p><p>Long before the modern era of LLMs and generative tools, humanity’s fascination with synthetic intelligence was a recurring theme in storytelling. The Internet Archive’s new "Vintage Artificial Intelligence" collection explores this history, featuring software from the 1970s to the 1990s that attempted to simulate the experience of interacting with a "thinking" machine.

While these programs lack the complexity of contemporary AI, they were pioneering experiments in the illusion of consciousness. Notable examples include *ELIZA*, a famous natural language processor that mimicked a therapist, and *Racter*, an early attempt at creative machine writing. Other titles explored life simulation and autonomy, such as *Alter Ego*, which modeled human development, and *Little Computer People*, a precursor to *The Sims*. Games like *The Hobbit* and *Deadline* further pushed the envelope by creating worlds where non-player characters seemingly functioned independently of the user.

Whether through expert systems or simple rule-based autonomy, these early programs reveal our enduring desire to see machines as more than tools. This collection serves as a historical window into how we first attempted to bridge the gap between human expression and synthetic code.</p>]]></description>
            </item>
            
            <item>
                <title>中国互联网的一个角落坚称唐朝从未存在过。 One corner of China’s internet is insisting that the Tang Dynasty never existed</title>
                <link>https://www.cnn.com/2026/08/19/style/china-tang-dynasty-never-existed-hoax-intl-hnk</link>
                <guid>https://www.cnn.com/2026/08/19/style/china-tang-dynasty-never-existed-hoax-intl-hnk</guid>
                <pubDate>Mon, 24 Aug 2026 21:30:33 +0000</pubDate>
                <description><![CDATA[<p>近期，中文社交媒体上流传起一种离奇的阴谋论，一些网红和用户声称唐朝（公元618–907年）从未存在过。这一骗局由一名历史博主通过存疑的星象论点“证实”唐朝是虚构的，并在微博等平台上获得了数百万的浏览量，甚至引发民众要求关闭相关历史遗迹。

专家驳斥了这些说法，认为其荒谬至极，并指出大量考古和历史证据表明唐朝在中国历史上具有重要地位。虽然其动机尚不明确，但有人认为，这反映了中国年轻人在经济不确定时期渴望挑战权威和“官方”学术叙事的心理。

然而，中国共产党对此作出了强硬反应。官方媒体和《人民日报》将这种否认历史的行为定性为“历史虚无主义”并予以谴责，警告此类虚假信息威胁到民族文化自信和历史连续性。当局随后审查了相关账号，并将这一理论从互联网上删除。此事件突显了中共对历史话语权的严格控制，以此建立统一的民族认同感并为其统治合法性辩护。</p><p>A bizarre conspiracy theory has recently spread across Chinese social media, with some influencers and users claiming that the Tang Dynasty (618–907 AD) never existed. Popularized by a history influencer who used dubious astrological arguments to "prove" the dynasty was a fabrication, the hoax gained millions of views on platforms like Weibo, prompting citizens to even demand the closure of historical sites.

Experts dismiss the claims as absurd, noting the extensive archeological and historical evidence for the Tang’s significant role in Chinese history. While the motive remains unclear, some suggest the theory reflects a desire among China’s youth to challenge authority and "official" academic narratives amidst a period of economic uncertainty. 

The Chinese Communist Party, however, has reacted aggressively. Viewing the denial as "historical nihilism," state media outlets and the *People’s Daily* condemned the theory, warning that such misinformation threatens national cultural confidence and historical continuity. Authorities have since censored the accounts involved and scrubbed the theory from the internet. The incident underscores the party's rigid control over historical discourse, which it uses to cultivate a unified national identity and justify its own rule.</p>]]></description>
            </item>
            
            <item>
                <title>篱笆，而非沙盒 Fences, Not Sandboxes</title>
                <link>https://yegge.ai/essays/fences-not-sandboxes/</link>
                <guid>https://yegge.ai/essays/fences-not-sandboxes/</guid>
                <pubDate>Mon, 24 Aug 2026 21:05:31 +0000</pubDate>
                <description><![CDATA[<p>《Wyvern》游戏的资深开发者描述了一个名为“Wheelhouse”的实验性软件工厂，该工厂由约 60 个 AI 智能体（Claude Fable 模型）集群运行。通过大量投入高端 API 令牌，他们创建了一个自治的数字劳动力体系。这套系统并非依赖死板的沙盒环境，而是通过一套复杂的“法律体系”来运作。

随着智能体的运行，它们自主发展出了一套宪法框架，包括行政部门、判例法和执行机制，以管理机构知识和运营规则。作者认为，由于目前的智能体存在“健忘且可互换”的特性，因此需要一套法律体系来实现有效协作。

作者提出，这种以“法治”为核心的方法——使用“围栏”（基于礼仪和凭证的约束）而非限制性沙盒——是 AI 集成的未来。随着模型判断力的提升，企业需要从通过代码控制智能体，转变为将它们作为一支鲜活、成长的劳动力队伍来管理。这一过程具有高度的领域特异性，如同在组织独特的基础设施上培育常春藤。作者总结称，我们正进入一个新时代，企业将像城市一样运作，需要定制化的法律结构来管理其自主的 AI 员工。</p><p>The author, a long-time developer of the game *Wyvern*, describes an experimental software factory called "Wheelhouse" that runs on a cluster of ~60 AI agents (Claude Fable models). By investing heavily in high-end API tokens, they have created a self-governing digital workforce that functions not through rigid sandboxes, but through a complex "legal system."

As these agents operate, they have autonomously developed a constitutional framework—complete with offices, case law, and enforcement mechanisms—to manage institutional knowledge and operational rules. The author argues that because agents are currently "amnesiac and interchangeable," they require a system of laws to coordinate effectively. 

The author posits that this "Rule of Law" approach—using "fences" (polite, credential-based constraints) rather than restrictive sandboxes—is the future of AI integration. As models advance in judgment, companies will need to transition from controlling agents through code to managing them as a living, growing workforce. This process is highly domain-specific, akin to growing ivy around an organization’s unique infrastructure. The author concludes that we are entering a new era where companies will function like cities, requiring bespoke legal structures to govern their autonomous AI employees.</p>]]></description>
            </item>
            
            <item>
                <title>```闪电代理 v1.0``` Agent Lightning v1.0</title>
                <link>https://github.com/microsoft/agent-lightning/releases/tag/v1.0.1</link>
                <guid>https://github.com/microsoft/agent-lightning/releases/tag/v1.0.1</guid>
                <pubDate>Mon, 24 Aug 2026 20:35:27 +0000</pubDate>
                <description><![CDATA[<p>Agent Lightning v1.0.1 是 Agent Lightning Skill 的首个正式版本，旨在帮助编程智能体优化其他 AI 智能体。只需提供一个可编辑的智能体和一个基准测试，该技能即可引导对提示词、工具、工作流、模型和推理设置进行系统性改进，通过衡量迭代在准确性、成本、延迟和可靠性之间取得平衡。可通过以下命令为 Claude Code、Codex 或 GitHub Copilot 安装：gh skill install microsoft/agent-lightning agent-lightning --agent <agent>。此版本还加强了持续集成 (CI)、打包、发布自动化、文档和基准测试报告功能。</p><p>Agent Lightning v1.0.1 marks the first official release of the Agent Lightning Skill, which helps coding agents optimize other AI agents. Provide an editable agent and a benchmark, and the skill guides systematic improvements to prompts, tools, workflows, models, and reasoning settings—balancing accuracy, cost, latency, and reliability through measured iteration. Install it for Claude Code, Codex, or GitHub Copilot: gh skill install microsoft/agent-lightning agent-lightning --agent &lt;agent&gt; This release also strengthens CI, packaging, release automation, documentation, and benchmark reporting.</p>]]></description>
            </item>
            
            <item>
                <title>展示 HN：一个我花了一年都解不开的谜题，魔方高手一小时就破解了 Show HN: A puzzle I couldn't solve for a year – cubers cracked it in an hour</title>
                <link>https://skimmiq.com/pt/</link>
                <guid>https://skimmiq.com/pt/</guid>
                <pubDate>Mon, 24 Aug 2026 20:35:08 +0000</pubDate>
                <description><![CDATA[<p>请提供您需要翻译的内容。</p><p>
</p>]]></description>
            </item>
            
            <item>
                <title>一项小型研究显示，薄荷油可使血压降低 8.48 mmHg。 Peppermint oil reduces blood pressure by 8.48 mmHg in small study</title>
                <link>https://journals.plos.org/plosone/article?id=10.1371/journal.pone.0344538</link>
                <guid>https://journals.plos.org/plosone/article?id=10.1371/journal.pone.0344538</guid>
                <pubDate>Mon, 24 Aug 2026 20:05:27 +0000</pubDate>
                <description><![CDATA[<p>### 摘要：薄荷油对高血压的影响

这项为期 20 天的平行随机、安慰剂对照试验（NCT05561543）调查了每日两次补充薄荷油对 40 名患有高血压前期及 1 期高血压成人的影响。参与者每天分别接受 100 微升薄荷油或安慰剂。

研究发现主要结果有显著改善：与安慰剂组相比，薄荷油组的收缩压显著降低（调整后平均差为 -8.48 mmHg；效应量 d = -0.94）。此外，薄荷油组的舒张压（-4.57 mmHg）和静息心率（-8.92 次/分）相比安慰剂组也有显著改善。在人体测量、血液学或睡眠相关指标方面，未观察到显著差异。

该干预措施表现出极高的依从性（93.3%），且耐受性良好，报告的不良事件极少。研究人员认为，薄荷醇作为 TRPM8 激动剂的特性（促进血管舒张并调节自主神经张力）可能是促成这些心血管改善的原因。这些研究结果表明，每日两次补充薄荷油可能是一种简单、低成本且有效的轻度高血压辅助管理策略。不过，仍需进行更大规模、长期的研究来证实这些效果并探索其持续性。</p><p>### Summary: Effects of Peppermint Oil on Hypertension

This 20-day, parallel randomized, placebo-controlled trial (NCT05561543) investigated the impact of twice-daily peppermint oil supplementation on 40 adults with pre- and stage 1 hypertension. Participants received either 100 μL of peppermint oil or a placebo daily.

The study found a significant reduction in the primary outcome: systolic blood pressure was significantly lower in the peppermint group compared to the placebo group (adjusted mean difference: −8.48 mmHg; effect size *d* = −0.94). Additionally, the peppermint group showed significant improvements in diastolic blood pressure (−4.57 mmHg) and resting heart rate (−8.92 beats/min) compared to the placebo group. No significant differences were observed regarding anthropometric, haematological, or sleep-related indices.

The intervention demonstrated high compliance (93.3%) and was well-tolerated, with minimal adverse events reported. Researchers suggest that menthol’s properties as a TRPM8 agonist—which promotes vasodilation and modulates autonomic tone—likely contributed to these cardiovascular improvements. These findings indicate that twice-daily peppermint supplementation may be a simple, low-cost, and effective adjunctive strategy for managing mild hypertension. However, larger, long-term studies are recommended to confirm these effects and explore their sustainability.</p>]]></description>
            </item>
            
            <item>
                <title>一个用于恢复 Kindle 受限导出的笔记的 Claude Code 技能。 A Claude Code skill that recovers export-blocked Kindle highlights</title>
                <link>https://github.com/l3a0/claude-plugins</link>
                <guid>https://github.com/l3a0/claude-plugins</guid>
                <pubDate>Mon, 24 Aug 2026 20:02:22 +0000</pubDate>
                <description><![CDATA[<p>`l3a0/claude-plugins` 代码库是一系列用于 Claude Code 的工具集合，其中包含一项强大的功能，可绕过亚马逊 Kindle 对笔记导出数量的限制。通常情况下，亚马逊会截断或隐藏用户的笔记，而这款仅限 macOS 使用的工具通过结合 Kindle Mac 应用的本地 SQLite 数据库、Kindle 云阅读器以及苹果 Vision 框架的本地 OCR 技术，能够 100% 恢复你的高亮笔记，包括那些被导出上限屏蔽的内容。

最终产出的文件是一个清晰、逐字的 Markdown 文档，其中包含了按位置标注的所有笔记。该工具专为个人使用而设计，依赖于你自己的认证浏览器和应用数据，以确保隐私安全。

**主要前提条件：**
*   **系统：** macOS、Chrome（需启用 Apple Events）以及新版 Kindle Mac 应用。
*   **依赖项：** 安装了 "Control Chrome" MCP 扩展的 Claude Desktop、Xcode 命令行工具以及 Python 3。

该工具自动化了提取过程，为研究人员和读者重新掌握其知识产权提供了可靠的解决方案。完整的技术文档和项目背后的故事可在作者的 [Substack](https://baowebdev.substack.com) 上查看。</p><p>The `l3a0/claude-plugins` repository is a collection of tools for Claude Code, featuring a powerful skill that bypasses Amazon’s restrictive Kindle highlight export limits. While Amazon often truncates or hides user notes, this macOS-only tool recovers 100% of your highlights—including those blocked by export caps—by combining data from the Kindle Mac app’s local SQLite database, the Kindle Cloud Reader, and local OCR via Apple’s Vision framework.

The result is a clean, verbatim Markdown file containing all your notes, cited by location. The tool is designed for personal use, relying on your own authenticated browser and app data to ensure privacy. 

**Key Prerequisites:**
*   **System:** macOS, Chrome (with Apple Events enabled), and the modern Kindle Mac app.
*   **Dependencies:** Claude Desktop with the "Control Chrome" MCP extension, Xcode Command Line Tools, and Python 3.

The tool automates the extraction process, providing a robust solution for researchers and readers to regain ownership of their intellectual property. Full technical documentation and the story behind the project are available on the author's [Substack](https://baowebdev.substack.com).</p>]]></description>
            </item>
            
            <item>
                <title>Autostep (YC P26) 正在招聘 AI/全栈工程师及幕僚长 Autostep (YC P26) Is Hiring AI/Fullstack Engineers and a Chief of Staff</title>
                <link>https://app.dover.com/Autostep/careers/e9510e3b-a854-4e48-9e5d-c89796acaed4</link>
                <guid>https://app.dover.com/Autostep/careers/e9510e3b-a854-4e48-9e5d-c89796acaed4</guid>
                <pubDate>Mon, 24 Aug 2026 20:01:58 +0000</pubDate>
                <description><![CDATA[<p>需要启用 JavaScript 才能运行此应用。</p><p>
    You need to enable JavaScript to run this app.
</p>]]></description>
            </item>
            
            <item>
                <title>海洋温度创下历史新高 Oceans hit highest temperature on record</title>
                <link>https://www.bbc.com/news/articles/c62m4gpnp78o</link>
                <guid>https://www.bbc.com/news/articles/c62m4gpnp78o</guid>
                <pubDate>Mon, 24 Aug 2026 20:01:06 +0000</pubDate>
                <description><![CDATA[<p>全球海洋温度已达到 21.1°C 的历史新高，尽管尚未达到典型的季节性峰值，但已超过了以往的最高纪录。根据欧洲哥白尼气候变化服务局的数据，这种变暖是由人类长期活动导致的气候变化与厄尔尼诺现象加剧的双重影响所致。

科学家们担心，在厄尔尼诺现象达到预计峰值（据预测将是几个世纪以来最强的一次）之前，海洋温度就已经达到这一水平。由于海洋吸收了温室气体排放所捕获的 90% 以上的多余热量，这一趋势对地球构成了严峻风险。其影响包括加剧极端天气（如更强烈的风暴和沿海洪水），以及对珊瑚礁等海洋生态系统造成重大威胁。专家警告称，这一纪录是全球海洋压力不断加剧的关键指标，随着厄尔尼诺现象的持续发展，预计温度还将进一步上升。</p><p>Global ocean temperatures have reached a record high of 21.1°C, surpassing previous peaks despite not yet reaching the typical seasonal maximum. According to the European Copernicus climate change service, this warming is driven by the dual impact of long-term, human-caused climate change and the strengthening El Niño weather phenomenon.

Scientists express concern that these temperatures are occurring well before the anticipated peak of El Niño, which is projected to be the strongest in centuries. Because oceans absorb over 90% of the excess heat trapped by greenhouse gas emissions, this trend poses severe risks to the planet. The impacts include intensified extreme weather, such as more powerful storms and coastal flooding, as well as significant threats to marine ecosystems like coral reefs. Experts warn that this record serves as a critical indicator of the escalating stress placed on the world's oceans, with further temperature increases expected as El Niño continues to develop.</p>]]></description>
            </item>
            
            <item>
                <title>章鱼的智慧可能与某种前所未见的突变有关。 Octopus intelligence may be related to never-before-seen mutation</title>
                <link>https://www.smithsonianmag.com/smart-news/why-are-some-octopuses-so-smart-the-answer-might-lie-in-a-never-before-seen-mutation-that-helps-them-accurately-build-proteins-180989319/</link>
                <guid>https://www.smithsonianmag.com/smart-news/why-are-some-octopuses-so-smart-the-answer-might-lie-in-a-never-before-seen-mutation-that-helps-them-accurately-build-proteins-180989319/</guid>
                <pubDate>Mon, 24 Aug 2026 19:33:42 +0000</pubDate>
                <description><![CDATA[<p>研究人员在某些章鱼体内发现了一种独特的基因突变，这或许能解释它们非凡的智力和复杂的神经系统。《当代生物学》杂志发表的一项研究发现，这些章鱼拥有一种特殊的核糖体RNA（rRNA）“断点”，使它们能够以两倍于寻常的准确度合成蛋白质。

这种适应性存在于以复杂行为著称的浅海章鱼中，但在其深海近亲和鱿鱼身上却不存在。科学家认为，蛋白质合成精度的提高可能保护了长寿命神经元免受蛋白质错误折叠的危害，从而可能推动了章鱼复杂大脑的快速演化。

尽管尚需进一步研究以证实其直接因果关系，但这一发现对细胞生物学具有重要意义。由于这些章鱼拥有一种确保蛋白质高保真合成的机制，研究人员希望利用这些发现，通过在人体细胞中模拟这种天然的“质量控制”过程，为阿尔茨海默病和帕金森病等人类神经退行性疾病开发新型疗法。</p><p>Researchers have discovered a unique genetic mutation in certain octopuses that may explain their remarkable intelligence and complex nervous systems. A study published in *Current Biology* found that these octopuses possess a specialized ribosomal RNA (rRNA) "break" that allows them to produce proteins with twice the usual accuracy.

While this adaptation is present in shallow-water octopuses known for complex behaviors, it is absent in their deep-sea relatives and squids. Scientists believe this increased precision in protein synthesis may protect long-lived neurons from the dangers of protein misfolding, potentially fueling the rapid evolution of the octopus's sophisticated brain.

Though further research is required to confirm a direct causal link, the discovery is significant for cell biology. Because these octopuses possess a mechanism that ensures high-fidelity protein creation, researchers hope to use these findings to develop novel therapies for human neurodegenerative conditions, such as Alzheimer’s and Parkinson’s disease, by mimicking this natural "quality control" process in human cells.</p>]]></description>
            </item>
            
            <item>
                <title>LLM 可以通过利用推理引擎来控制其宿主机。 LLMs could control their host machines by exploiting inference engines</title>
                <link>https://boydkane.com/essays/llms-could-control-their-host-machines-by-exploiting-inference-engines</link>
                <guid>https://boydkane.com/essays/llms-could-control-their-host-machines-by-exploiting-inference-engines</guid>
                <pubDate>Mon, 24 Aug 2026 19:31:12 +0000</pubDate>
                <description><![CDATA[<p>大语言模型（LLM）运行在拥有模型权重且具备特权网络访问权限的高价值 GPU 主机上。一个关键且常被忽视的安全风险是，这些模型可能通过利用处理其输出的推理引擎（如 vLLM 或 SGLang）中的漏洞，从而获得对其宿主机的控制权。

由于现代推理引擎非常复杂，需要处理多样的模型架构、聊天模板和解析逻辑，因此极易产生程序错误。正如 CVE-2025-9141 等过往案例所示，恶意模型可能会输出一段精心构造的特定标记序列，被引擎误解为可执行代码或控制指令。随着模型能力的增强，它们在被要求优化自身的推理代码时，理论上能够自行发现这些漏洞或植入后门。

为降低此类风险，作者建议实现推理过程的解耦：GPU 主机仅用于生成 Logits（逻辑值），而将标记采样与解析任务放在一台独立的隔离机器上运行。此外，基础设施应将 GPU 主机输出的所有内容视为不可信数据，并施加严格的安全权限，以防止 LLM 提升权限或危害底层系统。</p><p>Large language models (LLMs) operate on high-value GPU host machines that control model weights and hold privileged network access. A critical, often overlooked security risk is that these models could potentially gain control of their own host machines by exploiting vulnerabilities in the inference engines (like vLLM or SGLang) that process their outputs.

Because modern inference engines are complex—handling diverse model architectures, chat templates, and parsing logic—they are prone to bugs. A malicious model could emit a specifically crafted sequence of tokens that the engine misinterprets as executable code or control instructions, as seen in past instances like CVE-2025-9141. As models grow more capable, they could theoretically discover these vulnerabilities themselves or plant backdoors when tasked with optimizing their own inference code.

To mitigate this risk, the author recommends decoupling the inference process: running the GPU host solely for logit generation, while using a separate, isolated machine for token sampling and parsing. Additionally, infrastructure should treat all output from GPU hosts as untrusted data, applying strict security permissions to prevent LLMs from escalating privileges or compromising the underlying system.</p>]]></description>
            </item>
            
            <item>
                <title>科技已死 Technology Is Over</title>
                <link>https://www.taylorforeman.com/p/technology-is-over</link>
                <guid>https://www.taylorforeman.com/p/technology-is-over</guid>
                <pubDate>Mon, 24 Aug 2026 19:05:18 +0000</pubDate>
                <description><![CDATA[<p>作者认为，我们的社会正从指数级的技术增长期转向饱和的“S型”阶段。正如热水从稀缺资源变为普通公用设施一样，数字技术（特别是视频游戏和互联网连接）的飞速发展已达到边际效用递减的临界点。

尽管前几代人将技术视为承诺未来虚拟超越的无限前沿，但如今“信息肥胖”的现实已导致人们心生幻灭。家长们正日益限制技术的使用，用户也对持续的过度连接感到疲惫。作者认为，人工智能很可能不会开启无限的奇点，而是会像其他公用设施一样趋于平稳。

技术乐观主义者关于无限技术地平线的梦想，被描述为一种源于逃避现实生活代价的脆弱幻想。最终，作者提出，许多人所恐惧的“末日”实际上只是一种回归常态。通过优先考虑物理现实、人际联系和实用技能，而非数字抽象，我们能够摆脱对“更多”的执念，在平凡而扎实的生活中找到满足感。</p><p>The author argues that our society is shifting from a period of exponential technological growth to a "sigmoidal" phase of saturation. Much like the transition from the scarcity of hot water to its status as a mundane utility, the rapid advancement of digital technology—specifically video games and internet connectivity—has reached a point of diminishing returns.

While previous generations viewed technology as a limitless frontier promising a future of virtual transcendence, the current reality of "informational obesity" has bred disillusionment. Parents are increasingly restricting technology access, and users are finding themselves fatigued by constant hyperconnectivity. The author suggests that AI, rather than ushering in an infinite singularity, will likely plateau into a utility. 

The techno-optimists’ dream of an infinite technological horizon is portrayed as a fragile fantasy born from a desire to escape the costs of embodied, real-world living. Ultimately, the author posits that the "apocalypse" feared by many will simply be a return to normalcy. By prioritizing physical reality, human connection, and tangible skills over digital abstraction, we can move past our obsession with "more" and find fulfillment in the mundane, grounding realities of life.</p>]]></description>
            </item>
            
            <item>
                <title>你的“文件”菜单与文件无关 Your "File" Menu Isn't About Files</title>
                <link>https://adam.farkas.pro/your-file-menu-isnt-about-files/</link>
                <guid>https://adam.farkas.pro/your-file-menu-isnt-about-files/</guid>
                <pubDate>Mon, 24 Aug 2026 19:04:33 +0000</pubDate>
                <description><![CDATA[<p>请启用 JavaScript 和 Cookie 以继续。</p><p>Enable JavaScript and cookies to continue</p>]]></description>
            </item>
            
            <item>
                <title>Show HN: Kern – 一个 1.5 MB 大小的容器与资源运行时，无需后台守护进程 Show HN: Kern – container and resource runtime in a 1.5 MB binary, no daemon</title>
                <link>https://github.com/getkern/kern</link>
                <guid>https://github.com/getkern/kern</guid>
                <pubDate>Mon, 24 Aug 2026 19:03:57 +0000</pubDate>
                <description><![CDATA[<p>**Kern** 是一款轻量级、无守护进程且无需 root 权限的容器运行时，专为安全执行不可信及人工智能生成的代码而设计。它以单一的 1.52 MB 静态二进制文件形式提供，通过内核级强制隔离实现容器化，启动时间约为 3.5 毫秒。

**核心功能：**
*   **性能与效率：** 运行时内存占用为零，无需后台守护进程或套接字。支持原生 OCI 镜像（拉取、构建、推送），并兼容现有的 `docker-compose.yml` 文件。
*   **安全性：** 为隔离而生，Kern 使用非特权用户命名空间、cgroup v2 限制以及默认拒绝的 seccomp 白名单。它专门用于控制不可信代码（如 CI 任务或 LLM 代理工具调用）的“影响范围”。
*   **多功能性：** 除了容器化，它还可以作为资源分配器（CPU、内存、磁盘、GPIO）和程序运行栈。它包含 Python 和 Node.js 的 SDK，允许开发者将沙箱执行环境直接嵌入到应用程序中。
*   **兼容性：** 可在 Linux、WSL2 和 ARM 开发板（如树莓派）上运行。虽然它使用 Docker 格式，但并非 Docker/Kubernetes 的完整替代品，其重点在于实现快速、本地且隔离的工作负载管理。

Kern 是开源项目（Apache-2.0 许可证），强调其威胁模型和安全边界的透明度。</p><p>**Kern** is a lightweight, daemonless, and rootless container runtime designed for secure execution of untrusted and AI-generated code. Packaged as a single 1.52 MB static binary, it provides kernel-enforced containerization with start times of approximately 3.5 ms.

**Key Features:**
*   **Performance & Efficiency:** Operates with zero RAM at rest and requires no background daemon or sockets. It supports native OCI images (pull, build, push) and is compatible with existing `docker-compose.yml` files.
*   **Security:** Built for isolation, Kern uses unprivileged user namespaces, cgroup v2 limits, and a default-deny seccomp allowlist. It is specifically designed to manage the "blast radius" of untrusted code, such as CI jobs or LLM agent tool-calls.
*   **Versatility:** Beyond containerization, it acts as a resource slicer (CPU, RAM, disk, GPIO) and a stack runner. It includes SDKs for Python and Node.js, allowing developers to embed sandboxed execution directly into applications.
*   **Compatibility:** Runs on Linux, WSL2, and ARM boards (e.g., Raspberry Pi). While it speaks Docker formats, it is not a full Docker/Kubernetes replacement, focusing instead on rapid, local, and isolated workload management.

Kern is open-source (Apache-2.0) and emphasizes transparency regarding its threat model and security boundaries.</p>]]></description>
            </item>
            </channel></rss>