2026-08-05 Passkey 密碼學神話破滅？雲端金鑰竟遭全數扒光、WebKit 代理漏洞讓真實 IP 裸奔！

詳細網頁版與參考連結：https://podcast.david888.com/post/2026-08-05 本集探討多項資安與科技議題。Palo Alto Networks 揭露 Google Passkey 機制缺陷，惡意程式可竊取 SDS 主金鑰；社群雖指端點中毒難防，但也打臉了其硬體防護承諾。WebKit 被爆繞過代理洩露真實 IP。知名部落客 Gwern 創立高價 AI 數位分身公司，引發 HN 網友對隱私與搾取的質疑。Mistral 發布 Shieldstral 審核模型，另有開發者打造 8GB VRAM 本地語音助手。慕尼黑資助 libexpat 維護，DuckDB 與雲端遷移亦獲熱議。最後，前端強行視覺居中 Div 的黑魔法，遭網友批評違背視口原則。 相關連結： libexpat now funded by the City of Munich for up to 6 months I am retiring from fulltime writing (& pseudonymity) to launch Guardian Angel DuckDB – Data power tools for your laptop, now in Clojure (2023) Pass the Passkey: A Novel Attack Surface in Passwordless Authentication We finally learned to center a div, then browsers added sidebars IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay Mistral's Shieldstral: 3B open-weights model for multimodal moderation Opening Web Invite Links Directly in the App with Expo Router by hiro@ Snowflake to Databricks: what the migration actually costs you by Zephico Technologies Mana: 2-3 Seconds to Feeling Human by Yuuzu