[2026-10-16] 廣告追蹤淪零點擊間諜武器、高通韌體快取Bug逼工程師寫核心漏洞

詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-16 本集聚焦資安與硬體開源進展。首先揭露以色列廣告商利用線上廣告競價系統散播零點擊間諜軟體，突顯廣告生態系的審查漏洞；工程師為修復 TP-Link 路由器快取錯誤被迫自行提權，諷刺封閉韌體現況。 技術方面，Krea 3 推出低成本局部精準修圖；Liquid AI 發表端側推理模型；Libreboot 大規模支援 Chromebook 並改用 UEFI；Oxide 開源高保真度機架模擬器 Voxel。此外，西蒙斯基金會注資應對 AI 衝擊數學界，引發資本與研究純粹性的社群論戰。 相關連結： Online ads weaponised to deliver ‘zero-click’ spyware, researchers say AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware Krea 3 – An image model built for editing at scale Wanted to download an ISO, ended up writing a kernel exploit Webform and Webform REST Flaws in the September 2026 Drupal Advisory by andreagomez K-Dense-AI / scientific-agent-skills (50,455 ⭐) LFM2.5-24B-A2B: Built for fast on-device agents Libreboot 26.10 "Ominous Olive" released with UEFI, Chromebook support The Double Headed Stack Allocator C++26 Contracts: Introduction to Preconditions and Postconditions Virtual Oxide Labs: Emulating a Full Oxide Rack Simons Foundation launches $15M effort to help mathematicians navigate AI era OpenMuse