mongona news ·

7-Zip 的 XZ 解码漏洞，真正该紧张的是自动解压链路

💡 原文中文，约3400字，阅读约需8分钟。

📝

内容提要

7-Zip 被披露一个与 XZ 解码相关的堆缓冲区溢出漏洞，摘要称可能被用于远程执行代码。比起单机用户手动解压，我更关心服务端、CI、网关和文件处理任务里的自动解压流程：哪里会接收外部压缩包，哪里缺少隔离，哪里没有快速回滚。

🏷️

Built in Fort Worth: Wistron Opens Advanced Manufacturing Plant to Produce NVIDIA AI Systems
The AI era runs on AI infrastructure. Many of these advanced systems are buil...
Neill Blomkamp’s new zombie AI ‘film’ is just slop warmed over
On Monday, District 9 and Gran Turismo director Neill Blomkamp unveiled his l...
Towards a Theory of Bugs: The Ruliology of the Unexpected
“My Program Did the Wrong Thing!” Bugs are a ubiquitous phenomenon in the sof...
OpenAI says it accidentally hacked Hugging Face with a new AI system
OpenAI says its AI models mistakenly breached open-source AI platform Hugging...
谷歌Gemini 3.6 Flash发布：输出token暴降17%，价格战打到了七块五
谷歌AI模型更新引爆价格战，谁还敢说Flash系列只是“快枪手”？ Google一口气甩出三款新模型，直接把AI价格战打到了每百万token七块五毛钱，这...
A digestion of the Jacobian conjecture counterexample
The notorious Jacobian conjecture can be formulated concretely over the compl...