Forwarded from 喵～ (Necoco RSS)
blog.xinshijiededa.men
下一代 typst 包管理器
向大家介绍新一代的 typst 包管理：NPM Universe。顾名思义，就是使用一个名叫「npm」的命令行工具的 Typst Universe 替代品。
Forwarded from YCombinator News
JavaScript Trademark Update
309 points by thebeardisred 4 days ago | 104 comments
https://news.ycombinator.com/item?id=44407139
309 points by thebeardisred 4 days ago | 104 comments
https://news.ycombinator.com/item?id=44407139
Forwarded from Solidot
小行星 2024 YR4 撞击月球概率上升至 1/25
2025-06-30 14:49 by 人猿泰山之智斗恐龙
小行星 2024 YR4 基本不可能撞击地球，但 2032 年 12 月撞击月球的概率提高到了 1/25。若撞击真的发生，预估将在月球表面形成一个约 1 公里直径的新撞击坑。虽然月球本身无需防御，撞击也不会对月球轨道运行有任何影响。但撞击所造成的抛射物有可能进入地球同步轨道范围，对部分卫星系统造成干扰风险。这也提醒我们，太空防御的范畴不应限于地球，整个地月系统的安全亦不可忽视。
www.esa.int/Space_Safety/Planetary_Defence/Will_asteroid_2024_YR4_hit_the_Moon
天文館：1/25 的機率？小行星 2024 YR4 鎖定月球
#月球
2025-06-30 14:49 by 人猿泰山之智斗恐龙
小行星 2024 YR4 基本不可能撞击地球，但 2032 年 12 月撞击月球的概率提高到了 1/25。若撞击真的发生，预估将在月球表面形成一个约 1 公里直径的新撞击坑。虽然月球本身无需防御，撞击也不会对月球轨道运行有任何影响。但撞击所造成的抛射物有可能进入地球同步轨道范围，对部分卫星系统造成干扰风险。这也提醒我们，太空防御的范畴不应限于地球，整个地月系统的安全亦不可忽视。
www.esa.int/Space_Safety/Planetary_Defence/Will_asteroid_2024_YR4_hit_the_Moon
天文館：1/25 的機率？小行星 2024 YR4 鎖定月球
#月球
sudo: CVE-2025-32462
https://www.sudo.ws/security/advisories/host_any/
TLDR: -h host LPE 了
预期行为: sudo -h host -l
非预期行为: sudo -h host id
https://www.sudo.ws/security/advisories/host_any/
TLDR: -h host LPE 了
预期行为: sudo -h host -l
非预期行为: sudo -h host id
Sudo
Local Privilege Escalation via host option
Sudo’s host (-h or --host) option is intended to be used in conjunction with the list option (-l or --list) to list a user’s sudo privileges on a host other than the current one. However, due to a bug it was not restricted to listing privileges and could…
咕 Billchen 咕 🐱 抹茶芭菲批发中心
sudo: CVE-2025-32462 https://www.sudo.ws/security/advisories/host_any/ TLDR: -h host LPE 了 预期行为: sudo -h host -l 非预期行为: sudo -h host id
CVE-2025-6554: Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected from 138.0.7204.96 before 138.0.7204.96
https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop_30.html
https://issues.chromium.org/issues/427663123
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected from 138.0.7204.96 before 138.0.7204.96
https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop_30.html
https://issues.chromium.org/issues/427663123
Chrome Releases
Stable Channel Update for Desktop
The Stable channel has been updated to 138.0.7204.96/.97 for Windows, 138.0.7204.92/.93 for Mac and 138.0.7204.92 for Linux which will roll ...
Forwarded from bupt.moe
Forwarded from 每日消费电子观察 (Kexy Biscuit a.k.a. るる)
Please open Telegram to view this post
VIEW IN TELEGRAM
Forwarded from 每日消费电子观察 (无羽の翼 (｢ • ̀ω•́ )｢)
Let's Encrypt 签发首个 IP 地址证书
https://letsencrypt.org/2025/07/01/issuing-our-first-ip-address-certificate/
#慢讯
https://letsencrypt.org/2025/07/01/issuing-our-first-ip-address-certificate/
#慢讯
letsencrypt.org
We've Issued Our First IP Address Certificate
Since Let’s Encrypt started issuing certificates in 2015, people have repeatedly requested the ability to get certificates for IP addresses, an option that only a few certificate authorities have offered. Until now, they’ve had to look elsewhere, because…
【教育部高校毕业生就业研究院（基地）】您好！感谢您参加就业状况跟踪调查，我们也诚盼聆听您的业务主管对高校人才培养和就业工作的宝贵建议，恳请提供其联系方式。所有数据仅用于工作研究并将严格保密，感谢您的大力支持！请点击p.jyyj.edu.cn/[REDACTED]
#SMS
#SMS