Umbiko we-Jepsen we-ParticleDB, i-USB stick yeminwe ye-Lenovo, i-HackerTube ka-Karpathy kanye ne-Linux TCP bug CVE-2026-98432: izindaba ezine zabathuthukisi ku-Daily Diff eyodwa

Lokho okuhlanganiswa yile vidiyo

• U-Jepsen, ilabhorathri yokuhlola idathabhesi ephethwe u-Kyle Kingsbury, washicilela ukuhlaziya kwayo kwe-ParticleDB ngo-Okthoba 31, 2026. I-ParticleDB iyidathabhesi ye-Rust evela e-Orkes ehlose ama-AI agents; i-Orkes yaxhasa umsebenzi. U-Jepsen uhlole izinguqulo 1.1.4 kuya ku-1.1.18.11.rc-22 ku-node eyodwa futhi ethula izinkinga ezingama-96, iningi lazo elidinga iseva eyodwa, iklayenti elilodwa futhi akukho amaphutha. Izibonelo embikweni: i-WHERE 4 = 5 clause ibuyise imigqa enesihluthulelo esiyinhloko esingu-5, i-WHERE TRUE ayihambisananga nalutho, futhi i-UPDATE ingashiya imigqa eminingi enesihluthulelo esifanayo esiyinhloko.
• Ikhasi lasekhaya le-ParticleDB lakhangisa 'I-ACID Egcwele. I-159K TPS.' kanye nobufakazi be-TLA+, kodwa u-Jepsen uthi akukho ukucaciswa kwe-TLA+ okwakutholakala ngesikhathi sokusebenzisana, futhi umbhalo ongaphansi kokuthi 'I-ACID Egcwele' uthi ukuhlukaniswa kwesithombe. Ku-1.1.18.11.rc-22, inguqulo yokugcina u-Jepsen ayihlolile, imodi yokuthengiselana ezenzakalelayo ye-occ isalahlekelwe ukubhaliwe okuqinisekisiwe ngesikhathi sokusebenza okuvamile, futhi imodi eqine kakhulu ebekezekayo yavumela i-Lost Update ngemuva kokubulawa kwezinqubo. I-Orkes ithi inguqulo 1.1.19-rc.13 ixazulula zonke izinkinga ezisele; u-Jepsen akayihlolanga futhi uncoma ukuthi abasebenzisi bayeke ukuthunyelwa okuqhubekayo kwe-ParticleDB futhi bathuthele kwamanye ama-database.
• Umcwaningi wezokuphepha u-Xusheng Li uthole ukuthi i-USB stick yeminwe ye-Lenovo ThinkPlus FU100, eyakhangiswa njengebethelwe nge-AES-256, iqukethe i-SD khadi engenalutho olubethelwe; umfundi weminwe ushintshe kuphela uxhumano lwe-USB. Wakubika ngo-Agasti 2, 2025, futhi ukulungiswa kokuqala kwe-Lenovo kwaba ungqimba lwe-epoxy phezu kwe-SD khadi. I-Lenovo iklelise iseluleko sayo phezulu, futhi ukulungiswa kamuva kwe-FU100 kanye nama-drives ahlobene kudinga ukushayela ucingo emgqeni wesevisi e-China, bese kuba ukushintshwa noma ukuthuthukiswa kwe-firmware esizeni, ngokusho kwe-Tom's Hardware.
• Ekususeni okulandelayo okubikwe yi-Tom's Hardware, u-Li usebenzise i-Codex ye-OpenAI ngethuluzi lokuhlehlisa ubunjiniyela lomqashi wakhe ngokumelene nesofthiwe yokuvikela ye-USB yabanye abenzi; i-Netac ithathe cishe imizuzu eyisikhombisa ngoba inesihluthulelo esilungisiwe esakhiwe ngaphakathi futhi yabhalela iphasiwedi kumalogi okuxilonga, futhi i-drive yomunye umthengisi inama-akhawunti amabili afihliwe u-Li abiza ngokuthi ama-backdoors. Ukuze uthole idatha ku-USB stick, bethela amafayela ngesofthiwe oyilawulayo ngaphambi kokuba afinyelele kudivayisi.
• Ngo-Okthoba 31, 2026 u-Andrej Karpathy wachaza i-HackerTube, isayithi lesitayela se-YouTube ku-hackertube.org eyakhiwe nge-coding agent yakhe cishe emahoreni amabili. I-agent yalayisha amazwana e-Hacker News, yahlunga ugaxekile futhi yagcina cishe angama-40,000 ancoma ividiyo ye-YouTube, okukhiqize amavidiyo angu-6,454 kusukela ngo-2007 kuya ku-2026 ezihloko ezingu-150. Isayithi libonisa ifreyimu eku-50% endaweni ye-thumbnail elayishiwe. U-Karpathy ubala izinyathelo zakhe eziyinhloli njengesihluthulelo se-Google Cloud API, iseva kanye nesizinda.
• I-CVE-2026-98432 iyi-use-after-free ku-handshake ye-IPv4 TCP ye-kernel ye-Linux, ephumelele i-CVSS 9.8, efinyeleleka yi-peer ekude ngaphandle kokungena ngemvume. Ukulungiswa kuka-Eric Dumazet kuthathele indawo izingcingo ezimbili ze-kfree ngezwi le-kfree_rcu ekuzibophezelweni okungosuku luka-Okthoba 1; ama-kernels azinzile ngokulungiswa athunyelwa ngo-Okthoba 11 nango-15, futhi le bug ibuyela ku-Linux 4.4. I-Red Hat ikhuphule ukukala kwayo kusuka ku-Important kuya ku-Critical ngo-Okthoba 30. I-Ubuntu ne-Red Hat Enterprise Linux abazange babhale i-kernel elungisiwe ngoMgqibelo kusihlwa, ngo-Okthoba 31. Faka i-kernel elungisiwe yokusabalalisa kwakho bese uqala kabusha, kuhlanganise nama-container hosts, ngoba ama-container ahlanganyela i-kernel ye-host.
• I-Anthropic ithi i-Claude yabhalela ukuhlasela okusebenzayo kwamaseva e-Linux ngesilaleli se-multipath TCP, nokuthi ebufakazini bayo bokucabanga kuthatha imizuzu engama-48 ukukhipha inkomba ye-kernel neminye imizuzu emihlanu yokusebenzisa umyalo we-shell; ukuhlasela akushicilelwe. Ithimba lezokuphepha le-Go libona ukuthi izinhlelo ze-Go zenza abalaleli be-multipath TCP basebenze ngokuzenzakalelayo kusukela ku-Go 1.24 futhi liyaxwayisa ukuthi amasistimu angenaso lesi silaleli angaba sengozini yokuhlaselwa okufanayo. I-Red Hat ne-AlmaLinux zishicilela umthetho we-firewall olahla amaphakethe e-IPv4 TCP anezinketho ze-IP, okuthi i-Red Hat ithi kunciphisa ukuchayeka futhi akukuvimbeli ngokuphelele ukuhlaselwa.

Umbhalo obhaliwe ohunyushwe

Kuhunyushwe kusuka ekulandiseni kokuqala kwesiNgisi. Umsindo namazwibela atholakalayo alawulwa yi-YouTube.

Ukuvula okubandayo: i-where clause isho kanjani okune kulingana nokuhlanu?

0:00 Idathabhesi ekhangisa nge-Full ACID kufanele igcine lokho okubhalayo. U-Jepsen uhlole eyodwa wathola izinkinga ezingamashumi ayisishiyagalolunye nesithupha, kuhlanganise ne-where clause ethi okune kulingana nokuhlanu futhi isabuyisa imigqa. Kule vidiyo, izindaba ezine. Yini u-Jepsen ayithola ku-database ebibanga i-Full ACID? Kwakuyini ngaphakathi kwe-USB stick yeminwe ethengiswa njengebethelwe? Yini u-Andrej Karpathy ayakhile ngesikhathi esisodwa ekuseni? Futhi yini oyilungisa nge-bug yenethiwekhi ye-Linux?

0:26 Enye yalezo zibuni iza nesitobhwashi. Ngizokufundela ekugcineni. KungumSombuluko, Novemba wokuqala, futhi lokhu yi-Daily Diff. I-Jepsen ilabhorathri yokuhlola ka-Kyle Kingsbury. Isebenzisa idathabhesi ngemizila yokusebenza yangempela kanye nokwehluleka bese ihlola ukuthi iziqinisekiso ezisekuwebhusayithi ziyagcina yini. Cabanga ngomhloli ovula ifriji ngempela.

Indaba yokuqala: yini u-Jepsen ayithola ku-ParticleDB?

0:44 Indaba yokuqala. NgoMgqibelo u-Jepsen washicilela umbiko wakhe nge-ParticleDB, idathabhesi ye-Rust evela e-Orkes ehlose ama-AI agents. I-Orkes yakhokhela umsebenzi. Ikhasi lasekhaya lathi i-Full ACID, izinkulungwane eziyikhulu namashumi amahlanu nesishiyagalolunye zokuthengiselana ngomzuzwana. U-Jepsen uhlole i-ParticleDB kusukela ekwakhiweni kwayo kokuqala kwephuzu elilodwa kuya ekukhishwe kwesibili kwe-release candidate. Isayithi yayibiza ngokuthi ibufakazi obusemthethweni, ngobufakazi be-TLA plus. U-Jepsen uthi akukho ukucaciswa kwe-TLA plus okwakutholakala ngesikhathi somsebenzi.

1:10 Ngaphansi komugqa we-Full ACID, ikhasi elifanayo lathi ukuhlukaniswa kwesithombe, okungahlukanisiwe ngokuphelele. Izibuni zazingazweli. Iningi lidinga iseva eyodwa, iklayenti elilodwa futhi akukho ukwehluleka okufakwe. I-where clause ethi okune kulingana nokuhlanu ibuyise imigqa. I-where clause ethi iqiniso ayihambisananga nalutho. Izibuyekezo zishiye imigqa emibili enesihluthulelo esifanayo esiyinhloko. Ukukhishwa kokugcina u-Jepsen akuhlolile, i-release candidate amashumi amabili nambili,

1:36 kwakuphephe kakhulu. Naphezu kwalokho, imodi yokuthengiselana ezenzakalelayo yalahlekelwa ukubhaliwe okuqinisekisiwe ngesikhathi sokusebenza okuvamile. Imodi eqine kakhulu yayisavumela ukulahlekelwa yizibuyekezo ngemuva kokubulawa kwenqubo. I-Orkes ithi ukukhishwa kwayo okulandelayo kulungisa konke lokhu. U-Jepsen akayihlolanga. Ngakho kulokho kukhishwa kokugcina idathabhesi eyathembisa i-Full ACID ingalahlekelwa ukubhala okwakuye kwagunyazwa kakade. Ijubane, ngicabanga, laliheha.

2:00 Iseluleko sika-Jepsen sicacile. Misa ukuthunyelwa okuqhubekayo kwe-ParticleDB bese uthuthele kwelinye i-database ngokushesha okungenzeka. I-Orkes ibeka icala ku-spring refactor futhi ithi amakhasimende ayo, enguqulweni endala, kungenzeka ukuthi awazange athinteke. Imibhalo ye-stored procedure yaze yakhetha ikheli le-imeyili lika-Kyle Kingsbury. Indaba yesibili. I-Lenovo ThinkPlus FU eyikhulu iyi-USB stick yeminwe

Indaba yesibili: kwakuyini ngaphakathi kwe-USB stick yeminwe ye-Lenovo?

2:21 emakethwa njengebethelwe nge-AES amakhulu amabili namashumi amahlanu nesithupha. Umcwaningi wezokuphepha u-Xusheng Li wahlukanisa eyodwa wathola i-SD khadi evamile, engenalutho olubethelwe kuyo. Umfundi weminwe unqume into eyodwa, ukuthi i-stick ixhunywe kukhompyutha yini. Amafayela kukhadi awazange ancike kuyo. U-Li ubike iphutha ku-Lenovo ngo-Agasti amashumi amabili namashumi amabili nanhlanu. Ukulungiswa kokuqala kwaba ungqimba lwe-epoxy phezu kwe-SD khadi. Ngakho amafayela awazange abethelwe.

2:47 Linda, yi-SD khadi nje? Njalo bekulokhu kunjalo. I-Lenovo iklelise iseluleko sayo phezulu. Ukulungiswa kamuva, kwe-FU eyikhulu nama-drives amathathu ahlobene, kusho ukushayela ucingo emgqeni wesevisi e-China, bese kuba ukuthumela i-drive emuva noma ukuthola ukuthuthukiswa kwe-firmware esizeni. I-Lenovo iyakweluleka ukusula i-drive kuqala. Ngesonto eledlule u-Li waqondisa i-Codex ye-OpenAI, kanye nethuluzi lokuhlehlisa ubunjiniyela lomqashi wakhe,

3:09 kusofthiwe yokuvikela ye-USB yabanye abenzi. Enye ye-Netac yathatha cishe imizuzu eyisikhombisa, ngoba inesihluthulelo esilungisiwe esakhiwe ngaphakathi futhi yabhalela iphasiwedi kumalogi okuxilonga. Enye i-drive inama-akhawunti amabili afihliwe u-Li abiza ngokuthi ama-backdoors. Uma ukuphepha kwe-drive kuyihardware, zihlole wena. Bethela amafayela ngesofthiwe oyilawulayo ngaphambi kokuba afinyelele ku-stick, futhi uphathe iminwe njengokungaba lula.

Indaba yesithathu: yini u-Karpathy ayakhile ngesikhathi esisodwa ekuseni?

3:31 Indaba yesithathu, elula. NgoLwesihlanu kusihlwa u-Andrej Karpathy wavula i-YouTube, wabona lokho akubiza ngokuthi udonga olunentshontsho, futhi ngoMgqibelo ekuseni watshela i-coding agent yakhe ukuthi yakhe okungcono kunoma yini i-Hacker News eyincomayo. I-agent yalayisha amazwana e-Hacker News, yahlunga ugaxekile, futhi yagcina cishe izinkulungwane ezingamashumi amane ezincoma ividiyo ye-YouTube. Lokho kwashiya amavidiyo ayizinkulungwane eziyisithupha namakhulu amane namashumi amahlanu nane, kusukela ngo-amashumi amabili nesikhombisa kuze kube manje, ezihloko eziyikhulu namashumi amahlanu.

3:58 Isayithi yi-hackertube dot org. Libonisa ifreyimu kusuka ekuphawuleni okuphakathi endaweni ye-thumbnail umalayishi ayikhethile, okubuhlungu kancane. U-Karpathy uthi konke ukwakhiwa kuthathe cishe amahora amabili. Izinyathelo zakhe eziyinhloli kwakuyisihluthulelo se-Google API, iseva kanye nesizinda. Ngo-Okthoba weshumi nambili ngakutshela ukuthi u-Karpathy ucabanga ukuthi ukufinyelela nemisebenzi kudala igebe ekuqondeni kwabantu lezi zinsiza. Amahora amabili omsebenzi ayindawo enhle yedatha.

4:21 Indaba yesine, okufanele wenze ngayo.

Indaba yesine: yini oyilungisa nge-CVE-2026-98432?

4:23 I-CVE amashumi amabili namashumi amabili nesithupha, ezingamashumi ayisishiyagalolunye nesishiyagalombili ezingamashumi amane nantathu nambili iyi-use-after-free ku-kernel ye-Linux ye-IP v amane i-TCP handshake, ephumelele u-9.8 kuma-10. I-peer ekude engenakho ukungena ngemvume ingayifinyelela. U-Eric Dumazet wabhala ukulungiswa ngo-Okthoba wokuqala. Ukulungiswa kwafinyelela kuma-kernels azinzile ngo-Okthoba weshumi nanye noweshumi nanhlanu, futhi le bug ibuyela ku-Linux wamane nane. I-Red Hat ikhuphule ukukala kwayo kusuka kokubalulekile kuya kokubucayi ngo-Okthoba wamashumi amathathu. NgoMgqibelo kusihlwa, i-Ubuntu ne-Red Hat Enterprise Linux kusenakho okungekho okulungisiwe

4:52 i-kernel. I-Anthropic ithi u-Claude wabhala ukuhlasela okusebenzayo kwamaseva anesilaleli se-multipath TCP, futhi izinhlelo ze-Go zavula lezo ngokuzenzakalelayo kusukela ku-Go eyodwa iphuzu lamashumi amabili nane. Ithimba le-Go liyaxwayisa ukuthi amasistimu angenaso lesi silaleli angaba sengozini yokuhlaselwa okufanayo, futhi lithi ukulungiswa okungcono kakhulu yi-kernel elungisiwe. Uma ukusabalalisa kwakho kungenayo i-kernel elungisiwe okwamanje, i-Red Hat ne-AlmaLinux zishicilela umthetho we-firewall olahla amaphakethe e-IP v amane e-TCP aphethe izinketho ze-IP. I-Red Hat ithi kunciphisa ukuchayeka futhi ayikwazi ukukuvimbela ngokugcwele.

5:23 Ngemuva kwalokho, ulinda. Yini okufanele uyenze namuhla. Faka i-kernel elungisiwe yokusabalalisa kwakho bese uqala kabusha, kuma-container hosts naku ama-Kubernetes nodes nawo, ngoba ama-container ahlanganyela i-kernel ye-host. I-Debian, i-Suse ne-Amazon Linux sezinokulungiswa. Uma ungakakwazi ukulungisa okwamanje, qala ngama-hosts asebenzisa abalaleli be-multipath TCP. Manje isitobhwashi engasithembisile.

Emuva esitobhwashi: kwathatha isikhathi esingakanani ukuhlasela?

5:44 Ebufakazini bokucabanga be-Anthropic, kuthatha imizuzu engamashumi amane nesishiyagalombili ukukhipha inkomba ye-kernel, bese kuba eminye imizuzu emihlanu yokusebenzisa umyalo we-shell. I-Anthropic ayikashicileli ukuhlasela. Uma uthanda ukufunda lokhu kunokungizwa ngikusho, i-diff ifika ebhokisini lakho le-imeyili njalo ekuseni, mahhala ku-the daily diff dot dev, isixhumanisi esingezansi.

Isinqumo: BUYISA

6:02 Ngakho isinqumo sanamuhla yi-REVERT. Ngingabuyisa i-ParticleDB, ngoba iseluleko sika-Jepsen simisa ukuthunyelwa, futhi ngingalungisa leyo kernel, ngoba iza nesitobhwashi. Futhi lokho kuyi-diff yanamuhla. Ngingu-Niko ovela e-Axrisi. Hlanganisa ngokuzibophezela.

Imithombo

1. Jepsen: ParticleDB 1.1.4 (Kyle Kingsbury, October 31, 2026)Jepsen
2. Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy caseTom's Hardware
3. Lenovo ThinkPlus Fingerprint USB Drive Sold as Encrypted Was a Plain SD Card InsideHackingPassion
4. HackerTubeAndrej Karpathy
5. CVE-2026-98432Ubuntu Security
6. RHSB-2026-016: Use-after-free - kernel IPv4 (CVE-2026-98432)Red Hat
7. ipv4: free inet_opt and ireq_opt after an RCU grace periodLinux kernel (Eric Dumazet)
8. Discovering and exploiting vulnerabilities in critical, real-world software with ClaudeAnthropic
9. Protecting against CVE-2026-98432 when using Go programsGo Security Team via oss-security
10. Linux's October 2026 TCP Use-After-Free: CVE-2026-98432Atlas