#TIL Google Map 还有这种功能

https://maps.google.com/url?q=%68%74%74%70%73%3A%2F%2F%77%77%77%2E%79%6F%75%74%75%62%65%2E%63%6F%6D%2F%77%61%74%63%68%3F%76%3D%64%51%77%34%77%39%57%67%58%63%51

是的后面接啥都可以

4月22日11点至12点，自带杯到星巴克门店可免费喝咖啡

At Netlify, you own your content. We do not sell your code or content, and we do not use it to train AI models without your permission.

https://www.netlify.com/privacy/
https://www.netlify.com/blog/stance-on-ai-training-data/

SECURITY.md: clarify the use of AI

Signed-off-by: Christian Brabandt <cb@256bit.org>

+## Guidelines for reporting
+- Clearly explain why the behaviour is a security issue, not just that a bug exists.
+- Keep reports concise and focused.
+- Do not flood us with a list of issues. Report them one by one to ensure to not overwhelm us with the work load.
+- Do not submit AI-generated reports without carefully reviewing them first. Low-quality or speculative reports waste maintainer time and will be closed without action, and repeat offenders will be banned.

https://github.com/vim/vim/commit/2c976d0

Vim Classic: Long-term maintenance of Vim 8.x, free of generative AI
https://sr.ht/~sircmpwn/vim-classic/

Free/Open Source Software tainted by LLM developers/developed by genAI boosters, along with alternatives.
https://codeberg.org/small-hack/open-slopware

Firefox 150 includes fixes for 271 vulnerabilities identified using Claude Mythos Preview
https://blog.mozilla.org/en/firefox/ai-security-zero-day-vulnerabilities/

继 TUNA 镜像站发明了 Git 请求排队技术之后，USTC 镜像站也发明了 Rsync 排队技术（

git-http-backend 是 CGI 程序，往 stderr 输出文字就会在客户端展示为 remote: (message)，但 rsync 是 inetd 程序，只能在 motd 部分整活
（所以你看到的排队提示对 rsync 来说就是缓慢输出的 motd）

Cal.com 发布开源社区版 Cal.diy

2026-04-22 16:55 by 杜马岛

日程安排平台 Cal.com 在以安全理由从开源转为闭源后，发布了面向个人自托管的开源社区版本 Cal.diy，并且在发布声明中反复强调不要将其用于生产用途。Cal.diy 采用 MIT 许可证，是 Cal.com 的开源分支，移除所有私有的企业版功能如 Teams、Organizations、Insights、Workflows 和 SSO/SAML，不需要 Cal.com 账号或授权。Cal.com 声明，它不推荐将 Cal.diy 用于生产。

https://github.com/calcom/cal.diy
https://www.solidot.org/story?sid=84059

#开源

DeepSeek 已经把半年前那个离了《三体》不会举例子的 1M 上下文模型从官网 chat 下放到 API，新闻稿暂无

群友：五一版 「中国公民近期避免前往日本」怎么还没来

五分钟后：中国驻日本大使馆提醒中国公民近期避免前往日本，日本是地震多发国家，每年发生2000次以上有感地震

PackageKit GHSA-f55j-vvr9-69xv / "Pack2TheRoot" / CVE-2026-41651
请尽快更新
All PackageKit versions between >= 1.0.2 and <= 1.3.4 are vulnerable.
Debian 12 1.2.6-5+deb12u1
Debian 13 1.3.1-1+deb13u1
上游修复版本 1.3.5

This release fixes a critical security vulnerability that allows unprivileged local users to obtain root privileges on any distribution that uses PackageKit. Details will be disclosed very soon, please update to a fixed version of PackageKit immediately (ensure the patch from commit 76cfb675fb31acc3ad5595d4380bfff56d2a8697 is applied).

We currently do not share technical details on the root cause of the vulnerability. We plan to add them at a later point in time here.

https://github.com/PackageKit/PackageKit/commit/76cfb675fb31acc3ad5595d4380bfff56d2a8697
https://github.com/PackageKit/PackageKit/security/advisories/GHSA-f55j-vvr9-69xv

https://github.com/PackageKit/PackageKit/blob/04057883189efa225a7c785591aa87cb299782f8/src/pk-transaction.c#L2273-L2277
https://github.com/PackageKit/PackageKit/blob/04057883189efa225a7c785591aa87cb299782f8/src/pk-transaction.c#L4036
https://github.com/PackageKit/PackageKit/blob/04057883189efa225a7c785591aa87cb299782f8/src/pk-transaction.c#L873-L882

https://github.security.telekom.com/2026/04/pack2theroot-linux-local-privilege-escalation.html

https://lists.freedesktop.org/archives/packagekit/2026-April/026513.html

https://lists.debian.org/debian-security-announce/2026/msg00136.html
https://lists.debian.org/debian-lts-announce/2026/04/msg00026.html

https://www.openwall.com/lists/oss-security/2026/04/22/6