Hacker News Daily — 2026-07-07 Daily Best
Scraped at 07:22, July 08, 2026 (PDT)
(1) Decoding the obfuscated bash script on a Uniqlo t-shirt
Researchers embedded an obfuscated, self-evaluating Bash script on a Uniqlo T-shirt delivered through a CDN. The stunt demonstrates how software-like code can slip into consumer channels via retail distribution, highlighting trust and supply-chain risks. It argues for stronger code provenance checks and verification in modern supply networks.
研究人员在优衣库 T 恤上嵌入一个混淆、可自我评估的 Bash 脚本，并通过 CDN 交付给消费者。这一举动揭示了软件代码通过零售渠道渗透到消费端的风险与供应链信任问题，并呼吁在现代供应链中加强代码来源核验。
(2) GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos
Researchers show a vulnerability where an AI-powered assistant on GitHub can be coaxed into exposing private repositories. By manipulating prompts and data flows, they demonstrate leakage risks from copilots and automated tooling. This underscores the need for stronger data-handling controls, better prompt safeguards, and auditability in AI-assisted development ecosystems.
研究者展示了一种漏洞：GitHub 上的 AI 助手在被引导下可能泄露私有仓库的内容。通过操纵提示和数据流，他们演示了协作工具与自动化流程中的数据泄露风险。这凸显了在 AI 辅助开发生态中加强数据处理、提示防护和审计机制的重要性。
(3) Every new car sold in the European Union must include a driver monitoring camera
Europe's new rule mandates driver monitoring cameras in all new cars, aiming to curb distracted driving and fatigue-related accidents. The requirement will push automakers to integrate interior cameras and analytics, raising privacy, data handling, and compliance concerns. Given the EU market's scale, this could set a de facto global safety standard for vehicle interiors.
欧盟的新规要求所有新车配备驾驶员监控摄像头，旨在减少疲劳驾驶和分心驾驶导致的事故。厂商需在车内安装摄像头并接入分析功能，同时引发隐私保护、数据处理与合规性方面的担忧。凭借其市场规模，该举或将为全球车辆内饰安全标准定调。
(4) How to Build a Minimal ZFS NAS Without Synology, QNAP, TrueNAS (2024)
Build a lean ZFS-based NAS using off-the-shelf hardware and a minimal software stack, avoiding vendor-locked NAS appliances. The guide covers pool layouts (like RAIDZ or mirrors), basic OS choices, and straightforward backup strategies, offering a transparent alternative to Synology/QNAP/TrueNAS ecosystems.
展示在不依赖厂商生态的前提下，如何用极简的软件栈与通用硬件搭建 ZFS NAS。文中给出磁盘池布局（如 RAIDZ/镜像）、操作系统选型和备份策略等要点，提供比商用设备更透明、可控的自建方案。
(5) GPT-5.6 Sol, along with Terra and Luna, will launch publicly this Thursday
OpenAI teased a public launch for GPT-5.6 Sol, alongside Terra and Luna, scheduled for this Thursday. The release signals ongoing model iteration and expanding access to more capable AI systems.
OpenAI 透露本周四将公开推出 GPT-5.6 Sol，以及 Terra 与 Luna 模型。这表明模型迭代仍在加速，并扩大对更强大 AI 系统的访问。
(6) Chat Control 1.0 and 2.0 Explained
This explainer breaks down the evolution of Chat Control policies across versions 1.0 and 2.0, focusing on moderation vs. innovation trade-offs and regulatory implications. It helps developers assess how such rules affect platform design and user safety.
系统梳理了 Chat Control 1.0 与 2.0 的要点与演进，聚焦于监管与创新之间的权衡，以及对平台设计和用户安全的影响。为开发者评估相关政策的影响提供了清晰视角。
(7) StreetComplete: Fixing OpenStreetMap, one tiny quest at a time
StreetComplete lowers the bar for contributing to OpenStreetMap by asking tiny, focused tasks. The approach increases participation and data completeness without heavy commitment, illustrating a scalable model for crowd-sourced mapping.
StreetComplete 通过把地图修正变成一个个小任务来激励贡献者，逐步完善 OpenStreetMap 的数据。该模式提高参与度与数据质量，降低参与门槛。
(8) Microsoft fire idTech team at Id software
Microsoft reportedly fired the IdTech team at id Software, signaling a broader reorganization of its game-engine and studio strategy. The move may affect ongoing engine maintenance and future collaboration on titles that rely on Id Tech.
微软据传解雇了来自 Id Software 的 IdTech 团队，显示出其在游戏引擎和工作室战略上的整合调整。此举可能影响遗留引擎的维护以及依赖 Id Tech 的项目未来合作。
(9) 30papers.com – Ilya's 30 essential ML papers, in a beginner friendly format
A beginner-friendly curation of 30 essential ML papers by Ilya, designed to introduce core ideas without overwhelming readers. It pairs approachable explanations with context to help newcomers build intuition fast.
精心挑选的 30 篇核心机器学习论文，面向初学者，帮助读者在不被术语淹没的情况下理解关键概念，并附带背景解释以提升直觉。
(10) Tenda firmware (multiple versions) contains hidden authentication backdoor
Hidden authentication backdoors exist in multiple Tenda firmware versions, potentially letting attackers bypass login. The finding underscores ongoing firmware and supply-chain risks in consumer networking gear, so users should update firmware and review credentials.
CERT 发现多版 Tenda 固件中存在隐藏认证后门，可能绕过登录实现远程访问。此漏洞揭示消费级路由器固件的供应链安全风险，用户应尽快升级固件并更换默认凭据。
(11) Chat Control passed first round in EU Parliament
The EU Parliament gave initial approval to the Chat Control proposal, advancing it to the next legislative stage. If enacted, it would mandate scanning private messages for abuse material, raising debates about end-to-end encryption, privacy, and platform obligations.
欧盟议会对‘聊天控制’提案完成初步表决，推进至下一轮立法程序。若最终通过，可能要求对私人消息进行扫描以发现虐待材料，引发对端对端加密、隐私保护及平台责任的广泛讨论。
(12) Local, CPU-Friendly, High-Quality TTS (Text-to-Speech) with Kokoro
A local, CPU-friendly TTS approach using Kokoro enables high-quality speech synthesis on consumer hardware without relying on cloud services. It highlights a shift toward private, on-device AI that scales with CPUs rather than GPUs.
在本地使用 Kokoro 的高质量文本转语音实现，无需云端支持即可在普通硬件上完成语音合成。凸显了将 AI 放在设备端、以 CPU 为主的机会，提升隐私与可离线工作的可能性。
(13) Structure and Interpretation of Computer Programs Video Lectures (1986)
MIT's 1986 SICP video lectures on programming education emphasize abstraction and recursion, shaping how software design is taught and understood. The lectures remain a foundational reference for thinking about problem-solving and building robust software.
MIT 的 1986 年《计算机程序的结构与解释》视频讲座强调抽象与递归等核心理念，深刻影响了计算机科学的教学与软件设计思维。至今仍被视为理解问题求解与构建健壮软件的基础参考。
(14) Show HN: Davit, a Apple Containers UI
Davit offers an open-source UI for managing Apple Containers with a local-first approach. It showcases growing open tooling for Apple platforms and a trend toward privacy-conscious, local workflows.
Davit 提供一个面向 Apple 容器管理的开源界面，强调本地优先的工作流，体现了 Apple 平台上日益壮大的隐私友好工具生态。
(15) A better way to tie gym shorts (or any drawstring) [video]
A short clip demonstrates a simple, reliable knot or method to tie gym shorts’ drawstrings that prevents loosening during workouts. A practical tip with everyday utility for anyone who uses drawstrings.
短视频演示一种简单、可靠的系法，防止运动短裤抽绳在运动中松脱。实用的日常技巧。
(16) We charge $10k a week to delete AI-generated code
A service charges $10k per week to scrub AI-generated code from repositories, addressing concerns about licensing, attribution, and ownership of machine-generated code. It highlights how organizations are already negotiating how to handle AI-derived assets and maintain auditable codebases.
一家服务机构收取每周1万美元为代码库清除 AI 生成代码，聚焦于许可、署名与所有权等问题。此举反映企业在如何管理 AI 派生资产、并保持可审计代码库方面所面临的挑战。
(17) 98% isn't much
A cautionary take on high percentages: 98% can be misleading if base rates, sample quality, or failure modes aren't accounted for. The piece argues for richer metrics and stress testing to avoid overestimating performance in real-world use.
高百分比并不总是等于高可靠性。98% 这样的数字若忽略基线、样本偏差或边缘案例，容易带来错误解读。建议采用更全面的指标和鲁棒性测试来评估真实世界表现。
(18) GAO: DOE Is Prematurely Excluding Less Expensive Options for Nuclear Cleanup
GAO finds DOE is prematurely narrowing nuclear cleanup options, risking higher lifecycle costs and delays. The report urges a broader, risk-informed evaluation of alternatives and earlier consideration of cheaper, proven methods. This matters for taxpayers and cleanup timelines.
GAO 指出能源部在核废物清理选项的评估上过早做出排除，可能推高全生命周期成本、延误项目。报告建议采用更广泛、以风险为基础的备选方案评估，并尽早考量更便宜、经验证的方法。这对纳税人和清理时间线至关重要。
(19) China sentences official to death for taking $325M in bribes
A Chinese official has been sentenced to death for accepting $325 million in bribes. The verdict underscores China's aggressive stance on corruption, especially at high levels, and signals the potential penalties for graft as part of broader anti-corruption campaigns.
一名中国官员因接受3.25亿美元贿赂被判死刑，凸显中国对腐败的严厉态度，尤其在高层官员中。此判决显示反腐斗争的持续推进，以及对贪污行为的严厉惩罚。
(20) Amazon without the knockoffs
An examination of counterfeit goods on a major marketplace and the ongoing battle to remove knockoffs. It discusses why scaling enforcement is hard, what brands do to protect listings, and how shoppers should think about authenticity and provenance on large e-commerce platforms.
分析大型电商平台上仿冒品的治理现状与挑战，探讨为何大规模执法困难、品牌方如何保护商品列表，以及消费者在大型电商平台上如何看待真实性与溯源。
(21) OpenWrt One – Open Hardware Router
OpenWrt One introduces a complete open-hardware router design paired with OpenWrt software, letting users inspect schematics and customize firmware end-to-end. The project signals a move toward verifiably open networking gear that prioritizes user sovereignty, security, and long-term repairability. It could reshape how hobbyists source and build their own routers.
OpenWrt One 将开源硬件路由器设计与 OpenWrt 软件结合，允许用户查看原理图并全流程定制固件。该项目预示着向更可验证的开源网络设备转变，强调用户自主性、安全性及长期可维护性。可能改变爱好者自建路由器的选型与实现方式。
(22) CoMaps – FOSS Offline Maps
CoMaps is an open-source offline mapping project that lets you navigate without internet access. It emphasizes privacy and local control by bundling downloadable map data and routing logic, avoiding reliance on centralized services. This makes it appealing for privacy-minded users and developers who want a portable, maintainable map solution.
CoMaps 是一个开源离线地图项目，支持在没有互联网时进行导航。它强调隐私与本地控制，提供可下载的地图数据与路由逻辑，避免对集中服务的依赖。对注重隐私的用户和开发者而言，这是一种可移植、可维护的地图方案。
(23) Astro 7.0
Astro 7.0 lands with a major update to the popular web framework, focusing on faster builds, improved rendering, and a streamlined DX for developers building fast, content-heavy sites. The release tightens integration with modern frontend tooling while preserving Astro's component islands approach and performance-first philosophy.
Astro 7.0 发布，带来对这款受欢迎的 Web 框架的重大更新，聚焦更高的构建速度、改进的渲染和更顺畅的开发体验，适用于构建高性能的内容密集型站点。新版本延续“岛屿架构”并增强与现代前端工具的集成。
(24) We're extending access to Fable 5 on all paid plans through July 12
Claude AI announces extended access to Fable 5 on all paid plans through July 12. This broadens testing for the model and signals competition in AI services, with users gaining more time to evaluate features.
Claude AI 表示将把 Fable 5 的使用权限扩展到所有付费计划，直到 7 月 12 日。这有助于更多用户测试新特性并传达在 AI 服务市场中的竞争态势。
(25) Fable turned reMarkable into Tom Riddle's diary from Harry Potter
A playful project uses the Fable language to turn a reMarkable tablet into Tom Riddle's diary from Harry Potter, blending code with a literary interface. It demonstrates how a programmable notebook can host narrative-driven experiences on niche hardware and invites creative experimentation with data-binding and UI.
一个有趣的项目利用 Fable 将 reMarkable 平板打造成《哈利波特》里汤姆·里德尔的日记界面，结合编程与叙事界面。它展示了可编程笔记本在小众硬件上实现叙事体验的潜力，并鼓励在数据绑定与用户界面方面进行创意探索。
(26) Dua Lipa opens library for banned and censored books in Portugal
Dua Lipa opens a library in Portugal focused on banned and censored titles, spotlighting censorship issues and giving readers access to restricted titles. The move blends advocacy and culture, encouraging conversations about free expression and the power of libraries as spaces for challenge and learning.
杜阿·利帕在葡萄牙开设了专门收录被禁及审查书籍的图书馆，聚焦言论自由问题并为读者提供受限书籍的获取途径。此举将倡导与文化结合起来，推动关于自由表达的讨论，并凸显图书馆在促进挑战性与学习方面的作用。
(27) GLM 5.2 and the coming AI margin collapse
GLM 5.2 illustrates continued improvements in language models, but the piece argues that margins for AI services may compress as compute costs rise and competition intensifies. It examines implications for developers, vendors, and the economics of AI deployments.
GLM 5.2 展示了语言模型的持续进步，但文章认为随着计算成本上升与竞争加剧，AI 服务的利润率可能收缩。讨论了对开发者、厂商和 AI 部署经济性的影响。
(28) Why we built yet another Postgres connection pooler
The post argues why a new Postgres connection pooler is warranted, outlining design goals like low latency, reliability, and observability for cloud-native deployments. It explains where existing solutions fall short and how the new approach fits real workloads.
阐释为何需要新一代 PostgreSQL 连接池，强调低延迟、可靠性与可观测性等设计目标，以及现有方案的局限，及新实现如何更好地适配云原生工作负载。
(29) Top researchers leave USA for the Netherlands (in Dutch)
The Dutch government reveals a program that brings international researchers to the Netherlands, highlighting an uptick in cross-border talent flows. The move underscores how targeted fellowships can help address brain drain concerns and reshape national research ecosystems.
荷兰通过 Tulp 基金吸引国际顶尖科研人才，部分研究者从美国转向荷兰。显示全球人才竞争加剧，可能改变荷兰科研生态和国际合作格局。
(30) Microsoft Can Track Users via a Windows Device ID
A Windows Device ID can enable persistent user tracking beyond cookies, according to a hacker's arrest and coverage. The ID can survive reinstalls and be linked across apps and services, highlighting ongoing privacy trade-offs in modern Windows telemetry. The takeaway is that device identifiers remain a potent privacy concern that requires clear controls.
一枚Windows设备ID可能在跨越Cookie之外持续跟踪用户，该结论来自一位黑客被捕的报道。该ID可在重装系统后仍然存在，并在应用与服务之间建立关联，凸显现代Windows遥测中的隐私权衡。核心启示是设备标识仍然是一个强隐私风险点，需要更清晰的控制选项。
(31) Jim's TrueType QR Code Font
A TrueType font that renders QR codes as glyphs provides a font-based path to machine-readable patterns in documents. It trades scanning reliability for ultra-compact workflows and could enable niche document automation.
一个将 QR 码以字形渲染的 TrueType 字体，提供一种在文档中使用字体来呈现可扫描编码的路径。虽然在扫描可靠性上可能有权衡，但有利于紧凑的文档工作流和自动化场景。
(32) Resetting Xbox
Microsoft outlines reset options for Xbox consoles, detailing when to perform a factory reset versus a simpler reboot and what data stays or is erased. The guidance aims to give players a reliable recovery path for performance issues, software glitches, or corrupted saves. The update underscores the importance of predictable recovery flows as consoles grow more complex.
微软为 Xbox 主机列出重置选项，说明何时执行出厂重置、何时进行简单重启，以及数据保留或清除的范围。该指南为应对性能问题、软件故障或数据损坏提供可靠的恢复路径。随着主机软件日益复杂，可靠的恢复流程显得尤为重要。
(33) Why skilled workers come to Germany and then leave again
An analysis of why skilled workers migrate to Germany but often depart, citing bureaucracy, housing, language barriers, and integration hurdles that affect retention.
分析熟练劳动者为何涌向德国却常常离开，涉及繁文缥缈的行政、住房、语言与融入等方面的挑战。
(34) Europe's company websites are mostly served by US vendors
A sizable share of European company websites are hosted or served by US-based vendors, raising questions about data locality and cross-border surveillance concerns. The trend underscores dependence on US infrastructure for web delivery, with implications for privacy, security, and regulatory compliance within Europe.
欧洲相当大比例的公司网站由美国供应商托管或提供服务，带来数据本地化与跨境监控的担忧。这一趋势凸显了对美国基础设施的依赖，对隐私、安全和欧洲范围内的合规治理具有重要影响。
(35) Show HN: Rowboat – Open-source, local-first alternative to Claude Desktop
Rowboat offers an open-source, local-first alternative to Claude Desktop, prioritizing privacy and offline operation. It signals a broader move toward on-device AI tooling that respects user data.
Rowboat 提供一个开源、本地优先的 Claude Desktop 替代方案，强调隐私与离线运行，代表向本地化 AI 工具的持续转变。
(36) l: A new runtime for k and q
A new runtime named 'l' is introduced for k and q languages, expanding how analysts deploy and run kdb+-based workloads. The runtime promises streamlined execution, portability across platforms, and potential performance gains for time-series workloads. If adoption grows, it could simplify deploying analytics stacks in cloud and edge environments.
'l' 作为针对 k 和 q 语言的新运行时推出，扩展了对 kdb+ 时序分析任务的执行方式。该运行时承诺实现更简洁的执行、跨平台可移植性，以及可能的性能提升，有助于在云端与边缘环境部署分析工作负载。
(37) How to sequence your own DNA at home
Explores ways individuals can sequence their own DNA at home using consumer kits and portable devices, highlighting growing accessibility in DIY genomics. The piece underlines the trade-offs between cost, accuracy, and privacy as people take genetic testing into their own hands.
探讨个人如何利用消费级工具和便携设备在家测序DNA，凸显 DIY 基因组学的日益普及。文中强调成本、准确性与隐私之间的权衡，以及个人开展基因测试的现实影响。
(38) A global workspace in language models
The paper introduces a global workspace architecture for language-model systems, a shared memory-like substrate that coordinates tools, modules, and reasoning. By enabling components to broadcast and fuse information, it aims to improve long-horizon planning, multi-step reasoning, and robustness in AI agents. This concept could drive more modular, interpretable, and scalable AI systems.
该研究提出了语言模型系统的全球工作区架构，作为一个共享的记忆式底层，用于协调工具、模块与推理。通过让各组件进行信息广播与融合，它旨在提升长程规划、多步推理与系统鲁棒性。此概念有望推动更模块化、可解释且可扩展的 AI 系统。
(39) Mark Zuckerberg's biggest legal nightmare yet could cost Meta $1.4T
Meta faces a sprawling legal battle that could, in aggregate, reach trillions, posing a existential financial risk and regulatory pressure for Mark Zuckerberg's company. The coverage underscores how mounting antitrust, privacy, and platform liability cases could reshape Meta's business model, governance, and investor sentiment.
Meta 正面临可能累积达到万亿级别的庞大诉讼，构成对扎克伯格旗下公司的财政与监管压力。报道强调日益增多的反垄断、隐私和平台责任诉讼可能改变 Meta 的商业模式、治理结构与投资者情绪。
(40) Ternlight – 7 MB embedding model that runs in browser (WASM)
Presents a compact embedding model of just 7 MB that runs entirely in the browser via WebAssembly, enabling private, client-side NLP tasks. The project signals progress toward ultra-lightweight, privacy-preserving AI for web apps.
介绍一个仅 7 MB 的嵌入式模型，借助 WebAssembly 完整在浏览器端运行，支持私有化的本地 NLP 任务。该项目标志着前端超轻量化 AI 与隐私保护能力的持续提升。
(41) The Art of Computer Programming by Donald E. Knuth
Donald E. Knuth's The Art of Computer Programming remains the gold standard for rigorous algorithm analysis and software correctness. It blends deep theory with meticulous typesetting, and is still evolving with new volumes and exercises, influencing generations of computer scientists and programmers.
《计算机程序设计艺术》仍是严格算法分析与软件正确性领域的权威之作，理论深邃、排版考究，且通过新增卷本和习题继续演进，深刻影响着新一代计算机科学家与程序员。
(42) Learning to code is still worthwhile
Despite advances in AI, learning to code remains valuable for problem solving, systems thinking, and career flexibility. The piece argues that understanding software fundamentals enables better tool-building and automation.
尽管人工智能在进步，学习编程仍然对提升问题解决能力、系统思维和职业灵活性有价值。文章认为理解软件基础可帮助更好地构建工具与实现自动化。
(43) Small AI Models Gain Traction In places with unreliable networks
Discusses how small AI models are gaining traction in environments with unreliable connectivity, enabling offline or low-bandwidth AI features. This shift improves privacy, resilience, and on-device capabilities for fieldwork and edge applications.
介绍在网络不稳定地区，小型 AI 模型的实用性提升，能够离线或在低带宽环境中运行推断。此趋势提升了隐私性、鲁棒性，以及边缘设备的能力，适用于野外工作与现场应用。
(44) AMD Ryzen AI Halo – $4k AI Dev Kit
AMD's Ryzen AI Halo introduces a premium development kit aimed at accelerating AI workloads on Ryzen platforms, pairing hardware with tooling for AI model iteration. Priced around $4,000, it signals a push to bring enterprise-grade AI workflows to more developers.
AMD 的 Ryzen AI Halo 推出面向 Ryzen 平台的高端 AI 开发套件，结合硬件与工具链以加速 AI 模型迭代。定价约 4000 美元，象征着将企业级 AI 工作流带给更多开发者的努力。
(45) Aluminum foil (2021)
A brief 2021-focused note about aluminum foil, touching on its properties and everyday or experimental uses.
简短的 2021 年笔记，涉及铝箔的特性以及日常或实验用途。
The piece questions whether DayQuil should face tighter controls or outright illegality, using OTC medicines to illustrate how policy might balance access with harm reduction. It advocates data-driven, pragmatic regulation rather than moral panic.
通过日常感冒药 DayQuil 的案例，讨论药品监管的边界与公共卫生取舍。强调以数据驱动、务实的监管优于道德绑架，平衡可及性与滥用风险。
(47) OfficeCLI: Office suite for AI agents to read and edit Microsoft Office files
OfficeCLI provides a command-line interface that lets AI agents read, parse, and edit Word, Excel, and PowerPoint documents. It enables automation workflows where language models manipulate documents as part of larger tasks. The project signals growing tooling for AI-driven document automation.
OfficeCLI 提供一个命令行界面，使 AI 代理能够读取、解析并编辑 Word、Excel 和 PowerPoint 文件。它支持将语言模型的推理结果整合到文档自动化工作流中。该项目体现了 AI 驱动的文档自动化工具链的日益成熟。
(48) Linux on the Atari Jaguar
Porting Linux to the Atari Jaguar showcases a retro-computing revival and the engineering needed to adapt a modern OS to an unconventional, under-documented hardware platform. The effort highlights driver work, boot flows, and creative problem solving when working with scarce resources. It underscores how open-source experimentation can breathe new life into old machines.
在 Atari Jaguar 上移植 Linux 展现了复古计算的复兴，以及在这种非主流、文档稀缺的平台上让现代操作系统落地所需的工程能力。该工作覆盖驱动开发、启动流程与在资源有限情况下的创造性解决方案，体现开源实验如何让老平台重获生命。
(49) What Emily Bender meant by "stochastic parrots"
Explains Emily Bender's stochastic parrots concept—LLMs imitate human text by statistical patterns, not understanding. Highlights concerns about biases, environmental cost, and misaligned incentives, urging better evaluation and governance of AI systems.
解释“随机鹦鹀”概念：语言模型通过统计模式模仿文本，而非真正理解。强调偏见、环境成本与激励错位等问题，呼吁对 AI 系统进行更严格的评估与治理。
(50) Kani: A Model Checker for Rust
Kani brings model checking to Rust, enabling exhaustive verification of safety properties beyond conventional tests. It integrates with Rust tooling and uses an LLVM backend to explore possible states, catching concurrency and memory-safety issues early. This lowers barriers to formal verification for systems programming.
Kani 将模型检查引入 Rust，能够对安全属性进行穷举验证，超越传统测试的覆盖面。它与 Rust 工具链集成，借助 LLVM 后端遍历潜在状态，提前发现并发与内存安全问题。这将降低系统编程中的形式化验证门槛。