Changelog
A timeline of every change to this site.
30 updates so far
Fifteen bilingual posts: this week in releases, CVEs and engineering judgment
Fifteen posts covering Astro, Vue, Node, Deno, Bun, Vite, TypeScript, Ollama, llama.cpp, Redis, Electron, Traefik, uv, Ruff and Home Assistant, each 1500–2000 characters with 3–4 source screenshots.
Speed test upgrade: 7 nodes, custom select, split charts
Seven nodes with automatic availability probing, a hand-drawn select, separate download/upload charts, and a tighter layout.
New speed test tool
A speed test against public nodes with charted throughput curves and per-platform latency.
Analytics added, music search moved to the official SDK
Self-hosted Umami analytics on every page; music search and the player now use the official music-api SDK instead of hand-rolled JSONP.
Five new posts: Servo, Python 3.15, Zig 0.17, Safari TP 254, BeyondTrust
Five new bilingual posts covering a browser engine, two language releases and an actively exploited auth bypass.
Teardown scene grows to ten airframes
The teardown scene now covers ten DJI airframes with a switchable hangar; scene metadata updated to match.
Avata 360 teardown and grouped scenes
A new interactive DJI Avata 360 teardown scene; the scenes list is grouped into Nature/Sky/Urban/Relic/Teardown and tightened into two columns; downloads now go through a disclaimer dialog, articles show a single attachments button, and file lists scroll inside a capped height.
Post attachments and a downloads page
Articles now list files under public/downloads/<slug>/, a new /[lang]/downloads/ page lists everything, and the PHP PoC is downloadable as a zip or individual files.
The two 9.2 PHP RCEs and the public PoC
The longjmp and stale-global-state root causes behind CVE-2026-109618 / 109619, plus a reproducible lab and a PoC with a disclaimer; also fixes inline-code placeholders in the previous batch.
Eight posts and six open-source games
Two critical vulnerabilities, supply chain and certificate lifetimes, PostgreSQL 18, Node 24, a Cloudflare postmortem and CSS if(); plus six more games.
Navigation fix: game pages keep the top menu
Game pages show the top navigation again and highlight Games; open-source play pages, tag and archive pages are mapped too.
New post on the eMudhra CA incident
Eight intermediate CA keys were integers below 256; Mozilla has removed trust in emSign ECC Root CA - G3.
Four new posts, five more open-source games
A PHP critical-release brief, the plugin CVE ecosystem, reading a 9.2, and the cost of self-hosting games; plus five new games.
Two fixes for the open-source games
Tower Builder gets its entry script back; Match Three is now labelled GPL.
Five open-source games added
Bomberman, tower building, a 3D maze, a WebGL racer and match-three — each with its license and credit.
Equal-height cards for games and tools
Cards fill the row, descriptions cap at three lines, bottoms line up.
Search and pagination for the games and tools lists
Twelve per page, searchable by name, description or tag.
In-body figures for the six new articles
One procedural diagram per article: flow, board, spanning tree, halftone, index and alphabet.
Six articles, pinning, and a scene navigation fix
Six bilingual articles, pinnable posts (PCL2 is pinned), and scene canvases that survive in-site navigation.
Visual pass on the five new scenes
New aurora curtains, blossom clusters, slab edges, a softer sun and more light in the alley.
Five scenes, ten games, five tools
Scenes now fourteen, games twenty-nine, tools thirty-two.
Page-change progress bar
A thin progress bar now runs across the top on navigation.
Bilingual site and tag releases
Japanese removed, changelog page added, releases driven by tags.
Playlist loads at runtime
The playlist is fetched at runtime instead of baked into HTML.
Search and SEO cleanup
URL audit, consistent titles, and a search index covering every page.
Three colour skins
Ink, riso and blueprint are switchable from the about page.
Pagination and a line cap
Pagination uses three responsive windows; files stay under 350 lines.
Theme and typography fixes
The theme toggle became a three-state cycle; balance wrapping is gone.
Icons and domain settled
Icons and share images derive from the avatar; the domain is www.moiu.cn.
Hand-rolled i18n
Routes, the language landing page and the dictionary are all hand-rolled.