昨晚，苹果 CEO Tim Cook 在社交媒体官宣：
What this means in practice is that if someone discovers a bug in the Linux kernel’s I/O implementation, containers using Docker are directly exposed. A gVisor sandbox is not, because those syscalls are handled by the Sentry, and the Sentry does not expose them to the host kernel.。雷电模拟器官方版本下载对此有专业解读
有趣的是，Toby 在离职文案中提到，自己的下一个优先事项是「睡个超过 8 小时的觉」，另外把学到的所有东西都写下来，然后好好思考下一步想做什么。，更多细节参见同城约会
Израиль нанес удар по Ирану09:28
Italian golfer Andrea Pavan is “thankful to be alive” after reportedly falling three floors down a lift shaft.