跳到正文
10月23日周五
  1. GitHub Blog36

    GitHub 漏洞赏金如何磨炼一位研究者的安全技能

    GitHub Bug Bounty 团队在网络安全意识月专访研究员 @r31n,其专注 GitHub Enterprise Server 并多次发现高影响问题。@r31n 表示偏好手工调查与小型专用脚本,认为 AI 对其工作方式的影响超过任何单一安全工具,但心态比工具更重要。持续产出可复现、带可用 PoC 报告的研究者可获邀进入永久 VIP 计划,享受更高奖金、更快响应和测试版产品预览。

  2. Every:最新文章31

    Every 如何用“前沿团队”跟上 AI 进展

    Every 工程联合负责人 Andrey Galko 探讨 AI 越来越擅长人类赖以谋生的工作后会发生什么。企业 AI 采用负责人 Natalia Quintero 则逐一访谈“前沿团队”成员,这支小团队专门跟进最新模型能力,把有用实验转化为文章、产品和工具供全公司使用。运营负责人 Arielle Shipper 还分享了一个面向非程序员的代码审查技能。

  3. Elon Musk25

    Grok @Bot

    引用Liam@liam_fallen

    Grok Bot genuinely changed my life. My Bots are now part of pretty much everything I do, both at work and in my personal life. It’s actually crazy how much I rely on them now.

  4. Tomasz Tunguz 博客35

    Granola 销售副总裁 Bardia Shahali 谈 AI 应用与基础设施两层市场的销售组织差异

    Granola 销售副总裁 Bardia Shahali 在 Office Hours 中对比了 AI 应用层与基础设施层的销售组织差异。他称在 Fireworks AI 时单笔交易可达数千万美元、最快两周成交,但竞争激烈,每位销售可承担的配额是应用层的数倍。基础设施层由 FDE、SE 与 AE 配对交付复杂产品,应用层则由 AE 与 CSM 交付软件,采用更快、生产力更高。

  5. The Verge:AI47

    《Wildwood》导演:生成式 AI 与 Laika 工作室的理念完全相悖

    Laika 新片《Wildwood》导演兼 CEO Travis Knight 称生成式 AI 与工作室理念"完全相悖",认为技术应由艺术家掌控,AI 代劳创作则是"盗窃"、缺乏人性。这部定格动画耗时五年,动用 230 多具木偶、49 名动画师,全片参与艺术家超 1000 人,影片于 10 月 23 日首映。Knight 表示不反对 AI 在医学、科学等领域的应用,但担忧其被滥用。

  6. Aravind Srinivas43

    学习新知识时,没有专家资源不再是瓶颈。你可以让 AI 为你制作一段 5 分钟的视频来学习任何内容。这里有一个关于晶圆厂如何制造芯片的视频。

    引用Computer@AskPerplexity

    Computer wrote and produced a five-minute film on how a chip gets made, drawing on 13 technical references from ASML, Intel, TSMC, Cadence, SkyWater, and IEEE Spectrum. Skip to 3:59 for why "3 nanometers" doesn't mean what it sounds like.

  7. Karina62

    Karina Nguyen 引用美国多所大型银行检测到客户账户内未授权第三方 AI 智能体的报道,认为需要类似 OAuth 的 AI 智能体授权机制。她指出难点在于定义“替我处理”究竟授权了什么,尤其是智能体再委托其他智能体时,密码学可验证权限和审计轨迹,但更难的是防止一串合理决策变成用户从未同意的行为。

    引用Madison Mills@MadisonMills22

    SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios. The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios. Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said. Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior. Read my latest for Axios here: https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access

10月22日周四
  1. meng shao69

    Claude Code 作者 Boris Cherny 在斯坦福课程 CS146S 分享五条原则,核心是把研发瓶颈系统化地自动化,并为六个月后更强的模型提前设计。

    引用Mihail Eric@mihail_eric

    I asked @bcherny how many Claude agents he's running right now as he sat next to me. "A few thousand." Boris (creator of Claude Code) came back to my Stanford course 𝗧𝗵𝗲 𝗠𝗼𝗱𝗲𝗿𝗻 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗗𝗲𝘃𝗲𝗹𝗼𝗽𝗲𝗿 last Thursday. His main takeaways: - 𝗔𝘂𝘁𝗼𝗺𝗮𝘁𝗲 𝘆𝗼𝘂𝗿 𝗯𝗼𝘁𝘁𝗹𝗲𝗻𝗲𝗰𝗸: Claude has written 100% of his team's code since November and output is up ~10x per engineer. So much code shipped that people stopped reading it carefully and started skimming, so they automated code review. Approvals are next. The team identified the main things impeding their development velocity and built systems to unblock themselves. - 𝗕𝘂𝗶𝗹𝗱 𝗳𝗼𝗿 𝘁𝗵𝗲 𝗺𝗼𝗱𝗲𝗹 𝟲 𝗺𝗼𝗻𝘁𝗵𝘀 𝗼𝘂𝘁: early Claude Code revenue was flat for months because the model wasn't smart enough yet. Then Opus 4 came out and growth became astronomic. His method is to read your agent transcripts and see where the model fails. That's where it will improve in the next model release. - 𝗦𝗺𝗮𝗹𝗹 𝘁𝗲𝗮𝗺𝘀 𝗴𝗼 𝗳𝗮𝘀𝘁𝗲𝗿: for months Claude Code was basically just him. With AI, one or two people can outship a team 100 times their size. Constraints breed creativity. - 𝗧𝗵𝗶𝗻𝗸 𝗶𝗻 𝗹𝗼𝗼𝗽𝘀: his grandpa programmed punch cards in the Soviet Union. Boris writes loops that run for days or weeks and spawn many agents. He expects that typing code by hand is heading where punch cards went. - 𝗗𝗼𝗺𝗮𝗶𝗻-𝘀𝗽𝗲𝗰𝗶𝗳𝗶𝗰 𝗯𝘂𝗶𝗹𝗱𝗲𝗿𝘀 𝗮𝗿𝗲 𝘁𝗵𝗲 𝗳𝘂𝘁𝘂𝗿𝗲: he expects the best accounting software of 2027 to be built by an accountant. When code is cheap, knowing the problem deeply is the only alpha In the 50 years after the printing press, Europe produced more literature than in the previous 1,000. He thinks coding is about to undergo a similar explosion of creation.

  2. IT之家·人工智能41

    比尔·盖茨:人们要为 AI 带来的二十年颠覆性变革做好准备

    比尔·盖茨在接受 The Verge 采访时表示,人们要为 AI 带来的二十年颠覆性变革做好准备,这段时期可能非常痛苦,甚至将社会分裂成乐于接受前沿科技与拒绝两派。他认为 AI 过去一年在编写代码、发现网络漏洞、生物学推理和颠覆就业市场方面进步惊人,过渡期会有输家和赢家。他还称届时人类将拥有可建造房屋、种植食物、进行手术的机器人,绝大多数商品和服务不再需要人类劳动力。

  3. OpenAI:官网动态57

    OpenAI FDE 团队负责人详解前沿部署工程如何弥合部署差距

    OpenAI 前沿部署工程负责人 Colin Jarvis 撰文说明 FDE 团队的工作方式,即与客户合作弥合模型能力与可靠业务价值之间的部署差距。文中给出半导体客户验证案例,AI 定向测试生成节省约 48% 时间、内核优化中位性能提升 22%;迁移到以 Codex 为核心的通用 harness 后,每项目移除约 90% 定制代码,第二团队接入从 2 个月缩短到 1 天。

  4. meng shao27

    邵猛表示已难以继续订阅 Codex,Cursor 打开频率也在下降,开发之外的需求用 Grok Bot 就够,开发方面则想重新订阅 Claude。但他此前订阅 Claude 用过的支付方式均已被封,因此打算先尝试在线购买账号用 10-15 天,确认顺手后再考虑长期订阅。其引用的推文提到 GamsGo 上 Codex Pro 的 $200 月费档现为 $145.99/月,独享账号 1 个月。

    引用丰收@ai_fengshou

    我靠,我靠, 我靠!兄弟们,我找到一个比菲律宾还便宜的订阅 20X 的地方。 Codex Pro 的 $200 月费档,GamsGo @GamsGo_Global 现在 $145.99/月。 这价格,比我在菲律宾区订阅的价位还要便宜了。 Codex、Claude、Grok 我自己都在订,这类工具用得多,看到 Pro 这档的价格,会特别留意一下。 刚看了 GamsGo 的 Codex 自营套餐:Pro-200,独享账号,1个月。 想再加一个 Codex 账号,或者准备上 Pro 的,这个价确实值得看看。 用评论区的链接下单,还可以再返 3%,相当于用U卡返现了。

  5. meng shao49

    邵猛看到AI做的街头霸王后感慨,09年刚学编程时写个扫雷、1024就能玩半天,如今这类程序Claude Code / Codex 几分钟就能搞定。他想把小时候和上学时玩过、如今已失传的小游戏重做一遍,让10后的儿子看看,先从第一个手机Moto E770装的WAP页游“打砖块”开始。

    引用曾探@TanZeng1021

    2012 年:花 1 个月,用canvas写了个简单的街头霸王 2026 年:花 3 天,用 AI 做了个 3D 街头霸王,复杂代码一行都不用自己写了 🔗 试玩地址:https://street-fighter.tutti.sh/ 由于非常不擅长和没耐心做效果,主要用了这几个工具: 1. 混元 3D 建模,最开始试了下付费的 3D 建模工具(充了几十块只用了 1 次),发现混元效果更好一些,1 天 20 次免费,虽然只能去网页上用,不过让 agent 读一下网站自己的 cookie,然后直接让 agent 调就行。 2. Blender,做一些精修(实际也不知道修的怎么样,没太关注,就是让混元建模完之后修一下) codex和claude code,claude code 只有 20 美金的订阅,大部分活还是 codex 干的,偶尔也让 workbuddy 干一点 3. Tutti(我们自己开发的),主要用来协作和分享,负责建模和负责部署、音效的是另外的人,我主要写游戏逻辑,大家在同一个云端电脑环境里干活,实时协作性比较强。 全套提示词、过程都在:https://tutti.sh/share/v2/289b0c16-630d-43ae-91e0-b4a0b5932cd1?inviteType=guest&token=bjwqJx2VzR7scvtfwcBf1P_sJ3MZmQ0x7CoAPsS9HMM

  6. 🚨 AI News | TestingCatalog38

    推文警告网络安全风险由攻防能力共同决定,系统无法做到"100% 安全",持续防御将成为必需。作者援引 Cloudflare 与 Microsoft 报告的恶意活动,称近期漏洞公告正是"防御者鸿沟"的直接后果,缺乏先进防御工具的组织难以跟上。其担忧未来 24/7 安全智能体虽能提供防护,但许多人将无力获取或负担这类保护。

    引用🚨 AI News | TestingCatalog@testingcatalog

    This is a "Defender's gap" chart that OpenAI published recently. It shows the gap between defenders' capabilities and attackers' capabilities from a cybersecurity POV. This also translates to a gap between proprietary and open AI models. What Dario is proposing is closely related: "Thus, a key part of pacing within democracies is to keep democracies’ AI lead over autocracies as large as possible, to give us the breathing room we need in order to pace effectively." In other words, Anthropic and OpenAI want to widen the "gap" between what their AI can do and what the rest of the world can do. This doesn't necessarily mean that they will stop AI development and training. What this leads to is: - Anthropic, OpenAI, and other frontier labs will need to work together to make sure that every lab maintains alignment standards. - These labs will continue using RSI to advance their internal models with "employee-like access". - These models WON'T be released to the public until the "gap" is sufficient and until alignment standards are met. What about China? > "Distillation of frontier models allows lagging companies to narrow the gap using a fraction of the cost it would take to develop their own AI independently." > "If we execute these measures well, I believe they would slow China’s progress enough to widen America’s lead significantly over the next 3–5 years — the window when AI becomes geopolitically most important." The assumption behind these measures is simple: without being able to distill frontier models, it will take China significantly longer to close the gap with top-tier models. All the above may fay fail. China may or may not take the lead in AI progress. Yet, it's not a surprise that AI can already be used as a cybersecurity weapon. Note that the top point on the "frontier" line describes defenders' capabilities available to companies with Daybreak access and similar. However, the top point on the "open-weight" line is accessible to everyone. Even with current levels of intelligence, we will start seeing more and more major security incidents around the globe. > “Everything that makes it successful is exactly what makes it dangerous.” Monitoring 👀👀👀

  7. IT之家·人工智能35

    科大讯飞刘庆峰:国产算力对标全球还有两代左右差距,终会并跑甚至领跑

    科大讯飞董事长刘庆峰在 2026 科大讯飞全球 1024 开发者节主论坛演讲中表示,国产算力对标全球还有两代左右差距,但很快会缩小到一代、半代,一定会有并跑甚至领跑的一天。他还称国产生态中真正在大模型训练上花力气的公司寥寥,未来会有更多人投入大模型训练与应用生态。

  8. meng shao68

    吴恩达在 DeepLearning.AI 的 Andrew's Letters 中提出,同一项 AI 工程任务在 0 到 1 早期项目和成熟产品里正确做法完全不同,按项目阶段选择打法是最难也最重要的能力之一。

    引用meng shao@shao__meng

    智能体会写代码了,工程师还剩什么? 吴恩达老师基于 1w+ 职位分析与数十次专家访谈,用五封公开信绘出「AI 工程技能地图」,答案分四层: 构建与部署不可预测的 AI 应用、守住软件工程根基、高效驾驭编程智能体,最终上移到塑造构建:决定该做什么,并对结果负责。 https://x.com/i/article/2098560800181125120

  9. IT之家·人工智能40

    谷歌 CEO 皮查伊谈 AI 智能体:7×24 小时不间断工作,重要决策仍由人做

    谷歌 CEO 桑达尔·皮查伊在播客中介绍,他用 AI 智能体整理过去 24 小时的信息、汇总谷歌 AI 模型研发进展与计算资源使用情况,并跟进多个内部聊天群组的讨论。他强调计算资源分配等重大决策仍由管理人员直接参与,未交给 AI。皮查伊认为智能体在云端每周 7 天、每天 24 小时不间断工作、能接着上次进度继续,是其主要优势。

  10. Larsen Cundric27

    能在 Grok Bot 里直接操作 X,大概是有史以来最棒的事 🙏

    引用Ish Verduzco@ishverduzco

    Grok Bot has saved me at least 12 hours of social media reporting this week. Especially now that it has access to X and can do sentiment reporting, pull real time analytics, and tell me about trends on specific occasions. Combined with the ability to plug into @NotionHQ and have my team informed while I’m literally sleeping is crazy. Vs the past where I would’ve had to set alarms every few hours or wake up at 4 am to prepare an update for the company. Well done @larsencc and team Such a great experience.