Grok Bot 一个就占了 45.7%,Grok 再来 29.7%,Claude 才 6.5%,这差距有点夸张了
Coinbase for Agents hit another ATH in weekly trading volume last week.
Here's the breakdown:
Grok Bot - 45.7%
Grok - 29.7%
Custom CLI - 12.4%
Claude - 6.5%
ChatGPT - 3.7%
Claude Code - 1.1%
Perplexity - 0.7%
Muse - 0.08%
🆕 Hermes - 0.06%
Supertake - 0.03%
Codex - 0.03%
🆕 Manus - 0.01%
🆕 Composio - >0%
转译原文
这是网络安全历史上最严重的48小时。 他们称之为“黑色十月” 似乎每*小时*都有一个新事件,在典型的一年里,这将是一整年*中*最大的事件之一 过去48小时的总结: 年度级事件(在典型的一年里,这些将是年度最大事件之一):
1. PHP2Shell:约70%网站背后的软件有一个漏洞。政府将站点下线。
2. eMudhra:证明网站真实性的主密钥被破解。其中一个是数字4。
3. 加利福尼亚:自2023年以来每个公立学校学生的所有数据被盗,包括残疾状态
4. Railway:黑客从数百万开发者使用的托管平台窃取了客户的密钥
5. Zeabur:321,810个账户被入侵。公司正在关闭。
6. LiteLLM:一款每天下载340万次的AI工具被植入密码窃取器
7. GitLab:自2014年以来每个版本中有一个10分满分的严重漏洞
8. Cairn:犯罪分子使用AI黑客工具入侵了100多家公司
9. Ahold Delhaize:黑客使Food Lion和Stop & Shop的所有者下线
10. Onamae:恶意软件被植入日本多达26,739个客户服务器 月度级事件(在典型的一个月里,这些将是最大事件之一):
11. Signal:一个bug可能导致您挂断后麦克风和摄像头仍开启
12. NGINX:运行约1/3网站的软件中有3个严重漏洞
13. HTTP/3:单个连接可使测试的10种网络服务器类型中的7种崩溃
14. Plex:黑客入侵家庭媒体服务器
15. SafePay勒索软件:FBI警告它已影响600多个关键基础设施组织
16. Palo Alto:勒索软件团伙通过公司防火墙入侵
17. Bullhorn:被10,000多家公司使用的平台被下线
18. Medi-Cal:970,000名患者的资料被盗
19. WordPress:黑客窃取了一个插件制造商的密钥,并用它们在网站上植入后门
20. AOMEI:备份软件的更新服务器分发了一个后门
21. Meta Muse:Meta的AI代理暴露了用户的个人和商业秘密
22. Tor:333个中继被劫持以窃取登录信息
23. TiDB Cloud:数据库公司的云服务被入侵 另外严重的事件:
24. 印度国家银行:印度最大的银行确认数据泄露
25. OVHcloud:黑客将密码窃取器植入云公司的官方工具
26. 西门子:一个软件漏洞被用于传播恶意软件
27. 朝鲜:国家黑客针对韩国发起新的攻击活动
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
护脑居然还可能跟胆固醇怎么运有关。
GPT-Rosalind surfaced a new lead for drug discovery: could restoring cholesterol transport protect neurons from degeneration?
DCTN1 is a gene linked to Perry syndrome, a rare neurodegenerative disorder. In mouse-brain data, disrupting it increased expression of genes involved in making cholesterol. GPT-Rosalind suggested a possible explanation: cholesterol may not be reaching where neurons need it.
That gives scientists a specific mechanism to test and, if confirmed, a direction for developing new treatments for neurodegenerative disorders.
With @perturbai_tx and @scrippsresearch, a team of thousands of GPT-Rosalind agents worked in parallel, connecting gene-expression results from millions of mouse brain cells with scientific literature in just 32 minutes. We’re now expanding this collaboration to identify new drug targets.
openai.com/index/scaling-ai-…
让 AI 做个应用,带着自己慢慢学 Arduino,这个用法挺好。
Hardware looks scary until you break it down into small steps. So I built an app that takes you through Arduino one circuit at a time.
Made with Opus 5.5
learn-arduino-red.vercel.app
@全体成员 互联网今晚开始要大逃杀了
点击接下来这个链接自行测试一下
你的浏览器对目前
印度 CA 签发
弱密钥导致的证书泄露的防护情况
如果有一个不是绿的
那你就需要立刻尝试更新浏览器版本 emudhra.we-have-a-problem.co…
内裤扒给你们看
流量快来
@nan073986563303(秋枫)不是新号,2023 年 8 月就注册了。最近涨到 11977 粉,靠的是互关(粉丝 11977、关注 12340),加上一直围绕“X 创作者收益”发帖。它最近 40 分钟回了 24 条,都是“流量来!”这类短句,中位浏览只有 4.5。
它比 @Bigtomatoooo 爆得更高(原创最高 3471 浏览,对方是 1475),是因为多了“钱和数据”这个钩子:
- **聊大家最关心的钱**:[“开了 Wise,开创作者收益还要准备什么?”](xitter.cf/i/status/2112500353145…)有 3471 浏览、130 条评论;[“1.1 万粉了,月入一万在哪领?”](xitter.cf/i/status/2112709233586…)有 224 条评论。
- **公开记账连载**:反复更新“有效曝光 111.9K,离 50 万还差 388K”,有具体数字,也有进度,让人想追着看。
- **人设清楚**:爱用 AI 的大学生,在 X 上冲收益,经常自嘲,比如[女朋友问我在干啥](xitter.cf/i/status/2112818834726…)那条有 1500 浏览。
- **固定开头和结尾**:几乎每条都用“兄弟们”开头,用“你们到哪一步了”结尾。
光是能把电视广告干掉,就想折腾了。
un tipo vibecodeó su TV con Claude y le sacó todo el bloatware y los anuncios...
recreó la interfaz inspirada en Apple TV
de 282 MB a 96 MB de RAM. 3x más rápida. cero anuncios
recomendaciones de pelis, clima, precios de crypto y se oscurece sola al atardecer
el repo está abierto y funciona en Google TV, LG y Samsung
te lo dejo en comentarios
Cloudflare 把 source map 上传改成默认开启:Wrangler 4.150.0 起,错误堆栈能映射回原文件名和行号。
有个容易漏看的细节:自定义构建里无法解析的映射,默认会跳过;显式设 upload_source_maps=true 才会让上传失败。
我更在意这个取舍:部署成功,不等于出了错就能定位。若排障依赖源码行号,映射是否可用也该成为发布检查的一项。
Wrangler 4.150.0 and the Cloudflare CLI now upload source maps by default. Debugging just got easier with real file names in stack traces.
developers.cloudflare.com/ch…
早上忘记发了,哈哈哈
早上好!过去一天 X 上值得看的几条:
- [What2Build](xitter.cf/createdbyharsh/status/…),可以像刷 TikTok 一样浏览真实的创业项目,能看到 MRR(月度经常性收入)和总收入,还能按赛道筛选;帖子没提它自己赚多少,但很适合找点子,这种收入数据聚合站本身也能照着做。
- [AutoAiShorts 第 133 天](xitter.cf/MDALISHANALI2/status/2…),这是个用 AI 自动生成短视频的工具,现在有 50 个付费订阅,MRR $354,累计新客 2,255;这类工具订阅一个人就能做。
- [Airouter](xitter.cf/YashAg946/status/21128…),面向印度开发者的 AI 接口中转平台,收入刚过 $1,000;针对一个地区做本地化的 AI 接口转售,门槛不高。
- [IndieLaunch 满月数据](xitter.cf/rupamjit_ghosh/status/…),这个产品发布目录站一个月来了 1,086 个访客、收了 200 多个产品,但收入只有 $3,服务器费却要 $20;目录站引流容易、变现难,可以当反面参考。
- [FeedbackPanda 的故事](xitter.cf/V_Khomichenko/status/2…),它帮在线英语老师更快地写学生反馈,大约两年做到月收入约 $55K,2019 年卖掉了;给很窄的一群职业用户做省事工具,也能做大。
- [cloudflare/skills](xitter.cf/slashui/status/2112711…),这是 Cloudflare 官方写给 AI 编程工具看的开发说明,让 AI 写 Workers 或 Agents 时自动按官方写法来,还带一个 MCP(让 AI 调用外部工具的接口);在 Cloudflare 上部署小产品能省不少事。
- [自嗨式开发的教训](xitter.cf/Lazily57/status/211289…),作者花两周用 Cursor 做了个 AI 提示词管理站,上线第一天只有 3 次访问,还都是自己点的;先确认有人要、想好怎么找到用户,再动手写代码。
提醒一句:有人发帖说“21 天 MRR 破 $3,200”,结尾在求点赞收藏,曝光只有十几次,这个数字没法核实,看看就好。另外,“一人公司月入几十万”这类帖子,很多发帖人的主页其实是在卖课。
Built a little side project for indie hackers 🚀
Introducing What2Build.
A TikTok-style feed to discover startups, explore their revenue, and find inspiration for your next project.
• Discover real startups
• Explore MRR & total revenue
• Filter by niche, audience, and revenue
• Find ideas worth building
Stop guessing what to build. Start with what's already working.
Try it: what2build.app/
Would love to hear your feedback!





















