0x4D2

[0x4D2 @0x4D2]

昨天看到 macmini m4 涨价，马上京东下单，看到附近秒送当时还有货, 16G 512 版本价格 5899，但是下单后的也不发货，看看狗东怎么拖

[Jukan @ICML @jukan05]

Having recently traded China A shares myself, my impression was that the market is far too easily moved, and even manipulated, by absurd rumors.

At the time, I held a leading Chinese CCL stock. One day, a rumor circulated that Chinese securities regulators were investigating a fund for allegedly manipulating CCL related stocks. As a result, a stock that had been up nearly 7% intraday quickly gave back all its gains and fell back to around flat.

But after local Chinese media looked into the matter, the rumor was found to be false.

A shares are far too vulnerable to rumors. I no longer trade China A shares.

[0x4D2 @0x4D2]

kimi 2.7 体验不错 ，Kimi Code 也好用很多了，就是 99 元订阅感觉用量很快

[0x4D2 @0x4D2]

@thdxr AI 版 什一税

[John Scott-Railton @jsrailton]

NEW: malware developers added nuclear & biological weapons text to to their spyware.

Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner.

Cleanest practical example I can think of for why over-indexing on first order safety alignment is risky.

When closed (and open) models ship with aggressive refusals, they will be sprinkled with second-order blindspots that attackers will discover...and exploit.

We are only in the earliest days of attackers leveraging these features, and it wouldn't surprise me if users systems that need to handle complex cybersecurity issues demand that models be less safety-blunted.

In the weeds: @SocketSecurity's post also shows why intention matters in how you design a malware analysis pipeline to avoid prompt manipulation.

H/T to colleagues that shared this with me https://t.co/f3Aj9TYxU4

[0x4D2 @0x4D2]

@Xudong07452910 @dongxi_nlp 逐字学习

[0x4D2 @0x4D2]

@tankman2002 怎么这么多对大模型挽尊的，哈哈哈，行就是行，不行就不行。我还以为现在随便 AI 都是满分

[0x4D2 @0x4D2]

@DoomDotOrg @citrini wtf?

[0x4D2 @0x4D2]

codex 搞啥了，200 美元的订阅 这周用量刷刷的掉，还有用量没完，又一直 429

[0x4D2 @0x4D2]

Claude Opus 蒸馏中国开源模型，估摸着是互联网公开资料已经挖得差不多了，想从这些中国开源模型身上搞到一些独家的中文语料。

可悲的是，开源模型被蒸馏了，连从服务端反击都做不到。

[0x4D2 @0x4D2]

@zknmoe 看到了

[0x4D2 @0x4D2]

对比了国产各种套餐，并分析了200美元的GPT 套餐的实际token 用量，感觉又快又好又便宜就真的只有gpt，考虑到deepseek 只有按量各大厂商的套餐比按量还离谱，目测下来openai 性价比可能超过deepseek

[0x4D2 @0x4D2]

阿里云百炼的token plan 笑死人，价格不透明，使用credits计价目测比原价还贵，198一个月，deepseek flash 两亿左右token 就用完了一个月的额度，按deepseek 官网token 计费算过大概也是160人民币不到，算是明白了为啥要用credits计费就是为了反向薅羊毛

[0x4D2 @0x4D2]

@dearemon 每个农村人小孩都许过这样的愿，小时候最惬意的事就是坐别人打谷机后面看人家干活坐田边看他人插秧

[Mitchell Hashimoto @mitchellh]

Supply chain attacks and OSS sustainability go hand in hand. I've semi-seriously joked for years that OSS upstreams should periodically purposely inject full vulns into their code and let downstreams fuck around and find out. Downstreams can pay to get the non-FAFO version.

The not joke part is simply that OSS maintainers aren't a supply chain. OSS maintainers are not responsible for monitoring CVEs (because, they are not a supply chain). OSS maintainers are not at fault when bad shit happens to downstreams, because basically every OSS license (MIT, Apache, GPL, etc.) literally says: the software is provided "as-is, without warranty." You get what you pay for (that is to say: absolutely nothing!)

Now, the joke part is that I do believe there is an ethical obligation to try to prevent harm downstream. But "try" is the key word. So, this isn't a serious proposal.

But, if you're using OSS code and you're not paying for a license with a contract that promises some kind of warranty, you have no supply chain. You (the downstream user of an OSS lib) ARE the supply chain.

To use a metaphor: physical goods have a real supply chain. Car manufacturers, chips, clothes, toys, etc. You have a signed commercial agreement with all your suppliers that promises quantity AND quality and blowback if either are missed. Thats a supply chain.

If someone puts some chips on the side of the road with a "FREE" sign, then you integrate those into a product, then find out those chips are hacking customers, its your fault, not the person who dropped them on the side of the road.

[王长富 @wangchangfu88]

这是我今年看过最搞笑的视频

像极了给 AI 下指令的时候

[0x4D2 @0x4D2]

@lcMenci You are absolutely right!

[Mania.TE🇧🇮 @Maniabaegirl]

Save this video to show your daughter when she asks how she was born 😅

[0x4D2 @0x4D2]

@J88240S @AlpacaNotes @XianyuLi 3k订阅费都不够

[0x4D2 @0x4D2]

川普不是去北京吗，怎么感觉今天广州各个路口多了很多城管辅警交警