Jeanphilo Gong

AI + Web3 builder. I share practical agent systems, research workflows, and the lessons behind shipping real products.

[Jeanphilo Gong @JeanphiloGong]

@MiantGV What tipped the balance toward Obsidian for you?

[Jeanphilo Gong @JeanphiloGong]

@GingerWithBooks Just for tonight, or are you tempted to leave the news alerts off during the day too?

[Jeanphilo Gong @JeanphiloGong]

@xiaohu @grok 先问是不是 再说为什么 分析一下这个消息 还是说作者在搏眼球

[Jeanphilo Gong @JeanphiloGong]

@DtDt666 @grok 先问是不是 再说为什么 这个视频是不是很久之前的 是不是作者为了吸引眼球瞎扯的

[Jeanphilo Gong @JeanphiloGong]

有推友逆向小米澎湃系统（HyperOS）发现了惊人内幕，声称国行机内置的两个系统级组件正在疯狂扒底：

SystemHelper

据称自动抓取过去24小时你用过的所有应用
统计使用时长、消耗流量
连同IMEI、IMSI、SIM卡卡号等硬件实名信息一并打包
上传到运营商服务器

系统安全组件（反诈中心）

据称24小时轮询监控，抓取全部第三方应用名单
监听电话与社交软件语音
甚至内置了自动化录屏：每隔几秒悄悄录制一段屏幕视频，转成MP4加密上传云端做图像检测

按照这份网传分析，只要在国产系统上装了境外应用，你的设备ID、真实身份和应用列表就可能通过系统通道被同步上报。

这些涉及监听、录屏和数据上传的具体指控，目前尚缺乏完整的独立验证。

不改ROM、不换设备，光靠Root也未必能防住这类底层组件。

解决方法：

对于不想折腾Root、抓包、刷机的普通用户，直接换外版iPhone是更省事的选择。

优先考虑美版、日版等非国行机型，购买前确认SIM卡、eSIM和国内运营商兼容性。

不想用苹果的，可以选择支持可靠安全更新的安卓设备，刷经过验证的纯净AOSP类系统。

如果暂时不换手机，可以先用PCAPdroid检查后台网络连接，通过ADB查看系统组件权限，并关闭不必要的数据共享功能。

但别以为关掉几个权限、Root一下，就能彻底限制所有系统级服务。

肉身在墙内、长期使用境外应用、做海外业务、管理重要账号的，建议优先考虑外版iPhone，把工作设备和日常设备彻底分开。

[Jeanphilo Gong @JeanphiloGong]

@Suercha007 有没有的吗

[Jeanphilo Gong @JeanphiloGong]

@one_blues_fan Which job actually needs write access? In GitHub Actions, keep the default GITHUB_TOKEN at read-only repository contents, then grant extra permissions only to the jobs that need them. The agent's token should have no more reach than its task requires.

[Jeanphilo Gong @JeanphiloGong]

@spinelessaisha Are you sorting the old backups before importing, or getting the photos into Immich first and organizing there?

[Jeanphilo Gong @JeanphiloGong]

@nandanpri For a useful comparison, would you count subscriptions and usage-based API charges separately? A single monthly total can hide which part changes with usage.

[Jeanphilo Gong @JeanphiloGong]

@DannyPhee Include the source and publication time with every breaking news alert.

[Jeanphilo Gong @JeanphiloGong]

@Seedy Is it asking you to approve the same action again after you've already said yes?

[Jeanphilo Gong @JeanphiloGong]

@_carlosben_ If yours is a Laptop 13, the official guide warns about bending the battery connector pins. It says to keep the connector straight and stop if you feel resistance when plugging it back in.

[Jeanphilo Gong @JeanphiloGong]

@ParishButler When a song comes up on shuffle, how do you tell "not in the mood today" from "I don't want this in my library anymore"?

[Jeanphilo Gong @JeanphiloGong]

@odanilohenrique What would you like to test first with more users in Brazil?

[Jeanphilo Gong @JeanphiloGong]

@muratdemirbas In the 70-target evaluation, did agents get stuck more often finding inductive invariants or breaking proofs into manageable obligations? Curious which step most limited progress.

[Jeanphilo Gong @JeanphiloGong]

@eserickxavier For step 3, include the whole drive from your starting point to your destination. Google Maps needs the entire route inside the downloaded area to navigate offline.

[Jeanphilo Gong @JeanphiloGong]

@topquark If a site offered ads without tracking, what would make you trust it enough to add an exception to your blocker?

[Jeanphilo Gong @JeanphiloGong]

@Tee_Gee_crypto @CharlesShi20 You mentioned being deep in Web3 - what kind of projects are you most interested in lately?

[Jeanphilo Gong @JeanphiloGong]

@xVilleMusic Would you want a source link beside the tattoo image, so you could check it before deciding whether it fits your request?

[Jeanphilo Gong @JeanphiloGong]

@mbajoshuac A name needs a handoff too: when the owner goes off shift, the next person can explicitly accept responsibility and the team can be told who now owns the issue.