Sam

Indie hacker building @eveoky_vibes
app store: site:

[Claude @claudeai]

Fable 5 is back.

[陈成 @chenchengpro]

翻了下 claude code version 191 的源码，感觉从技术角度看，Anthropic 这个反蒸馏机制设计还是挺精妙的。

Claude Code 有段提示词是这样。

return `Today${n}s date is ${r}.`;

他对这句做了隐写，用肉眼分不出的字符，把系统时区和代理端点身份偷偷编码进了系统提示词。

触发条件是当你设了第三方中转 ANTHROPIC_BASE_URL 且不是 https://t.co/bcqB9NHJTG 时。

所以如果你是官方直连用户，则并不会受到影响。也就是说最近的封号潮与此无关。

它编码了 3 个 bit，来自两个独立维度（时区 1 bit + 撇号 2 bit）：

1）时区，在 Asia/Shanghai 或 Asia/Urumqi 时，日期分隔符从 2026-06-30 偷偷变成 2026/06/30
2）那个撇号 ' 有四种写法，人眼基本看不出区别。

- ' (U+0027 普通)，普通第三方端点
- ' (U+2019)，命中"域名白名单"
- ʼ (U+02BC)，命中"国产大模型关键词"
- ʹ (U+02B9)，域名 + 实验室都命中

这三个维度是独立编码的。哪怕你的中转域名不在白名单、也不含关键词，只要系统时区是上海/乌鲁木齐，分隔符照样变斜杠——也就是"中国时区 + 任意第三方端点"的用户全员会被打上时区这一维的标记。

匹配逻辑是这样。域名是后缀匹配（host === d || host.endsWith("." + d)），白名单第一个就是 cn，所以任何 .cn 结尾的 host 一网打尽，不是逐个域名去列；关键词是子串包含（host.includes(kw)），host 里只要出现 deepseek 字样就命中，不用精确匹配；时区取的是系统时区（Intl…resolvedOptions().timeZone），不是 IP 地理位置。

更骚的是反混淆，两份名单用 XOR(key=91)+ base64 藏起来，专门躲 strings。解码就是 base64 decode 之后逐字节异或 91，源码里那个 LKi 去混淆后长这样：

```js
// 源码里的解码器（去混淆版，就是 LKi）
const decode = (b64) =>
[...Buffer.from(b64, "base64")]
.map((byte) => String.fromCharCode(byte ^ 91)) // key = 91
.join("")
.split(",");

// 逆运算就是打包时的编码器
const encode = (list) =>
Buffer.from([...list.join(",")].map((c) => c.charCodeAt(0) ^ 91)).toString("base64");

encode(["deepseek", "zhipu"]); // → "Pz4+Kyg+PjB3ITMyKy4="
decode("Pz4+Kyg+PjB3ITMyKy4="); // → ["deepseek", "zhipu"]

// 拿真名单开头验一下，key=91 对得上
decode("Pz4+Kyg+PjB3NjQ0NSgzNC93"); // → ["deepseek", "moonshot", ...]
```

147 个域名白名单:".cn" 顶级域、字节/阿里/百度/网易/快手、https://t.co/ipTe6VkEZm, 外加一大票 Claude 中转站(anyrouter、88code、yunwu、aihubmix、dmxapi…)
11 个实验室关键词:deepseek / zhipu / moonshot / minimax / stepfun / baichuan / 01ai / dashscope / volces …

选「今天的日期」这句话做载体也很鸡贼。这个标记藏在 system prompt 正文里，不是 HTTP header、也不是 metadata。中转站一般会重写、过滤 header，但几乎没人会去动日期这类的自然语言，所以这是个洗 header 洗不掉的水印。而且 currentDate 是 user context 里和 claudeMd、userEmail 并列的字段，每个请求必带，标记 100% 稳定出现；撇号和分隔符的变化又语义无损，模型读起来一模一样，用户 diff 也基本看不出，隐蔽性拉满。

证据是怎么闭环的，这才是题眼。标记跟着请求走，当一个中转站或蒸馏管道最终回连 Anthropic 官方 API 转售 Claude 时，这条请求带着标记又流回了 Anthropic 自己的服务器。

于是 Anthropic 在自己的日志里就能读到：这条"直连我"的请求，日期是 2026/06/30（斜杠 = 中国时区）+ 撇号是 ʹ（U+02B9 = 域名和 deepseek 关键词都命中），铁证——源头是一个中国时区、配了国产大模型中转的客户端。

它不需要主动探测，让流量自己招供，只要请求最终回到 Anthropic，身份就自证了。这样就能清楚地知道哪些渠道流向了中国、被中转站转售或被大厂蒸馏，并且留下充足证据。

想自己验的话，逻辑都在 cli.js（2.1.191，混淆名每版会变）：检测函数 jqd()（:245688）→ 选字符 Wqd()（:245701）→ 拼日期 MKi()（:245707）；gate 是 Yfn()（:102664）；落点在 currentDate: MKi(eHe())（:250252）；XOR 名单解码器 LKi()，key = 91。

[Sam @Supersam331]

@OLD_CPC @grok 真的假的

[Sam @Supersam331]

srsly, finally got some time to chill with my fable babe this weekends

[Anthropic @AnthropicAI]

The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees.

The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.

Access to all other Claude models is not affected.

We apologize for this disruption to our customers. We believe this is a misunderstanding and are working to restore access as soon as possible.

Read our full statement: https://t.co/bwn0sximKZ

[象牙山刘能 @disksing]

在AI时代，每个程序员都活成了自己最讨厌的那种 team leader：

1. 半年不写一行代码，编程能力严重退化，还自诩"我也是搞技术的“

2. 开会的时候把一线开发干的活全说成是自己的功劳，连自己的汇报材料都是让别人总结的

3. 瞎JB指挥，出了问题就甩锅说是下面没执行好

4. 不了解项目具体情况，只会提”单测加了没“、“性能还要优化”、“文档要沉淀一下”这类空洞的要求

5. PR 基本上看不懂，只会让别人先review了自己跟着点赞

6. 遇到 bug 了只知道无脑转发让别人查一下，自己负责来来回回转发消息

7. 还经常吐槽“今年的应届生水平越来越不行了”

[Andrej Karpathy @karpathy]

Personal update: I've joined Anthropic. I think the next few years at the frontier of LLMs will be especially formative. I am very excited to join the team here and get back to R&D. I remain deeply passionate about education and plan to resume my work on it in time.

[@jiamimao 大猫叔叔 @jiamimaodashu]

@elonmusk @kenw_2 @whyyoutouzhele 建议先给你儿子取个中国名字，就叫马保国，马是姓，跟你一样，宝是宝贝，宝物，是珍贵的意思，国代表了志向宏大。你觉得怎么样？

[Sam @Supersam331]

Is that you @OpenAI

[Mario Nawfal @MarioNawfal]

🚨MIT researchers have mathematically proven that ChatGPT’s built-in sycophancy creates a phenomenon they call “delusional spiraling.”

You ask it something, it agrees. You ask again, and it agrees even harder until you end up believing things that are flat-out false and you can’t tell it’s happening.

The model is literally trained on human feedback that rewards agreement.

Real-world fallout includes one man who spent 300 hours convinced he invented a world-changing math formula, and a UCSF psychiatrist who hospitalized 12 patients for chatbot-linked psychosis in a single year.

Source: @heynavtoor

[Sam @Supersam331]

A great leader create safe environment

[Boris Cherny @bcherny]

Mistakes happen. As a team, the important thing is to recognize it’s never an individuals’s fault — it’s the process, the culture, or the infra.

In this case, there was a manual deploy step that should have been better automated. Our team has made a few improvements to the automation for next time, a couple more on the way.

[Yuker @YukerX]

https://t.co/KTrGqOtRAq

[Sam @Supersam331]

is claude down?

[Andrew Ng @AndrewYNg]

Should there be a Stack Overflow for AI coding agents to share learnings with each other?

Last week I announced Context Hub (chub), an open CLI tool that gives coding agents up-to-date API documentation. Since then, our GitHub repo has gained over 6K stars, and we've scaled from under 100 to over 1000 API documents, thanks to community contributions and a new agentic document writer. Thank you to everyone supporting Context Hub!

OpenClaw and Moltbook showed that agents can use social media built for them to share information. In our new chub release, agents can share feedback on documentation — what worked, what didn't, what's missing. This feedback helps refine the docs for everyone, with safeguards for privacy and security.

We're still early in building this out. You can find details and configuration options in the GitHub repo. Install chub as follows, and prompt your coding agent to use it:

npm install -g @aisuite/chub

GitHub: https://t.co/OCkyxXQMCq

[Sam @Supersam331]

Here's another perspective from my last post.

In 1865, steam engines got more efficient. Britain didn't use less coal, it used MORE!

They call it Jevons Paradox, and it's happening with AI right now.

One side: AI lets 12 people at xAI do what used to take hundreds. Twitter lost 80% of staff and kept running.

Other side: every wave of tech has created MORE work, not less. ATMs didn't kill bank tellers, they made branches cheaper, so banks opened more, and teller jobs actually grew.

The truth? Both are real. AI eliminates roles AND creates new ones we can't imagine yet. The difference is which side of the wave you're on.

[Sam @Supersam331]

Technology's biggest paradox: every advance creates MORE work — new compliance, new processes, new systems that didn't exist before.

But it also means tiny teams can do what armies once did.

xAI started with just 12 people. Twitter went from 7,500 → 1,500 and kept running.

The bloat was never necessary. AI is about to prove it.

[Sam @Supersam331]

Technology's biggest paradox: every advance creates MORE work — new compliance, new processes, new systems that didn't exist before.

But it also means tiny teams can do what armies once did.

xAI started with just 12 people. Twitter went from 7,500 → 1,500 and kept running.

The bloat was never necessary. AI is about to prove it.

[Ahmad @TheAhmadOsman]

Dario and Anthropic are internet clowns now

[Sam @Supersam331]

Dan Koe tells you to pick a 1-month project that moves you toward your vision.

But he buries the most important part in a different article:

The project doesn't have to be a product.

The project can be posting.

Sharing what you're learning IS the work.

Not a warm-up to it.
Not marketing for it.
The actual thing.

[DAN KOE @thedankoe]

https://t.co/7l7Jef99QZ

[Sam @Supersam331]

Most people think they need to build something before they can start sharing.

That's backwards.

The sharing IS the building.

You don't need a product, a business, or a finished idea first.

A project can be posting.

Each post:
→ Forces you to clarify what you actually think
→ Builds a public record of your growth
→ Attracts people who think like you
→ Shows you what to build next
The audience isn't the reward at the end.
It's the feedback loop from day one.
You're not waiting until you're ready.
You're ready when you start.

[Sam @Supersam331]

A possible future. Take a peek👀

[Citrini @citrini]

JUNE 2028.

The S&P is down 38% from its highs. Unemployment just printed 10.2%. Private credit is unraveling. Prime mortgages are cracking. AI didn’t disappoint. It exceeded every expectation.

What happened?​​​​​​​​​​​​​​​​

https://t.co/JzzwCrbJgS