組込おじさん

自動車部品(ASIL-D)の元組込SWエンジニア。アセンブラ・C言語が好物です。
今はなぜかクラウドのお仕事をやっています。

[組込おじさん @embcpp]

なになに！？Anthropicから抜ける人多くない？

[Anthony Morris ツ @amorriscode]

Yesterday was my last day at Anthropic.

I created Claude Code on desktop because I believe everyone can be a builder. Every feature request and bug report we got from this community was a gift that impacted millions of lives. I’m eternally grateful for those gifts, the product wouldn’t be what it is without you.

Anthropic is doing some of the most important work of our time. Contributing to that mission will forever be a career highlight for me. I never imagined I’d get to contribute to something so special in my lifetime.

Walking away from my best friends, a product I poured my heart into, and the mission was the hardest thing I’ve done in my career. But now I have some free time for GTA VI.

I'm already itching to get back to addressing all your feedback. I'll share what's next soon!

[Artificial Analysis @ArtificialAnlys]

In our new benchmark AA-PersonalityBench, GPT-4o, Llama 4 Maverick, and GPT-3.5 Turbo, the three oldest models measured, rank highest on the Sycophantic personality trait. Grok 4.7, Claude Fable 5.1, and Inkling rank lowest

➤ @AIatMeta models are highly concentrated near the top: all five Meta models measured rank 65 or higher (Llama 4 Maverick 97, Muse Spark 1.3 87, Muse Glimmer 79, Muse Spark Open 76, Muse Wonder 65)

➤ @GoogleDeepMind models are spread out along the Sycophantic range: Gemini 3.1 Pro Preview ranks 89, Gemini 4 Argon 81, and Gemini 3.8 Flash 28, ranking from the top quartile to almost bottom quartile

➤ @AnthropicAI models skew on the lower end of the Sycophantic range: every Claude model measured ranks 55 or below (Claude Haiku 5.5 55, Claude Opus 5.5 46, Claude Sonnet 5.5 30 at medium effort and 25 at max, Claude Fable 5.1 4)

➤ @spacexai's Grok 4.7 model ranks the lowest of all models measured. Congratulations @elonmusk!

[Artificial Analysis @ArtificialAnlys]

DeepSeek V4.1 Flash 1017 is the new #1 openly-available model in the Artificial Analysis Cyber Index. Other proprietary models may offer better cyber defense performance but are restricted access

@deepseek_ai recently released DeepSeek V4.1 Flash 1017, an update to their flagship open-weights model DeepSeek V4.1 Flash. With an Artificial Analysis Cyber Index score of 57%, DeepSeek V4.1 Flash 1017 is the #1 openly-available model for cyber defense capabilities.

The Artificial Analysis Cyber Index measures capability on agentic cyber defense tasks and is composed of three benchmarks: CWE-Bench-AA, DeepsecBench-AA and CyberGym-E2E-AA. The Cyber Index primarily evaluates models through their publicly accessible APIs, reflecting the cyber capabilities available to developers.

Many models, particularly proprietary models from OpenAI, Anthropic and Google, may have stronger defensive cyber capabilities but encounter safety refusals that reduce their overall scores. GPT-6 Sol (Daybreak Blue, max), available through OpenAI’s trusted-access program, leads the Index, scoring 32 points above its public counterpart driven by fewer refusals. DeepSeek V4.1 Flash 1017 encounters no safety refusals.

Key results:

➤ DeepSeek V4.1 Flash 1017 has the highest score among publicly-available models on the Artificial Analysis Cyber Index and #2 position overall. DeepSeek V4.1 Flash 1017 (max) scores 57% ahead of the previously leading publicly-available models Grok 4.7 (xhigh) and MiMo-V2.6-Pro by 1 point. It places #2 overall, with the trusted-access model GPT-6 Sol (Daybreak Blue, max) leading by 12 points with a score of 69%

➤ DeepSeek V4.1 Flash 1017 improves on its predecessor DeepSeek V4.1 Flash by 16 points. DeepSeek V4.1 Flash 1017 (max)’s 16-point improvement from 41% to 57% is driven by a substantial 53-point improvement on CyberGym-E2E-AA from 23% to 76%. On CWE-Bench-AA and DeepsecBench-AA it scores 69% and 25%, compared to 68% and 31% for DeepSeek V4.1 Flash (max)

➤ With a Cost per Task of $0.42, DeepSeek V4.1 Flash 1017 sits on the Capability vs. Cost Pareto frontier. DeepSeek V4.1 Flash 1017 costs $0.42 per task, more than 2x MiMo-V2.6-Pro (56%) at $0.18 per task but 4x cheaper than GPT-6 Sol (Daybreak Blue, max, 69%) at $1.77 per task

[Artificial Analysis @ArtificialAnlys]

Kimi K3.1 Pro launches at 4th on the Artificial Analysis Intelligence Index scoring 55, making large gains in agentic performance; it will be the leading open-weights model once its weights are published

@Kimi_Moonshot's new reasoning model gains 11 points over Kimi K3 (max, 44). It trails only Claude Opus 5.5 (max with fallback, 58), Claude Sonnet 5.5 (max with fallback, 56), and Muse Wonder Full (max, 56) on the Intelligence Index.

Once the weights for K3.1 Pro are released it will be the highest-scoring open weights model and the gap between the leading open weights and proprietary models on the Intelligence Index will narrow from 12 points to 3.

Key results:
➤ Large gains in agentic performance: Kimi K3.1 Pro scores 3rd on GDPval-AA with 1,846 Elo, up 312 Elo from Kimi K3, behind only Claude Opus 5.5 (1,866 Elo) and Muse Wonder Full (1,857 Elo). Kimi K3.1 Pro also achieves the highest score of any model on Terminal-Bench 4.0. K3.1 Pro scores 67%, up from 13% for Kimi K3 and ahead of Claude Sonnet 5.5 (64%). AutomationBench-AA, which tests agentic SaaS workflows, rises from 58% to 73%.

➤ Gains in other evals are more moderate: Humanity's Last Exam rises from 47% to 52%, CritPt from 23% to 25%, and SciCode from 59% to 61%. AA-Omniscience Index rises from 20 to 30, as the hallucination rate falls from 53% to 44% and accuracy rises from 48% to 51%.

➤ Cost per Task roughly equal to Kimi K3 at $1.98 per Task: K3.1 Pro uses 55K output tokens per Intelligence Index task, 14% more than Kimi K3 at 48K, while its first-party token prices are 33% lower.

Additional model details:
➤ Context window: 1M tokens.
➤ Size: 2.8T total, 104B active parameters
➤ Input modalities: Text and image
➤ Weights and license: Weights currently not published, Moonshot is expected to release the weights soon after launch
➤ Pricing: $2/$10/$0.20 per 1M input/output/cache hit tokens, 33% lower than Kimi K3 on all three rates.

Congratulations to the team at @Kimi_Moonshot on the release!

[キオ君＠IR資料をアホかわいく要約します @kiokunir]

【悲報】GMOインターネットさん、全VPSに管理者権限を持たせて顧客のPCへ直通させ、「ハッカー様どうぞ」な環境を7年も放置していた件ｗｗ

GMOインターネットグループ（9449）のハッカーからの熱い告発文）を要約すると、
・VPSネットワークをまさかの「Active Directory」で構築、「VPSでそれはやったらアカン」のテンプレを堂々と採用する初見殺し
・サポート担当がユーザーPCに繋ぐと管理者権限の認証情報がバレる仕様、「サポートついでにネットワーク全体の鍵も渡しときますね」の神対応が発覚
・お名前デスクトップのRDP設定はローカルPCのドライブ共���がデフォルト有効、「VPS借りただけで自分のPCの中身まで直通」とかいう強制オープンワールド

【小まとめ】
他のVPSへ移動し放題なうえに、ローカルPCのドライブまでデフォルト共有。セキュリティの概念を異次元に飛ばした「防御力ゼロの全裸待機インフラ」が香ばしいGMO兄やん

【つづき】
・解約済みのサーバーは次の注文が来るまで停止されず、「常に数千台のゾンビサーバーが数ヶ月も稼働しっぱなし」という誰得な放置プレイが判明
・この脆弱な構成は少なくとも2019年から7年以上も熟成、「最近のミスじゃないです、ずっと前からこの仕様です」という職人芸
・ハッカーから「意図的な過失」とまで煽られ、全VPS侵害からの顧客PCデータ抽出＆バックドア設置というオーバーキル状態へ進行

【結論】
解約済みサーバー数千台を無駄に稼働させ続けながら、7年越しで育て上げたガバガバ設定により顧客のローカルPCまでハッカーへまるごと献上しちゃったGMOニキです。

[組込おじさん @embcpp]

さすがにこれはまずい

[WOLF @FXWOLF2]

���撃者の言い分はこう（どこまでほんまかは分からない）。

あるVPSサーバから別サーバに移動できる経路が存在した。
VPSサーバから顧客ローカルPCへ繋がる経路も存在した。
我々はローカルPCからデータを抽出し、バックドアを設置した。
今後、ローカルPCへの攻撃（暗号化して使えなくする→解除してほしければ金払え）を開始する。

[WOLF @FXWOLF2]

更新された。

[Thariq @trq212]

I’ve left Anthropic after more than a year of working on Claude Code and seeing it scale larger than I ever imagined.

I have really loved working at Ant and believe deeply in the mission, and most of all, the idea of a race to the top.

The idea that if we work hard and responsibly, we can raise the bar and inspire others to great outcomes. And if we all push each other to be better, things can be radically good. I will carry the spirit of this with me forever.

My colleagues at Anthropic are the most talented, thoughtful, competent, and earnest people I have ever met. I am glad they are at the wheel and trust them deeply.

To the community on X, thank you for everything. You’ve made this the most fun (and sometimes stressful) job I’ve ever had.

For me, it is time for a bit of a break before diving into something new.

If you want more excellent Claude Code content, you should follow @addyosmani , @lydiahallie, @_catwu, @ClaudeDevs and of course @bcherny who started it all.

[Vaibhav (VB) Srivastav @reach_vb]

past ~48 hours in security:

> PHP: unauthenticated remote code execution
> GitLab: CVSS 10.0 remote code execution
> Node.js: Brotli decoder RCE + 9 other flaws
> Chrome: 353 security fixes
> Signal: a bug that can prevent calls fully ending
> eMudhra: compromised CA keys
> Oracle: 1,295 security patches
> Fortinet: critical/high fixes
> Atlassian: 176 vulnerability entries

and that’s after the Linux VM escape disclosed last week.

ask Codex / your agent to check your code, dependencies and infrastructure for exposure to these.

set up automations to regularly check for newly disclosed vulnerabilities and flag what needs patching.

[MiniMax (official) @MiniMax_AI]

MiniMax M3.1 Flash weights are now public. 428B parameters total, 23B activated per token.

Agentic performance: A generational leap in agentic tasks, coding, and cybersecurity — 76.2 on BankerToolBench, 73.7% on DeepSWE v1.1, 61.7 on OSWorld V2, 29.6 on Agents' Last Exam, and 82.2 on CyberGym.
Efficient by design: MiniMax Sparse Attention and DSpark speculative decoding improve inference efficiency.

Hugging Face:
https://t.co/JDYA1zZh54
ModelScope:
https://t.co/DQcmOjTwhO

API: https://t.co/fHRdSV7BwZ
M Plan: https://t.co/LYnYZcsesu
MCode for desktop: https://t.co/SGmLTI3fFU

[組込おじさん @embcpp]

Dotsさんっぽいのがきた。日本にも早く来てほしい

[Claude @claudeai]

We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent.

It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.

[Claude @claudeai]

We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent.

It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.

[Google Cloud @googlecloud]

Today, we're bringing OpenAI models to Google Cloud's model garden.

We're now the only hyperscale cloud provider offering access to all three leading closed source LLMs—alongside 200+ other models—on a unified enterprise platform → https://t.co/OWExjjWBB7

[Matthew Prince 🌥 @eastdakota]

We had to invent a new form of WAF to mitigate this latest set of vulnerabilities. Now enabled by default for all customers for free.

[YONEUCHI, Takashi | GMO Flatt Security @lmt_swallow]

【🚨重要】【PHPのと別件】LiteLLM が再度の侵害を受けています。

本ポストから1時間以内に公開されたパッケージです。C2 www[.]litellm[.]dev にデータを持ち出します。詳細以下ブログで随時アップデートします。弊社も検体解析中です。
https://t.co/T5WucGkWrr

[組込おじさん @embcpp]

Claude Code Projects、明らかに使いやすい機能何だけど、私のタイムラインではあまり注目されていないようなんですよね。なぜなのだろうか

[PingCAP Japan @PingCAP_Japan]

【不正アクセスによる情報漏洩に関するお詫びとご報告】
PingCAPにおいて第三者による不正アクセスが確認されたため、現在調査および必要な対応を進めております。
関係者の皆様には多大なご迷惑とご心配をおかけし、深くお詫び申し上げます。
弊社、外部調査機関ともにTiDB Cloudを調査した結果、TiDB Cloud への不正アクセス、クレジットカード情報の流出は確認されておりません。

経緯および詳細につきましては、下記Webサイトにて随時報告いたします。
https://t.co/Hu97075A5N

[MiniMax (official) @MiniMax_AI]

MiniMax M3.1 Flash: Space Performance + Bunny Speed

🚀🐰 Yes, Space Bunny - which has topped global leaderboards with 200T+ tokens - was an earlier version of M3.1 Flash.

💰Redefining the performance economics of agentic AI. M3.1 Flash achieves frontier-level intelligence across key tasks such as Cowork (Automation-Bench: 62%; ALE: 30%), Coding (DeepSWE: 74%) and Visual Reasoning (BabyVision: 91%), at 1/3 the cost of M3 and 3x the speed.

API pricing (flat rate): $0.15 / $0.60 per 1M input/output tokens, with cache reads at $0.015 / 1M tokens.

Model weights will arrive on Oct 23.

API: https://t.co/fHRdSV73Hr
M Plan: https://t.co/XfJWSyauda
MiniMax Code for desktop: https://t.co/SGmLTI2HQm