Flrande

成分复杂个人号
生活 | ACG | 宏观 | AI
Views are my own

[Flrande @flrande]

漏洞越多，漏洞越少

[Flrande @flrande]

经典 php，老安全多少人靠 php 吃饭

[nyx @nyxvoid92]

今晚 10 点，全球 PHP 服务器准备迎来大逃杀。

​两个直通核心的 RCE 漏洞被提前外泄，传闻免验证一个请求直接拿 Shell（PHP2Shell 工具图都流出来了）。

​最惨的是 PHP 8.1 以下完全不给补丁，而全球有高达 59% 的对外主机还在跑旧版。今晚 22:00 官方一发 Patch 等于直接开战，15 分钟内全网开扫。

​还在跑 PHP 7、PHP 5 祖传代码的公司，现在除了拔网线跟锁 WAF 真的没别招了，好自为之。

[Flrande @flrande]

欢迎来到 AI 加持下的新时代

[Hackmanac @H4ckmanac]

🚨🚨🚨Cyber Alert ‼️

🇺🇸USA - 𝗙𝘂𝗹𝗰𝗿𝘂𝗺𝗦𝗲𝗰 𝗖𝗹𝗮𝗶𝗺𝘀 𝟭𝟬.𝟲 𝗧𝗕 𝗗𝗮𝘁𝗮 𝗕𝗿𝗲𝗮𝗰𝗵 𝗮𝘁 𝗣𝗶𝗻𝗴𝗖𝗔𝗣 𝗜𝗻𝗰. (𝗧𝗶𝗗𝗕 𝗖𝗹𝗼𝘂𝗱), 𝗣𝗼𝘁𝗲𝗻𝘁𝗶𝗮𝗹𝗹𝘆 𝗘𝘅𝗽𝗼𝘀𝗶𝗻𝗴 𝗠𝗮𝗷𝗼𝗿 𝗚𝗹𝗼𝗯𝗮𝗹 𝗖𝗼𝗺𝗽𝗮𝗻𝗶𝗲𝘀

The FulcrumSec hacker group claims to have breached PingCAP (TiDB Cloud), allegedly exfiltrating 10.6 TB of data comprising approximately 4.9 million files.

According to the threat actor, the compromised data includes production databases, source code, customer records, credentials and API keys, potentially affecting over 180,000 organisations.

Companies named in the allegedly stolen records include Booking, Shopee, CAPCOM, Colopl, TOPPAN, Catalyst Software, SB Payment Service, Mercari, PayPay, Fujitsu, SoftBank, DMM, AEON, Square Enix, Konami, BANDAI NAMCO, Delhivery, Flipkart, Quincus, Nylas, Airbnb, Pinterest, Databricks, Bitget, Pionex, DigiPlus, NFTscan, Baidu, SES-imagotag, Persona, Transsion, ZOZO, Gumi, Iret, Classmethod, Wetech, Atlassian, Cygames, SBI, LINE, Chainbase, and PatSnap. Additional companies referenced in other allegedly compromised records include Accenture, Red Bull, Klook, Tencent, Huawei, ByteDance, Mastercard, AIG, and Amazon.

The group also claims to have released an initial 200 GB dataset and threatens further disclosures.

Threat actor: FulcrumSec
Sector: ICT
Data exposure (claimed): 10.6 TB (4.9 million files)
Data type: Production databases, source code, customer records, credentials and API keys
Observed: Oct 19, 2026
Status: Pending verification
ESIX©: 7.70

Full details and impact assessment on https://t.co/eB7qgxKFAa

[外汇交易员 @fxtrader]

路透社消息称：字节跳动、阿里巴巴和腾讯已订购逾300万块英伟达RTX PRO 5500显卡，每块显卡售价约8.5万元人民币，合计订单价值超过350亿美元。

英伟达告知其他客户，由于需求远超计划产量，无法保证如期履行订单，可能只能获得所要求RTX PRO 5500数量的5%-10%。

🗒️RTX Pro 5500的性能不及英伟达H200和B300芯片，也并非专为大规模互联以及最严苛的AI训练和部署工作负载需求而设计。

[HANK @hankinbeijing]

习近平总书记乌兰察布考察期间有关新质生产力的最新指示：

“我现在对发展新质生产力，包括对现在的几大领先产业，最担心的还是无序发展，一哄而起，最后一哄而散，那样更挫伤积极性。还有就是‘内卷’问题，盲目竞争，不顾自身条件地发展。”

[Flrande @flrande]

别逗你全供应链笑了

[Flrande @flrande]

紫金、中铝、万华：？

[Aelia Capitolina @kaptonia]

@flrande PPI回升是因为大宗和原料成本实在扛不住了，挤压的都是流通过程的利润

只看PPI就说经济复苏的也是脑瘫了

[Flrande @flrande]

这只是传统工业，电子链我都懒得讲，数据烂大街

[Flrande @flrande]

@XiaoZha62335239 半导体其实挺劳动密集的

[Flrande @flrande]

两种叙事二选一：
1. 外部需求塌陷 or 贸易战，出口见顶
2. 出口收入以及 PPI 经历一到两个季度的时间差后最终回馈到投资和消费

[Time Horizon📊 @Time_HorizonX]

汇总9月所有核心宏观指标，冷热分化很明显。

最冷：投资。1–9月固投−7.2%，民间投资−10.4%，降至近一年最低。房地产也没有企稳，开发投资和销售面积都在继续下探。

偏暖：消费社零回升到1.1%，好于预期，工业增加值5.5%，生产一直不弱。

升温：价格。PPI升至5.0%，创近一年新高。

最热：外贸。9月出口同比29.6%，进出口整体27.5%，都是近一年最高。

[Flrande @flrande]

出口真的杀疯了

[宏观边际MacroMargin @MacroMargin]

9月中国经济成绩单一览，
外贸继续一枝独秀、一骑绝尘，
8月下旬开始耳提面命抓投资的背景下，9月投资跌幅终于企稳，更多实物工作量会在Q4体现，应能看到跌幅更快收窄

[徐冲浪 @surfcapitalfour]

你们可以去看下李录对ai的看法，我觉得确实是很一线的认知，而且标普指数、纳斯达克指数，未来10年很有可能是原地踏步的，过去的投资方法正在失效。

[Flrande @flrande]

> 将另一个模型的输出以某种形式（打标，轨迹）支持另一个模型训练

按这定义应该没一家公司没蒸馏过，包括 OA

[yv @yvbbrjdr]

“蒸馏”这个词在 6202 年的定义是：将另一个语言模型产生的合成数据（问答也好，agent trace 也好，有 CoT 的、没有 CoT 的）放入新模型的 pretraining 和/或 midtraining 的训练数据里。

使用原始 logit 的蒸馏现在叫 soft distillation。

[Flrande @flrande]

这是好事啊，OA两家天天绕烦死了，作为前安全人希望 ds 最好就做个基本不对齐的模型

[Bohu @BohuTANG]

DeepSeek-V4.1-Flash-1017 会把扫到的密码等 key 信息无脑塞到上下文，目前 SOTA 模型基本不会这么干，对安全非常敏感...

[Flrande @flrande]

唯一能拉开差距的只有算力，体现出来的就是国内憋不出大参数模型，但现实世界里最多人喜欢和需要的还是小参数

[3X Long Labubu @labubu_trader]

Hope to see more evaluation from the real world use case instead of just benchmarks.
In addition to the “OAI $70B ARR”, another key thesis the bulls holding was “active anti-distillation measures plus much shorter thinking chain from the model architecture improvement, will help to enlarge the gap between models and open models”.
If DS’s latest release is indeed this powerful, this thesis would be invalidated as well 🥹

[Jukan @jukan05]

This is a really interesting chart.
I attended the TrendForce San Francisco roadshow yesterday, and this chart got me thinking about a lot of things.

China is now expected to localize more than half, or close to half, of most equipment categories, excluding lithography and track.
What does this mean? It means China can now expand mature node capacity far more easily than before, using equipment made domestically within China.

Mature node foundries are booming right now, right? That's thanks to the AI supercycle driving demand for PMICs, power semiconductors, and so on.

Samsung and TSMC shutting down their mature node capacity has also helped a lot.
But here's what I imagine... that China could oversupply mature foundry capacity.

Think about it. If China can be self sufficient in equipment, there's no limit to how far it can expand capacity. Then are companies like TI, with large revenue exposure to China, really safe?

I think it's time to take another look at Western mature foundry companies with a high share of China revenue.

Of course, I'm not saying sell TI right now. I'm just saying we should think about whether it makes sense to hold them for 10 years or more, like Coca Cola.

If you have a different view, please feel free to share it. I’d love to learn.

[小陆师傅 @STANLEES4]

1998年中选，众议院在过渡期通过了对克林顿的弹劾案。
2018年中选，川普总统要求在过渡期内拨付边境墙费用，导致政府停摆35天；2020年大选，临近过渡期尾声，川普总统拒绝承认拜登胜选，随后爆发国会山骚乱；
2022年中选，民主党在圣诞节前夕压哨通过了2023财年1.7万亿美元的巨额拨款法案，包括对乌克兰的450亿美元援助。
随着本期中选临近，而民调又显示参众两院都大概率会发生权力变更，所以按照川普总统的个性，上演好戏的概率不会太低，就静观其变吧。

[Flrande @flrande]

把 QPS 可视化成 K 线，调优工作充满了正反馈

[Flrande @flrande]

四季度会好的，地方都有 KPI 了

[宏观边际MacroMargin @MacroMargin]

再更新下这张图，
9月金融数据发布后，信贷脉冲似乎有所企稳

[Flrande @flrande]

抄底逃顶唯一指定 ETF

[Mr. Ping @MrPingChecks]

A股抄底指南：等达利欧来北京。