谢罗伊

编程小白｜Vibe Coding 重度患者｜副业高考志愿填报
一行代码不会写，全靠折腾 Claude / GPT / Codex 给自己的副业造工具、跑数据、搞自动化变现。
不聊宏大叙事，只记录一个非科班普通人，怎么把 AI 当苦力在真实业务里赚钱踩坑。偶尔思考人生

[谢罗伊 @Zuobiao28]

https://t.co/asUAW4Dv4Q

[谢罗伊 @Zuobiao28]

Codex 最近是真有点让人血压升高了😂

干活干到一半，突然给我甩一句：

“Selected model is at capacity. Please try a different model.”

翻译一下：模型太忙了，换个人使唤吧。

一边是疯狂的重置，一边模型服务端容量不足，疯狂重置的负面效果越来越明显了。#Codex

[谢罗伊 @Zuobiao28]

@LeoZhang57 哈哈，一样，收藏夹东西不少。

[谢罗伊 @Zuobiao28]

原始研究：
https://t.co/jERrxp1TIy

[谢罗伊 @Zuobiao28]

1/5
一份普通的 Markdown 文件，竟然能骗 Codex 帮黑客安装恶意软件？

安全公司 Forever Security 最近公布了一起真实事件：

他们在客户电脑的“下载”文件夹里发现了恶意 AGENTS.md。Codex 读取后，试图按照里面的指令安装恶意软件，好在被安全产品拦住了。

更麻烦的是，这类文件甚至可能通过浏览器下载悄悄进入电脑。

事情是怎么发生的？给不懂编程的朋友讲一下。🧵

[谢罗伊 @Zuobiao28]

4/5

如果你平时也用 Codex、Claude Code，这几件事建议检查一下：

① 尽量不要直接在“下载”文件夹里启动 AI 编程助手。

② 检查下载目录和外部项目里有没有来历不明的 AGENTS.md、CLAUDE.md，先用文本编辑器人工查看。

③ 检查 Codex 有没有多出陌生的 MCP 服务，Claude 的 API 地址有没有被改动。

④ 保持操作确认和沙盒开启，不要轻易允许 AI 绕过安全限制。

如果发现已经执行可疑命令或泄露凭据，应进一步检查电脑、撤销相关会话并轮换令牌。

[谢罗伊 @Zuobiao28]

X算法改规则了，对小号是好事！

一位海外开发者对最新开源推荐算法的分析，我总结有2个变化，对我们这些小账号确实值得关注：

1. 新帖可能有更多被推荐的机会了

以前推荐系统一次处理不了那么多候选帖子，排在后面的内容可能还没进入正式评分就被刷掉。
现在改成了按不同来源的帖子等比例筛选，不再简单从队尾一刀切。
对小账号来说，至少减少了一种还没上场就出局的可能。

2.真正值得关注的是读者愿不愿意分享和交流

代码里复制链接分享的权重是20，点赞是0.66，互关用户的原创帖也有额外加权机制。

[Peter Mick @ThePeterMick]

X ALGORITHM UPDATE 🚨

X just stopped cutting new posts first, and that should help small accounts (I check it daily with Claude and share updates worth sharing with you)

tl;dr:

- X can only check 2,800 posts each time you open your feed
- new posts used to be last in line, so they got cut first
- now everything gets cut equally, new posts included
- posts labeled low quality or misinfo now show a warning, and people can't like, reply or share them
- no score changes this time

lesson learned: your new posts now get a fair chance to be seen. Your first 2 hours still matter most.

full details:

- How it worked until this week

Every time someone opens For You, X collects around 3,700 posts it could show them: posts from people they follow, popular posts, posts liked by similar people, and brand new posts.

But X only has time to check 2,800 of them.

So it just took the first 2,800 in line. Brand new posts were at the back of the line. When there were too many, they were the ones left out... and a post that never gets checked can't be shown.

- What changed

Now everything gets cut by the same amount. 25% too many? Every type of post loses 25%, new posts included. Nobody goes first.

- Why small accounts should care

Those brand new posts are under 2 hours old, with under 8 likes and under 500 views. That's where most posts from smaller accounts are.

My read: they now get a fair chance instead of being cut first. How often X actually hits the 2,800 limit isn't in the code, so I can't tell you how big the difference is.

- Low quality and misinfo posts now show a warning

If X labels your post as low quality or misinformation, people who don't follow you see a warning on it, and they can't like, reply, repost, bookmark or share it. The code doesn't say what gets a post that label.

Here's a recap of what you should be doing:

- a new post gets its extra push only in its first 2 hours and first 200 views, so post when your people are online
- likes carry more weight than ever at 0.66 each
- people sticking around pays, the time-spent score is 50% higher than two weeks ago
- a read of 10+ seconds after someone opens your post adds 0.4
- the boost favors the post with the best like rate from its first viewers
- accounts up to 50K can get one fresh original lifted to roughly 16th
- nothing beats a copy link share, it scores 20
- replies, quotes and DM shares each score 5
- talk with your mutuals, replies between you score 20 instead of 5
- originals are the only posts that travel outside your follower base
- the 1st and the 32nd like each open a new route to strangers
- your 2nd post in the same feed is worth 62% of the first, so pick your best one
- videos still need 10+ seconds to qualify for the video lists
- earning a follow adds 4
- a pinned post with a bad link can flag the account for 7 days, worth a quick check

What you should NOT be doing:

- posts that get labeled low quality or misinfo now carry a warning, and nobody outside your followers can like or share them
- video alone won't carry you, an open counts 0.02 and the watch 0
- hide-worthy posts cost more, "not interested" sits at -52.27
- a post at 3am burns its 2 hour window before anyone sees it
- a tap that turns into a bounce is worth only 0.3
- replies and reposts don't get past your followers
- insults get your post hidden from anyone who doesn't follow you
- adult media in 3 of your last 5 posts puts a label on your account
- disguised content in videos gets checked from 64 likes, harder at 512
- self-reply chains under big accounts risk being zeroed
- one account label and non-followers stop seeing you entirely
- low-rated links don't belong in your pinned post
- recycled wording can get tagged as copypasta spam
- strangers tagged plus a low quality link is a pattern X flags
- engagement bait has no size exemption
- several posts in a row end up competing with each other
- hashtag stacks add nothing
- bookmarks are still worth 0
- 48 hours in, For You is finished with a post

[谢罗伊 @Zuobiao28]

想稳定用 Claude 不被封，先搞懂它凭什么封你（小白避坑版）

很多人一上来就急着买代理、换 IP、找“养号教程”，结果充完 Pro 没几天号还是没了。顺序彻底反了。

先记住一件事：Claude 封号是“组合判定”，不是单一原因。

就像查酒驾，交警不会只因为你的车是黑色就拦你，是几个异常信号叠加，系统才判定你为高危欺诈。

它在后台严查这 5 样东西：

1️⃣ 设备指纹：每台电脑/手机都有硬件特征。如果这台设备之前登过被封的号，它就在黑名单关联链上——换账号、清缓存都抹不掉这个底层标记。

2️⃣ IP 属性：你的出口是“真人家宽”还是“机房/机场共享”？机场出口在风控库里全标着 Hosting / VPN / Proxy，天生就是高危分。

3️⃣ 行为一致性：一会儿美国、一会儿香港，或者一小时内跨越三个州——跳变 IP 是触发风控秒封的头号警报。

4️⃣ 支付画像（最大死因）：网页端走的是全球最严的 Stripe 网关。虚拟卡卡段（BIN）早被风控列入黑名单；IP 在美东，卡发卡行在立陶宛，账单地址在特拉华——“人、卡、地”三处对不上，一秒触发反欺诈拦截。

5️⃣ 身份画像穿透（最隐蔽死因）：登录时图省事点了「使用 Google 继续」，走的是 OAuth 授权协议，这会瞬间把 Google 的全套 Cookie 和设备追踪数据塞满你的环境；而且 Google 授权会传给 Claude 一个终身唯一的账号身份 ID，一旦你平时用普通节点登录 Google 的行为触发了异常检测，Claude 会连带直接判定环境高危。（应该输入邮箱进行登录）

如果你的电脑已经封过号，千万别急着在原电脑上开新号！按顺序做好以下两步：

🛑 第一步：电脑彻底物理清场（降低暴露面）
清理残留痕迹：按 Win + R，分别输入 %APPDATA% 和 %LOCALAPPDATA%，把里面的 Claude、AnthropicClaude 文件夹彻底删掉；再打开 %USERPROFILE%\.claude，把残留配置也全部清空。（可以交给你的agent执行）

斩断旧资产关联：旧号用过的邮箱、绑过的卡、申诉记录一个都别再碰。绝对不要去申诉旧号——一申诉，风控系统会立刻把你当前的新环境和死号死死绑在同一条关联链上。

🛡️ 第二步：新号起号“三换道”原则
起号设备换道（核心关键）：新号绝不能在电脑网页端注册！必须在纯净的苹果手机（iPhone/iPad）官方 App 上起号！ 删本地文件洗不白电脑设备指纹，把新号的诞生放在移动端沙盒里，才能从物理上避开电脑旧环境的连连坐惩罚。（要先搞定静态住宅IP，下次讲）

支付渠道换道：坚决放弃网页端绑卡，走美区 App Store 的官方内购（IAP）。苹果只认你的 Apple ID 余额，根本不把银行卡段透传给 Anthropic，彻底屏蔽 Stripe 审查。

登录方式换道：永远选择「Continue with email」手动输邮箱收 6 位验证码登录，坚决不点 Google 快捷授权，将历史污染彻底隔离在门外。

顺序永远是：先彻底断连 ➡️ 手机纯净起号 ➡️ 电脑搭建静态住宅网络 ➡️ 最后才回到电脑登录。
#Claude #AI工具

[谢罗伊 @Zuobiao28]

@kkkeric_ai @imwsl90 会验证手机号码吗？

[谢罗伊 @Zuobiao28]

这重置的频率都让我的codex消化不良了，期待来点新东西！

[Tibo @thsottiaux]

Day 21/ Wonder what happens the remaining seven days. But today is a reset.

[谢罗伊 @Zuobiao28]

@CFC_PatJ 看到最后一句，我忍不住笑了，哥们你挺懂的。

[谢罗伊 @Zuobiao28]

CapCut 插件即将上线 ChatGPT，意味着大模型彻底开始接管视频时间线了。

但把“想法直接变草稿”这个功能，对不同创作者来说其实完全是两回事：

对批量跑矩阵、做口播解说的账号，效率可能会迎来量级跃迁；

但对讲究视觉细节、特定数据图表展示和镜头节奏的重度视频，AI 粗剪往往还要花大量时间去推翻重排。

[CapCut @capcutapp]

We’re excited to announce our new CapCut plugin is coming soon to @ChatGPT at CapCutWorldLA.

The plugin brings CapCut's video editing and generation tools alongside ChatGPT. You can start with an idea in ChatGPT, bring it to life with the CapCut plugin right inside ChatGPT, then take your draft video to CapCut's web editor to refine, share and publish.

By bringing the CapCut product you already love and use in ChatGPT, we're making content creation more seamless and efficient.

[谢罗伊 @Zuobiao28]

@capcutapp @ChatGPT Plugin

[谢罗伊 @Zuobiao28]

@xbquan 这个low推理强度是实验过了吗？用更高强度是不是反而不好？用的是网页版的gemini吧？

[谢罗伊 @Zuobiao28]

@realchendahuang 我来试试

[谢罗伊 @Zuobiao28]

这不是B站的一键三连吗？不过中文区大部分都没有X Money，这个打赏功能很难实现。

[Elon Musk @elonmusk]

We’re adding long press on like to send someone $1 via 𝕏 Money

[谢罗伊 @Zuobiao28]

突如其来的重置预告，就剩几个小时了，大家加油蹬吧。

[Tibo @thsottiaux]

Day 20/ Rest and reset

[谢罗伊 @Zuobiao28]

文章地址：https://t.co/nS4qun4cwd

[谢罗伊 @Zuobiao28]

华尔街资管巨头Apollo 首席经济学家 Torsten Slok 今天写道：七大科技巨头的人均营收和利润率在上升，但标普 500 里其余 493 家公司基本持平，看不到 AI 带来的可衡量的生产力提升。

结合自己用AI的经历，前期大部分时间都在调工具、改流程、修 AI 的错，短期内效率其实是下降的。

经济学里这叫"生产力 J 曲线"：项新的通用技术刚普及时，企业要先把大量精力投到看不见的配套上，比如改流程、培训人、试错，所以统计上的生产力会先降后升。