Curated by Shen Huang · 85 stories · ~13 min read
DIGEST · 2026-10-24

OrangeBot.AI Digest — 2026-10-24

85 headlines across 8 sources, aggregated for this day.

Hacker News(15)

  1. Show HN: Steal My Bitcoin (stealmybitcoin.com)
  2. No signs of AI payoff outside the tech sector (www.apollo.com)
  3. Danish Government silently drops plan to dump MS Office (www.computerworld.dk)
  4. Roku developer repositories moved from GitHub to GitLab (blog.roku.com)
  5. FreeDNS (freedns.afraid.org)
  6. Google illegally cut down 250K trees in Finland for data center (nypost.com)
  7. Elon Musk Just Gave Europe a Reason to Replace American Technology (steveblank.com)
  8. Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps (www.aikido.dev)
  9. I don't understand quantum physics (2018) (www.southampton.ac.uk)
  10. Around a dozen banking apps began specifically permitting GrapheneOS (grapheneos.social)
  11. Physicists trap a single antimatter particle for a month (www.scientificamerican.com)
  12. Root shell on Samsung TV (twitter.com)
  13. Apple Security Research Device (security.apple.com)
  14. OBS Studio 33 (github.com)
  15. How close can pure functional programming get to C? (rtfeldman.com)

GitHub Trending(10)

  1. cloudflare / security-audit-skill
  2. NVIDIA / OpenShell
  3. aws / agent-toolkit-for-aws
  4. Nutlope / hallmark
  5. luongnv89 / claude-howto
  6. pbakaus / impeccable
  7. pollen-robotics / microduck
  8. google-gemini / gemini-cli
  9. jbiaojerry / ebook-treasure-chest
  10. makecindy / cindy

Product Hunt(15)

  1. How It Went

    Your route, photos and clips as a short film

  2. River Writer

    A quiet Mac app for screenplays, stage plays and novels

  3. 1Password for Agents

    Let AI agents sign in for you without seeing your passwords

  4. Many Displays

    Zero clicks: windows back after sleep, unlock or replugging

  5. sideOS.ai

    Local AI for dictation, meetings, background tasks and more

  6. zCAD AI

    AI 3D that creates real parts, not just shapes

  7. Canva Craft

    Turn prompts into design-ready images you can edit

  8. Byter

    Know exactly how much data you use, on every network

  9. myPip

    Vibe code, publish, and monetize games with AI

  10. LinkIntel

    Post insights delivered direct to your AI

  11. Penta

    A ’90s 5-disc CD changer on iPhone Duo

  12. Basedash Scheduled CSV Exports

    Ask once. Get a fresh CSV in Slack or email every week.

  13. AgentValley

    Every Claude Code agent, at a glance, in your Mac's notch

  14. Shedi

    Get back the space Xcode, Docker and node_modules ate

  15. MOVO AI

    The world's first long-form video agent for mobile

Hugging Face(15)

  1. WeVisOne-VL: Unified Visual Perception from Objects to Pixels

    Existing vision-language models (VLMs) remain unreliable for fine-grained visual perception. In this report, we present WeVisOne-VL (WeChat Vision All-in-One), a powerful VLM that unifies object-level and pixel-level perception through structured next-token prediction. It supports multiple visual tasks including object detection, referring localization, counting, OCR, segmentation, and matting, enabling localization at any user-specific granularity, from points and boxes to masks and alpha mattes. Architecturally, we integrate a lightweight pixel decoder into the VLM via a special <OBJ> token to generate instance-level pixel outputs. We train the model with a three-stage curriculum SFT followed by mixed-task RL. Across over 30 benchmarks, WeVisOne-VL demonstrates leading performance on both object-level and pixel-level tasks, while maintaining robust rejection for object-absent queries. By releasing WeVisOne-VL to the open-source community, we hope to advance VLMs from broad visual understanding toward truly reliable perception systems for real-world deployment.

  2. Editing Images into Reusable Layers via Compositional Edit-Prior Distillation

    High-quality image editing requires precise modification of target regions while preserving the content of unrelated regions. Existing editing models produce flattened outputs that limit precise local manipulation and layer reuse, while decomposition methods typically optimize layer recovery separately from instruction-driven editing. To this end, we introduce LayerEditor, a unified framework that couples instruction-guided image editing with controllable generation of reusable RGBA layers. At its core, In-Context RGB-Alpha Token Modeling jointly represents the edited canvas and an ordered sequence of RGB-Alpha layers within a single token sequence, enabling semantic edits and explicit control over individual layer content. To retain the pretrained model's editing capability during adaptation to layered outputs, we propose Compositional Edit-Prior Distillation, which transfers its editing prior to both the edited canvas and the image composed from the predicted layers. To support training and evaluation, we construct LayerEditor-100K, a large-scale paired image-editing dataset with ordered RGBA layer annotations, and introduce dedicated benchmarks for layered editing. Extensive experiments demonstrate that LayerEditor maintains strong editing fidelity while generating accurate RGBA layers, supporting both flexible layer-level manipulation and multi-layer decomposition.

  3. Making MLLM Latents Matter: Factor-Aware Predictive Learning for Cinematic Video Generation

    Cinematic video generation requires both temporal inference from limited inputs (i.e., sparse rather than frame-by-frame guidance) and factor-aware control of character, scene, action, and camera. Multimodal large language models (MLLMs) offer useful priors for both capabilities, but their representations are not automatically actionable for video generation: a Video Diffusion Transformer (DiT) may bypass them through native conditioning pathways, and using them does not ensure either factor-aware control or generation-compatible temporal prediction. We propose Factor-Aware Predictive Learning (FAPL), which establishes effective MLLM latent use as a shared prerequisite and then targets the two capabilities with complementary learning signals. First, latent-only generator grounding trains the DiT with a frozen MLLM and connector, strengthening the DiT's use of MLLM latents for generation. Second, for factor-aware control, paired videos specify a target-factor change and non-target preservation, and factor-span replacement trains the DiT to realize this relationship in its output. Third, for temporal inference, text-only and text-plus-complete-video observations share a video target, and the trained DiT is then frozen while the MLLM and connector are optimized through it. This final stage trains limited-input representations for generation while retaining complete-observation reconstruction as a complementary training mode. Extensive experiments demonstrate our consistently better performance on three cinematic video generation tasks (i.e., sparse-to-video, factor-aware editing, and multi-shot generation) over baselines and validate FAPL's contributions to MLLM feature use, temporal control, and factor coordination.

  4. Deep Search in Real-World Web Environments

    Despite substantial progress in Deep Search agents, their ability to conduct end-to-end research in real-world open Web environments remains insufficiently evaluated. Unlike static retrieval settings, information on the real-world Web is distributed across diverse sources, modalities, and heterogeneous formats, often involving complex interaction mechanisms that require agents to autonomously search for, access, and integrate relevant evidence during execution. To address this gap, we introduce the OpenDS task, designed to evaluate agents' ability to perform multi-step deep search in the live, open Web. This task requires agents to autonomously explore the real Web, discover and connect relevant evidence from multiple independent sources through Web search, browser interaction, and evidence processing, and ultimately determine a unique factual answer. Building on this task formulation, we construct OpenDS-World, a benchmark comprising 200 challenging tasks spanning diverse information modalities, heterogeneous file formats, and interactive access requirements, with independent human verification to ensure evidence validity and answer uniqueness. We evaluate 12 frontier models under a unified tool environment and execution protocol. The best-performing model achieves 39.0% accuracy, while human evaluation across 1,000 independent attempts yields 21.1% accuracy. Further analyses of tool usage, search cost, termination behavior, and failure recovery reveal substantial differences in research strategies across models, as well as persistent challenges in tool coordination and long-horizon search management. OpenDS-World provides a unified evaluation platform for systematically assessing and advancing agents' autonomous deep search capabilities in real-world open Web environments.

  5. IQuest-Q1: Advancing Foundation Capabilities for Agentic CLI Systems

    We present IQuest-Q1, a sparse Mixture-of-Experts (MoE) agentic foundation model with 320B total parameters (15B activated). IQuest-Q1 is developed through a three-stage process: (1) stable and efficient pre-training, combining Stable SplitNorm, Muon, and muP with a two-stage curriculum whose second stage increases the coding-data mixture, preserving a wide stability margin between safe and optimal learning rates; (2) fine-grained mid-training, expanding the data mixture across domains and formats and progressively extending the context; and (3) multi-scaffold with multi-version post-training, combining SFT, domain-specialized RL, and MOPD across various scaffolds to integrate complementary training signals and strengthen agentic coding capabilities. Furthermore, model merging combines different experts and checkpoints from different stages while mitigating conflicts among their parameter updates. The resulting IQuest-Q1 demonstrates capabilities in both coding and general tasks. We release IQuest-Q1 as an open-source model to support community research and development.

  6. Toward Recursive Self-Improvement in Physical AI

    Recursive self-improvement (RSI) describes a system that improves not only its behavior but also the process by which it improves. Recent digital agents test this idea by rewriting their own code and checking each version with executable tests. Bringing these mechanisms into the physical world requires learning from partial observations through costly trials, while accounting for changing operating conditions and potentially irreversible consequences. We position RSI within robot learning and trace pathways from improving robot capabilities to improving the processes that generate them. We examine how physical experience can strengthen these improvement mechanisms and when the resulting gains can support further self-improvement of the mechanisms themselves. Gains carry forward only when feedback addresses remaining learning needs, the receiving component can use the change, its value survives changes in tasks or hardware, and continued practice remains safe and affordable. Existing studies, concentrated in manipulation, support behavioral improvement, benefits to later learning, and procedure improvement. Some systems also change the improver's knowledge or tools, but the physical studies reviewed here have yet to isolate gains attributable to recursion. We synthesize these findings into evaluation principles and research directions for machines that, trial by trial, safely improve the way they improve.

  7. Policy-Mask: Budget-Aware Adaptation of Diffusion Features to Discriminative Tasks

    Selecting intermediate features from a frozen diffusion model for discriminative tasks is non-trivial because the useful signal is distributed across the denoising trajectory, network depth, and channels. In practice, this requires choosing a timestep, a block, and a channel subset. Existing methods either fix these choices by hand or optimize only a few extraction hyperparameters, most often the timestep, then reuse the same rule across inputs and budgets. We introduce Policy-Mask, a budget-conditioned policy trained on the downstream objective that jointly selects all three under a prescribed channel budget. Without normalization, the channel-score contribution grows with the number of selected channels and dominates the timestep and block updates. We normalize it by subset cardinality, keeping the three policy heads on comparable scales and stabilizing joint training. At matched budgets, Policy-Mask improves over fixed extraction and feature-filter baselines across segmentation, classification, and semantic correspondence, reaching 38.9 mIoU on ADE20K, 75.4% top-1 on CIFAR-100 at 128 dimensions, and 76.3 [email protected] on SPair-71k. Component-wise ablations show that block selection materially affects downstream accuracy, and the highest recorded channel-budget score occurs at 256 retained channels, identifying a practical operating point for compact diffusion representations. We further adapt Policy-Mask to diffusion transformers, including PixArt-Σ and SD3.5 MMDiT, by replacing U-Net channels with image-token hidden dimensions.

  8. Deep Fusion Memory: A Chunk-Level Parametric Memory for Large Language Models

    Large language models need effective ways to acquire and use external knowledge beyond what they retain from pretraining. Continued pretraining risks catastrophic forgetting, while retrieval at inference time can add substantial overhead. External parametric memory avoids online retrieval, but constructing its training data requires extensive offline search, and output-level interpolation provides only shallow fusion. We introduce Deep Fusion Memory (DFM), a parametric memory architecture that reduces this construction workload and incorporates learned memory into intermediate hidden states. A causal memory predictor learns to generate memory from the preceding context, using retrieved chunk embeddings from the corpus as supervision. The predicted memory is shared across tokens within each chunk and fused into their hidden states through gated cross-attention. Memory prediction and fusion are trained end to end with the backbone frozen, and inference requires no explicit retrieval. Compared with existing parametric memory approaches, which often construct token-level memory targets, DFM requires 32times fewer retrieval queries and 2048times fewer retrieved items to construct its training data. Across six QA tasks, DFM performs better over the strongest baseline by 12.71% on Mistral-7B-v0.3 and 11.19% on Qwen3-8B-Base. Beyond QA, domain adaptation yields average gains of 6.51 and 4.38 points over Qwen3-4B-Base and Qwen3-8B-Base, respectively.

  9. What Generation Knows: Unlocking Fine-Grained Understanding in Unified Multimodal Models

    Fine-grained visual understanding requires distinguishing subtle differences in local attributes and spatial relations, yet remains challenging for existing vision-language models. Unified multimodal models (UMMs) offer a new opportunity through generation pathways that preserve rich visual information complementary to understanding. However, existing generation-assisted understanding methods mainly rely on generative supervision or explicit generation and have not systematically explored direct use of native generation-side representations. To address this gap, we systematically analyze what generation-side representations offer for fine-grained understanding, finding that they are more sensitive to fine-grained semantic changes, capture task-relevant changes missed by understanding-side representations, and depend on correct spatial organization for this advantage. Guided by these findings, we design GAFU, a post-training framework that unlocks native generation-side information for fine-grained understanding. It compresses generation-side visual representations into compact \(G\) tokens that preserve fine-grained visual details, enabling task-conditioned retrieval by the understanding pathway. Experiments show that GAFU consistently outperforms SFT baselines trained on the same data across diverse visual understanding tasks and UMM architectures, with maximum relative improvements of 20.00\%, 17.94\%, and 8.62\% on VStar-Bench, OmniSpatial, and VSR-Bench, respectively. Overall, GAFU converts complementary information from the generation pathway into gains in fine-grained visual understanding, providing an effective path toward synergy between generation and understanding in UMMs.

  10. Self-Distilling Future Video Representations for World Action Models

    World Action Models (WAMs) have emerged as a promising approach to learning generalist robot policies using rich spatiotemporal priors from pre-trained video diffusion models. A recent line of WAMs improves inference efficiency by conditioning a separate action decoder on intermediate future video representations extracted from a single denoising step, avoiding costly iterative denoising required for video generation. This design makes action prediction depend directly on the quality of these future representations. In this paper, we introduce Future REpresentation learning via self-Distillation with temporal context (FRED), a framework that trains WAMs to improve the quality of future video representations from noise in a single denoising step. Specifically, FRED uses self-distillation to predict future representations from noise, using representations extracted from ground-truth future observations as targets. We further condition the video model on historical observations, providing temporal context for predicting future representations better. Across diverse real-world manipulation scenarios, FRED consistently outperforms competing WAMs. It achieves particularly large gains on long-horizon and out-of-domain tasks under zero-shot environment generalization, and substantially improves human-to-robot skill transfer, reaching 50.0% task success on tasks absent from robot training data and demonstrated only in human videos, compared with 19.4% for the best competing WAM.

  11. LaLa-World: Scaling Latent World Models with Natural Language Actions

    This paper shows that JEPA-style latent world models (LWMs) can learn across diverse domains and data sources by adopting the language-conditioned interface of video generation models. We establish this approach as an effective and efficient basis for planning with imagination and downstream policy fine-tuning. To this end, we introduce LaLa-World, a Language-conditioned Latent World model that learns from simulation and robot trajectories together with broader image and video data. Two designs make this work. First, we describe both numerical actions and visual changes in language, enabling joint training of a single future predictor across heterogeneous datasets. Second, we build the predictor on a language model, allowing it to interpret language conditions while predicting future latent states. The resulting predictor achieves higher average MPC planning performance than existing LWMs trained separately for each domain or task. Adding image and video data further improves average planning performance and robustness to action phrasing. In a matched comparison with an RAEv2-based video generation model baseline, LaLa-World reaches comparable planning performance with 6times less training cost and 13.9times faster planning. Beyond planning, the pretrained LaLa-World serves as an initialization for LaLa-Policy, which jointly predicts actions and future visual representations. LaLa-Policy performs competitively with Cosmos Policy on LIBERO and RoboCasa, with up to 5.5times faster inference.

  12. FilmFlow: Agentic System for 3D Virtual Film Cinematography

    Complex camera motion is central to visual storytelling, yet translating cinematographic intent into controllable, executable camera trajectories remains challenging. We introduce FilmFlow, an agentic framework that converts natural-language instructions or reference videos into explicit camera trajectories for dynamic 3D environments. To generate these trajectories, a Director agent constructs executable camera plans by composing high-level motions from concurrent atomic operations that jointly control translation, rotation, and framing. The Director is supported by three specialized agents: an Interpreter that extracts scene-grounded cinematographic intent, a Scout that selects initial viewpoints, and a Critic that evaluates rendered results and provides visual feedback for iterative plan refinement. We also introduce CinemaBench, comprising 150 Blender scenes from self-created and licensed sources, with five camera instructions per scene for 750 text-directed tasks and 60 reference videos associated with a subset of scenes. CinemaBench supports evaluation of both text-directed camera generation and video reference-directed camera generation. Across a diverse set of evaluated baselines, FilmFlow achieves the strongest benchmark performance and the highest user preference, demonstrating effective spatial reasoning, temporal coordination, and visual composition for executable 3D cinematography.

  13. Meta Expert: Cross-Layer Expert Sharing for Storage- and Retrieval-Efficient MoE

    As model parameters scale up, sparsely activated Mixture-of-Experts (MoE) approaches have become essential for model scaling. However, mainstream models currently adopt hierarchical architectures, where experts in different layers, although topologically independent, exhibit substantial similarity and redundancy in their stored content. Compared to the hierarchically arranged Local Expert in existing mainstream models, we hypothesize that inter-layer shared Meta Expert hold greater potential. To this end, we conduct a multi-dimensional empirical comparison between Local and Meta Experts, and find that models incorporating Meta Experts exhibit lower parameter redundancy, together with lower cross-entropy loss and higher downstream task accuracy. With the activated quantity and the expert granularity held fixed, our model matches the performance of Vanilla MoE using only 70--80\% of the experts, substantially improving the model's scaling potential. Beyond removing inter-layer redundancy among experts and improving information storage efficiency, our theoretical analysis further shows that, compared with Local Experts, Meta Experts provide hidden states with more flexible residual pathways, thereby improving information retrieval efficiency.

  14. Code2Video-Compass: A Comprehensive Benchmark for General-Purpose Code-Based Video Generation across T2V, I2V, and V2V

    Code-based video generation offers fine-grained control, targeted editing, and component reuse compared with direct video generation. This approach requires multimodal large language models (MLLMs) to translate visual and temporal requirements into executable programs that produce complete videos. However, existing code-based benchmarks primarily target specialized tasks, leaving complete video creation across diverse creative categories and input modalities insufficiently evaluated. We introduce Code2Video-Compass, a general-purpose benchmark for code-based video generation across text-to-video (T2V), image-to-video (I2V), and video-to-video (V2V) settings. Code2Video-Compass comprises 2,104 tasks spanning 10 categories, 24 subtypes, and three complexity dimensions covering construction, dynamic animation, and state dependency. It combines tasks curated from textual instructions and visual references with corresponding T2V, I2V, and V2V tasks derived from complete professional and user-created videos. We propose a dual-level evaluation framework combining 12 objective metrics and five subjective metrics. Objective evaluation covers operational performance, video quality, text-video alignment, and reference fidelity, while subjective evaluation uses an MLLM judge to evaluate instruction following and holistic video quality. Extensive evaluation of 15 recent proprietary and open-weight MLLMs from nine families reveals that even leading models face challenges in reliably generating high-quality complete videos aligned with textual and visual requirements, with performance generally declining as construction, dynamic animation, and state-dependency complexity increases. We anticipate that Code2Video-Compass will advance reliable, coherent, and controllable code-based video generation and inspire broader progress in programmatic visual creation.

  15. RouteWeaver: Weaving Mode Selection and Execution into Unified LLM Routing

    LLM routing dynamically selects and coordinates heterogeneous language models across diverse tasks. However, existing approaches are largely built around a predefined execution paradigm, such as single-round, multi-round, or agentic routing, which fixes how model calls are organized and limits adaptation to different query needs. We propose RouteWeaver, a unified routing framework that integrates these routing modes within a single LLM policy, jointly learning which mode to use and how to select models within that mode. To jointly optimize mode selection and within-mode execution, we develop COMET-GRPO (COordinated Mode-Execution Training), which decouples the trajectory-level advantage into separate signals for mode selection and within-mode execution, enabling more targeted credit assignment to each decision level. We further introduce progressive exploration, which gradually shifts training from externally assigned modes to autonomous selection, so that the router first learns how to execute each mode before deciding when to use it. We evaluate RouteWeaver across mathematics, coding, knowledge, logical reasoning, and factual recall. RouteWeaver achieves an average accuracy of 61.4%, an 11.03% relative improvement over the strongest baseline, and outperforms all compared baselines in each of the five domains. Ablations show that both COMET-GRPO and progressive exploration are important for adaptive routing; without progressive exploration, the routing policy collapses entirely to single-round execution.

Techmeme(15)

  1. Outside of tech there has been no financial payoff to US companies for using AI, now viewed as a margin-hurting cost center, as VC-backed firms burn more tokens (Torsten Slok/Apollo Global Management)

    Torsten Slok / Apollo Global Management : Outside of tech there has been no financial payoff to US companies for using AI, now viewed as a margin-hurting cost center, as VC-backed firms burn more tokens —  Despite massive investments and widespread hype around artificial intelligence, the technology has delivered zero financial payoff to corporate America outside of tech.

  2. Source: Replit recently moved most AI spend from Anthropic to OpenAI, which gave 30%+ off in a deal worth $100M+/year, after Anthropic discontinued its discount (The Information)

    The Information : Source: Replit recently moved most AI spend from Anthropic to OpenAI, which gave 30%+ off in a deal worth $100M+/year, after Anthropic discontinued its discount —  OpenAI's efforts to undercut Anthropic on price are producing some results.  —  For instance, in May, Anthropic models powered 57% …

  3. A look at Alpha School, a network of private schools that claims to teach kids 2x as fast using AI; data shows ~50% of K-8 students missed this goal in math (Dana Goldstein/New York Times)

    Dana Goldstein / New York Times : A look at Alpha School, a network of private schools that claims to teach kids 2x as fast using AI; data shows ~50% of K-8 students missed this goal in math —  Alpha School, a private network, is spreading into public education.  While its students' test scores are high, some parents and educators say it doesn't live up to the hype.

  4. An interview with Ciena CEO Gary Smith, a veteran of the 2001 telecoms crash, on AI demand outpacing supply for Ciena's optical networking chips, and more (Steven Rosenbush/Wall Street Journal)

    Steven Rosenbush / Wall Street Journal : An interview with Ciena CEO Gary Smith, a veteran of the 2001 telecoms crash, on AI demand outpacing supply for Ciena's optical networking chips, and more —  Ciena CEO Gary Smith is ‘suitably paranoid,’ but optimistic  —  The historic telecommunications crash of 2001 is burned indelibly …

  5. Block unveils Dessa, a "true speech-to-speech" AI model trained on "nothing but human conversation" that it says runs locally on a MacBook Pro M4 Max or newer (Jay Peters/The Verge)

    Jay Peters / The Verge : Block unveils Dessa, a “true speech-to-speech” AI model trained on “nothing but human conversation” that it says runs locally on a MacBook Pro M4 Max or newer —  You have got to listen to these conversations with Block's new Dessa AI model.

  6. Ukraine says Starshield was working normally again on Saturday morning; US officials said Trump asked Elon Musk to restore the service (Wall Street Journal)

    Wall Street Journal : Ukraine says Starshield was working normally again on Saturday morning; US officials said Trump asked Elon Musk to restore the service —  Speed restrictions imposed by Elon Musk's SpaceX have hampered Ukraine's drone forces since Oct. 14  —  KYIV—Ukraine's military Starlink system …

  7. Inside Meta's law enforcement outreach team, which uses AI and human reviewers to analyze social media posts, aiming to prevent threats like school shootings (Rachel Monroe/New Yorker)

    Rachel Monroe / New Yorker : Inside Meta's law enforcement outreach team, which uses AI and human reviewers to analyze social media posts, aiming to prevent threats like school shootings —  Algorithmic social media, which has helped create the conditions for the spread of such violence, is reckoning with how it can be part of the solution.

  8. A look at OpenAI's Project Daybreak, which lets vetted partners use its top hacking models to find and fix vulnerabilities and helped uncover PHP2Shell RCE bugs (Thomas Brewster/Forbes)

    Thomas Brewster / Forbes : A look at OpenAI's Project Daybreak, which lets vetted partners use its top hacking models to find and fix vulnerabilities and helped uncover PHP2Shell RCE bugs —  This voice experience is generated by AI.  Learn more.  —  Using the latest GPT model, cyber researchers …

  9. The PHP Foundation, which coordinated fixes for two critical PHP flaws, operates on a shoestring budget with one full-time staff member and 14 contractors (Toby Sterling/Reuters)

    Toby Sterling / Reuters : The PHP Foundation, which coordinated fixes for two critical PHP flaws, operates on a shoestring budget with one full-time staff member and 14 contractors —  The discovery of two serious flaws in PHP this week set off a global scramble to keep websites safe from hackers …

  10. Google updates its privacy policy to clarify it could use data shared via Personal Intelligence from connected apps, including Gmail and Photos, to target ads (Shimul Sood/Android Authority)

    Shimul Sood / Android Authority : Google updates its privacy policy to clarify it could use data shared via Personal Intelligence from connected apps, including Gmail and Photos, to target ads —  Your inbox has secrets, and Google's ads might want in.  —  • … TL;DR  — Google updated its privacy policy …

  11. Andy Jassy says AWS capacity for 2027 is "largely sold out" and a "good chunk" of 2028 capacity is also sold, though AWS reserves some capacity for on-demand (Catherine Perloff/The Information)

    Catherine Perloff / The Information : Andy Jassy says AWS capacity for 2027 is “largely sold out” and a “good chunk” of 2028 capacity is also sold, though AWS reserves some capacity for on-demand —  Amazon Web Services capacity is mostly booked up through at least next year, Amazon CEO Andy Jassy …

  12. The UK plans to invest £100M to create the AI Biosecurity Lab to boost defenses against biological threats, supported by OpenAI, Anthropic, and Google DeepMind (Liv McMahon/BBC)

    Liv McMahon / BBC : The UK plans to invest £100M to create the AI Biosecurity Lab to boost defenses against biological threats, supported by OpenAI, Anthropic, and Google DeepMind —  The UK says it will establish a national AI Biosecurity Lab (AIBL) to help strengthen its defences against emerging biological threats.

  13. OpenAI says it built an "offline world" from cached web content to train isolated frontier models to browse, search for information, and use web apps (OpenAI)

    OpenAI : OpenAI says it built an “offline world” from cached web content to train isolated frontier models to browse, search for information, and use web apps —  In order to work with software, AI models need computing environments: digital workspaces where they can write and run code …

  14. Utopai, an AI film studio that says it has more than 20 projects in the works, raised $60M at a $1B valuation (Rocket Drew/The Information)

    Rocket Drew / The Information : Utopai, an AI film studio that says it has more than 20 projects in the works, raised $60M at a $1B valuation —  While much of the AI industry has fixated on new personal AI assistants from Meta and OpenAI, video AI is enjoying a quiet renaissance.  Hollywood mogul Jeffrey Katzenberg …

  15. Memo: Helen Chiang, Xbox's first COO, is leaving Microsoft on October 23, just months after the role was created; she spent 21 years at the company (Tom Warren/The Verge)

    Tom Warren / The Verge : Memo: Helen Chiang, Xbox's first COO, is leaving Microsoft on October 23, just months after the role was created; she spent 21 years at the company —  Helen Chiang is leaving Microsoft after 21 years. … Xbox is losing its first chief operating officer (COO) after creating the new role just a few months ago.

Solidot(15)

  1. 一种远古病毒可能阻碍黑猩猩演化出与人类相似的大脑

    人类与黑猩猩虽然差异巨大,但在与共同祖先分化并各自演化了约 500-600 万年后,双方只有 1.2% 的 DNA 不同。而一种远古病毒可能在其中扮演了重要角色,阻碍黑猩猩演化出与人类相似的大脑。大约 400 万年前,逆转录病毒 PTERV1 (Pan troglodytes endogenous retrovirus-1) 感染了黑猩猩但没有感染人类,它对黑猩猩的 DNA 进行了细微的改动,导致黑猩猩的大脑发育方式与人类出现重大差异。至于为何人类未曾感染 PTERV1,一种解释是人类体内的一种独特抗病毒蛋白 TRIM5α 保护了我们免受该病毒的侵害;另一种解释是,该病毒大流行时黑猩猩与人类的祖先生活在不同的地理区域。发表在《Science Advances》期刊上的一项研究未试图解答这一问题,而是揭示了病毒如何改变黑猩猩的大脑。人类和黑猩猩都有名叫 LINC00662 的分子,它为细胞提供构建特定蛋白质的指令。LINC00662 在人类大脑发育的早期阶段非常活跃,它有助于人类脑细胞成熟并生长。病毒的 DNA 则将黑猩猩的 LINC00662 基因失活。实验室研究发现,LINC00662 被关闭时,神经元及其延伸部分无法像 LINC00662 正常工作时充分成熟与生长。移除病毒插入的 DNA 后,LINC00662 的活性恢复了。研究人员表示,这证明 病毒确实参与了对该基因的抑制,但这并不意味着移除它就能改变大脑的发育进程。

  2. 为让数据中心有充足电力 Google 将付钱给其他人少用电

    Google 正资助美国规模最大的虚拟电厂项目。该项目通过向家庭和企业提供经济激励,鼓励他们在电力需求高峰期间减少用电量,从而为数据中心提供更多的电网容量。该项目有望在中大西洋地区的 PJM 电网提供 1070 MW 的电力容量——相当于一座大型核反应堆的输出电力。很多削减用电量措施能自动执行,如利用智能恒温器在夏季用电高峰期调低空调运行强度,或者通过电池系统提供临时电力。与 Google 合作的能源服务公司 Voltus 表示,通过聚合成千上万家企业和家庭的用电,该项目能在最需要用电的时候可靠提供大量额外电力容量,而且能在几年内实现。尽管科技公司若想持续建设大型数据中心,最终仍需建造传统的发电厂,但在过渡阶段虚拟电厂方案不失为一种更快捷、更经济且污染更少的选择。

  3. 研究揭示丹尼索瓦人的长相

    中科院研究人员首次揭示出神秘古丹尼索瓦人的形态共性。丹尼索瓦人是一支已灭绝的古老人类支系,2010 年科学家依靠西伯利亚丹尼索瓦洞化石的 DNA 证据发现了这一人群。后续分子证据显示,丹尼索瓦人曾广泛分布在亚洲多地,生存时间大约在距今 30 万年至 4.5 万年前。但他们究竟长什么样?位于河北阳原的许家窑遗址 1976—1979 年共发掘出土包括头骨、下颌骨、牙齿在内的 20 件人类化石,至少代表 16 个不同年龄阶段的个体。许家窑人化石历经十余万年的埋藏,古 DNA 提取近乎无望,研究团队转向古蛋白质组学这一相对新兴的技术路径,从许家窑地点保存的 20 件标本中,无损获取内源性蛋白质开展系统发育研究,以古蛋白质证据明确支持许家窑人属于丹尼索瓦人。在此基础上,研究团队系统总结出丹尼索瓦人在颅骨、下颌骨和牙齿上的典型形态特征。综合研究推测,丹尼索瓦人具有低矮后倾的额头、粗壮眉脊、面部扁平、突颌减弱等面部特征。

  4. 美光桃园厂工会否决奖金方案

    美光桃园厂工会星期五(10月23日)说,会员投票否决公司提出的新利润分享方案,并警告可能采取进一步集体行动,争取更公平的奖金制度。美光过去数周一直与桃园及台中两座工厂的工会就薪酬问题谈判。两个工会共代表两厂 1 万 5000 名员工中的 1 万 2000 人。两个工会此前均要求,公司发放相当于 83 个月薪资的一次性奖金,并建立长期利润分享制度,将营业利润的 15% 用于员工奖金,按季而非按年发放。美光与规模较大的台中厂工会星期三(10月21日)达成协议。根据薪酬和福利改革方案,公司将从 2027 财年起,为全球员工增设季度利润分享奖金,与原有激励奖金计划(IPP)并行,新增奖金以现金和股票各半的方式发放。桃园工会与管理层仍未达成共识,并在星期四举行小规模罢工,向公司施压。工会星期五发表声明说,2300 多名会员中,约七成投票否决了公司星期四提交的利润分享方案。工会警告,可能采取进一步集体行动,争取更公平的利润分享制度,并称“抗争尚未结束,我们也没有放弃”。双方的下一轮协商定于 10 月 27 日举行。

  5. Google 修改隐私条款将 Gmail 和照片数据用于个性化广告

    Google 修改了隐私政策,允许将 Gmail 和相册数据用于个性化广告。新政策于 10 月 16 日生效。新政策没有默认启用,而是声明:“我们可能还会根据您的兴趣以及您在 Google 服务中的活动或个性化内容,向您展示个性化广告,具体取决于您的设置。例如,如果在 Google 搜索中搜索“山地自行车”,您可能会在 YouTube 上看到运动装备广告...我们不会根据您在 Google 云端硬盘、Gmail 和 Google 相册中的内容向您展示个性化广告,除非您选择允许其他支持个性化广告的 Google 服务使用这些服务中的数据。”也就是如果用户不希望 Gmail 和 Google 相册中的内容被用于个性化广告需要切断关联服务,方法是:Google 账号 —— 数据和隐私设置——个性化设置——搜索服务个性化——更多个性化智能服务——关联的内容应用,切断 Google Workspace 关联。

  6. 梵高名画《The Starry Night》可能描绘的是真实的夜空

    梵高于 1889 年创作的名画《The Starry Night》可能描绘的是 1889 年 7 月 22 日法国真实的夜空。《The Starry Night》被普遍认为风格化地呈现了梵高在法国普罗旺斯圣雷米的窗外看到的景象。争议在于这片夜空究竟是这位后印象派画家自己的幻想,即象征性表达,还是真实的天文观察结果。此外这幅画的具体创作日期也无法确定。为解决这一问题,韩国庆熙大学的研究人员开发了一个框架,将天文学模拟结果与星象位置测量数据、历史天气记录,以及梵高的信件结合起来。研究人员根据描绘这片景色的早期素描重建了画中的窄视场。他们发现,下蛾眉月、金星,以及金牛座的毕星团或许肉眼可见于 1889 年 7 月 22 日的黎明前后,并且其构型与画中的排列大体相符。历史气象记录显示,1889 年 7月 22 日前后的夜空清澈到足以看见这一天文排列。此外梵高信件中频繁提及的蝉表明当时气候炎热,这也更贴近 1889 年 7 月的历史温度。

  7. 希腊通过法案禁止 15 岁以下儿童使用社媒

    希腊议会周五通过了一项法案,禁止 15 岁以下的儿童使用社媒平台。此举旨在回应公众对社交媒体会对未成年人的健康与安全产生负面影响之日益增长的担忧。禁令将于 2027 年 1 月 1 日生效。澳大利亚是首个通过立法限制未成年人使用社媒的国家。法国也曾通过类似法律,但于 8 月被宪法委员会裁定无效。希腊总理基 Kyriakos Mitsotakis 表示,社媒平台有 2 个半月的时间制定方案,核实用户年龄并保护其隐私。希腊政府表示,将支持家长共同遏制“无限滚动”现象——这种行为会导致儿童睡眠不足、注意力难以集中,挤占与朋友相处的时间。

  8. 宫本茂成为首位获得日本文化勋章的游戏从业者

    日本文部科学省公布了 2026 年度文化勋章获得者名单,任天堂首席游戏设计师及代表董事宫本茂位列其中, 成为首位获得文化勋章的游戏从业者。文化勋章旨在表彰在文化发展方面做出特别显著贡献的人士,自 1937 年设立以来,获得者包括了画家横山大观、诺贝尔物理学奖得主汤川秀树、棒球明星王贞治和长岛茂雄等。宫本茂在记者会上表示:“游戏并非由我一人独自完成,而是与众多伙伴共同创造的成果。我是怀着代表大家的心情来接受这份荣誉的。”

  9. 联合国警告厄尔尼诺可能导致数千万人粮食短缺

    今年的厄尔尼诺事件强度可能前所未有。它将于 2026 年底前后达到峰值,但其影响在此之后仍将持续很长时间。热带太平洋(厄尔尼诺的中心区域)的海面温度在 2026 年 11 月至 2027 年 1 月期间可能比平均值高出 3.8°C。 一次非常强的厄尔尼诺会扰乱许多地区的正常温度和降水格局。它可能给一些地区带来严重干旱,给另一些地区带来强降雨和洪水,并导致世界大片地区温度升高。极端天气事件可能会成倍增多,并发生级联效应。 联合国人道主义事务协调厅(OCHA)厅长弗莱彻警告称,全球可能有多达 5000 万人面临严重的粮食短缺。他呼吁各国政府做好充分准备。厄尔尼诺可能会给非洲、中南美和东南亚等地带来巨大破坏。

  10. mRNA 癌症疫苗将死亡复发风险减少 42%

    制药公司 Merck 和 Moderna 宣布,在 III 期黑色素瘤临床试验中,基于 mRNA 技术的个性化癌症疫苗相比标准治疗,将死亡或复发风险减少 42%。黑色素瘤是最致命的皮肤癌。两家公司正与监管机构接洽争取该疫苗早日获批。有 1,137 名患者参加了 III 期临床试验,他们此前均患有 IIB-IV 期黑色素瘤,已通过手术切除肿瘤。患者被以 2:1 的比例随机分配至两组:一组接受个性化 mRNA 疫苗联合标准治疗,另一组仅接受标准治疗。标准治疗采用 Merck 已上市的单克隆抗体抗癌药物 Keytruda。定制 mRNA 疫苗名为 intismeran 或 mRNA-4157,编码了癌症特有的突变,帮助免疫反应精准识别和对癌细胞进行攻击。Intismeran 和 Keytruda 治疗组两年后有 82% 的患者存活且未出现复发,Keytruda 和安慰剂组中这一比例为 70%。

  11. 浏览器 Arc 将于 12 月关闭

    The Browser Company 宣布其浏览器 Arc 将于 12 月 22 日关闭,用户将无法再能启动应用。Arc 基于 Chromium,于 2023 年释出了 1.0 版本,但 2024 年就停止了开发,2025 年 5 月宣布它正在开发 AI 驱动的浏览器 Dia。Arc 从 10 月 22 日起无法创建新的 Arc 账号,11 月 23 日起停用部分功能,12 月 22 日无法启动应用,Arc 账户将被停用,个人数据会在 30 天内被删除。The Browser Company 表示 Arc 用户可通过数据导出功能无缝使用其全力开发的新浏览器 Dia,声称用户在 Arc 中使用的浏览器功能在 Dia 中均可免费使用,而 AI 功能则是可选使用的。

  12. Switch 2 越狱能运行自制程序

    研究员 Sammy Hajhamid 利用软件漏洞在 Switch 2 上实现越狱,而且能运行自制程序。越狱利用了一个专门运行在任天堂硬件上的编程环境和解释器 SmileBasic 4。Hajhamid 使用 OpenAI 的 Codex 对 SmileBasic 的语言解释器进行探测,花了两周时间发现了一个 32 位整数溢出漏洞,利用该漏洞能对部分系统内存进行读写操作。他在此基础上从 Switch 2 内部找到了其它漏洞,提权获得任意读写权限。他之后演示了在越狱的游戏机上运行自制程序。SmileBasic 4 已从任天堂的 Switch eShop 中下架,漏洞可能会在后续的固件更新中修复。

  13. KeePassXC 2.8.0 释出

    开源密码管理器项目 KeePassXC 释出了 v2.8.0。KeePassXC 代表 KeePass Cross-Platform Community Edition,是 KeePassX 的一个分支,而 KeePassX 则是基于 Qt 构建的 KeePass 克隆版本,但已停止维护。KeePassXC 2.8.0 带来了用户期待的新功能,大量 bug 修复和安全修正。主要特性包括:Qt 的版本从 Qt5 升级到 Qt6,Wayland(Linux) 下支持 Auto-Type,可自定义快捷键,使用外部工具实现远程数据库同步,macOS 支持密码快速解锁,Linux 下支持通过 Polkit 快速解锁,Windows 下提供了支持 ARM64 架构的原生版本,等等。

  14. eMudhra 退出全球 CA 业务

    在曝出惊人丑闻之后,印度公司 eMudhra  宣布退出全球 CA 业务,将专注于核心企业解决方案和信任服务而非 SSL/TLS 相关业务。它是印度唯一一个被主流浏览器信任的 Root CA 机构。截至 2026 年,公司已发行逾 6000 万张证书。此前 eMudhra 的八个中间证书的私钥泄漏,而这些私钥被发现是极其简单的数字如 4。该公司在声明中称这些简单密钥是“多重人为错误”导致的。相关密钥是在 2025 年  4 月 30 日生成,它使用专门的硬件安全模块生成了一组密钥,但软件脚本的一个缺陷导致其生成了另一组较弱的密钥,由于两组密钥名称相似,结果其员工选择了弱密钥组。

  15. 趋势科技在公开的内核邮件列表上披露内核漏洞

    趋势科技的安全团队 Zero Day Initiative 向人人可访问的内核邮件列表上递交了一系列新发现的内核漏洞。按照惯例,漏洞应该递交到不对外公开的安全邮件列表。递交的部分漏洞没有补丁,部分漏洞已有补丁在测试,这些漏洞的 CVSS 风险评分最高为 9.0。稳定版内核维护者 Greg Kroah-Hartman 批评安全研究人员将漏洞报告递交到公共的邮件列表。而在 AI 辅助漏洞发现时代,此类的漏洞报告越来越多。

NEWSLETTER · FREE · WEEKLY

OrangeBot Weekly

The best new AI tools + Claude Code skills, every week — with my verdict on what’s actually worth your time. No hype.

Free · One-click unsubscribe · No spam