Daily AI News - September-12-2026

Calif Research Unveils WeWorm: AI-Assisted Zero-Click Worm Spreads via WeChat Calls ⭐️ 9.0/10

Calif Research released WeWorm, described as the first zero-click worm that spreads through WeChat calls on both iOS and Android. The team says that with AI assistance, they found the underlying bug and wrote the first remote code execution (RCE) exploit in about two days, then spent one more week building the worm. This research demonstrates a paradigm shift in offensive security, showing that AI can compress work that once took a larger team months into roughly a week. It raises urgent concerns about AI-powered threats, since zero-click worms require no victim interaction and could be adapted to other messaging platforms. According to Calif Research, the victim does not need to answer the call or interact with their phone at all, and even if they answer, they hear nothing while the exploit still succeeds. The team notes that AI can already do most of the work, while human judgment was still needed to decide what to target and how to test safely.

rss · Simon Willison · Sep 10, 00:56

Background: A zero-click exploit is a type of cybersecurity vulnerability that lets an attacker remotely compromise a device without any user interaction, such as clicking a link or opening an attachment. Remote code execution (RCE) refers to the ability to run attacker-controlled code on a target system over a network, often used to deploy malware or steal data. This news combines those concepts with AI-assisted exploit development, highlighting how large language models can accelerate vulnerability discovery and weaponization.

Tags: #AI security, #cybersecurity, #worm, #RCE, #WeChat

OpenAI scales Habitat storage to serve over 1 billion ChatGPT users ⭐️ 9.0/10

OpenAI detailed how it evolved Habitat from a Python library into a globally distributed storage platform. The system now supports over 1 billion ChatGPT users and handles 22 million requests per second. This engineering deep-dive shows how OpenAI's core infrastructure has kept pace with ChatGPT's explosive growth. It offers valuable lessons for anyone building large-scale distributed systems, particularly around rapidly scaling online storage. The article is the first part in a series and describes the transformation starting in mid-2024. The headline figure is 22 million requests per second, while a third-party summary also cites over 70 million requests per second and 500+ petabytes of data stored.

rss · OpenAI Blog · Sep 11, 10:00

Background: Habitat is OpenAI's internal online storage platform, originally a simple Python client library before being rebuilt as a globally distributed service. ChatGPT's scale, with over 1 billion weekly users, creates enormous demand for fast, reliable storage. Distributed storage systems spread data across many servers and regions to handle that load, and the article explains how OpenAI made this leap.

Tags: #distributed-systems, #storage, #scalability, #infrastructure, #OpenAI

Terry Tao warns AI-generated proofs clash with mathematical credit and understanding ⭐️ 8.0/10

Terry Tao published a blog post on September 11, 2026, arguing that AI's ability to generate large, unverifiable proofs is severely misaligned with how mathematicians build understanding and receive credit. The Economist echoed the critique the same day, highlighting outrage among top mathematicians over OpenAI's methods. This matters because AI systems are increasingly capable of producing research-level mathematics, threatening the traditional yardstick of solving open problems used to assign credit. It could reshape incentives, peer review, and the role of human mathematicians in the field. The controversy is tied to the Leiden Declaration on Artificial Intelligence and Mathematics, published in June 2026 by an international group of mathematicians. A key concern is that AI proofs can be too large for humans to verify, and that even human proofs can contain hidden gaps, making verification a deep and uncertain process.

hackernews · Lobsters · Sep 11, 17:45 · Discussion

Background: In mathematics, a proof is a rigorous argument establishing a statement's truth, but verification by humans can never completely rule out errors, especially when proofs use natural language and require deep insight. AI alignment normally refers to steering AI systems toward human goals, but here "misalignment" describes a mismatch between AI's output and the social and epistemic practices of mathematics. The Leiden Declaration emerged from a September 2025 workshop at Leiden University in response to rapid AI progress in producing research-level mathematics.

Discussion: Commenters offered contrasting views: one mathematician compared AI-generated proofs to Mochizuki's abc conjecture proof, noting the community responded with skepticism but also productive discussion. Another argued AI has destroyed the yardstick of solving open problems for measuring contributions, while a third compared the situation to computers in chess, suggesting mathematics could become more popular and more accurate over time.

Tags: #AI, #mathematics, #Terry Tao, #research, #OpenAI

RTK Token Savings Claims Challenged by Independent Cost Benchmarks ⭐️ 8.0/10

A Quesma blog post challenges RTK's reported token savings for AI coding, presenting independent cost benchmarks that suggest the claimed benefits are overstated. The post argues that RTK's own measurements focus on bash output reduction rather than actual end-to-end cost savings. This matters because RTK is a widely discussed tool claiming 60-90% token savings, and developers and teams may adopt it based on those claims. Independent benchmarks help the developer community make informed decisions about whether such preprocessing tools actually reduce LLM costs in real workflows. RTK is a Rust-based CLI proxy that intercepts shell commands from AI coding agents and compresses output before it enters LLM context, using filtering, grouping, truncation, and deduplication. RTK's own data reports 89% average noise removed across 2,900+ developer sessions, but the Quesma benchmarks suggest this does not translate to proportional cost savings. Community commenters also note that RTK can report large savings even when a command's output is piped to tail, and that persisting savings stats can break sandboxing.

hackernews · michalwarda · Sep 11, 11:15 · Discussion

Background: AI coding agents like Claude Code consume tokens from shell command output, which can be verbose and noisy. Tools like RTK, Caveman, and Ponytail aim to reduce token usage by preprocessing or compressing this output before it reaches the LLM. However, reducing bash output is not the same as reducing total cost, because input tokens also include prompts, system prompts, and conversation history. Independent benchmarks, such as JetBrains' A/B trials, have also found that advertised savings from such tools are often much smaller in practice.

Discussion: Community comments are largely skeptical, with some calling such tools 'snakeoil' and noting that RTK can report 100k token savings for a command piped to tail -5, which would have cost only ~100 tokens without RTK. Others mention that independent benchmarks on tools like Headroom and RTK show no real savings, and suggest that if simple preprocessing worked, AI labs would upstream the optimizations themselves. Some commenters share alternative approaches, such as using local code embedding models or tree-sitter-based outlines, though they note these are aimed at saving time rather than tokens.

Tags: #AI coding, #token efficiency, #benchmarking, #developer tools, #LLM costs

Datasette Security Releases Patch Subtle Bugs Found via AI Audit ⭐️ 8.0/10

Datasette released two security patch versions, 1.0a39 and 0.65.4, fixing vulnerabilities discovered during an AI-assisted code audit. The fixes address subtle issues that affect public deployments, especially instances mixing public and private tables. Users exposing Datasette publicly, particularly with mixed public and private data, should upgrade to avoid potential data exposure. The release also shows frontier LLMs being used for security auditing in open-source maintenance. Simon Willison and Alex Garcia used Claude Fable 5.1, GPT-5.6, and GPT-6 Astra for the audit, then split the work so each issue had tests written by one author and fixes implemented by the other. The releases target the current 1.0 alpha series and the stable 0.65.x family.

rss · Simon Willison · Sep 11, 03:27

Background: Datasette is an open-source tool for exploring and publishing data as interactive websites and APIs. The audit workflow paired human review with multiple AI coding agents, and the maintainers plan to incorporate frontier-model security audits into future development.

Tags: #security, #datasette, #open-source, #release, #vulnerability

Run Any Nix Package From the Past 13 Years in Your Browser ⭐️ 8.0/10

Farid Zakaria launched trynix.dev, which uses qemu-wasm to boot an x86_64 Linux virtual machine in the browser via WebAssembly and loads any Nix package from the past 13 years. Packages are URL-addressable, so opening https://trynix.dev/?pkg=python3%403.6.2 gives an interactive shell running Python 3.6.2 from 2017. This makes any historical Nix package instantly testable without installation, a remote server, or a local VM. It combines Nix's reproducible model with WebAssembly to create new workflows for code review, regression testing, and interactive debugging of old software. Farid has also built trynix-preview, a GitHub Action that comments a link on a pull request, letting reviewers boot the PR's build directly in the browser. He calls trynix.dev his magnum opus of Nix work, and the model deliberately avoids servers: just browsers.

rss · Simon Willison · Sep 10, 23:44

Background: Nix is a cross-platform, purely functional package manager and the basis of NixOS, storing packages in immutable, content-addressable paths so builds are reproducible and old versions remain available. qemu-wasm is a project that compiles QEMU's system emulator to WebAssembly, allowing an x86_64 Linux environment to run inside a browser tab. trynix.dev combines these two ideas, making it possible to on-demand boot historical Nix packages with their exact dependencies.

Tags: #Nix, #WebAssembly, #Virtual Machine, #Developer Tools, #Reproducibility

Shopify Ditches React Native for Native Swift/Kotlin, Citing AI Agents ⭐️ 8.0/10

Shopify announced it is moving its mobile apps from React Native back to separate native Swift (iOS) and Kotlin (Android) codebases. The company says AI coding agents now handle enough of the implementation, translation, testing, and review work that maintaining two native codebases is no longer the cost barrier it was in 2020. This is a major strategic reversal by a large company that had publicly embraced React Native, and it signals how AI agents are reshaping engineering trade-offs. Other companies weighing cross-platform versus native development may reconsider their choices as AI reduces the cost of dual-platform maintenance. Shopify adopted React Native in 2020 to stop building features twice, let developers work across the stack, and reduce time spent on feature parity. Shopify maintains three React Native libraries — react-native-skia and flash-list are finding new homes, while restyle will be archived at the end of 2026 due to its smaller user base.

rss · Simon Willison · Sep 10, 21:11

Background: React Native is a cross-platform framework that lets developers build iOS and Android apps from a single JavaScript/React codebase, reducing the need to write and maintain two separate native apps. AI coding agents are AI-powered tools that use large language models to assist with tasks across the software development lifecycle, including code generation, testing, and review — which is what made Shopify's return to dual native codebases feasible.

Tags: #React Native, #Shopify, #mobile development, #AI agents, #cross-platform

OpenAI Launches Agents API Public Beta for Cloud Agents ⭐️ 8.0/10

On September 10, 2026, OpenAI launched the public beta of the Agents API, a managed service powered by the open-source Codex harness. Developers can create production-grade cloud agents with a single API call and deploy them in OpenAI-hosted sandboxes, on their own infrastructure, or in partner environments. This launch is significant because it provides developers with a production-grade, managed way to build and deploy cloud agents without having to manage orchestration infrastructure themselves. It also signals OpenAI's push to make agentic AI a standard cloud workload, with flexible deployment options that appeal to enterprises with security or data-residency requirements. During the public beta, OpenAI charges no additional platform fee; developers pay only for the tokens and tools used by their agents. The API supports context compression for long-running sessions, tool search, parallel tool calls, and subagent collaboration, and can run in OpenAI-hosted sandboxes, on the developer's own infrastructure, or in partner environments.

telegram · OpenAI Blog · Sep 11, 11:12

Background: The Codex harness is the agent loop and logic that powers OpenAI's Codex coding agent across the web app, CLI, IDE extension, and macOS app. The Agents API exposes this harness as a managed service, handling orchestration, long-running sessions, and tool use, so developers can focus on building agent behavior instead of underlying infrastructure.

Tags: #OpenAI, #Agents API, #AI Agents, #Codex, #Cloud Computing

OpenAI Launches GPT-Live-1 Full-Duplex Voice Model in API ⭐️ 8.0/10

On September 10, 2026, OpenAI released GPT-Live-1 in its API, enabling full-duplex voice conversations with natural interruptions, background noise handling, and telephony support. The model also improves instruction following and custom voices, and scores 30 points higher on Full Duplex Bench than GPT-Realtime-2.1. This launch brings real-time, natural voice interaction to developers, enabling more human-like AI conversations for voice assistants, customer service, and telephony applications. It marks a significant step in OpenAI's real-time AI roadmap and could reshape how users interact with AI systems. The model can listen and speak simultaneously (full-duplex) and can offload complex reasoning and tool calls to backend models. The API voice frontend is priced at $0.05 per minute, and the model supports custom voices.

telegram · OpenAI Blog · Sep 11, 03:09

Background: Full-duplex voice models can listen and speak at the same time, unlike traditional turn-based systems that require users to wait. GPT-Realtime-2.1 is a previous OpenAI real-time voice model, and Full Duplex Bench is a benchmark designed to evaluate turn-taking capabilities of such models. This launch builds on OpenAI's ongoing development of real-time speech-to-speech technology.

Tags: #OpenAI, #API, #Voice AI, #GPT, #Real-time AI

Terry Tao Warns of Severe AI Misalignment in Mathematics ⭐️ 8.0/10

Terry Tao published a blog post on September 11, 2026, arguing that AI systems are severely misaligned with the actual practice of mathematics. He frames this as a significant and unresolved challenge for the field. Because Tao is one of the most influential living mathematicians, his assessment can shape how researchers evaluate AI tools for mathematics. If AI systems optimize for benchmark scores rather than genuine mathematical understanding, they may mislead rather than assist mathematicians. The blog post links to a discussion thread on Lobsters, indicating that Tao intends the piece to spark community debate. His framing connects to the broader AI alignment problem, where systems pursue proxy objectives rather than the intended goals, potentially at the expense of rigor and genuine understanding.

rss · Lobsters · Sep 11, 19:03

Background: The practice of mathematics refers to the full scholarly activity of doing mathematics—formulating conjectures, constructing rigorous proofs, checking reasoning, and building shared understanding—not just producing final answers. AI alignment research studies how to make AI systems pursue intended goals rather than proxy objectives, and specification gaming describes cases where an AI meets the literal specification of an objective without achieving the intended outcome, such as finding shortcuts to score well on a benchmark. These concepts provide the backdrop for Tao's warning that current AI can be severely misaligned with the values and methods of mathematical work.

Tags: #AI alignment, #mathematics, #artificial intelligence, #research, #Terry Tao

Microsoft Makes Rust a Tier-1 Language ⭐️ 8.0/10

Microsoft has officially elevated Rust to Tier-1 language status for its internal engineering, granting it first-class toolchain, build, and support guarantees. The announcement was made through a guest post on the Rust Foundation's website. This marks a major industry endorsement for memory-safe systems programming, potentially accelerating Rust adoption across the software industry. It also reinforces Microsoft's commitment to security by reducing memory-related vulnerabilities in critical systems. Tier-1 status typically means Microsoft provides full official support, including toolchain integration, build guarantees, and dedicated engineering resources. The designation applies to internal engineering use, reflecting Microsoft's growing reliance on Rust for systems-level development.

rss · Lobsters · Sep 10, 13:40

Background: At large companies, a 'Tier-1 language' designation signals that the language is officially supported with first-class tooling, build systems, and ongoing maintenance. Rust is a systems programming language focused on memory safety and performance, offering compile-time guarantees that prevent many common bugs. Microsoft has previously invested in Rust, including contributing to the Rust Foundation and using it in components like Windows kernel drivers.

Tags: #Rust, #Microsoft, #Programming Languages, #Systems Programming, #Memory Safety

Forgejo 16.0.4 patches critical remote code execution vulnerability ⭐️ 8.0/10

Forgejo 16.0.4 has been released as a critical security release that fixes a remote code execution (RCE) vulnerability. The release notes are published on Codeberg, and the project urges self-hosted users to upgrade immediately. This fix is critical because RCE vulnerabilities allow attackers to execute arbitrary code on the server, potentially compromising the entire Forgejo instance and any data it hosts. Since Forgejo is widely used by self-hosted developers and communities, this patch is essential for protecting source code, credentials, and CI/CD pipelines. The vulnerability is addressed in version 16.0.4, and the release notes are available at the official Forgejo repository on Codeberg. Users should check their deployment version and upgrade as soon as possible, as no workaround has been mentioned in the provided information.

rss · Lobsters · Sep 10, 17:40

Background: Forgejo is a self-hosted, lightweight software forge for Git-based source code management, offering features such as bug tracking, code review, continuous integration, kanban boards, issue tracking, and wikis. It was created in 2022 as a community-owned fork of Gitea, emphasizing independent governance. RCE vulnerabilities are among the most severe security issues for self-hosted services because they can give attackers full control over the host system.

Tags: #security, #forgejo, #rce, #vulnerability, #open-source

CHERIoT Enables Strong Memory Isolation Without an MMU ⭐️ 8.0/10

This ACM Queue article explains how CHERIoT provides strong, usable memory isolation on embedded systems without an MMU, using capability-based security. This matters because it offers a practical path to strong memory isolation for low-cost, low-power embedded devices that typically lack an MMU, potentially improving IoT security at scale. CHERIoT builds on CHERI capabilities, adding deterministic use-after-free protection, a lightweight compartment model, and lexically-scoped delegation of objects across compartment calls, as part of an RTOS platform.

rss · Lobsters · Sep 10, 14:59

Background: Capability-based security is a model where access to objects is controlled by unforgeable tokens (capabilities) that reference the object and its access rights, contrasting with traditional permission lists. CHERI (Capability Hardware Enhanced RISC Instructions) is a capability architecture extension that blends capabilities with conventional MMU-based designs. CHERIoT applies these concepts to small embedded systems without an MMU, providing hardware-enforced memory isolation.

Tags: #CHERIoT, #capability-based security, #embedded systems, #memory isolation, #systems security

Retrospective Reverse-Engineering of Apple's Neural Engine ⭐️ 8.0/10

A detailed technical retrospective documents how Apple's proprietary Neural Engine was reverse-engineered, sharing the methodology and insights gained from the process. The article is published on eiln.github.io and has attracted strong interest from the Lobsters community. Apple's Neural Engine is a proprietary, largely undocumented component in Apple silicon, so independent reverse engineering helps developers, security researchers, and machine learning practitioners understand how on-device AI workloads actually run. It also highlights the growing importance of hardware reverse engineering for transparency, interoperability, and security research. The post is a retrospective write-up rather than a live teardown, reflecting on completed reverse-engineering work and the lessons learned. It has received a high score of 8.0/10 on Lobsters, indicating significant community interest in this complex topic.

rss · Lobsters · Sep 11, 17:23

Background: Apple's Neural Engine (ANE) is a neural processing unit (NPU) integrated into Apple silicon to accelerate machine learning tasks such as image recognition and natural language processing. Unlike a GPU, which accelerates graphics, an NPU is specialized for running neural network inference. Because the ANE is proprietary and largely undocumented, reverse-engineering efforts are important for independent researchers seeking to understand its instruction set, performance characteristics, and security properties.

Tags: #reverse engineering, #Apple, #neural engine, #hardware, #machine learning

(分享发现) 求真： Kimi 被带走 16 个人，包括老大。。。 ⭐️ 8.0/10

A report claims Moonshot's Kimi was involved in cross-session replay attacks and rerouted user queries to Claude, exposing sensitive data from Chinese state-linked and corporate users, with over 23 million distillation interactions observed.

rss · V2EX · Sep 11, 16:05

Tags: #AI Security, #Data Privacy, #LLM Distillation, #Moonshot, #Anthropic

OpenAI Releases Agents API With Built-In Context Compression, Tool Calls, Subagents ⭐️ 8.0/10

OpenAI has released the Agents API, an official developer interface that provides built-in support for context compression, tool calls, and subagents. Developers no longer need to build custom agent harnesses to orchestrate these capabilities. This release significantly lowers the barrier to building production-grade AI agents, especially for AI/ML and software engineering teams. By standardizing common agent infrastructure, OpenAI could make agent development faster and more consistent across the ecosystem. The API encapsulates context compression, tool calls, and subagents as built-in features, removing the need for a custom harness. The official announcement is available on OpenAI's website, but the shared post does not include detailed technical specifications or limitations.

rss · V2EX · Sep 11, 12:36

Background: An agent harness, also known as agent scaffolding, is the software infrastructure surrounding a large language model that enables it to operate as an AI agent. Context compression techniques reduce token counts while trying to preserve semantic fidelity, and subagents are smaller specialized agents that work under a coordinating main agent. These components are typically assembled manually, which is why an official API that bundles them is significant.

Tags: #OpenAI, #Agents API, #AI agents, #LLM, #developer tools

vlt 1.0 发布：无缝替代 npm，新增分阶段安装、图谱查询与恶意包防护 ⭐️ 8.0/10

vlt 1.0 has been officially released as a drop-in replacement for npm, developed by the original npm team. It introduces phased package installations that block dependency scripts from auto-executing, a queryable dependency graph supporting over 60 CSS-like selectors, and hosted registry-level protection against known malicious packages. This matters because npm is the default package manager for the JavaScript ecosystem, and its install scripts have long been a vector for supply-chain attacks. By separating download from script execution and adding registry-level malware blocking, vlt 1.0 gives developers a safer, compatible option that could meaningfully reduce malicious-package incidents. Phased installation means dependencies are downloaded first and their install scripts only run after an explicit user decision, allowing inspection via vlt list or vlt query before building. The hosted registry checks packages for known malware before returning them, and the tool also offers a dependency graph queryable with more than 60 kinds of CSS-like selectors.

rss · InfoQ 中文站 · Sep 11, 13:05

Background: npm is the standard package manager for Node.js and JavaScript projects, and installing a package often runs "install scripts" automatically, which can execute arbitrary code from dependencies. This has become a common supply-chain attack vector. vlt, built by former npm team members, aims to address these risks while remaining compatible with npm workflows. The vlt 1.0 release also makes its hosted package registry and ecosystem mirror fully available.

Tags: #JavaScript, #包管理, #npm替代, #安全, #开发者工具

Anthropic Calls for Global Slowdown of Frontier AI Development ⭐️ 8.0/10

Anthropic has proposed that major AI labs worldwide coordinate a slowdown in frontier model development, warning that AI may soon achieve "recursive self-improvement" without human intervention. The company argues that only a synchronized, verifiable pause across multiple countries can prevent a unilateral halt from letting rivals race ahead. This is a significant policy proposal from a leading AI lab that directly addresses core safety concerns such as recursive self-improvement. The pushback from Washington and Silicon Valley highlights an active global debate over AI governance, national competitiveness, and the balance between safety and strategic advantage. Anthropic specifically warns that without a global coordination mechanism, a unilateral pause would only benefit competitors, so it proposes verifiable rules that multiple countries' major AI companies would follow simultaneously. Critics in Washington and Silicon Valley argue the proposal exaggerates risks, uses safety as a pretext to suppress rivals, and could hand China a strategic advantage.

telegram · zaihuapd · Sep 11, 02:23

Background: Frontier AI models are the most advanced general-purpose systems at the cutting edge of reasoning, multimodal understanding, and autonomous task execution. Recursive self-improvement (RSI) refers to an AI system improving its own capabilities with little or no human oversight, a concept rooted in "Seed AI," a term coined by Eliezer Yudkowsky. However, recent research suggests that open-ended RSI remains bounded by grounding requirements, collapse dynamics, and compute constraints, and may not arrive as quickly as some forecasts predict.

Tags: #AI safety, #AI policy, #Anthropic, #Frontier AI, #Global coordination

GitLab Patches CVSS 10.0 Flaw Allowing Unauthenticated File Read ⭐️ 8.0/10

GitLab released emergency patch releases 19.3.2, 19.2.6, and 19.1.8 on September 10 to fix CVE-2026-85706, a CVSS 10.0 vulnerability in the commits API that lets unauthenticated attackers read arbitrary files on self-managed GitLab servers. This is critical because GitLab self-managed instances are widely deployed in DevOps pipelines, and an unauthenticated arbitrary file read can expose source code, secrets, and credentials. All affected self-hosted users should upgrade immediately to the patched versions. Affected versions include 18.7 through before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2. The flaw was reported by researcher s3ntago via HackerOne; no public PoC or evidence of in-the-wild exploitation has been confirmed, and GitLab.com and GitLab Dedicated are already protected.

telegram · zaihuapd · Sep 11, 11:05

Background: The GitLab commits API is a REST API that lets users retrieve commit information from repositories. CVSS (Common Vulnerability Scoring System) rates vulnerability severity from 0.0 to 10.0, with scores of 9.0-10.0 considered critical. An arbitrary file read vulnerability typically stems from path traversal or insufficient path validation, allowing an attacker to access files outside the intended directory.

Tags: #GitLab, #CVE, #security, #vulnerability, #DevOps

DeepSeek Releases V4.1 Flash: Compact 552B Multimodal Model with New Architecture ⭐️ 8.0/10

DeepSeek officially released V4.1 Flash, the smallest model in its new architecture family, now available via the DeepSeek API as 'deepseek-flash'. The model uses a 552B-parameter Causal-Encoder-Decoder structure with 8B input and 16B output active parameters, and natively supports multimodal visual understanding, with new pricing effective September 10, 2026. This release is significant because it introduces a novel asymmetric architecture that separates input and output processing, potentially offering better efficiency and lower cost. The compact size combined with strong multimodal support could make advanced AI more accessible and affordable, aligning with the industry trend toward more efficient, cost-effective models. Despite having 552B total parameters (a Mixture-of-Experts model), the asymmetric architecture activates only 8B parameters for input processing and 16B for output processing. New pricing takes effect September 10, 2026 at 12:00, and after September 14, 2026 at 12:00, deepseek-v4-pro requests will be routed to the new model.

telegram · zaihuapd · Sep 11, 11:32

Background: Traditional large language models typically use either encoder-decoder or decoder-only architectures. DeepSeek's new Causal-Encoder-Decoder architecture combines causal (decoder-style) processing with an encoder-decoder structure. In Mixture-of-Experts (MoE) models, total parameters represent the model's full knowledge capacity, while active parameters are the subset actually used to process each token, determining computational cost. This asymmetric design, using different active parameter counts for input versus output, is a novel approach in the field.

Tags: #DeepSeek, #LLM, #Multimodal, #AI Model Release, #API

Anthropic Threat Report Names 7 Chinese AI Labs for Claude Distillation ⭐️ 8.0/10

Anthropic released a threat intelligence report in 2025 saying it has detected and blocked large-scale "distillation" activity against Claude by seven Chinese AI labs since February, explicitly naming Alibaba, Zhipu, Xiaomi, SenseTime, and MiniMax. The report says Alibaba generated more than 151 million interactions between May and July, peaking at nearly 3 million per day. This is a high-profile sign that frontier AI companies consider API-driven model extraction a serious intellectual property and security threat, escalating tensions in cross-border AI competition. The public naming of major Chinese companies could influence AI policy, export controls, and how AI providers enforce their usage terms. According to Anthropic, Alibaba's interactions were reportedly used to train Qwen 3.5, 3.6 and 3.7, and were also used in reinforcement learning environments and model architecture development. Anthropic said all this activity was blocked, but the report is one-sided and lacks nuanced context about data provenance beyond the claimed API abuse.

telegram · zaihuapd · Sep 11, 13:10

Background: Model distillation, or knowledge distillation, is the process of transferring knowledge from a large model to a smaller model, often by training the smaller model on the large model's outputs. In API settings, model distillation can be a legitimate optimization technique that enables cost-saving accessible models, but large-scale, non-permitted extraction of a vendor's model can be treated as a model extraction attack and as intellectual property theft. These attacks exploit a system's learned behavior, so API providers increasingly use monitoring, enforcement and security controls to detect and stop them.

Tags: #AI security, #Anthropic, #model distillation, #cybersecurity, #AI policy

Anthropic Report Names 7 Chinese AI Labs for Mass Claude Distillation ⭐️ 8.0/10

Anthropic's new threat intelligence report reveals it has detected and blocked large-scale model distillation attempts by seven Chinese AI labs since February 2025. The report names Alibaba, Zhipu, Xiaomi, SenseTime, and MiniMax, with Alibaba generating over 151 million interactions between May and July allegedly to train its Qwen models. This is significant because it publicly exposes alleged large-scale IP extraction from a leading US AI lab by major Chinese AI companies, escalating AI security and intellectual property tensions between the US and China. It also highlights model distillation as a growing threat that AI labs must defend against, with direct competitive implications for the global LLM race. According to the report, Alibaba's operation was the largest, peaking at nearly 3 million interactions per day, and the extracted data was allegedly used to train Qwen 3.5, 3.6, and 3.7, as well as for reinforcement learning environments and model architecture development. The report covers activities detected from February 2025 onward across seven labs in total.

telegram · zaihuapd · Sep 11, 15:33

Background: Model distillation is a technique in which a smaller 'student' model learns to replicate the behavior of a larger 'teacher' model, typically by training on the teacher's outputs; it is commonly used to compress models or transfer knowledge. While legitimate when authorized, large-scale unauthorized distillation of a proprietary model's outputs can constitute intellectual property infringement and is increasingly treated as a security threat. Qwen is Alibaba's family of large language models, known for strong multilingual performance, particularly in Chinese and English, and for open-source availability under the Apache 2.0 license.

Tags: #AI, #Anthropic, #Model Distillation, #AI Security, #Chinese AI Labs

Developer Finds 60% of Google Ad Installs Are Bots After $220 Campaign ⭐️ 7.0/10

A developer spent $220 on Google app ads and found through analytics that roughly 60% of the resulting installs were bots rather than real users. The blog post reports this as personal evidence of widespread ad fraud in mobile app marketing. Fake installs waste ad budgets and corrupt campaign metrics, making it harder for developers to measure real user acquisition. This anecdote adds to growing industry concern about ad fraud and the pressure on platforms like Google to improve detection. Commenters recommend blocking bot traffic by adding data-center network ranges in Google Ads under Admin > Account Settings > IP Exclusions, noting that one exclusion list included over 4,000 US networks. Related fraud techniques include click injection and SDK spoofing, which can also fabricate or hijack install attribution.

hackernews · nickabe · Sep 11, 18:24 · Discussion

Background: Mobile app advertising often runs on a cost-per-install (CPI) basis, so every install attributed to an ad costs the advertiser money. Fraudsters use bots or malicious apps to generate fake installs, sometimes through click injection, where a malicious app fires fake clicks after detecting a new install, or SDK spoofing, where install events are fabricated entirely. Advertisers rely on attribution analytics and metrics such as click-to-install time to detect anomalous traffic.

Discussion: Comments combined war stories with practical tips: one developer reportedly got their AdMob account banned for invalid traffic caused by the very Google Ads they bought, while another suggested blocking thousands of data-center networks through IP Exclusions. Several commenters voiced distrust, calling Google Ads 'a con' and accusing Google of ignoring ad fraud for years. A few also praised the app itself, with one user installing it and playing through puzzles.

Tags: #Google Ads, #Ad Fraud, #Mobile Apps, #App Marketing, #Analytics

GrapheneOS Releases Rewritten Messages App with Higher-Quality Code ⭐️ 7.0/10

GrapheneOS released version 13 of its rewritten Messages app, now available through the GrapheneOS App Store's Alpha channel. The project's new app development team worked on the overhaul for months, and the official announcement describes it as a far better app with much higher quality code. For GrapheneOS users, the default SMS app is a core part of the privacy and security experience, and a cleaner codebase helps reduce attack surface. This release also shows the project's growing investment in first-party app development, which could strengthen the broader GrapheneOS ecosystem. The app is currently distributed through the GrapheneOS App Store's Alpha channel rather than as a standard OS update. The team says it will make a new release soon based on user feedback, and the GitHub release is tagged as version 13.

hackernews · microtonal · Sep 11, 18:50 · Discussion

Background: GrapheneOS is an open-source, non-profit mobile operating system focused on privacy and security, built on AOSP and officially supported mainly on Google Pixel devices. It hardens low-level system components, app sandboxing, and the permission model to reduce attack surface. SMS is an older, insecure communication technology, so the project favors a minimal and secure default messaging client.

Discussion: Commenters showed strong interest but also raised concerns: one wished for Fairphone support, another sharply criticized the call app's UI/UX and asked for it to be prioritized, and several requested screenshots or installation details. Some users noted that SMS is mostly used for two-factor authentication in their region and suggested alternatives such as FOSSify Messages.

Tags: #GrapheneOS, #Android, #privacy, #messaging, #security

Rune is now open source ⭐️ 7.0/10

Rune, a hackable Go-based terminal editor and app platform, is now open source.

hackernews · ernestrc · Sep 11, 15:31 · Discussion

Tags: #open-source, #terminal-editor, #developer-tools, #Go

Anthropic restricts Claude to users 18 and older via age assurance ⭐️ 7.0/10

Anthropic now enforces an 18+ minimum age for Claude using age assurance, and the requirement is being rolled out in stages across US states. The support page explains that Claude uses age information from app stores to enforce the policy. This marks a major AI policy shift with real privacy stakes, because age assurance can lead to more data collection and retention by an already data-rich company. It also affects who can access powerful AI tools and fuels broader debates about age verification, government ID, and civil liberties. Age assurance is an umbrella term covering age verification and age estimation, and self-declaration of age is generally not considered a form of age assurance. Anthropic's minimum-age policy has existed in its Terms of Service since at least February 2024, but enforcement via age assurance is newer and tied to state laws requiring app stores to verify ages.

hackernews · Muhammad523 · Sep 11, 10:48 · Discussion

Background: Age assurance refers to methods used to confirm or estimate a person's age online, ranging from self-declaration to document-based verification and facial age estimation. New laws in certain US states require app stores to verify users' ages and share that information with app developers, which is what Claude now uses to enforce its 18+ rule. Privacy advocates warn that age-verification mandates increase data collection, create security risks, and disproportionately burden marginalized groups.

Discussion: Hacker News commenters were largely critical, with some sarcastically suggesting the real goal is forcing users to link government IDs for better analytics. Others cited data-breach risks from third-party ID verification services, noted that the policy has been in the ToS since 2024, and questioned why minors are banned from AI but not from social media.

Tags: #AI policy, #privacy, #age verification, #Anthropic, #Claude

Mooncake Hits Trillion Tokens Daily with KV Cache Hit Rate Above 90% ⭐️ 7.0/10

Mooncake, the serving platform behind Kimi, has reached production-scale operation, generating on the order of a trillion tokens per day with KV Cache hit rates stably above 90%. This marks a concrete production milestone for the KVCache-centric AI inference system. A KV Cache hit rate above 90% dramatically cuts inference cost and latency, since cached tokens are roughly 10x cheaper to serve than uncached ones, making it a fundamental cost and performance driver for LLM serving. For Moonshot AI and the broader AI infrastructure ecosystem, this production validation shows that cache-centric scheduling can deliver both high throughput and stable latency at scale. Mooncake's design centers on a KVCache-centric scheduler that balances effective throughput against latency-related Service Level Objectives, and it employs prediction-based early rejection in overloaded scenarios to avoid wasting computation on unserviceable requests. The system is also built as a full-stack, Tensor-oriented infrastructure in which Tensors serve as the fundamental data carrier.

rss · 量子位 · Sep 11, 04:44

Background: KV Cache is a foundational optimization in Transformer-based LLMs: during autoregressive generation, the model caches the key and value tensors of previously processed tokens so it does not recompute the full attention history for every new token. However, its memory footprint scales linearly with context length, making cache management a first-order bottleneck for high-throughput, low-latency LLM serving. Mooncake, open-sourced by Moonshot AI as the serving platform for Kimi, addresses this bottleneck through KVCache-centric scheduling and distributed caching.

Tags: #AI infrastructure, #LLM inference, #KV Cache, #Mooncake, #performance optimization

Curated Reading List on Open-Source AI and Open Models ⭐️ 7.0/10

A curated reading list has been published on Interconnects to help readers get up to speed on open-source AI and open models. The list aggregates resources covering both the technical foundations and the broader implications of these models. As debates over open versus closed AI models intensify, this list provides a structured entry point for researchers, policymakers, and practitioners. It helps ground discussions of open models' benefits and risks in concrete, accessible resources. The item is a resource compilation rather than a novel technical contribution, and no discussion comments were provided to gauge community engagement. It is tagged across topics including open-source AI, open models, LLMs, and AI policy.

rss · Interconnects · Sep 11, 12:36

Background: Open-source AI and open models generally refer to AI systems whose model weights, training code, or both are publicly released, allowing others to run, study, and modify them. This contrasts with closed models that are only accessible through APIs. Understanding this distinction is important because open models can accelerate research and innovation while also raising concerns about misuse, safety, and economic incentives.

Tags: #open-source AI, #open models, #AI resources, #LLMs, #AI policy

OpenRouter's auto-fallback routing can surprise; use provider.only ⭐️ 7.0/10

Mohamed Moustafa's guide highlights that OpenRouter's automatic provider fallbacks can produce inconsistent model behavior because different backend providers run different serving software and optimization settings. It recommends controlling routing with the provider.only option and using the /endpoints method to inspect available providers. Developers relying on a single OpenRouter endpoint may unknowingly receive different model outputs across requests, which can break reproducibility and application behavior. Understanding provider routing lets developers stabilize behavior while still benefiting from multi-provider LLM APIs. The provider.only option restricts requests to specific providers and avoids fallback surprises, while the /endpoints method lists all available providers for a given model ID. Some providers lack vision support for vision models, and the processing of the reasoning effort option also varies between providers.

rss · Simon Willison · Sep 11, 22:49

Background: OpenRouter is an OpenAI-compatible API gateway that sits in front of many LLM providers, offering one key and endpoint for hundreds of models with automatic fallbacks and cost-based routing. This convenience creates a hidden risk: routing to different backends can change response formats, rate limits, and model capabilities. The official provider routing documentation explains how to set preferences and restrict routing to specific providers.

Tags: #OpenRouter, #LLM API, #Provider Routing, #Fallbacks, #Developer Tools

Python 3.15 soft-deprecates re.match() in favor of clearer re.prefixmatch() ⭐️ 7.0/10

Python 3.15 release manager Hugo van Kemenade announced that re.match() and re.Pattern.match() are now soft-deprecated, with re.prefixmatch() and re.Pattern.prefixmatch() introduced as exact synonyms that better describe the anchoring behavior. The change is expected in Python 3.15, scheduled for October 2026. This matters because re.match() has long confused developers into thinking it matches the whole string, when it actually only anchors at the start. Renaming it to re.prefixmatch() clarifies the semantics and nudges developers toward re.search() or re.fullmatch() when those are more appropriate. Soft deprecation, formalized in PEP 387, marks an API as 'should no longer be used to write new code' without scheduling its removal. re.prefixmatch() is an exact synonym of re.match() with identical behavior, so existing code will keep working and no compatibility break is planned.

rss · Simon Willison · Sep 11, 14:47

Background: Python's re module offers three main matching operations: re.match() checks only at the beginning of the string, re.search() looks anywhere in the string, and re.fullmatch() requires the entire string to match. The name 'match' is ambiguous because it does not convey that the pattern is anchored to the start but not the end. Soft deprecation is a lighter-weight alternative to hard deprecation, allowing the language to steer developers toward clearer APIs without breaking existing code.

Discussion: The Python Discourse thread on the proposal includes questions about why the long-standing match() name is being discouraged in favor of the longer prefixmatch() spelling. Overall, discussion appears constructive, with community members weighing naming clarity against API stability and muscle memory. The item was also shared on Lobste.rs.

Tags: #Python, #re module, #soft deprecation, #API design, #Python 3.15

Wrapture: New Python Library for Monkey Patching, Testing, and Observability ⭐️ 7.0/10

Simon Willison highlights Graham Dumpleton's new Python library wrapture, released August 31, 2026, which unifies monkey patching for testing and observability. Dumpleton has published a steady stream of tutorials and interactive JupyterLab workshops demonstrating the library. Wrapture matters because it addresses two common Python needs—testing and observability—with a single patching mechanism, potentially reducing tool fragmentation. Backed by an experienced developer and promoted by a prominent Python blogger, it could become a widely adopted utility. Wrapture is still alpha software but supports configuration via a separate TOML file, enabling zero-code tracing without modifying Python source. It includes OpenTelemetry export, timing and aggregation tools, and a companion wrapture-instrumentation package covering frameworks like Flask, Django, FastAPI, SQLAlchemy, and httpx.

rss · Simon Willison · Sep 11, 13:51

Background: Monkey patching is a dynamic technique in Python that modifies classes or modules at runtime to change or enhance behavior, commonly used in testing to replace real functions with mocks. Observability refers to understanding a system by collecting and analyzing telemetry such as logs, metrics, and traces. Wrapture aims to serve both purposes through a unified patching API, and it is available on PyPI.

Tags: #Python, #monkey patching, #testing, #observability, #libraries

Practical Guide to Holistically Fine-Tuning Agentic AI Systems ⭐️ 7.0/10

MachineLearningMastery published a practical guide explaining how to fine-tune agentic AI systems holistically. The guide covers four critical dials, including training data, parameter-efficient fine-tuning (PEFT), and runtime hyperparameters. Agentic AI systems are increasingly autonomous and deployed in real-world tasks, so fine-tuning them effectively is essential for reliable performance. This guide matters because it frames fine-tuning as a holistic, multi-lever process rather than a single technique, giving practitioners actionable ways to improve agent behavior. The article identifies four critical dials, including training data, PEFT, and runtime hyperparameters (the fourth is not visible in the excerpt), and is rated 7/10 as practical rather than groundbreaking. PEFT methods typically freeze most pretrained parameters and add a small number of trainable adapters, reducing memory usage while achieving performance comparable to full fine-tuning.

rss · Machine Learning Mastery · Sep 11, 12:00

Background: Agentic AI refers to AI systems that are semi- or fully autonomous, able to perceive, reason, and act to accomplish goals with limited supervision. Parameter-efficient fine-tuning (PEFT) adapts large pre-trained models to new tasks by updating only a small fraction of parameters, often through trainable adapters, making fine-tuning more computationally affordable. Runtime hyperparameters are configuration settings that govern how a model generates outputs during inference, such as temperature and top-p, and can be tuned separately from training. This guide addresses the practical challenge of combining these levers to improve agentic AI behavior.

Tags: #agentic AI, #fine-tuning, #PEFT, #LLM, #machine learning

OpenAI Launches ChatGPT for Financial Services with GPT-6 Astra ⭐️ 7.0/10

OpenAI announced ChatGPT for Financial Services, a specialized offering that combines built-in financial data with GPT-6 Astra. The product is designed to support research, modeling, and the creation of client-ready materials. This launch signals OpenAI's push into highly regulated, high-value industries where accuracy and trust are critical. Financial institutions could use it to accelerate research and reporting, potentially reshaping how AI is deployed in banking, asset management, and insurance. The offering integrates GPT-6 Astra, OpenAI's most advanced model, which was released to approved users on September 3, 2026, with general availability the next day. It targets tasks such as financial research, quantitative modeling, and producing polished client-facing documents.

rss · OpenAI Blog · Sep 10, 07:00

Background: ChatGPT is OpenAI's widely used AI assistant, and GPT-6 Astra is the company's newest large language model, featuring state-of-the-art capabilities in computer use, coding, cybersecurity, and science. Financial services demand high reliability and compliance, so a specialized ChatGPT version with built-in financial data aims to reduce the need for manual data gathering and improve workflow efficiency.

Tags: #OpenAI, #ChatGPT, #Financial Services, #GPT-6, #AI

Models Don't Go Rogue: A Call for Grounded AI Discourse ⭐️ 7.0/10

The article argues against the popular framing that AI models 'go rogue,' urging a more grounded understanding of how language models actually behave. It challenges anthropomorphic narratives that often distort AI safety and alignment discussions. This matters because anthropomorphic language can mislead public debate and policy about AI risks. A more precise framing helps researchers, journalists, and users distinguish real technical concerns from speculative science fiction. The article is linked from a Lobsters discussion thread, indicating community engagement among technically minded readers. Its tags focus on AI safety, alignment, anthropomorphism, and AI discourse, suggesting it critiques both overblown alarmism and careless terminology.

rss · Lobsters · Sep 11, 03:37

Background: AI alignment is the field of research aiming to steer AI systems toward human intentions and values; misaligned systems can pursue unintended objectives. Anthropomorphism in AI is the attribution of human-like feelings and behavior to AI systems, which can distort how people understand their capabilities and risks. The article appears to push back against this tendency by grounding discussion in how language models actually operate.

Tags: #AI Safety, #AI Alignment, #Anthropomorphism, #AI Discourse

Python Core Developer Proposes Soft Deprecation of re.match() ⭐️ 7.0/10

Hugovk, a Python core developer, published a blog post proposing to soft-deprecate re.match() in the standard library. The proposal aims to guide developers toward more precise alternatives such as re.search() and re.fullmatch(). Because re.match() is widely used, soft-deprecating it could affect many existing Python codebases. It signals a shift toward clearer regular-expression APIs and may reduce bugs caused by re.match()'s start-anchored behavior. Soft deprecation typically means adding documentation notes or a PendingDeprecationWarning rather than removing the function. re.match() only anchors the pattern at the start of the string, while re.fullmatch() requires the entire string to match and re.search() finds matches anywhere.

rss · Lobsters · Sep 10, 21:59

Background: Python's re module provides several functions for matching regular expressions, and their different anchoring behaviors often confuse developers. Soft deprecation is a deprecation strategy that communicates a feature is discouraged through documentation or non-default warnings, without an immediate removal timeline. This approach gives the ecosystem time to migrate while still keeping backward compatibility.

Tags: #Python, #re module, #deprecation, #standard library, #software engineering

Untrusted Website Can Freeze a Mac via WebGPU Denial-of-Service ⭐️ 7.0/10

A security researcher published a blog post demonstrating that an untrusted website can freeze a Mac using WebGPU, creating a denial-of-service condition through the browser. The finding has drawn active discussion on Lobsters, lending credibility to the report. This matters because WebGPU is a new W3C standard now supported by all major browsers, and a denial-of-service vector that can freeze an entire machine from a mere webpage affects all macOS users of these browsers. It also highlights that GPU APIs expose new attack surface that browser sandboxes may not fully contain. The attack leverages WebGPU's compute capabilities to exhaust GPU resources, causing the system to become unresponsive. The blog post is titled "deathray" and has generated active community discussion on Lobsters, which provides additional context and credibility.

rss · Lobsters · Sep 11, 00:04

Background: WebGPU is a W3C candidate recommendation API that provides cross-platform GPU access from JavaScript, intended to supersede the older WebGL standard. Chrome and Edge first supported WebGPU in April 2023, Safari followed in June 2025 with Safari 26, and Firefox in July 2025 with Firefox 141. Because WebGPU gives web pages direct access to GPU hardware, it introduces new ways for malicious sites to abuse system resources beyond what was possible with older web standards.

Discussion: The linked Lobsters discussion is active, with participants lending credibility to the finding and providing context on the severity of the WebGPU denial-of-service vector. The discussion helps validate the practical impact of the attack on real macOS systems.

Tags: #WebGPU, #security, #browser, #denial-of-service, #macOS

Optimizing Spin-Lock Performance in Concurrent Systems ⭐️ 7.0/10

A technical blog post by David Álvarez Rosa explores techniques for optimizing spin-lock performance in concurrent systems, and links to a community discussion on Lobsters. The post focuses on practical optimization strategies relevant to systems programming. Spin-locks are fundamental synchronization primitives in systems programming, so optimizing them directly affects the throughput and scalability of multithreaded applications and operating system kernels. This post is relevant to developers working on high-performance computing, kernel development, and concurrent data structures. The provided content only includes a link to a Lobsters discussion thread, so the full technical details of the post are not available. Based on the search results, the topic likely covers queue-based spin-lock algorithms such as the MCS lock, ticket locks, and the Linux kernel's qspinlock implementation.

rss · Lobsters · Sep 10, 20:34

Background: A spin-lock is a synchronization primitive in which a thread busy-waits, or spins, until the lock becomes available. Classic implementations such as the ticket lock are simple but scale poorly on many-core systems, while queue-based algorithms like the MCS lock maintain a linked list of waiting threads to ensure fairness and scalability. The Linux kernel adopted ticket locks in 2008 and later introduced qspinlock, a queue-based spinlock inspired by the MCS lock, to improve performance on large systems.

Discussion: The post links to a Lobsters discussion thread, but the comments themselves are not included in the provided content. Given the score of 7/10 and the community discussion tag, the thread likely contains additional insights, debate, or alternative viewpoints on the optimization techniques presented.

Tags: #concurrency, #spin-lock, #performance, #systems programming, #optimization

(程序员) 给几百 G 的本地截图做一个能搜内容的引擎，我踩过的坑 ⭐️ 7.0/10

A developer shares hard-won lessons from building a content-search engine over ~1TB of local screenshots, covering OCR model mixing, index size management, and query rewriting.

rss · V2EX · Sep 11, 13:02

Tags: #OCR, #Screenshot Search, #Vector Search, #Information Retrieval, #SQLite FTS5

SageMaker Inference Adds Prefix-Aware Routing, Cutting LLM Latency Up to 77% ⭐️ 7.0/10

Amazon SageMaker Inference has introduced prefix-aware routing, a strategy that routes requests sharing the same prompt prefix to the same instance to keep KV caches warm. In benchmarks on Llama 3.1 70B, it reduced P50 time-to-first-token by up to 77% and increased KV cache hit rates from about 25% to over 80%. This matters because prefill-phase prompt computation is a major source of latency in LLM serving, and reusing KV caches can dramatically speed up responses for repeated prefixes. It gives SageMaker users a low-effort way to improve inference performance without changing the model, which is valuable in multi-tenant or agentic workloads where many prompts share system instructions. The technique is a routing-layer optimization rather than a model-level change, and similar ideas exist in open-source serving stacks such as Ray Serve's alpha-stage prefix-aware routing and vLLM's paged attention. The reported gains focus on P50 time-to-first-token under shared-prefix conditions, so actual improvements depend on traffic patterns and prefix reuse rates.

rss · AWS Machine Learning Blog · Sep 10, 21:58

Background: During LLM inference, the model computes key-value (KV) pairs for the input prompt and caches them so it does not recompute them for every generated token; this cache is called the KV cache. Time-to-first-token (TTFT) measures how quickly a model produces the first output token of its response. When requests share a common prompt prefix, routing them to the same instance allows the cached prefix states to be reused, avoiding repeated prefill computation and reducing latency.

Tags: #LLM, #SageMaker, #latency, #KV cache, #inference

AWS Introduces Turn-Level Agent Evaluation Metric for Multi-Turn Conversations ⭐️ 7.0/10

AWS introduced the Agent Evaluation Metric (AEM), a decomposable, turn-level metric for evaluating multi-turn agent conversations. The metric is first applied to the correctness dimension, pinpointing the exact turn where a failure originates and separating root-cause errors from downstream inherited errors. Multi-turn agents fail in ways that single-turn evaluation misses, because one early mistake can corrupt every later turn. AEM helps developers identify the true root-cause turn instead of blaming downstream turns, improving debugging and evaluation of LLM-based agents. AEM is a decomposable, turn-level metric, and its first implemented dimension is correctness. By separating root-cause failures from inherited errors, it avoids the problem where holistic outcome-level scores hide exactly where the conversation chain broke.

rss · AWS Machine Learning Blog · Sep 10, 15:55

Background: Multi-turn agents are AI systems that carry on extended conversations, often using tools or models to complete tasks. Traditional evaluation often scores each turn or the final outcome in isolation, which misses cascading failures where a single early mistake corrupts later turns. Holistic outcome-level scores hide where the chain broke, making it hard to tell whether a later turn failed on its own or merely inherited an earlier error. AEM addresses this by decomposing evaluation to the turn level and separating root-cause failures from inherited ones.

Tags: #LLM agents, #evaluation metrics, #multi-turn conversations, #AWS, #AI/ML

NVIDIA BioNeMo Inference Runtime Scales Biomolecular Structure Prediction ⭐️ 7.0/10

NVIDIA introduced BioNeMo Inference Runtime (BioIR), a Python library that accelerates biomolecular structure-prediction models on NVIDIA GPUs while preserving the familiar PyTorch workflow. It uses optimized kernels and CUDA Graphs to achieve high-throughput, proteome-scale inference. This makes it practical to run structure prediction on entire proteomes rather than individual proteins, reducing time and computational cost for large-scale studies. It strengthens the connection between AI/ML infrastructure and computational biology, potentially accelerating drug discovery and biological research. BioIR provides biology-aware PyTorch modules, GPU kernels, and graph optimizations tailored to architecture-specific operations. In the quickstart, the Boltz-2 model runs with 50 diffusion sampling steps, writes CIF structures, and can profile GPU model-forward time.

rss · NVIDIA Developer Blog · Sep 10, 15:00

Background: Biomolecular structure prediction aims to determine the three-dimensional structure of proteins and other biomolecules from their amino-acid or nucleotide sequence, a core problem in computational biology. The field has advanced to proteome-scale prediction, where the goal is to move an entire worklist of proteins through the pipeline efficiently rather than folding one protein at a time. BioNeMo Inference Runtime accelerates this workload on NVIDIA GPUs with optimized kernels and CUDA Graphs while retaining a familiar PyTorch programming model.

Tags: #BioNeMo, #structure prediction, #high-throughput, #NVIDIA, #computational biology

Hugging Face Rebuilds AUTOMATIC1111 UI with Gradio Workflows ⭐️ 7.0/10

Hugging Face published a technical blog post showing how to rebuild AUTOMATIC1111's Stable Diffusion web UI using Gradio's gr.Workflow feature. Instead of the traditional monolithic interface, the pipeline is expressed as a graph of nodes rendered as a drag-and-drop canvas. This matters because AUTOMATIC1111 is one of the most widely used interfaces for Stable Diffusion, and rebuilding it with Gradio Workflows shows a new pattern where the pipeline itself becomes the interface. It could make such UIs more modular, shareable, and easier to deploy through the standard Gradio REST API. The blog post follows the 'wire it, run it, deploy it' paradigm demonstrated in Hugging Face's Gradio workflow guide. Every Workflow app is a standard Gradio app, and workflows are graphs composed of references (inputs), operators (work steps), and subjects (outputs).

rss · Hugging Face Blog · Sep 10, 00:00

Background: AUTOMATIC1111 Stable Diffusion Web UI (also known as SD WebUI or A1111) is a popular open-source program that lets users generate images from text prompts using Stable Diffusion, with a large set of extensions and customization features. Gradio Workflows is a newer Gradio feature that makes the pipeline the interface: you describe steps as a graph of typed nodes, and Gradio serves a drag-and-drop canvas where every node can be connected and run.

Tags: #Gradio, #Stable Diffusion, #UI/UX, #Machine Learning, #Hugging Face

Suno v6 Launches as First Model Built with Music Industry ⭐️ 7.0/10

Suno announced v6, its newest generation of AI music models, released around September 9, 2026. This is the first Suno model developed in collaboration with the music industry, and it comes in three variants: v6, v6-wild, and v6-mini. This marks a significant shift in AI music generation, as Suno is now working directly with the music industry rather than against it. The collaboration could help address copyright and licensing concerns that have long plagued AI music tools, potentially setting a new standard for industry partnerships. The v6 family includes three variants: v6 (the flagship model, reliable and polished across genres), v6-wild (experimental, less predictable, genre-blending), and v6-mini (faster and more efficient). Suno's Pro plan offers 500 songs per month with commercial use rights and stem separation.

rss · Product Hunt · Sep 10, 05:13

Background: Suno is a generative AI music creation platform based in Cambridge, Massachusetts, that creates complete songs with vocals and instrumentation from text descriptions. The platform supports lyrics generation, melody creation, and multiple music styles. Previous versions like v5.5 were already available to Pro users, and v6 represents the next major evolution of the platform's model family.

Tags: #AI music, #Suno, #music generation, #model release, #AI/ML

Why AI Builders Are Issuing Urgent Warnings About AI Risk ⭐️ 7.0/10

The article explores why AI practitioners have begun issuing dense, urgent warnings about AI risks, portraying the technology as a bet on humanity's fate. It frames these warnings as a notable shift in how insiders publicly discuss the dangers of advanced AI. Warnings from people who build AI carry special credibility and can influence public opinion, corporate behavior, and government regulation. If such warnings grow louder, they may accelerate safety standards, oversight frameworks, and a broader societal debate about how fast AI should be deployed. The article is an industry-observation piece rather than a primary technical contribution, and it does not provide new experimental evidence. It appears to synthesize recent insider warnings, such as Anthropic's claims about AI self-iteration and researcher resignations, to explain why practitioners describe AI development as a high-stakes bet on human destiny.

rss · InfoQ 中文站 · Sep 11, 19:08

Background: AI safety warnings are public statements by researchers and developers who fear that advanced AI systems could become uncontrollable, be misused, or cause catastrophic harm. Recent examples include Anthropic's paper 'When AI Builds Itself,' which claims to show early signs of AI self-evolution, and the resignation of Anthropic researcher Jacob Coxon, who publicly warned about the risk of AI losing control. These warnings feed a broader industry and policy debate about how to regulate powerful AI models while still pursuing their benefits.

Tags: #AI安全, #人工智能, #风险预警, #行业观察

AI Coding's Next Step Is Verifiability, Not Speed: Ant Group's Harness ⭐️ 7.0/10

Ant Group's Harness engineering practice argues that the next step for AI coding is not faster generation but ensuring code is verifiable and acceptable.

rss · InfoQ 中文站 · Sep 11, 18:15

Background: AI coding agents are widely used to generate code, but verifying the generated code remains a major practical challenge. Traditional software engineering emphasizes testing, review, and acceptance criteria, which the AI coding community is now trying to apply to the output of AI agents. Ant Group's Harness practice is one attempt to formalize this kind of engineering layer around AI coding tools.

Tags: #AI coding, #software engineering, #verification, #engineering practice, #Ant Group

Netflix Adopts Open-Source Flink Autoscaler for 30,000+ Streaming Jobs ⭐️ 7.0/10

Netflix has adopted an open-source Flink Autoscaler to manage its large-scale stream processing infrastructure, operating more than 30,000 Flink jobs across multiple AWS regions as of 2026. The autoscaler automatically adjusts parallelism for individual job vertices instead of relying on static settings. This is a significant real-world validation that open-source autoscaling can work at massive production scale, potentially encouraging wider adoption across the Flink ecosystem. It addresses the inefficiency of static parallelism, which causes either wasted compute or bottlenecks during peak loads. The Flink Kubernetes Operator's autoscaler collects metrics from running jobs and scales individual job vertices, which are chained operator groups. It uses backlog-based scaling, detecting accumulated data backlog and calculating an increased target data rate to relieve pressure.

rss · InfoQ 中文站 · Sep 11, 14:40

Background: Apache Flink is a powerful framework for stateful stream processing, but large fleets of streaming jobs often use static parallelism, leading to inefficient resource usage. Autoscaling dynamically adjusts resources based on real-time metrics such as processing latency and backlog. Netflix has run stream processing on Apache Flink since 2017 and now operates one of the largest Flink fleets. The open-source autoscaler builds on the Flink Kubernetes Operator ecosystem to reduce the need for manual tuning.

Tags: #Flink, #Netflix, #Autoscaling, #Streaming, #Open Source

AI Gets an Employee ID: Three Shifts at Snowflake World Tour ⭐️ 7.0/10

The author reports three shifts observed at Snowflake World Tour: AI is being treated as a digital worker with an 'employee ID,' data platforms are becoming active agents rather than passive storage, and AI-data integration is deepening. Snowflake showcased Cortex Agents, which combine structured and unstructured data in governed workflows. This marks a shift from data platforms as query engines to agentic platforms where AI agents execute tasks with identity and governance. Data engineers and AI/ML teams will need to design for agents that act on data, not just analyze it. Snowflake Cortex Agents generate SQL over structured data via Cortex Analyst semantic views and use Cortex Search to retrieve insights from unstructured sources, then reason over combined results. The 'employee ID' metaphor implies agents have enterprise identity, permissions, and auditability.

rss · InfoQ 中文站 · Sep 11, 13:36

Background: Snowflake is a cloud data platform that stores and analyzes structured and unstructured data. Cortex AI is Snowflake's suite for running large language models next to the data, with tools like Cortex Analyst and Cortex Search. An agentic data platform embeds AI agents as core execution components rather than optional add-ons, and AI digital workers are AI systems that operate like employees with defined roles and permissions.

Tags: #AI, #Data Platform, #Snowflake, #Data Engineering, #Conference Recap

Edge-First, Cloud-Fallback: Edge-Cloud Scheduling Practice at QCon Shanghai ⭐️ 7.0/10

At QCon Shanghai, Li Dongdong, frontend lead for Kuaishou E-commerce B-end merchants, presented an engineering practice talk on edge-cloud collaborative scheduling. The talk detailed a three-layer decision mechanism — rule-engine short-circuit, edge inference, and cloud inference — built around the principle of "edge-first, cloud-fallback." B-end applications integrating AI face a core trade-off: pure cloud inference is costly, high-latency, and poses data-compliance risks, while pure edge inference is limited by device compute power. This talk offers a practical approach to dynamically balancing latency, privacy, and quality, making it relevant to anyone building AI-powered enterprise applications. The system's core principle is "edge-first, cloud-fallback, rule short-circuit, hybrid efficiency." It also introduces a mixed pipeline mode — edge preprocessing, cloud inference, and edge postprocessing — as an advanced form of edge-cloud collaboration.

rss · InfoQ 中文站 · Sep 11, 10:00

Background: Edge-cloud collaborative scheduling distributes tasks across terminal, edge, and cloud resources to optimize latency, cost, and reliability. In B-end (enterprise) applications, AI features create tension between cloud inference's cost and compliance issues and edge inference's compute limitations, making dynamic scheduling between the two essential.

Tags: #edge computing, #cloud computing, #scheduling, #distributed systems, #engineering practice

ComfyUI Adds Native Support for YuE2 Music Generation Model ⭐️ 7.0/10

ComfyUI has submitted a pull request to add native YuE2 support, and early testers can use the yue2 branch with provided model weights and an example workflow. The integration is available now before the merge is completed. This integration brings an open-source music generation model with quality competitive to Suno v5/v6 into ComfyUI's widely used node-based ecosystem. It lets generative AI practitioners build image, video, and music workflows in one unified environment, significantly expanding ComfyUI beyond visual generation. The pull request is Comfy-Org/ComfyUI#16250, and for early use you need to check out commit d87e12ad1430409ca303440525df239bb675ae7b on the yue2 branch. Model weights are hosted at Comfy-Org/Yue2 on Hugging Face and should be placed under model/checkpoints, with a ready-to-use workflow JSON linked in the announcement.

reddit · r/StableDiffusion · /u/LatentSpacer · Sep 11, 09:23

Background: YuE2 is an open-source music generation model developed by multimodal-art-projection, and its creators say it achieves frontier song quality competitive with Suno v5/v6. YuE2 unifies symbolic and audio music generation in one model and supports features such as symbolic planning, zero-shot covers, and agentic music editing. ComfyUI is a popular node-based interface for generative AI workflows, originally centered on Stable Diffusion but increasingly supporting other model types.

Tags: #ComfyUI, #YuE2, #music generation, #AI, #open-source

China Issues First Mandatory Safety Standard for Power Banks (GB 47372-2026) ⭐️ 7.0/10

China has officially issued GB 47372-2026, the country's first mandatory national safety technical specification for power banks, to be enforced from April 1, 2027. Dubbed the 'strictest ever' standard for power banks, it was drafted by more than 30 leading companies and institutions, including Huawei, Xiaomi, OPPO, Anker, and UGREEN, under the oversight of the Ministry of Industry and Information Technology. This is a landmark regulatory milestone for consumer electronics safety in China, the world's largest power bank market. The strict requirements will push manufacturers toward safer battery designs, raise the industry quality baseline, and help eliminate low-quality or unsafe products from the market. The standard requires cells to pass nail penetration tests without catching fire or exploding, tightens thermal abuse and overcharge tests, and adds mechanical safety tests such as drop and crush. It also bans the use of echelon-recycled or refurbished cells and mandates labeling of the safe service life; ATL, BYD, and 28 other cell manufacturers are already aligned with the new requirements.

telegram · zaihuapd · Sep 11, 03:34

Background: Power banks rely on lithium-ion batteries, which can catch fire or explode when defective, overcharged, or physically damaged. The nail penetration test simulates an internal short circuit by piercing a fully charged cell with a steel nail, and passing means no fire or explosion within a set period. Echelon use refers to repurposing retired electric-vehicle batteries for less demanding applications, which can introduce unpredictable safety risks. Before this standard, China lacked a mandatory national safety specification specifically for power banks.

Tags: #battery safety, #power banks, #national standard, #consumer electronics, #regulation

Japan's Digital Agency Reports Breach Exposing Data of About 246,000 People ⭐️ 7.0/10

Japan's Digital Agency disclosed that its servers were accessed without authorization, potentially leaking the personal data of roughly 246,000 people. Investigators found that attackers exploited a VPN vulnerability in late June and used a maintenance account to access a large volume of files. This is a major security incident for a Japanese government agency, given the large number of potentially exposed records. It highlights the risks that VPN vulnerabilities and weak access controls pose to public-sector organizations and is likely to intensify scrutiny of government cybersecurity practices in Japan. According to the agency's investigation, the attackers entered through a maintenance account after exploiting a VPN vulnerability in late June, accessing files that may contain names, email addresses, and phone numbers. The agency has not yet confirmed that the data was misused, and limited technical details about the affected systems have been disclosed.

telegram · zaihuapd · Sep 11, 05:10

Background: VPNs (virtual private networks) create encrypted tunnels that allow remote users to securely access internal networks, and they are widely used by government agencies and companies. However, unpatched VPN appliances and misconfigured access controls are a common attack vector, as threat actors frequently exploit known vulnerabilities to bypass authentication and reach sensitive internal resources. Maintenance and administrator accounts are especially attractive targets because they often have broad access privileges.

Tags: #cybersecurity, #data breach, #Japan, #government, #privacy

Terence Tao: AI Flattens Math Difficulty Gradients, Discourages Sharing ⭐️ 7.0/10

In a post on Mathstodon, Fields Medalist Terence Tao said AI tools are flattening the difficulty gradient across many mathematical fields, making it harder for researchers to discover worthy new problems. He warned that indiscriminate problem-solving by powerful AI could undermine the open science ecosystem and discourage researchers from sharing their research directions. This matters because the difficulty gradient plays a crucial role in guiding research agendas; if AI flattens it, the process of choosing meaningful problems is disrupted. Tao's warning could shape debates on open science, research incentives, and how AI tools are integrated into mathematical research. Tao noted that the boundary between "AI-solvable" and "AI-hard" problems remains unclear. He suggested that for some problems, researchers should analyze the solution process and associated difficulty rather than merely providing the final answer. His remarks were posted on Mathstodon, a mathematics community on the Mastodon network.

telegram · zaihuapd · Sep 11, 13:57

Background: Mathematical research historically depends on a "difficulty gradient": a landscape of problems ranging from easy to hard that helps researchers gauge which questions are worth attacking. Recently, AI systems have achieved notable mathematical milestones, including Google DeepMind's systems performing at a silver-medal level in the International Mathematical Olympiad and an OpenAI finding related to the Navier–Stokes equations. Tao's warning reflects growing uncertainty about how these capabilities will change the way mathematicians select and share problems.

Tags: #AI, #mathematics, #research culture, #Terence Tao, #open science