clementtang.eth (@Clementtang) header
clementtang.eth (@Clementtang) profile picture

Vietnam, Partnerships, web3 @91appInc|Co-Founder of @GoodTeamGuild|Founder of https://teapaw.org/t.co/s4t3ZXaChM|🇹🇼 Diplomat Spouse|#eCom #MarTech #AdTech

Hanoi, Vietnam
Joined April 2008
Photo by clementtang.eth (@Clementtang)Photo by clementtang.eth (@Clementtang)Photo by clementtang.eth (@Clementtang)Photo by clementtang.eth (@Clementtang)Photo by clementtang.eth (@Clementtang)Photo by clementtang.eth (@Clementtang)Photo by clementtang.eth (@Clementtang)Photo by clementtang.eth (@Clementtang)Photo by clementtang.eth (@Clementtang)Photo by clementtang.eth (@Clementtang)
clementtang.eth retweeted
Amazing things are happening in Taiwan
4
5
1
29
1,800
直接產生 env 不過進階用戶應該都有自己一套做法,這算是給小白或是一些簡單用途快速套用吧?
We've made it easier to get your repo running in Claude Code cloud sessions on Pro, Max, and Ultra. Claude figures out what dependencies, network access, and API keys it needs, then saves the environment for next time. API keys are saved securely, so Claude never sees them.
1
84
不錯欸!拿來用!
Introducing @𝚓𝚜𝚘𝚗-𝚛𝚎𝚗𝚍𝚎𝚛/𝚌𝚑𝚊𝚝 Generative UI for Slack, Teams and more → Agents reply with native cards → Tables, fields, charts and buttons → Streams in as the model writes → One catalog for every Chat SDK platform
1
58
clementtang.eth retweeted
We rebuilt our mobile apps in Swift and Kotlin with agents. To keep pace and hold our quality bar, we built Reflex: an agentic-first architecture that lets agents build and verify app behavior across iOS and Android without needing devices or simulators. Here's how it works, piece by piece: shopify.engineering/reflex
44
145
48
1,531
187,745
存在十年以上的漏洞,沒發現只是因為沒人試過這麼長的密碼
The bug is like a joke. On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀
1
5
1,565
👀
🇰🇷 𝗔𝗥𝗧𝗘𝗫 𝗘𝘅𝗽𝗼𝘀𝗲𝗱: 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝗕𝗲𝗵𝗶𝗻𝗱 𝗦𝗼𝘂𝘁𝗵 𝗞𝗼𝗿𝗲𝗮'𝘀 𝗕𝗮𝗻𝗸 𝗕𝗿𝗲𝗮𝗰𝗵𝗲𝘀 Days ago CrowdStrike and Genians reported ARTEX, an AI-driven autonomous pentest framework, in the intrusions that hit seven South Korean financial institutions. We found a second open directory those reports didn't cover, and it opened up the operator's whole working environment. What the exposed directories showed us: - A Hong Kong jump server at 23.248.226[.]250 wired to the ARTEX console, with credential files, reverse SSH tunnels and sync scripts - The harness is Claude Code, but routed through CCR to a DeepSeek backend via the xcai[.]pro reseller, with GLM and Grok as backups - 19 custom agent skills for recon, web testing, payment-logic abuse and mobile-device operations - A rotating proxy service that exposed 79 unique exit IPs across the first 100 identities we tested - Pivoting on the ARTEX certificate, malware tag and console title tied 1,303 candidate IPs and 280 linked open directories Full write-up, including the HuntSQL queries and the IOC table 👇 hunt.io/blog/artex-south-kor…
88
哈哈哈
I turned my unslopping process into a free Claude skill It works on landing pages, dashboards and mobile apps Go unslop your stuff: github.com/heydamir/unslop
1
1
82
clementtang.eth retweeted
🚨this is SERIOUSLY dangerous. i just tested a free Claude skill called "teardown" and 3d artists and motion designers should start worrying. stuff like this should cost money and until someone notices, here is my run. what the skill does: > one picture and one word from you, the name of the animal > claude writes the bird as code, puts its own still next to your picture and reworks it 3 times before the film starts > under the plates it packs 300 small parts in loops and hangs 7 glass feathers on every wing > one clock drives everything: the wingbeat on the gauge, the cursor on the panel, the sound, all read from the same timeline file > claude never sees the video, it reads a sheet of frames at every beat, fixes what is wrong and renders again until nothing is left > your GPU captures it at 60 fps and a python script scores it on the same beats this is the 3rd model i've run through it and this one landed on the 2nd generation. the skill is free and sits in the article below 👇
30
49
2
482
50,801
看完還是覺得沒那麼好上手 🥺
HOLY F*CK, motion studio in 100% free 22 repos. I don't use After Effect anymore. Just Opus 5.5 and this open-source 22 github skills. Animation. Physics. 3D. Render. Delivery. 01 Remotion → React video engine. github.com/remotion-dev/remo… 02 Anime.js → Timeline choreography. github.com/juliangarnier/ani… 03 mo.js → Shape bursts and motion effects. github.com/mojs/mojs 04 Theatre.js → Visual keyframe editing. github.com/theatre-js/theatr… 05 Two.js → Animated vector scenes. github.com/jonobr1/two.js 06 D3 → Data-driven graphics. github.com/d3/d3 07 Three.js → 3D scenes and cameras. github.com/mrdoob/three.js 08 Babylon.js → Real-time 3D rendering. github.com/BabylonJS/Babylon… 09 Drei → Ready-made React Three Fiber helpers. github.com/pmndrs/drei 10 Spark → Gaussian splat rendering. github.com/sparkjsdev/spark 11 cables.gl → Visual node-based scenes. github.com/cables-gl/cables_… 12 Taichi → GPU-powered physics simulations. github.com/taichi-dev/taichi 13 SPlisHSPlasH → Fluids, foam and splashes. github.com/InteractiveComput… 14 Custom Shader Material → Custom shaders with Three.js lighting. github.com/FarazzShaikh/THRE… 15 OpenToonz → Hand-drawn character animation. github.com/opentoonz/opentoo… 16 Qwen3-TTS → Expressive voiceovers. github.com/QwenLM/Qwen3-TTS 17 Audacity → Audio cleanup and mixing. github.com/audacity/audacity 18 Subtitle Edit → Subtitle editing and timing. github.com/SubtitleEdit/subt… 19 Auto-Editor → Automatic silence cuts. github.com/WyattBlue/auto-ed… 20 RIFE → Frame interpolation and slow motion. github.com/hzwer/ECCV2022-RI… 21 OBS Studio → Screen capture. github.com/obsproject/obs-st… 22 FFmpeg → Encoding and final delivery. github.com/FFmpeg/FFmpeg Idea → storyboard → build → animate → mix → export. Bookmark this. Go build something worth watching ↓
114
印象中 Opencommerce 這產品名已有人用過?
today we are announcing openrouter for commerce: opencommerce.sh a single endpoint that integrates 5k stores, including Doordash, Amazon and most shopify stores, with payments using Agentcard (Stripe Link and Shop coming soon). we built opencommerce to solve 3 problems: * coverage: one endpoint to integrate 5k stores. agentic purchasing is a core feature for most personal assistants, but not their main business. searching for products and buying on behalf of users shouldn’t be as painful as it is today (e.g. it shouldn’t involve browser automations or dealing with PSPs). opencommerce solves that: 1 tool, every online store. * reliability: 100% uptime. the challenge with browser automations is that they fail (e.g. captchas, bot-detection, etc). we run thousands of tests every couple of hours on every one of the stores to guarantee that the integration works when your user tries to buy something. * speed: responses in under 10s. consumers are used to Amazon speed, and agentic purchases have so far felt like a downgrade. most agents spend minutes finding products before they come back with results. we monitor speed and improve it constantly.
2
136
CC VS Code 外掛供應鏈攻擊
This quoted post is unavailable.
57
慘慘,日本 MUJI 公告 MUJI App 洩漏最多可能 2726 萬筆包含姓名、生日、性別 (不包含信用卡) 的個資。
【お詫びとお知らせ】 このたび、無印良品の公式アプリ「MUJIアプリ」において、お客さま情報の一部が外部に流出した可能性があることを確認しました。お客さまをはじめ、関係する皆様にご心配をおかけしますことを、深くお詫び申し上げます。 詳細は以下をご確認ください。 ryohin-keikaku.jp/news/artic…
5
275
👀
We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users. This malicious version of the extension was not developed by Anthropic. It does not impact other extensions downloaded from the cursor.com/marketplace, Grok Bot, Grok or our other SpaceXSI products. In response, we took down our extension marketplace this afternoon, worked with relevant providers to neutralize the malware, and have reinstated the marketplace after confirming there is no further risk. If affected, please review instructions in this blog post to understand how to find the malicious package and establish a path to mitigate any potential impact. We are asking all customers update to Claude Code for VS Code version 2.1.314: cursor.com/blog/claude-code-…
4
195
clementtang.eth retweeted
Just in: @sama in Taipei meeting with Foxconn chair Young Liu as @OpenAI seeks to secure server supply.
6
9
7
131
20,457
太炫技啦
Replying to @tobi
Look for Expo Mode. We built it with Google’s new HTML-in-Canvas API. I think we’re one of the first to use it.
79
clementtang.eth retweeted
WordPress 7.1.4 is now available. This security release fixes multiple issues, and site owners should update immediately. Update from the WordPress Dashboard or download the release. wp.me/pZhYe-5Ha
24
388
89
1,026
197,420