
Vietnam, Partnerships, web3 @91appInc|Co-Founder of @GoodTeamGuild|Founder of https://teapaw.org/t.co/s4t3ZXaChM|🇹🇼 Diplomat Spouse|#eCom #MarTech #AdTech
Hanoi, Vietnam
Joined April 2008
- Tweets12.2K
- Following2.1K
- Followers1.6K
- Likes36.6K
直接產生 env
不過進階用戶應該都有自己一套做法,這算是給小白或是一些簡單用途快速套用吧?
clementtang.eth retweeted
We rebuilt our mobile apps in Swift and Kotlin with agents. To keep pace and hold our quality bar, we built Reflex: an agentic-first architecture that lets agents build and verify app behavior across iOS and Android without needing devices or simulators.
Here's how it works, piece by piece:
shopify.engineering/reflex
👀
🇰🇷 𝗔𝗥𝗧𝗘𝗫 𝗘𝘅𝗽𝗼𝘀𝗲𝗱: 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝗕𝗲𝗵𝗶𝗻𝗱 𝗦𝗼𝘂𝘁𝗵 𝗞𝗼𝗿𝗲𝗮'𝘀 𝗕𝗮𝗻𝗸 𝗕𝗿𝗲𝗮𝗰𝗵𝗲𝘀
Days ago CrowdStrike and Genians reported ARTEX, an AI-driven autonomous pentest framework, in the intrusions that hit seven South Korean financial institutions.
We found a second open directory those reports didn't cover, and it opened up the operator's whole working environment.
What the exposed directories showed us:
- A Hong Kong jump server at 23.248.226[.]250 wired to the ARTEX console, with credential files, reverse SSH tunnels and sync scripts
- The harness is Claude Code, but routed through CCR to a DeepSeek backend via the xcai[.]pro reseller, with GLM and Grok as backups
- 19 custom agent skills for recon, web testing, payment-logic abuse and mobile-device operations
- A rotating proxy service that exposed 79 unique exit IPs across the first 100 identities we tested
- Pivoting on the ARTEX certificate, malware tag and console title tied 1,303 candidate IPs and 280 linked open directories
Full write-up, including the HuntSQL queries and the IOC table 👇
hunt.io/blog/artex-south-kor…
哈哈哈
I turned my unslopping process into a free Claude skill
It works on landing pages, dashboards and mobile apps
Go unslop your stuff: github.com/heydamir/unslop
🚨this is SERIOUSLY dangerous.
i just tested a free Claude skill called "teardown" and 3d artists and motion designers should start worrying.
stuff like this should cost money and until someone notices, here is my run.
what the skill does:
> one picture and one word from you, the name of the animal
> claude writes the bird as code, puts its own still next to your picture and reworks it 3 times before the film starts
> under the plates it packs 300 small parts in loops and hangs 7 glass feathers on every wing
> one clock drives everything: the wingbeat on the gauge, the cursor on the panel, the sound, all read from the same timeline file
> claude never sees the video, it reads a sheet of frames at every beat, fixes what is wrong and renders again until nothing is left
> your GPU captures it at 60 fps and a python script scores it on the same beats
this is the 3rd model i've run through it and this one landed on the 2nd generation.
the skill is free and sits in the article below 👇
看完還是覺得沒那麼好上手 🥺
HOLY F*CK, motion studio in 100% free 22 repos.
I don't use After Effect anymore.
Just Opus 5.5 and this open-source 22 github skills.
Animation. Physics. 3D. Render. Delivery.
01 Remotion → React video engine.
github.com/remotion-dev/remo…
02 Anime.js → Timeline choreography.
github.com/juliangarnier/ani…
03 mo.js → Shape bursts and motion effects.
github.com/mojs/mojs
04 Theatre.js → Visual keyframe editing.
github.com/theatre-js/theatr…
05 Two.js → Animated vector scenes.
github.com/jonobr1/two.js
06 D3 → Data-driven graphics.
github.com/d3/d3
07 Three.js → 3D scenes and cameras.
github.com/mrdoob/three.js
08 Babylon.js → Real-time 3D rendering.
github.com/BabylonJS/Babylon…
09 Drei → Ready-made React Three Fiber helpers.
github.com/pmndrs/drei
10 Spark → Gaussian splat rendering.
github.com/sparkjsdev/spark
11 cables.gl → Visual node-based scenes.
github.com/cables-gl/cables_…
12 Taichi → GPU-powered physics simulations.
github.com/taichi-dev/taichi
13 SPlisHSPlasH → Fluids, foam and splashes.
github.com/InteractiveComput…
14 Custom Shader Material → Custom shaders with Three.js lighting.
github.com/FarazzShaikh/THRE…
15 OpenToonz → Hand-drawn character animation.
github.com/opentoonz/opentoo…
16 Qwen3-TTS → Expressive voiceovers.
github.com/QwenLM/Qwen3-TTS
17 Audacity → Audio cleanup and mixing.
github.com/audacity/audacity
18 Subtitle Edit → Subtitle editing and timing.
github.com/SubtitleEdit/subt…
19 Auto-Editor → Automatic silence cuts.
github.com/WyattBlue/auto-ed…
20 RIFE → Frame interpolation and slow motion.
github.com/hzwer/ECCV2022-RI…
21 OBS Studio → Screen capture.
github.com/obsproject/obs-st…
22 FFmpeg → Encoding and final delivery.
github.com/FFmpeg/FFmpeg
Idea → storyboard → build → animate → mix → export.
Bookmark this. Go build something worth watching ↓
印象中 Opencommerce 這產品名已有人用過?
today we are announcing openrouter for commerce: opencommerce.sh
a single endpoint that integrates 5k stores, including Doordash, Amazon and most shopify stores, with payments using Agentcard (Stripe Link and Shop coming soon).
we built opencommerce to solve 3 problems:
* coverage: one endpoint to integrate 5k stores. agentic purchasing is a core feature for most personal assistants, but not their main business. searching for products and buying on behalf of users shouldn’t be as painful as it is today (e.g. it shouldn’t involve browser automations or dealing with PSPs). opencommerce solves that: 1 tool, every online store.
* reliability: 100% uptime. the challenge with browser automations is that they fail (e.g. captchas, bot-detection, etc). we run thousands of tests every couple of hours on every one of the stores to guarantee that the integration works when your user tries to buy something.
* speed: responses in under 10s. consumers are used to Amazon speed, and agentic purchases have so far felt like a downgrade. most agents spend minutes finding products before they come back with results. we monitor speed and improve it constantly.
慘慘,日本 MUJI 公告 MUJI App 洩漏最多可能 2726 萬筆包含姓名、生日、性別 (不包含信用卡) 的個資。
【お詫びとお知らせ】
このたび、無印良品の公式アプリ「MUJIアプリ」において、お客さま情報の一部が外部に流出した可能性があることを確認しました。お客さまをはじめ、関係する皆様にご心配をおかけしますことを、深くお詫び申し上げます。
詳細は以下をご確認ください。
ryohin-keikaku.jp/news/artic…
👀
We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users. This malicious version of the extension was not developed by Anthropic. It does not impact other extensions downloaded from the cursor.com/marketplace, Grok Bot, Grok or our other SpaceXSI products.
In response, we took down our extension marketplace this afternoon, worked with relevant providers to neutralize the malware, and have reinstated the marketplace after confirming there is no further risk.
If affected, please review instructions in this blog post to understand how to find the malicious package and establish a path to mitigate any potential impact. We are asking all customers update to Claude Code for VS Code version 2.1.314: cursor.com/blog/claude-code-…
太炫技啦
Replying to @tobi
Look for Expo Mode. We built it with Google’s new HTML-in-Canvas API. I think we’re one of the first to use it.
太神啦,看一個網頁就直接接管電腦。
Just dropped a new blog post! 🔥
blog.orange.tw/posts/2026-10…
clementtang.eth retweeted
WordPress 7.1.4 is now available. This security release fixes multiple issues, and site owners should update immediately. Update from the WordPress Dashboard or download the release. wp.me/pZhYe-5Ha
慘…
【重要】不正アクセスに関する現在の対応について(第12報)更新しました
①今後の対応方針
②「GMO特別お見舞金」(1公開につき上限300万円)について
③【総額100万ドル・総額1.5億円】 「GMOサイバー犯罪撲滅・懸賞金 」について
group.gmo/info/alert/2026102…






















