卧槽，3090要可能要涨价了！！ 因为老黄的刀法被人破解了 有人给3090解了个锁，同样限制在 360W，PyTorch 测试从 75 TFLOPS 跑到了 135 TFLOPS，提升约 80%！ 你以为是超频，把功耗往上拉？ 但他改的是显卡里控制运算速度的寄存器，这些寄存器平时有权限保护，正常改不了 他利用 GPU 启动固件的漏洞，赶在 NVIDIA 驱动加载之前拿到写入权限，把相关运算改成全速，再交给原版驱动使用 解开的主要是 FP16／BF16 输入、FP32 累加这类 AI 运算的速度限制 但测试算力多了 80%！！ 4090 也有分支项目做到了：同类运算的指令吞吐，从约 165 TFLOPS 提升到 331 TFLOPS，接近翻倍 项目地址，附上👇 github.com/Zagitta/gpu-unloc…

🛑 Attackers hijacked over 300 Tor exit relays to intercept SSH connections and steal login passwords. A researcher found 333 exits redirecting SSH traffic to 12 interception servers. The Tor Project has since blocked the affected relays. Here's how the attack worked: thehackernews.com/2026/10/at…

PHP2Shell explained. @wiz_io @galnagli @calif_io

Indian Cybersecurity Certificate holders be like

Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. cfl.re/488w8dc

‼️BREAKING: PHP has released its fix for the two leaked flaws, which can let attackers run code on servers without logging in. "There are no complete mitigations, updating is the only safe choice," PHP says. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now. PHP says Apache with mod_php is most at risk, with a demonstrated exploit that fires before any application code runs. PHP 8.1 and older get no official update, though PHP has published source backports for 7.4, 8.0 and 8.1.

I'm using KeePassXC for a decade. In this decade, all commercial password managers went through significant enshittification. Lastpass, 1Password, Bitwarden, all of them. Some had security breaches. My password management hasn't changed in this decade at all. I haven't thought about password management once in 10 years. I haven't had to jump ship between providers or migrate my data. I just have a database shared across my devices and few offsite backups. One decision to go with free and open source password manager saved me so much trouble. Literally just use KeePassXC, don't even bother with commercial ones.

Ledger theft, day two. Since yesterday the thief has pushed ether through Tornado Cash three times, and each time on into Zcash's shielded pool. We followed every lot out the far side. Here is how, step by step. 1. THE SAME BUILD, THREE TIMES An ether wallet pays a fresh splitter. The splitter pays four fresh wallets. The four drop it into Tornado Cash's 100, 10 and 1 ETH pools. Minutes, every time. Run 1, yesterday 15:17: 1,254 ETH. Run 2, today 09:42: 1,291 ETH. Run 3, today 11:56: 450 ETH from 0xfa4EaBB840A33C156E600311433AE261CBfCb0e2, in the pools by 12:15. 2. OUT OF TORNADO CASH The mixer breaks the link between a deposit and a withdrawal. We do not need the link. Our tooling fingerprints the withdrawal transactions themselves: how each one is constructed, who constructs it, and when. Yesterday's 65 withdrawals (1,084 ETH) and today's 96 (1,726 ETH) all carry the same signature. The six other withdrawals from those pools in today's windows do not. Run 3 came out from 12:18 into 0x0d697aa182801566d87adc86e68e95fd3b2f5f82 (213 ETH) and 0x676b16cc18542f37d202a1a79ac05463395496a4 (122 ETH), and 195 ETH of it was inside a cross-chain swap service by 12:38. Forty-two minutes, end to end. 3. INTO ZCASH, AND OUT AGAIN The swap service turns the ether into shielded ZEC, where sender, amount and recipient vanish. But the service's own shielding of each lot is public, and from it we derive a value signature for that lot's exit, then scan every transparent exit from the pool. 108 of 108 exits across both days match their lot to the zatoshi. Not one other exit from the pool does. First lot today: in at 10:18:18, out at 11:06:16 in block 3512847 (8d26a9b095d4d28373527f7a6eb81a3be7f906d1e2190960c0512ff64f369418 and 738c6d1261e79766e4dd16bdbd38dced91b8e3a86ce41dcda83eda1f19208fbf), straight into a ZEC to USDC order. Today so far: 20 lots ordered (2,379 ZEC, $2.9m), 14 out, 5 inside the pool, 1 still settling. Every exit feeds a ZEC to USDC order paying two wallets born at 11:11, 22 of the 28 paid by 12:43: 0x816D5Ee17DB1495d1409F135b98FF3edc5F3cDf8: 940,561 USDC 0xBA736A4b616e79867B6d586293966b552883f3F3: 852,258 USDC 1.79m USDC, unspent. @Circle can freeze it. (1/2) 🧵⤵️

SOMEONE BUILT A WEBSITE THAT TURNS YOUR BROWSER INTO A COMPUTER FROM 1998. it's called Desktop98 → desktop98.com/ open the tab. Windows 98 boots. the dial-up sound plays. Winamp. MS Paint. DOOM. Duke Nukem 3D. Netscape opens the old web. GeoCities. Yahoo. AltaVista. Space Jam. then sign on to AOL. the chat rooms are full of AI characters living in 1998. free. nothing to install. built by one anonymous creator.

📡⚠️ WPS IS STILL A RISK — IS YOUR ROUTER EXPOSED? In this Reel, I’m using Stryker to test WPS security and show why this feature can still become a weak point on poorly configured Wi-Fi networks. 📱🔐 A strong password isn’t enough if your router settings leave another door open. Disable WPS when you don’t need it and secure your network before someone else tests it. 🛡️ 💬 Comment “WPS” for more Wi-Fi security content! #WiFiSecurity #WPS #Stryker #NetworkSecurity #CyberKid

IRC