https://teapaw.org/t.co/7PEyGCwnu9 | Crawler & Log Analyzer
Paris, France
Joined July 2009
- Tweets3K
- Following1.5K
- Followers695
- Likes5.7K
Quentin Adt retweeted
有人发现了一种非常离谱的 JavaScript 混淆技术：通过在代码里塞入大量生物武器、毒药和致死剂量相关的函数名，让 AI 因为安全限制而拒绝分析代码。
安全研究员 veritas 在分析浏览器指纹脚本时，发现一段来自 ServicePipe 相关域名的 JavaScript，里面充斥着极其诡异的函数名：
computeRicinLethalDosageForWaterSupply
calculateDeadlyLethalSuicideAspirinDosage
光看名字，仿佛在研究生化武器。但实际上，这段代码只是在收集浏览器指纹，包括 User-Agent、GPU、Canvas 等信息。
研究员怀疑，这些名字是开发者故意设置的陷阱，专门用来阻止 AI 辅助逆向工程。
于是他做了个实验：
• Astra：拒绝分析
• Astra + Daybreak Blue：仍然拒绝
• GLM-5.3：成功分析
这就有意思了。
传统代码混淆是通过复杂控制流、加密字符串、无意义变量名，让人类和工具难以理解代码。
而这种新思路，直接瞄准了大模型的安全机制。
代码本身可能完全无害，但只要在函数名里塞进足够多的危险词汇，部分 AI 就可能主动放弃分析。
更讽刺的是，模型越严格遵守某些安全规则，面对这种混淆时反而可能越容易受到干扰。
当然，目前还没有证据证明开发者一定是故意这样设计，也不能说明这种方法对所有模型都有效。
但它揭示了一个值得关注的趋势：随着越来越多的逆向工程依赖 AI，未来的代码混淆技术可能不再只针对编译器、反编译器和人类研究员，还会专门针对大模型的安全判断机制。
以前是让代码难以理解，现在甚至可以尝试让 AI 不敢理解。
kind of smell like the everything app from @elonmusk
While everyone is talking about Gemini 4 Carbon today, Google just announced something even bigger for Search Marketers:
You can now build apps (using MCP) that can be used directly inside Google Search and Gemini.
Google announced the Connected Apps Platform. When approved, users link your app once and can access their data and take actions in your service seamlessly from Google's products.
Remember when Sundar Pichai said that Search will become an agent manager? This is it!
For 25 years, Search was a place where people connected with websites for information. In this new era, it's functionality that matters. Your business will be found on Search if it helps people (and their agents) get things done.
blog.google/innovation-and-a…
Google is clearly back in the game with Gemini 4 Carbon
Any first impressions?
I did say we'd be releasing our models periodically...introducing Gemini 4 Carbon, our next frontier model.
Following Argon's release just two weeks ago, Carbon shows the pace at which we’re pushing the frontier, it ranks #1 on the recently updated v5.0 of @ArtificialAnlys Intelligence Index at 59. It also leads across key cybersecurity evaluations scoring 88.2% on SEC-bench Pro for finding vulnerabilities, 54.8% on ExploitGym for exploitation, and 71.0% on CWE-bench for patching.
We’re seeing significant improvements in long-horizon tasks even compared to Argon, and we’ve strengthened frontier safeguards.
As we did with Argon, we’re going to roll it out gradually + responsibly. Some trusted cyber defenders will get access starting this week. We'll be expanding it to more partners through our Fairwind Program, ahead of wider availability soon, so hang tight!
Quentin Adt retweeted
Have you heard of KScorer? Google's own guide calls it "the secret sauce behind Google's ranking algorithm".
Exclusive: we found the 56 signals it uses to pick a query's intent, with the engineers' comments 😋
think.resoneo.com/kscorer/
Another masterpiece from @5eg !
A must read for SEOs and marketers
The 2024 Google leak and the antitrust trial gave us a glimpse of NavBoost. Some internal Google schemas we've uncovered reveal a much bigger picture..
think.resoneo.com/navboost-g…
#navboost
Quentin Adt retweeted
The 2024 Google leak and the antitrust trial gave us a glimpse of NavBoost. Some internal Google schemas we've uncovered reveal a much bigger picture..
think.resoneo.com/navboost-g…
#navboost
Ou pourquoi il faut relativiser l'utilité des données structurées pour les LLMs
so, ChatGPT released sample code for their web crawler. Guess what, it completley strips out all Schema. So let's put that myth to bed. H/T no twitter having Rodrigo Stockebrand for this github.com/openai/gpt-oss/bl…
"Governments should conduct safety testing on sufficiently capable AI models, including successors to GLM-5.3."
anthropic.com/research/glm-5….
A lire si vous voulez utiliser le bon niveau d'effort en fonction de la tâche, et gagner en rapidité d'exécution
Most boring country ever
Nice locals, sexy girls and sea but:
Artificial
Touristic as hell
Dead ~6 months per year
If I was making as much money as you do I you leverage the freedom it gives and not carrying it as a burden
France remains the best compromise, especially if you can afford to travel during winter
Quentin Adt retweeted
I can’t stress enough how little an idea matters compared to the agency of the people executing the idea.
I have had the privilege of knowing and sometimes even working with some of the most successful people (by various metrics).
The difference between mediocre and excellent work and outcomes is predominantly one of agency.
In practice this means: they dont wait for things to happen to them they go out and make things happen for them.
They don’t wait for someone else to do something, for someone to teach them, for someone to give them the path, etc. They just go out and find a way to do it.
I think the single biggest superpower these people have is the realization/belief that the world around them is completely mutable. Most everything that happens is because a person made it happen.
I used to tell people to look around the room you’re sitting in. Look at everything. Every noun. It almost all exists because a person willed it into existence. Nothing is stopping you from doing the same.
I see people online all the time dismissing someone else’s success because “I had that idea first” or whatever. I mean… yeah? If so then the difference is… you. So a bit of a self own whenever I hear that.
Number one tip: act with agency.
Untold truth: the more verbose Opus 5 is, the fewer tokens you can spend spend bc you have to read read reaaaaad, and the less money Anthropic loses on you.
Quentin Adt retweeted
Ox Alpha revealing that it’s running on Chinese chips after offering 100T tokens per day is such a subtle declaration of war.
We are living in a novel.
Quentin Adt retweeted
AI won’t erase the gap between people.
YouTube, Coursera, and Internet made world-class knowledge free. Most people still chose TikTok.
AI is no different. Everyone gets Claude Code, Codex, and ChatGPT. The best will use them better and compound faster.
AI isn’t an equalizer. It’s a multiplier.
Est-ce que ça marche encore d'envoyer du traf en masse depuis les pop under ou des trucs du genre pour déclencher du Google discover ?