consensyx (@consensyx) profile picture
Joined September 2014
consensyx retweeted
Andrej Karpathy’s setup from his HackerTube blog today: - “I use Claude Code (desktop app for Mac).” As I’ve been saying, terminal is the wrong interface for coding agents. Desktop apps are the best interface today. - “I use Opus 5.5 on Medium effort as my default.” There’s no point to use the smartest model at the highest reasoning effort for most tasks.
234
127
54
2,411
282,237
consensyx retweeted
什么是顶级思维: 1,第一:永远不要在乎别人对你的看法,记住是任何人。 2,第二:永远不要自卑,也永远不要感觉自己比别人低一等,这个人有没有钱,有多少钱,其实跟你都没有关系。 3,第三:时间是有限的,不要浪费在别人的生活里,不要被教条束缚,那意味着你和其他人思考的结果一起生活。 4,第四:不要让别人的观点淹没了你内心的声音,要有勇气跟随自己的内心和直觉。 5,第五:遇到任何事先考虑自己的利益,这不是自私,而是生存之道。 6,第六:专注于自己的成长和进步,不要与他人盲目比较。 7,第七:学会接受失败,并从中吸取教训,因为失败是成功的垫脚石。 8,第八:要有清晰的目标,并制定实现这些目标的详细计划。 9,第九:不断学习新知识,提升自己的能力和认知水平。 10,第十:保持乐观积极的心态,相信自己能够克服一切困难。
47
663
10
3,516
101,371
consensyx retweeted
Ever notice the gap when Chinese and German netizens talk? Many Germans still picture China as a backward place, while Chinese users casually reference Luther, Bismarck, the Wirtschaftswunder, and Kafka. Look at the school textbooks and the difference becomes obvious. German textbooks often still show China as a backward country where people ride bicycles because cars are scarce and bow when they meet — old stereotypes with little depth. Chinese high school textbooks, by contrast, cover German literature and history in detail. Chinese high school Chinese textbooks, by contrast, include multiple works by German-language writers, such as Hermann Hesse’s Reading: Purpose and Prerequisites, Goethe’s Wilhelm Meister’s Apprenticeship, and Franz Kafka’s The Metamorphosis. Supplementary materials also feature Heinrich Böll’s Wanderer, kommst du nach Spa… These texts give students real exposure to German literature and thought. In Chinese high school history textbooks, Germany appears across chapters on Europe’s intellectual liberation movements, bourgeois revolutions and the rise of capitalism, the Cold War and the shifting international order, and the later evolution of capitalist societies. The coverage includes: 🔵 Germany in the Reformation Martin Luther published the Ninety-Five Theses, rejecting papal authority. Germany was fragmented and heavily exploited by the Roman Curia, earning the nickname “the Pope’s cow.” 🔵 German Unification and Imperial Constitutionalism In the mid-19th century, political division held back capitalist development. Bismarck achieved unification through three dynastic wars. In 1871 the German Empire was founded and issued the Constitution of the German Empire, establishing a dualistic constitutional monarchy. 🔵 World War I, World War II, and the Anti-Fascist Struggle Imperialist rivalries, the Triple Alliance and the Triple Entente, and the harsh terms of the Treaty of Versailles imposed on Germany. The establishment of fascist dictatorship in Germany, the invasion of Poland, the invasion of the Soviet Union, and Germany’s surrender in 1945; the Declaration by United Nations and the formation of the global anti-fascist alliance. 🔵 Division and Reunification After World War II, Germany was divided into occupation zones and became a Cold War frontline. The Berlin crises and the standoff between East and West Germany followed. Reunification in 1990 marked a major turning point in the end of the bipolar order and the Cold War. 🔵 Economic development Second Industrial Revolution: relatively high industrial growth between 1870 and 1913; as a latecomer, Germany industrialized rapidly over roughly 30–40 years and caught up with Britain; by the early 20th century its industrial output ranked first in Europe and second in the world, with clear leadership in the electrical industry and related fields. After World War II: through the social market economy, West Germany rose from rubble to economic miracle and became Western Europe’s strongest economy by the 1960s. When SOME German netizens smugly call Chinese people “brainwashed,” they might first want to check whether they know their own history better than a Chinese high school student.
In German primary school textbooks, China is still in the 1980s (Shared by a Chinese mom in Germany). "Many Chinese people do not have a car. Meiying’s father also rides a bike or walks…" "Meiying doesn’t have her own room in Beijing. She has to sleep with her parents…" "Chinese people do not shake hands to greet each other. They bow politely…" Falseness like this breeds a natural sense of superiority in kids. And it explains why so many foreigners are stunned when they actually come to China. They’ve been fooled by bad guys.
149
216
27
3,033
332,194
consensyx retweeted
Do you know Google Flare team ( an elite reverse engineering and malware analysis unit ) has a crash course that explains and teaches malware analysis from basics to advanced step by step. Link :- docs.google.com/document/d/1…
34
744
10
6,316
197,659
太蠢了,如此昂贵的错误,相比之下bitget遭受的第三方攻击反倒可以接受
🚨 Binance : comprendre l’attaque EIP-7702 en 2 minutes Ce soir, plusieurs milliards de dollars sont sortis de hot wallets Binance en moins d’une heure. Les décomptes vont de ~3,3 Md$ à ~5,5 Md$ selon les sources. Binance enquête et n’a encore confirmé aucun impact sur les fonds des utilisateurs. CZ, lui, parle de hack. 💡 Au delà du potentiel plus gros hack de l'histoire de la crypto, ce qui interroge c'est la méthode. Et elle porte un nom : EIP-7702. 🔹 C’est quoi EIP-7702 ? Sur Ethereum, un wallet classique, c’est une clé privée qui signe des transactions. Point. Depuis la mise à jour Pectra (mai 2025), EIP-7702 permet à ce wallet de se « brancher » sur un smart contract. Il garde la même adresse, mais le code du contrat peut agir avec toute son autorité. L’idée de départ est bonne : regrouper des opérations, payer les frais pour quelqu’un, ajouter des options de récupération. Le problème, c’est que la délégation persiste. Une fois installée, le contrat peut déclencher des transferts sans nouvelle signature du wallet. Imaginez signer une seule procuration générale au nom d’un robot. Ensuite, le robot vide le coffre tout seul. Pour la blockchain, tout est « légal », puisque le robot a une autorisation valide. 🔹 Ce qui s’est passé (heures UTC, d’après Etherscan et les analyses publiées) 15h59 : une adresse financée via Tornado Cash déploie un smart contract 20h20 : le wallet Binance 14 est délégué à ce contrat via EIP-7702 20h24 : ~3 min plus tard, 167 464 ETH et 63 tokens, dont 1,6 Md USDT, partent vers une adresse toute neuve 20h41 : 780 M USDC sortent d’un autre hot wallet Binance vers la même adresse Ensuite, ~195 000 ETH sont redéplacés vers une nouvelle adresse Tether et Circle ont gelé environ 1,8 Md$ de stablecoins. Le reste a bougé avant le gel. 🔹 Cependant... Pour installer une délégation EIP-7702, il faut une autorisation signée avec la clé du wallet. N’importe qui peut ensuite l’envoyer et payer les frais, d’où le rôle de l’adresse « Tornado ». Donc ce n’est a priori pas une faille d’Ethereum. A l'heure actuelle, plusieurs questions importantes restent en suspens : - Comment l’attaquant a-t-il obtenu une signature valide d’un hot wallet de Binance ❓ - Clé volée ❓ - Système de signature interne compromis ❓ - Manipulation ❓ Personne ne le sait encore. EIP-7702 est déjà massivement utilisé par des arnaqueurs pour vider des wallets de particuliers via du phishing : vous signez « un truc », et votre wallet appartient à quelqu’un d’autre. Ce soir, on voit peut-être le même mécanisme appliqué à l’échelle d’un exchange. 👉 Règle d’or : - ne signez jamais une autorisation que vous ne comprenez pas. Une signature peut valoir plus qu’une transaction. - ne laissez jamais tous vos fonds au même endroit
1
13
consensyx retweeted
🤯我靠!真正的智能,不该被人类先喂东西训练! 现在的 AI 看文字,不是直接看原始数据,而是先被 Tokenizer 切成词碎片,再丢给模型学习。这个分词器是人写的,带着一堆历史包袱和怪异行为,模型根本不是真正端到端在学习。 Karpathy 说过,Transformer 最丑陋的部分就是 Tokenizer。 如果连“直接从字节里自己发现什么是有意义的单位”都做不好,那谈什么理解图像、声音、真实世界?谈什么通用智能? Albert Gu 的 H-Nets 正在朝这个方向走:让模型自己学会动态分块,而不是靠人类预先切好。用更少数据和算力,就能追上在海量 tokens 上训练的模型。 智能的未来,不是更复杂的工程设计,而是更彻底地相信简单。 少一点人类的聪明,多一点让简单机制自己涌现。 #AI #BitterLesson #智能 #LLM #HNets #Tokenizer #端到端 #通用人工智能 #Karpathy teapaw.org/_albertgu/status/21155…
I've always believed that intelligence should come from simple, general building blocks that learn their own abstractions directly from raw data; in other words, the bitter lesson. I think we're finally seeing a real step towards AI that can learn from all data. Language modeling on raw bytes is a microcosm of this ideal, and to me it's a central problem in AI: if we can't build LLMs that learn end-to-end from bytes, how will we handle the rest of the world's data that we understand even less? Last year we introduced hierarchical networks (H-Nets) as a first step. Our new version finds up to 3-5x efficiency gains in controlled scaling law experiments, and at larger scale matches an open-source model trained on 11T tokens with ~10x less data and compute. The posts below walk through what we found and why we think it works.
7
23
2
136
23,378
Μέσα σε 4 λεπτά διαλύει στην κυριολεξία έναν αιώνα τούρκικων προσπαθειών να πλαστογραφήσουν την ιστορία τους. Με τρόπο να το καταλάβει και ένα παιδί. Δυστυχώς οι τούρκοι δεν είχαν ποτέ έναν Παπαρρηγόπουλο παρά μόνο κρατικούς υπαλλήλους. Ώρα να αποκτήσουν.
81
252
29
1,689
55,195
Türkiye’de temel mantık eğitimi veriliyor mu, gerçekten merak ediyorum. Hâlâ “Çinliler bizden korktukları için Çin Seddi’ni yaptılar” diyen yorumlar görüyorum. Peki, öyle olduğunu varsayalım. Bir çiftçi, tarlasını korumak için etrafına çit çekse ve yaban domuzları her gün toplanıp “Gördünüz mü? Adam bizden korkuyor!” diye övünse, ne düşünürdünüz? Ya da ABD-Meksika sınırındaki duvarı düşünün. Yüzyıllar sonra Meksikalıların torunları çıkıp “Amerikalılar bizden o kadar korkuyordu ki koca bir duvar ördüler!” diye gururlansa, bu size mantıklı gelir miydi? Bir duvarın inşa edilmiş olması, tek başına duvarın öteki tarafındakilerin üstünlüğünü kanıtlamaz. Savunma ihtiyacıyla üstünlük aynı şey değildir. Asıl komik olan, bazılarının tarihî bir savunma yapısını kendi büyüklüklerinin belgesi sanması. Gerçekten, bu kadar basit bir mantık hatasını anlamak için her şeyi çiğneyip ağzınıza mı vermemiz gerekiyor?
309
147
73
3,908
250,957
consensyx retweeted
给一点 Deepinfer推理侧的速度锐评 1. 感觉 git repo 本身,对我们这样研发来说意义不太大,有一点点吧,但是好些东西没开。但是论证了我 kern 的想法,per model per repo 。 2. 精华本身在 zhihu 那篇文章,这篇文章很有价值,zhuanlan.zhihu.com/p/2095560…。主要是确定了一些 ds 内部的并行,decode 侧就还是经典的 wideep,ep64 什么的。 有价值的就在几个 load balancer,第一个是分桶(这个其实是比较生产的),不知道开源 router 有没有人做,但生产来说,其实之前 together 就探索过一下。 prefill 的路由策略很有意思,不做任何的 cache aware,靠池化兜底。 dp group 直接用 compute tokens 作为负载 平衡的指标,dp 组内,也是。这个有点什么的味道,我想不起来了。可能和 hash 那边的一些东西有关,maybe 是,bitmap 什么的,我只是说思想好吧。 fifo,这里有个有意思的,它也做了一个估计器,其实前不久我也做了一个(只不过链接失效了hh),我当时是想给 pp 做的,但是我觉得无论 ep pp,这个思路是一致的,不固定 chunk size,然后固定“耗时”,总之就是一个离线你先跑出来嘛,然后给个表,然后让 scheduler 去估到合适的时间,组 batch。 当然我有一个想法是,prefill 到底是 pp 还是 ep,当然现在模型训成 每一个 Layer 都不一样的,那天生也就对 pp 不友好,那也没招。但是 ep 要完整做完 ds 这一套,需要不少流量和 prefill worker。总的来说在中小部署我看好 pp(几个 prefill worker 这种),大部署我才看好 ep。 decode 和我想的也差不多,就是一个 kv cache + num running 的组合是吧。当然具体怎么调配就是一个 case by case 的事情。 eplb 呢,就是冗余换 lb 吧。不过有个在线的 eplb,不知道开源出来没有。这里的 trade off 就是,eplb 会占用更多显存是吧,但是呢它也能提升吞吐,而且越复制收益越小,所以要找到一个比较合适的点。也是 case by case 的。 然后是 router 的pd 动态扩缩容,prefill 还是 整体compute tokens,deocde 是 num running。 kv cache 呢就是 3fs,然后 3天的 ttl,能换到 0.5 - 1% 的命中率。kv cache 管理由 decode 主导?这样输出也能被 hit。 关于 I/o,精华是这句,换入从 shm 到 HBM 在 engine 进程内的线程里做,目标是实现逐层 H2D (Host-to-Device) 传输与前向计算重叠,由于 CUDA copy engine 对于 KVCache Block 细粒度的拷贝性能不佳,换入使用 GDR 实现,用 RDMA 网卡就能打满 PCIe 带宽,并且不占 SM。 这个我有空后面再讲吧。 dspark 变长验证,这个真上了,挺好的。 异步调度,先忽略。 ds弄了一个结构化输出库,good! 为了防止说我在蹭,我截个图,我之前思考过的路由策略,开源我的 thinking content !
26
66
8
601
59,207
consensyx retweeted
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source! Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable. 🔗 github.com/deepseek-ai/DeepI… 1/4
1,715
4,921
2,343
43,637
6,974,437
consensyx retweeted
Deepseek把内部的推理框架也开源了 糟了,A÷又有东西学了, 学完进化以后,又要反手出一张报告说Deepseek蒸馏了 真有人信Deepseek完全靠蒸馏走到这一步的, 但凡看过他们的开源内容和论文也说不出这种话....
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source! Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable. 🔗 github.com/deepseek-ai/DeepI… 1/4
83
26
4
1,530
94,308
黄奇帆被查原因基本摸清,儿子、情妇、铁杆部下、彭静、泰达币、栗家一样不少。 第一,重庆国资海外并购巨亏的“历史旧账”,直指家族利益输送。 在关系图的右上方,被隐去的关键字对应的是“重庆钢铁”与“重庆粮食”。当年黄主政重庆国资期间,力推重钢集团赴澳洲收购铁矿石、重粮集团远赴巴西买地种大豆,这两个百亿级项目最终均以惨重巨亏、国有资产严重流失收场。 图中明确将“儿子黄”与这两大海外败局直接挂钩,并串联起已落马的原重钢高管董荣华、董林,直指其家族成员利用跨境并购充当掮客,在国企海外投资中“吃里扒外”、掏空国资。 第二,“渝富系”金融老部下沦陷,与港股 IPO 跨境资本腐败引爆新雷。 在金融证券线上,图中被抹去的“西南证券”与“渝富集团”曾是黄运作重庆国资资本化的左膀右臂,其核心干将廖庆轩(原重庆国资委主任、西南证券董事长)、吴坚、等人的牵出,撕开了本土金融腐败的口子。 更致命的是左下方的“方星海(原证监会分管境外上市的副主席)”分支与聊天记录的呼应——黄的儿子被曝利用父辈在金融监管层和地方政商界的影响力,隐身香港和加拿大(枫叶国),深度参与了多达29个港股IPO项目的利益分成。近期随着茶百道等港股上市企业被查,这根连接内地权贵、监管高层与香港资本市场的暗线被彻底引爆,波及沃特股份、魏桥集团等关联企业。 第三,政商女掮客牵出重庆官场连环窝案,惊现巨额加密货币洗钱。 关系图的右下方揭示了案件从“退居二线老领导”向“现任地方高官”蔓延的传导路径。重庆知名女律师彭静在图中扮演了核心“政商白手套”与桥梁角色,她一头连着黄老板,另一头直接牵出胡衡华、罗蔺以及其兄肖陵的落马。 尤为罕见的是,图中曝光该窝案涉及高达“3,080万 USDT(泰达币,约合人民币2.2亿元)”的虚拟货币利益输送与跨境洗钱,相关涉案人员已被留置,这也成为纪检部门顺藤摸瓜、全链条打掉该利益集团的关键铁证。 第四,核心财务白手套与隐秘的家族私生活败露。 在图表的左侧与底部,则勾勒出其庞大的外围白手套网络与私生活乱象。以“贾会计”为核心财务总管,通过“联合投资公司”、“重庆建工”等平台运作资金;而在个人作风上,不仅在聊天记录中被曝出拥有“75年、76年两个情妇并育有两儿一女”,关系图中更是直接点明“云南情妇私生子黄”及关联人“栗某”,并将资产与亲属向香港和加拿大转移。 整张图谱呈现出一个典型的“期权腐败、全家腐败、政商勾连与跨境洗钱”交织的复杂大案。
网传黄奇帆被查。 本人与黄吃过饭,此翁能力是有的,侍奉过汪洋、薄熙来、孙政才等书记。早年被视为陈良宇的人。 其人相对廉洁,口风蛮紧,如出事多半与网贷有关。 作为官场老师傅,终究抵不过包子一顿乱拳。
96
300
18
1,859
989,012
consensyx retweeted
Bitget lost ~$387.5M in one of the largest crypto hacks of 2026. Attackers exploited a zero-day in a third-party security product, gained access to Bitget’s wallet infrastructure, and fed it forged withdrawal requests that bypassed normal risk controls. We break down what happened and what formal verification can establish about withdrawal signing. ➡️ certora.com/blog/bitget-hack…
1
4
2
29
3,848
consensyx retweeted
Introducing Polymarket Protocol V2
67
50
48
394
105,050
consensyx retweeted
DeepSeek employee Xu Ruifan shares some thoughts on developing Ascend infrastructure components. zhihu.com/question/208857187… Looks like they really are on holiday.
10
1
133
19,038
opshnz cartel alphalpha part 2: 1. DerivativesMonkey 💁🏻‍♀️ z best place 4 opshnz analytics derivativesmonkey.com/eth/da… 2. Tacticalls @tacticallsXYZ 💁🏻‍♀️ z social app 4 opshnz trading tacticalls.xyz/ 3. Volmex @volmexfinance 💁🏻‍♀️ trading pure vol (BVIV) volmex.finance/indices/bviv
opshnz cartel alphalfa: 1. Dream @dreaming 💁🏻‍♀️ dreamos.app/ opshnz trading app /w dope UI / UX 2. Epicentral 💁🏻‍♀️ insti-grade opshnz on soylana beta.epicentral.markets/ 3. Aevo @aevoxyz 💁🏻‍♀️ ez-mode opshnz trading app.aevo.xyz/easy-mode/eth wanna join z cartel? DM me 🙇🏻‍♀️
4
6
3
45
5,354
consensyx retweeted
How to read unverified code in less than 5 min: 1. Check for free source first Etherscan's Similar Match shows the source of any verified contract with the same bytecode. Forks and clones end here 2. Decompile - Dedaub: paste the address, get solidity-like code with function names and storage layout, free - heimdall if you want it local, one command - Etherscan has a decompile bytecode button on unverified contracts too 3. Name the functions Decompilers guess names from selectors. For the missing ones paste the 4 byte selector into openchain. whatsabi gives you the full ABI and follows proxies in one call 4. Proxy? Read the implementation slot and decompile that instead 5. Skip reading, watch it run Open any TX to the contract in Tenderly or Phalcon. The trace shows every internal call with values, 10 TXs tell you more than the decompiled code
5
12
1
98
9,268
consensyx retweeted
🚨SlowMist TI Alert🚨 💸 @aave v3 Loop Safe Module Loss: ~114.09 ETH 🔍 Root Cause: FlashLoopAdapter's open()/close() access control only checks ISafe(msg.sender).isModuleEnabled(address(this)), which is spoofable via a fake Safe that always returns true. Its _swap() then executes router.call with fully attacker-controlled router and calldata. Since the adapter is an enabled module of the victim Safes, the attacker set router=victim Safe and data=execTransactionFromModule to drain weETH and Aave collateral. 📌 Attacker: 0x42c2633438609881c8fBAb82414eb9A0c45F9353 📌 Victim: 0xe3b23e47df7cd85876ac6cb05bdb9d7cd5b28520, 0xcfedf95a3653a128dfc2e4288758a1a1850d169f 📌 Vulnerable Contract: 0x16bb8b912da187870c23ec6756bb3fad061283d8 Impact: ~114.09 ETH stolen from two Safe multisigs via forged Safe authentication and arbitrary module execution; ~1300 WETH debt repaid to unlock collateral. Powered by SlowMist.AI Tx: etherscan.io/tx/0x75328f916b…
46
23
22
151
59,594
Earlier today, NEAR Intents was exploited for $3.8m. SHIELD, the AI security layer on Intents, detected outlier behavior and Intents were temporarily paused. All of the affected users will be compensated in full. The attacker exploited a bug in the Omni deposit/withdrawal interaction with the NEAR Intents smart contract isolated to USDT on BSC. The Intents team quickly identified the exact vulnerability and it was fixed within an hour of detection. NEAR Intents and near.com are already back online, except for a few affected chains on Intents. The core NEAR Protocol, NEAR token, and other applications on NEAR were not affected. NEAR Intents now processes over $4B a month in trading and payments volume, serving as the industry’s connector across chains and ecosystems. At this scale, we have to hold ourselves to a higher security standard. This was the first major exploit on Intents and we will apply all learnings from this incident as part of a full retro and postmortem. The crypto space is entering a new era of far more sophisticated cyber attacks. Recently, we have seen BitGet, Metamask, Lido all being targeted by criminals equipped with AI systems that are continuously trying to hack all infrastructure. As a space, we need to be far more vigilant and raise the bar on both onchain contract standards and offchain monitoring and proactive prevention. This includes incorporating formal verification, a key tool for preventing a large class of vulnerabilities. The NEAR ecosystem is already working on a formal verification system for NEAR contracts and will shortly implement it as part of the release process, alongside other security measures that will come out of the postmortem. Being more proactive against criminal activity is a critical step to ensure the growth and legitimacy of crypto. It’s time to join forces and work together to use all tools at our disposal to detect and prevent malicious activity. SHIELD is our approach to monitoring and AI-based outlier detection. We welcome new SHIELD partners to work with us to share information faster and get better at detecting and containing criminals and exploits across web3.
Earlier today NEAR Intents services were stopped after a security incident was detected. The incident was caused by a bug in the Omni deposit and withdrawal infrastructure interaction with NEAR Intents smart contract. The preliminary report indicates the total loss of approximately $3.8M. These funds will be compensated in full. The contract-side vulnerability has been patched. The operations of the NEAR Intents and near(.)com are expected to resume within 1h. Deposits and withdrawals on the following networks will remain unavailable for an additional ~12 hours while fixes to the Omni infrastructure are completed: BSC, Polygon, TON, Optimism, Avalanche, Stellar, Monad, LayerX, Adi, Scroll and Plasma. In case users hold any assets from these chains inside NEAR Intents (for example, in HOT wallet or on near(.)com), they will be able to swap them into other assets once NEAR Intents is back up (in ~1h). The incident has been reported to law enforcement, and we are working with security and blockchain analytics partners to trace the funds and pursue recovery. A detailed report will be shared publicly in the following days.
141
171
39
1,265
142,107