🧠在家居士 | 🥦素食者 | 🏃🏻马拉松爱好者 | 💰省钱小能手 | 搭🪜技术资深学者 | 👨💻科技宅 | 🆕更新狂 | 🆅 六边型战五渣
火星
Joined July 2010
- Tweets29.6K
- Following547
- Followers117K
- Likes25K
我说这个项目今天怎么飙的这么快，没有看作者😅
来吧，OpenAI 发布的 PHP 安全漏洞版本检查工具，用来快速判断网站或本地 PHP 环境是否可能受到 php2shell 漏洞影响。
不光是检测 PHP 漏洞，OpenAI 还展示了如何把一项具体的安全任务封装成 AI Agent 可以调用的技能。👇
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
什么意思？这次 PHP 严重漏洞是 OpenAI 发现的？
OpenAI 表示，过去两个月，他们联合开源软件维护者、安全研究人员和安全服务商，协调处理了 PHP 中的严重安全漏洞。
是 Calif 使用 GPT-5.6 Sol 发现了一项关键漏洞，OpenAI 将这次事件视为近期影响较大的安全事件之一，这些漏洞只是他们已经发现、正在推动修复的多个重要漏洞中的一部分。
OpenAI 想建立的模式是：发现漏洞 → 验证风险 → 协调防御 → 修复软件 → 部署补丁 → 验证结果。
如果这一模式能够规模化，AI 不仅能提升漏洞发现效率，还可能改变整个开源软件生态的安全维护方式。
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
交给 AI 吧，我也不是很懂。
We have posted more information about today's security releases, including the sequence of events that led to the discovery, how the PHP security team is improving their processes, and what we need from you to continue this critical work. #php #security thephp.foundation/blog/2026/…
实至名归
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source!
Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable.
🔗 github.com/deepseek-ai/DeepI…
1/4
圣经经文之间的交叉引用以往只能一条条在纸边翻，这个站点把全本 344,799 条压进一张可缩放的图，读完一节能顺着线跳到别处。
github.com/trekhleb/bible-cr…
这也太炫酷了吧，给 Glorious GMMK 3 HE 75% 有线键盘做的非官方 Linux 原生配置工具，把官方只提供 Windows 版的灯光、行程、键位设置补到 Linux 上。
通过读官方驱动与键盘的通信报文重写了协议，并封装成 Omarchy 桌面插件，点状态栏图标即可打开，界面跟随 Omarchy 主题。
github.com/tg5ee/inglorious-…