Zisu@Monako

We have dumped JAX/SGLang and rewritten the entire RL and inference stack from scratch in C/C++, which took some extra time. Training (aka pre-training) is done. Lot of cleanup was needed on the SFT data to get that mostly right. Now, 4.8 is in RL and the evals are starting to climb. We will do a soft rollout to Bot users later this week and see how it goes. Grok 4.8 will bear no resemblance to 4.7 (thankfully). It is not yet incredible, but, this time, the foundations are built right, so I expect it to evolve to be something special.

谷歌内部memo：我们没有护城河，openAI也没有。

🥰🥰🥰

BREAKING: $1,300,000,000,000.00+ wiped from U.S. technology stocks at market open.

We built Pando, a new Git backend for our monorepo, to handle more pushes and fetches without changing how our engineers and agents use Git. Pando cut push latency by ~80% and now serves nearly a petabyte of Git data a day. We can grow Git capacity alongside agent usage.

We asked GPT-6 Astra to edit Qwen3.5-0.8B weights to improve math. It directly changed only 0.016% of weights, fixing 0.8B's reasoning loops & improving math up to 6x and even instruction following 3x, without gradients or training. We call this Weight-Space Programming: frontier LLMs can now natively read/write neural network weights! 🧵 Blog: rikiyat.github.io/blog/weigh…

碳基消费观察21 近期看过的最卓越的“碳基消费类”视频：采访既下山创始人赖国平。 1）既下山是国内一家精品豪华/奢华酒店集团，做出过两个非常现象级的产品：野奢系列的既下山梅里和堪称城市新名片的豪华/奢华酒店既下山大同。 既下山梅里可以说是以一己之力引爆了梅里的野奢概念（站在松赞梅里的肩膀上）。既下山大同已成为大同在地文化/历史的重要载体，私以为是近几年最卓越的文化类产品。 2）只有13分钟的视频充斥着大量的对酒店行业/文化行业的深度认知和理解，诸如 “一聊到东南亚的酒店，你会很自然的想到有海岛椰林蓝天大海的度假型酒店；一聊到日本的酒店，你会马上想到和式侘寂风、枯山水...但一提到中国的酒店，脑子里是没有一个形状和概念的，所以既下山要做的是能给人植入文化概念的产品” “既下山不是只是单独做几家几十家酒店，而是一开始就要奔着最终目的去做：所有的既下山的酒店连在一起，就是“中国最值得拜访的目的地”（内核和松赞类似） “既下山的员工绝大多数都在做品牌。一开始主要招的是之前做传媒的员工，后来发现学历史和文学的员工更合适，因为他们能更好的理解酒店所承载的在地文化的内涵和精神内核”（AI时代仍然需要卓越的文科生）

OneKey is not affected by the recent security incidents. All our infrastructure and services are secure and safe to use. We do not use Railway or PHP in any of our services.

October has been an absolute nightmare for software > Railway - customer secrets exposure > LiteLLM - malicious PyPI + Docker releases > Zeabur - infrastructure breached > OpenCode - AI API keys exposed > OVHcloud CLI - official binaries backdoored > Rank Math PRO - malware in official plugin > TeamUpdraft - customer data compromised > ConnectWise - cloud backup identities compromised > Tensorlake - npm package infected > SubQuery - backdoored npm package > GhostAction - GitHub repos with malicious workflows > PHP - critical RCE vulnerabilities > Node.js - security vulnerabilities patched > eMudhra - certificate authority keys compromised > Tailscale - eMudhra incident At this point, the biggest security risk might not be the code we write, but the code we trust...

席卷全球！仅今天晚上，多个国家领导人、政府网络安全部门、AI 公司，纷纷就 PHP 编程语言重大漏洞紧急发文，包括芬兰、荷兰和法国在内，已将政府网站紧急下线。 而原因是今天 PHP，爆出两个超高危漏洞，合称 PHP2Shell，还是研究员借助 AI 发现的。黑客不用登录，发一个请求就可能控制整台网站服务器。 他们能通过这个漏洞，在你家用 PHP 搞的网站上，装木马、偷数据，甚至能把网站搞瘫。 据估算，暴露在互联网上的 PHP 服务器，已超 510 万台。 所以现在的情况是，PHP 团队紧急更新了补丁，要求所有人立刻马上升级。 而 CDN 厂商 Cloudflare 的 CTO 也说，已经看到有早期攻击现象出现。 英国国家网络安全中心 NCSC 也建议，补不了的系统先下线，欧洲有不少网站因此停掉。