跳到正文
10月21日周三
  1. Anthropic:Newsroom68

    Anthropic 用 Claude 缩减开源代码攻击面:25 个项目发现 493 个问题

    Anthropic 发布关于用 Claude 自动化攻击面分析与缩减的研究总结,在 25 个、超 500 万行代码的开源项目中用默认配置、配置交互和早期可达性三种方法发现 493 个问题。

    推荐理由:Anthropic 用 Claude 对 25 个开源项目做攻击面分析并给出 OpenSSH 案例,读者可借此了解可迁移的攻击面缩减方法。

  2. X.PIN72

    DeepSeek 宣布将内部推理框架 DeepInfer 完全开源,代码位于 github.com/deepseek-ai/DeepInfer。

    引用DeepSeek@deepseek_ai

    🚀 隆重推出 DeepInfer,我们自研的推理框架,现已完全开源! 以高吞吐量和低延迟大规模支撑 DeepSeek-V4.1-Flash。我们分享生产环境技术栈,帮助社区降低计算成本、减少能源消耗,让 AI 更可负担。 🔗 http://github.com/deepseek-ai/DeepInfer 1/4

  3. The Decoder:AI News55

    OpenAI 收购 Orchestra Bio,将并入生命科学平台 Rosalind 开发制药智能体

    OpenAI 收购协助药企协调药物研发的初创公司 Orchestra Bio,交易金额未披露。Orchestra 将并入 OpenAI 生命科学平台 Rosalind,目标是构建连接科学发现与临床试验和决策的 AI 智能体,例如追踪试验、在生产批次失败等情况下提示受影响的时间线并给出下一步选项。OpenAI 已与 Novo Nordisk 和 Moderna 开展 AI 制药研究合作。

  4. Tessl:产品与工程博客69

    编程 Agent 增长遭遇人类评审瓶颈:Tessl 博客解析信任赤字

    Tessl 博客引用 Jellyfish 2026 年 9 月 AI Engineering Trends 数据指出,中位数公司已有 22% 的合并 PR 由自主编码 Agent 撰写(90 分位达 53%),但仅约 0.6% 的 PR 由 Agent 评审合并(前 10% 公司为 9%)。

    推荐理由:基于 Jellyfish 平台数据指出 agent 写码占比与人工评审瓶颈的落差,并归纳领先团队用平台工程加速建立信任的做法。

  5. Greg Brockman61

    OpenAI 宣布收购 Orchestra Bio,这是一个帮助生物医药团队协调复杂药物研发流程的平台。双方将在 Rosalind 平台基础上结合 OpenAI 的模型与工具,简化相关运营,帮助新疗法更快惠及患者,团队负责人 @ashokaraj_ 等将加入。

    引用OpenAI@OpenAI

    We’ve acquired Orchestra Bio, a platform that helps biopharma teams coordinate the complex process of drug development. Together, we’ll build on Rosalind, our AI models and tools for life sciences research, to streamline those operations and help new treatments reach patients sooner. Welcome @ashokaraj_ and team! https://openai.com/index/openai-to-acquire-orchestra-bio/

  6. Rohan Paul58

    Rohan Paul 转发 Dario Amodei 对 AI 安全研究者批评的长文回应。Amodei 承认包括联邦 AI 法案草案在内的 3 项举措本可处理得更好,称其为沟通失误并以 CEO 身份承担责任;他坚持 Anthropic 的 race to the top 战略,列举 SB53 支持、生物安全防护、限制对 PRC 企业出售 AI 服务、将公司 5% 投入公益基金等付出商业代价的安全决策,并为 RSP 改革辩护。

    引用Dario Amodei@DarioAmodei

    Thank you for this, @_NathanCalvin. I appreciate and am a fan of the investigative work you’ve done on behalf of AI safety and believe your comments are coming from a constructive, honest place, and that it benefits the public to have people whose job is to scrutinize the actions of frontier AI companies. I think something would be wrong if companies of the size of Anthropic didn’t get harshly criticized basically every day; strong antibodies against corporate power are a healthy feature of a free society, and especially so when issues of the gravity of the one we’re facing are at play. I also do agree that some of the examples you cite were mistakes by Anthropic. That said, I disagree with the thrust of your post. At the core, a good fraction of the things you criticize are consequences of Anthropic’s basic theory of change that we have held for many years. Our strategy has always been what I’ve called the “race to the top” — by showing how it’s possible to build the technology responsibly, we can raise the bar for the entire industry. The forces that drive the race to the top are hugely more effective if the company practicing them is at the frontier; that’s one lesson I’ve learned repeatedly. And looking at that strategy as a whole, I’m proud of our track record and stand by it. I believe that if we take a list of things that Anthropic did in the past year that were pro-safety and commercially costly to us, they far outweigh the list you’ve made, while at the same time I also disagree with some of the items on your list. Here are some things Anthropic has done, in the same period you’ve cited (the last year), which were very costly to us commercially while having strong safety benefits: 1. We played a key role in SB53 (and other state laws), at a time when doing so was politically perilous to the company and AI regulation was very unpopular. We in fact argued for a stronger version of SB53 than was ultimately passed; there were a lot of stakeholders and we were not the limiting factor in the strength of the bill that was passed. 2. We have very strong biological safeguards on our models, because we’ve seen concerning results in bio uplift trials and even seen and blocked potential attempts to misuse our models for bioweapons (as seen in our threat intelligence report from a few weeks ago). This is a very serious threat that we want to have zero tolerance for. But having very low false negatives means having significant false positives (despite months of effort on our part to improve the classifiers), enough so that biologists joke about how restrictive our classifiers are, and competitors sometimes sell against us by touting their more permissive bio capabilities. This has been very painful to us in an area where we care a lot about supporting an ecosystem of Claude users (biomedical science; and it is particularly frustrating to me as a biologist), but it’s the right thing to do and we intend to keep doing it. 3. Similarly, we first had Mythos-class models in February but didn’t make them generally available until June (when we had stronger cyber safeguards in place). We only offered them to a limited set of partners in order to focus on cyberdefense. It would have been much more economically rational to simply release the model to everyone. We likely sacrificed a significant chunk of a several-month model lead. But because of this, many companies secured their cyber infrastructure before the deluge of widely available cyber-capable models. Of course there are ways it could have gone better or been run better, but this was what we were aiming to do. 4. I advocated forcefully and publicly, in my essay Policy on the AI Exponential in June of this year, for the government to have the power to block model releases. Back then this was still outside or maybe on the edge of the Overton window, though I understand the window has moved since then. We were attacked intensely for this. 5. I don’t want to re-ignite conflict, but the events of February 2026 are a strong example. It is clear that our public stance could have seriously damaged the company’s future. 6. We’ve continued to advocate for export controls on chips and chipmaking equipment to China, because we think it allows democracies to negotiate from a position of strength on AI safety agreements. We’ve done this despite problems it’s created for us with industry partners who hold very different views and on whom we are very dependent. 7. As far as I’m aware we were the first, and still only, frontier company to restrict the sale of AI services to PRC-controlled companies, including those operating through third countries (otherwise a major loophole). We’ve therefore forfeited significant short-term business to prevent fueling AI platforms and applications that would help the CCP’s military and intelligence services. We are also cracking down on distillation; generally, distillation is not a major threat to us commercially, but like chip exports it has concerning national security and safety implications, so we expend significant energy and company resources to address it. 8. As you mentioned, we’ve put out a lot of reports, announcements, long model cards, public advocacy, etc, all trying to inform the public about the risks of AI. These involve a level of detail and effort that would be implausible for a purely profit-maximizing company. 9. Just this week, we announced we were putting 5% (and possibly more over time) of the company into a public benefit fund. All of these decisions came with very substantial costs to us. To be fair, those that involved holding back or restricting access to frontier capabilities also had a broader cost — for example, the public might otherwise have benefitted from faster progress in biology, so I am not saying that our decisions were without tradeoffs — but they were not driven by profit-seeking. For each decision, you can come up with ulterior motives that could have driven us — I think it is a general truth that any decision, on any topic, can always be portrayed as a nefarious scheme. But most of those end up being pretty farfetched or don’t fully make sense if you actually examine them closely. For example, it is deeply implausible that it would be a shrewd business move to block a large swath of research biology in order to do the work ourselves and compete with our customers; we expect the benefit to the ecosystem to greatly exceed the work Anthropic does itself, and for the two to complement each other. It is not in Anthropic’s interest to be perceived as unfriendly to biologists. Our Life Sciences Verification Program, which gives vetted biology professionals access to our models, also refutes this idea. Of course, a different set of people will see this and make a different criticism: that Anthropic shouldn't be making decisions about who gets access to what in the first place. I agree, in the sense that ideally the government would be making these decisions, and that’s why we advocate for regulation. But for now we are forced to make them, and enabling bioterrorism isn’t a better option. I think that even if I conceded every item in your list, I would happily hold up mine next to it; I don’t think it’s a close call. That is of course partly subjective and different things are important to different people. Maybe one way you could object is that several of the items above relate to AI misuse and not loss-of-control; if you think the latter is much more important than the former, that might change your calculus. But this is not Anthropic’s view — we view both as serious issues. You can also disagree with our decisions, as many have, but they are consistent. But I also disagree with at least some of your list. Several items don’t represent a deviation from Anthropic’s strategy or values at all, once we postulate the “race to the top” strategy that requires being a frontier AI company. Your items 1-4 are all simply examples of what it means to compete at the frontier, and we stand by them, both in the sense that they are transparently ordinary things to do as part of that strategy, and that we stand by the strategy as a whole. To be fair, there are important questions worth confronting (and that we are confronting) about what to do when the AI-driven acceleration gets fast enough that it is hard for safety to keep up. We are nearing that point and that’s what’s driving some of our thinking about “pacing.” But 1-4 are actions taken before that point and should be perfectly expected based on Anthropic’s strategy as a company. Of course it is possible to disagree with that strategy, but that’s a more fundamental disagreement that you could have had any time over the last few years. I agree we could have handled your items 7, 8, and 9 better. All fall into the category of “rhetoric or policy communication that wasn’t carefully written or resulting from fast-changing circumstances not propagating from one team to another fast enough.” This kind of thing happens a lot in large organizations (Anthropic is over 5,000 people), and doesn’t even necessarily represent a failure or mistake of any single person. I am of course the CEO, and I take responsibility. The volume of communication from Anthropic is enormous and if these are the worst examples, I think we’re frankly doing pretty well, though I will continue to work hard to make sure we do even better. Your 5th item (the change to our RSP) is the most substantive item, and people can debate this, but I think that the old, more rigid RSP created a lot of situations where we were technically required to do something that required a lot of effort but in retrospect wasn’t very important for safety, as well as not covering some of the most important things. Our current RSP’s focus on transparency brought things like risk reports and roadmaps, and its emphasis on independent external review laid the groundwork for even more intensive embedded evaluation, all of which I think have been valuable in driving a race to the top. In the original announcement in September 2023, we described the RSP as an “early iteration that we [would] build on” and said that “rapid iteration…will almost certainly be necessary.” I understand that changing plans is always a move that creates justifiable scrutiny — I just don’t think we ever represented that we wouldn’t do so. Relating to your 6th item (having an FCF in addition to our RSP), I know our intent is to meet the letter and spirit of our regulatory obligations (via our FCF) while also remaining able to experiment with more novel approaches to risk management that go beyond what the law currently requires (via our RSP). I promise to look into it further, as it’s a complex issue and it is possible we are not weighing the considerations in the right way. Overall, although Anthropic has made plenty of mistakes as an organization — including some of the items on your list — I feel that we have repeatedly taken serious and substantive actions counter to our bottom line and that there is a significant negativity bias distorting assessments like the one you are making above. We’ll always try to do better but, again, I am extremely proud of our track record and stand by it. I will have more to say soon about how we are going to further live our values in this moment of rapid change.

  7. indigo67

    Matthew Prince 在 Cloudflare Connect 2026 开幕 Keynote 回答如何替代互联网旧商业模式,概括为“先降负载,再给剩下的部分定价”。

    引用indigo@indigox

    The Agentic internet is here ✨ 互联网的结构性转型已经开始,用户从 Human 迁移到 Agents,用量将激增千倍以上,投资所有获利于这一转型的公司!NET 是今年投资回报做好的公司之一,Shifting is just beginning 👀

  8. IT之家·人工智能68

    Spotify 一年从推荐流移除超 5000 万首低质 AI 音乐,调整推荐系统优先人类创作者

    Spotify 周二公告称,过去一年已从推荐流移除超 5000 万首被认定为 AI 生成的低质垃圾歌曲,并调整推荐系统优先展示真人创作者作品。平台为 AI 虚拟形象创作者推出 AI Persona 标识且不推荐其音乐,未强制所有 AI 曲目打标签;其判断依据包括用户反馈、上传特征、元数据和第三方 AI 检测工具。

  9. Tripo56

    Tripo 官方宣布其实时生成渲染器 EdenLive 正式在 Reactor 平台上线,并提供在线演示入口(reactor.inc/models/eden-live)。Reactor 介绍称,Eden-Live 可将 3D 场景和原型重绘为丰富的可交互世界,支持参考图加文本实时改变场景风格,并可即时编辑提示词,上线首日即在 Reactor 可用。

    引用reactor@reactorworld

    Introducing Eden-Live, a realtime generative renderer by @tripoai. • Turn 3D scenes and prototypes into rich interactive worlds by redrawing them with Eden-live. • Restyle any scene live with references images + text. • Edit the prompt on the fly. Available Day 0 on Reactor.

  10. Rohan Paul85

    Rohan Paul 总结 SpaceX Q3 2026 财报电话会要点:Super Intelligence 算力租赁业务(客户含 Anthropic 和 Google)收入 $7.6B,近翻三倍于 Q2 的 $2.56B,超过 Starlink 连接业务的 $5.2B 成最大收入来源,其中 $608M 来自新收购的 Cursor。

    引用SpaceX@SpaceX

    观看直播,SpaceX 将于今天中部时间下午3:30讨论我们2026年第三季度财报 → https://x.com/i/broadcasts/1PKqrNbLZbPGb

    推荐理由:原文梳理了 SpaceX 财报电话会的关键数字,AI 算力业务反超 Starlink 成为最大收入来源,读者可据此了解其业务重心转移。