与「RAN」相关的搜索结果

Matas Buzelis EXPLODED off the ground for this January poster! Where will this rank in our Top Dunks of the Year countdown?? We're rolling out 40-21 today, with the top 10 dropping Saturday 👀

从太子集团的陈志到硬件钱包Coldcard，全部都因为随机数导致私钥被破解，那随机数和私钥有什么关系？为什么他们的随机数会出问题？ 首先比特币私钥本身就是一个256位的随机数，而这也是比特币最安全的核心保障，因为这个数字的组合总共有10的77次方，远远大于地球上沙子的数量，大约等于整个可观测宇宙中的原子总数，这种天文数字即使动用地球上所有的计算资源都不可能暴力穷举出来。 那既然规模如此之大，陈志和Coldcard又是怎么被盗的？ 核心就是在于，私钥安全的前提是因为它是个随机数，而如果你的私钥生成的过程根本不随机，那根本用不到什么量子计算机，随便一台电脑跑几个小时就能把你的私钥算出来。 随机数分为两种，伪随机数和真随机数，简单来说凡是通过一定的数学公式使用代码生成的都是伪随机数，而通过物理现象产生的随机数才是真随机数。 比如你使用Python的random()函数生成一个随机数是214，你以为真的是电脑给你随机选了一个数字，实际上这个数字是通过一个数学公式生成出来的，比如下一个数字=当前数字*7+3-5，那么你只要知道计算的公式就可以穷举出来这个公式能生成出的所有结果。 这时候问题来了，你会奇怪那为什么计算机不真的给我一个随机数呢？因为对于软件来说，任何结果都不可能平白无故的直接产生，你得有输入信息，并且配合程序运算，才可以有输出结果。 所以真正的随机来自于不需要软件和数学公式的物理世界，比如你投出的一个骰子，或者下一个雨滴掉落的位置。 所以对于私钥来说，想产生安全的随机数，只有软件不够，必须要配合硬件，比如提取CPU的电子噪音来作为完全无法被预测的输入信息，现在成熟的手机和电脑本身已经提供了硬件层面的安全随机接口可以调用，所以你用OKX、币安和Metamask生成的钱包都大概率使用了硬件噪音产生真随机数，主流硬件钱包自己本身也会读取硬件数据获得随机数。 陈志的钱包被盗是因为雇的程序员水平太差，直接用了最初级的随机数代码，估计是从哪个野鸡学校绑过去了一个刚毕业的大学生，抽了几鞭子就开始干活了。 Coldcard本身其实已经使用了硬件层面的随机数，但因为一个版本出现漏洞导致没有调用到硬件信息，而是采用了纯软件生成。 所以现在的问题是，你的钱包生成随机数的过程，到底随机不随机，完全是个黑盒，你压根不知道。 最有效安全的方式，就是你自己拿个骰子扔100次，记录下来每次的数字，然后把它转换成256位的二进制编码，再使用BIP39算法转换成24个英文单词，也就是你的助记词。

Binance Earn August Monthly Leaderboard is live. Trade Dual Investment this month and climb the ranks to earn up to 5,888 USDC in rewards! Details →

Before answering one cross-database business question, how much platform rebuilding should a team finish first? This real lineage view tracks 17 nodes and 15 dependencies from two database paths to one ranked result.

Last night Apple briefly removed Telegram from the AppStore because a user had planted illegal porn in a public chat. Telegram was restored within hours. But I want to explain what happened — to warn other app developers and help protect online communities from similar attacks. Because Telegram quickly removes illegal content from public groups using all kinds of moderation tools, the attacker had to resort to a technical trick. He inserted AI-modified illegal content by editing an old message in an active group chat. As a result the content was effectively hidden from the group’s members, preventing them from seeing/reporting it. The attacker was a takedown extortionist: someone who demands ransom from group owners in exchange for not targeting their communities. These extortionists use automated accounts to plant illegal content in public groups and then report it directly to Apple, attempting to trigger the removal of legitimate communities whose owners refused to pay them. From a practical standpoint, illegal pornographic content in Telegram’s public groups is not a systemic problem. Our moderation is effective. The fact that attackers must resort to backdated, effectively invisible content and other technical tricks proves this. ⚠️ However, there are two important lessons here for app developers and online communities: — Extortionists have found a way to manipulate Apple into overreacting. Apple removed Telegram from the App Store before contacting us. This creates a potential systemic risk for every mobile app that hosts user-generated content. If an app used by more than a billion people can be removed from the App Store without prior warning, any app can be. — The tactics used by takedown extortionists are evolving, putting communities across social platforms at risk. Telegram has extensive experience identifying the tricks used by coordinated reporting gangs and protecting legitimate communities (even when doing so risks our own app being temporarily removed from the App Store). Other platforms may not be equally prepared. Stay vigilant! ☝️

Someone made a Mole review and it genuinely made my day. Andy Hutchinson over at Mostly Mac ran the open-source CLI on his M2, cleared ~13GB, and after six months of daily use called it "no subscription, no bloat, no drama." That means a lot for something I started as a weekend shell script. Huge thanks, Andy. If you make Mac content and want to feature Mole, I'd love to help, reach out and I can set you up with license keys to give away to your audience.

Okay, the @VulcanBench results for Qwen3.8-Max are in, and it is not what I expected. First, for anyone new to VulcanBench, here's a quick TL;DR on the eval suite: 23 frontier-hard software engineering tasks taken from real merged OSS PRs, run in a Docker sandbox, 3 runs per task across all three of its effort levels. No puzzles, no random abstract stuff, all real things engineering teams would do with these models. It looks like Qwen3.8-Max has a major overthinking problem, it uses a LOT of tokens and is very slow, period, no other way to see it. My cost to run this benchmark was $126.25, to run the exact same eval suite with DeepSeek V4-Flash was only $13.60. This makes Qwen3.8-Max an insanely expensive model. The tasks Qwen genuinely can't solve fail at every effort level, extra reasoning didn't help. The regression is almost all in work it already handles: six tasks that low solves every single time account for 83% of the 26-point drop, three of them collapsing to zero. It's not losing the hard problems. It's losing the ones it already knows how to do. Since Qwen3.8-Max hit a lot of wall clock budget caps, I thought I'd share more about this. - VulcanBench caps both steps (50–200) and wall clock (5–60 min), each scaled by repo size. - This is aligned with how comparable harnesses bound agents, DeepSWE caps rollouts at 100 environment steps, sitting right inside my step range; Terminal-Bench enforces a per-task wall clock; SWE-bench Verified scaffolds typically allow 20–60 min per instance with 250–350 step limits. - Every model on my chart gets the identical budget, and Qwen is the slowest model I've tested at 20–25 min/task. Soooo... Alibaba positions Qwen3.8-Max as trailing only Claude Fable 5. But on the kind of real coding work engineering teams would actually throw at it, under a fixed budget, its best setting lands mid-pack and its default lands last, so common. If you want to optimize for accuracy, Grok 4.5 is the move. If you want accuracy per dollar, DeepSeek V4-Flash is hard to beat, heck it's 10× cheaper than Qwen and you get higher accuracy. Qwen just isn't in the game at this point, this is not a model I could see engineering teams using for daily coding work.

"La Grève" d’Ayn Rand raconte l’effondrement d’un pays dans lequel ceux qui produisent sont progressivement punis pour leur réussite. Les entreprises ferment, les infrastructures se dégradent, les pénuries apparaissent. Mais à chaque crise, l’État répond par davantage de contrôles, de contraintes et de redistribution. Les entreprises inefficaces sont protégées. Les plus performantes sont accusées de nuire à l’intérêt général. Les concurrents incapables d’innover utilisent le pouvoir politique pour ralentir ceux qui réussissent. Dagny Taggart dirige une compagnie ferroviaire. Elle passe son temps à réparer les erreurs de son frère, des bureaucrates et des dirigeants incapables. C’est l’une des idées centrales du livre : un système défaillant peut survivre longtemps grâce à quelques personnes compétentes qui compensent tout en silence. Hank Rearden, lui, invente un métal révolutionnaire. Au lieu d’être récompensé, il devient une cible. On veut limiter sa production, récupérer son invention et lui faire honte de sa réussite. Peu à peu, les meilleurs industriels, ingénieurs et inventeurs disparaissent. Derrière ces disparitions se trouve John Galt. Il a compris que le système ne tient que parce que ceux qu’il exploite continuent malgré tout à le faire fonctionner. Il organise donc une grève particulière : non pas celle des ouvriers, mais celle de l’intelligence, de la compétence et de la responsabilité. Les producteurs ne sabotent rien. Ils cessent simplement de réparer, d’inventer et de porter un monde qui les condamne tout en dépendant entièrement d’eux. Le titre original, « Atlas Shrugged », résume le livre. Atlas porte le monde sur ses épaules. Ayn Rand pose une question : que se passe-t-il si Atlas décide de hausser les épaules et de laisser tomber le monde ? Le pouvoir finit par vouloir tout figer : les entreprises ne peuvent plus fermer, les salariés ne peuvent plus partir, les prix sont bloqués, les brevets saisis. Mais on peut saisir une usine sans savoir la faire fonctionner. On peut confisquer une invention sans être capable d’en créer une nouvelle. On peut imposer l’obéissance. On ne peut pas imposer l’intelligence. C’est ce que raconte "La Grève". Une société peut longtemps mépriser ceux qui la font fonctionner. Mais elle ne peut pas survivre lorsqu’ils décident de ne plus la porter.