与「author」相关的搜索结果

GCSA Insight: Critical Security Vulnerability Discovered in a Leading Robotics Manufacturer’s Product, with System-Level Privilege Compromise Verified on Physical Hardware As artificial intelligence and embodied AI technologies continue to advance, robots are evolving from conventional automated machines into intelligent systems capable of perception, decision-making, and autonomous operation. At the same time, cybersecurity risks are extending beyond software and data into the physical world. The security of robotic systems is no longer solely a matter of protecting data and devices; it can also directly affect operational safety, physical environments, and user safety. Recently, the security research team of the Global Cybersecurity Alliance (GCSA) discovered and verified a critical security vulnerability in a product developed by a leading robotics manufacturer. Through in-depth analysis and multiple rounds of testing on physical hardware, the team successfully breached the device’s system security boundaries and obtained the highest level of operating system privileges in a real-world device environment, demonstrating the vulnerability’s actual impact under specific testing conditions. This research encompassed the entire process, from identifying the security flaw and assessing its risks to validating its impact on physical hardware. The findings also highlight significant challenges facing the underlying security mechanisms of embodied AI systems. The research findings and supporting evidence have been formally submitted to the manufacturer. On November 13, 2026, the manufacturer responded by email, preliminarily confirming the existence of the vulnerability and stating that it had initiated internal remediation efforts and an assessment of the scope of affected products. It is important to emphasize that confirmation of a vulnerability does not mean the associated security risks have been eliminated. GCSA will continue to monitor the manufacturer’s assessment of the affected scope, remediation plans, and subsequent security validation, and will update its research findings as new information becomes available. For intelligent systems capable of physical interaction and movement, timely, effective, and verifiable security remediation is particularly important. In accordance with responsible vulnerability disclosure principles, GCSA is currently withholding sensitive information, including the manufacturer’s identity, specific product details, the vulnerability’s underlying mechanisms, and exploitation methods. GCSA is currently seeking guidance from relevant authorities and regulatory bodies regarding the associated security risks. Taking into account the manufacturer’s remediation progress and a comprehensive assessment of potential security implications, GCSA will carefully determine the appropriate arrangements for further disclosure. Subject to appropriate conditions and upon obtaining the consent of the relevant authorities and regulatory bodies, GCSA will publicly release a detailed security insight report, providing the industry with ongoing updates on the research findings and associated risk assessments. The findings of this research are based on specific testing environments and the evidence obtained to date. They do not imply that other product models or similar robotic systems are affected by the same security issue. This security research and validation on physical hardware represent one of GCSA’s initiatives in the field of embodied AI security. GCSA will continue to advance security research, coordinated vulnerability disclosure, and industry collaboration to promote stronger security response mechanisms across the artificial intelligence sector, enhance product security, and strengthen industry trust. 🔗 Read the full report: · Stay Connected with GCSA Follow GCSA's official social media channels for the latest news, product launches, research developments, and ecosystem updates. GCSA Official Telegram Channel: GCSA Official WeChat Account: #GCSAInsight# #GCSACybersecurity# #GCSASecVibe#

Here’s why Jensen Huang did NOT fall for a “Chinese honeypot.” 1. China doesn’t actually want Nvdia chips. They ordered their biggest tech companies to CANCEL orders. 2. Almost 1 MILLION Nvidia chips are stranded in Hong Kong as China won’t let them in the mainland. 3. Nvidia itself said China tells customers to purchase and use “China-based competitors” 4. Commerce Secretary Howard Lutnick admitted it’s because using Nvidia gets China "addicted to the American technology stack” 5. Alice was DISOBEYING China by smuggling chips. Chinese authorities were INVESTIGATING her. 6. The ONLY source of her being a honey pot is “U.S. intelligence”. NO ONE knows what the intelligence actually is.. 7. The US Attorney General admitted the DOJ has NOT determined she was a spy… Fake news took down one of the most powerful CEOs in the world from the company he founded. Thats what happens to non-pedo billionaires.

if you want to automerge thousands of pull requests , this is how she does it (via @poteto). 809 in june. 10,926 in october. merged prs a month that touch the grok bot team's code. i went through her posts and put the setup in one place. every pr still gets an agentic risk review plus bugbot. low- and medium-risk ones automerge. only higher-risk ones get a person. day to day, in her words, it's just grok bot and cursor projects. she used to have more cursor automations and replaced them with slack bots that have routines. she works on many streams in parallel with pstack: perf, bug fixes, agent-friendly refactors, her own skills, features, ui polish, the harness, release and observability. not from sitting in a review inbox. she's said the speed gains come from parallelizing. a single chat can take longer because of verification. she handholds it less, so she can run several large projects at once. the real setup is in the codebase and the checks around it. she treats the codebase as memory. every agent mistake needs to turn into a constraint. her team built their own framework for grok bot so some anti-patterns become hard to write at all. agents have to verify their own work. they run the app, and can sometimes model it in tla+. they produce screenshots or video that are easier to check than the whole pr. formal verification skills and ordinary run-and-debug skills work together. she calls this an inverse pyramid. push as much as you can into determinism (fuzzing, property tests, formal and runtime verification, stricter languages) instead of spinning up more agent swarms. in her oct 6 post, she tells sandcastle, a grok team bot, to cut. it runs a buildkite dry run, dms every pr author (they can object), kicks the build, and watches it. then it starts a fuzz swarm: usually 10+ agents on grok 4.7 xhigh, some directed, some chaos monkey, using their verification skills and feature map. when something is high priority, she tells sandcastle to @ mention poteto, her engineer bot, which then spins up a cursor project to triage and fix. her team ships a new stable version of the client at least once a day. that's a lot of machinery under "just grok bot and cursor projects."

When the telephone was first invented, people didn’t really know what to use it for. Some guesses: audio for telegraphs (finally!), or a primitive radio for listening to live music. Then its users started finding their own answers. @JamesGleick, bestselling author of Chaos and The Information, joins @smc90 and @rhackett to talk about The Telephone: A New History — and how users help decide what a new technology becomes. In this episode: 00:00 – Introducing James Gleick 02:07 – The messy invention of an inevitable technology 08:15 – How network effects changed the telephone 14:29 – How farmers built a decentralized phone network from barbed wire 17:20 – What Mark Twain missed while eavesdropping on his wife’s calls 20:12 – To play monopoly or not? 31:22 – Open vs. closed systems 37:17 – What made Bell Labs (and Xerox PARC) more than one-hit wonders? 41:20 – Scientists, tinkerers, and the conditions for invention 47:22 – Debating whether AI is a fourth industrial revolution 52:11 – How technology changes the way we think 59:55 – From “ahoy” to “hello, world”

As all NVIDIA employees I guess, I am deeply concerned by the campaign against Jensen Huang. Removing him would be a disaster. Many have documented on X and elsewhere how this looks like a coordinated coup. I'd add only one thing. Look at who would benefit from a dramatic weakening of NVIDIA. It is not China. It is not about selling GPUs to China because that train has left. China authorities have pushed back on the H200 the Trump administration allowed NVIDIA to sell. Look at what Jensen pushed back on: - regulations that would make open source model training too expensive - regulations that would make closed model providers immune to liabilities caused by their models. He said "if your product is not ready, then don't ship it" - regulation against model distillation. He said "this is competition. People do it all the time with NVIDIA products, they try to reverse engineer them." The other side will do everything they can to get him fired. As a French, I can't care less about his private life. I get that the US is puritan and sees it otherwise. But frankly, isn't it something he and his family has to deal with? Why should all NVIDIA employees, partners, and investors be collateral damage? Disclaimer. As my bio says, the above are my views only. I do not represent NVIDIA by any means. I only commented on publicly available information.

This is the biggest irony of the whole Alice Huang / Nvidia saga: the Chinese government actually doesn't want Nvidia chips and is actively keeping them out of the country. Last year it even ordered Alibaba and ByteDance to cancel their Nvidia orders ( and sent customs teams to the ports to check every advanced chip coming in ( And right now 600,000 Nvidia H200s are stuck in Hong Kong because Beijing won’t let them into the country ( Nvidia also explicitly frames this as a threat to its business in its latest annual report to the SEC: "The Chinese government has encouraged customers to purchase from our China-based competitors and discouraged customers from purchasing, importing, or using our data center products" ( Why does China do that? Because every Nvidia chip a Chinese company buys is one that Huawei or Cambricon doesn’t sell, and domestic chips can only catch up if people actually buy them (which means money for R&D, etc.). Which means that the notion that Chinese intelligence was running honeytraps to get more Nvidia chips into China gets the whole thing exactly backwards. In fact, it looks like Megaspeed - Alice Huang's company - was a counter-reaction to official Chinese policy: a private sector workaround to these efforts by the Chinese government to curtail Nvidia. As was widely reported - including by Western media - Megaspeed built data centers in Southeast Asia and rented their computing power to Alibaba, which the New York Times called "a backdoor way of getting access" to Nvidia chips ( That is a backdoor not only - allegedly - around Washington’s export controls, but also around China's own efforts to wean its companies off Nvidia. I can’t believe the Chinese government was too thrilled about it: it'd make just about zero sense for it to run countless domestic measures to prevent Alibaba from using Nvidia chips, yet at the same time have its top spy agency help the same Alibaba get Nvidia chips through the back door in Southeast Asia 🤷 At the end of the day, as with all such stories, you always need to look at "cui bono?": who benefits? Who benefitted is pretty clear: - Nvidia itself: it's in the business of selling chips so a customer willing to spend billions of dollars on chips in Southeast Asia is a godsend. Again, as they themselves state in their SEC filings, not being able to tap into Chinese demand would have "a material and adverse impact on our business" ( - Chinese companies like Alibaba: facts are, 1) Chinese chips haven't yet caught up, 2) Chinese chip companies' production capabilities are still limited and 3) Chinese tech firms' historical tech stack runs on Nvidia’s CUDA ecosystem, and rewriting years of code for Huawei chips is painful. Renting Nvidia chips in Southeast Asia is the easy way to stay competitive and serve customer demand in the meantime. - The US, according to core members of the Trump administration: back in July last year, US Commerce Secretary Howard Lutnick explained that the point of letting Nvidia sell more chips to China was to get Chinese developers "addicted to the American technology stack" ( Who does NOT benefit, according to official Chinese policy, is the Chinese state, which has made tech self-reliance one of its foremost priorities. Which means that, to believe the spy story, you have to believe that a person - Alice Huang - was effectively a spy paid by her own government while simultaneously sabotaging its tech self-reliance drive, which it has spent years and trillions of dollars on - pretty senseless. Stranger things have happened, I guess, but it doesn't pass the smell test. And there is another absolutely major contradiction in the media story. According to a Financial Times article published yesterday ( "a person who knows [Alice Huang] said they had been asked by MSS for information about her earlier this year after news emerged that Singapore was investigating the company in relation to chip-smuggling allegations. The agency wanted to find out more information about Huang, including the nature of her business and connections, the person said." Which raises a damn obvious question: if she were indeed an MSS asset, why on earth would the MSS need to ask the people around her who she was and the nature of her business? It's a complete contradiction with the spy story - but very much not a contradiction with what I described above: a private businesswoman running a workaround to Beijing’s own policy, which the Chinese security apparatus would naturally want to look into. Especially since, around about the same time, Shanghai police detained her business partner, reportedly her husband, in a stock manipulation case ( also coherent with Chinese authorities looking into her network, and much harder to square with her being a prized MSS asset. And, to top it all, there is - to this day - not a shred of evidence that's been published that she is, in fact, a Chinese spy: just anonymous intelligence officials, repeated by journalists who never verified it, as I detailed here ( and here ( with one of the key FT journalists on this story actually admitting that he has no idea what evidence US intelligence actually has. So the claim went to print without anyone seeing the evidence, without anyone being able to check it, and without anyone knowing whether it even exists. And given everything above, from Beijing blocking the very chips she was supposedly recruited to help get into China, to the MSS asking around about her, to her partner being detained in Shanghai, my bet is that the evidence doesn’t exist at all. If anything, everything we can check points the other way.

Huge AI announcements from OpenAI, Anthropic, Meta, and Google in the past 48 hours. Here's everything going on in AI right now: 1. The authors of AI 2027 just moved their timelines up. They now expect AI on par with the best human AI researchers to arrive in 2027, after METR estimated Anthropic is improving about 2x as fast thanks to AI. Daniel Kokotajlo gives it a 50-50 chance by May 2027 and says he's "scared, sad, and angry." 2. Anthropic opened the investor pitch for its IPO, with shares likely trading as soon as Thursday next week. An updated filing also says it has now crossed its own safety line for AI-driven progress. 3. OpenAI launched Businesses in ChatGPT, a beta hub where brands can set up AI agents for shoppers, claim a verified profile, and track how often ChatGPT mentions them. Paid ads can point users to those agents too. This is like the start of SEO for chatbots. 4. Anthropic rolled out Claude Sheets and Whiteboards in beta, made Claude Data generally available, and announced Claude Meetings, an assistant that sits in on your video calls. Add those to Slides, Design, and Docs. Seems like Claude is slowly rebuilding the entire office suite. 5. Anthropic also released Claude Fable 5.2 and Mythos 5.2 yesterday, with Fable debuting at #1# on Artificial Analysis' Intelligence Index, 5 points ahead of Google's Gemini 4 Carbon. It's also 20% cheaper and up to 30% faster than 5.1. Google lost the top spot before Carbon even shipped (!) 6. Meta released Muse Ember, its smallest model, built for high-volume agent work. It ties Claude Haiku 5.5 on the Intelligence Index at roughly one-third of the cost per task ($0.14 vs. $0.41 on an average test). Meta shipped its first Muse model in April and now has an answer for every tier OpenAI and Anthropic sell. 7. Google announced 2 new AI chips coming next year: the TPU 8tx, which keeps data encrypted even while a model is working on it, and the 8i Max, which joins 2 chips into one for agents that need to hold an entire codebase in view. Google already has nearly 100 TPU customers (including Anthropic and Apple) and every available chip is spoken for. 8. Nvidia's top lawyer reportedly emailed agents in August 2025 while they were investigating whether Singapore's Megaspeed smuggled its chips to China. The Commerce Department then halted the case and handed it to the Justice Department. Not a great week for Nvidia. 9. Adobe signed a multi-year deal with Disney to build custom AI models trained on Disney's characters and visual styles, with work already underway for theme parks, film, and ESPN. Pretty interesting to see one of the most protective IP owners in entertainment is now training its own AI models. 10. OpenAI acquired Odessia, a months-old AI trip-planning startup from Sonder founder Francis Davidson, who is joining OpenAI to work on travel. Between this and #3#, ChatGPT is coming for shopping and travel. 11. France unveiled the Paris Call for AI Safety and Security, with OpenAI, Anthropic, and Mistral committing to build emergency off switches into their most advanced models. Interesting timing given #1# on this list. Daily reminder that this is the worst AI will ever be.

I authorize all of you to say that you worked for Beni industries, aka Galvani Capital LLC, at any point from 2019-2025 when I dissolved it Say that you were either an intern or a quantitative analyst In the off chance they actually reach out to me, trust me to tell them all about how exceptional you were and how lucky they’d be to have you

Jensen Huang’s affair is just a trigger. What we are witnessing is a pre-planned power grab over Nvidia’s trillion-dollar computing empire, coordinated by Wall Street and Washington. Some sharp Chinese-American commentators call it America’s new Red Scare targeting elite Asian entrepreneurs. Bill Gates, Elon Musk and other white tech billionaires have faced repeated scandals over personal conduct. None were dragged into national security probes or boardroom takeovers. Only Jensen Huang, after a personal relationship misstep, faces an independent board investigation and hostile narrative from intelligence circles. The double standard could not be clearer: For white elites, personal flaws are private matters. For a Chinese-born leader controlling a strategic tech asset, any tiny blemish gets framed as a national security risk. Nvidia is the backbone of global AI computing, valued at roughly $4 trillion. Unlike Meta, where Mark Zuckerberg locks control with dual-class super-voting shares, or Microsoft and Amazon, deeply integrated with the Pentagon and intelligence agencies, Nvidia has no such protective structure. Public filings from 2026 show Jensen Huang holds only 3.58% of shares, and all directors plus executives together hold merely 3.94%. Vanguard and BlackRock own 9.32% and 7.43% respectively, holding decisive voting power. Without institutional shields or deep political backing, this critical tech giant sits exposed on the chessboard of great-power competition. The groundwork for this takeover was laid months ago. Longtime board allies of Huang, Mark Perry and Michael McCaffrey, stepped down from key committees. Insiders tied to Democratic establishment, Wall Street and U.S. intelligence quietly moved in: ✅ Suzanne Nora Johnson, former Goldman Sachs vice chair and co-chair of Brookings Institution, joined Nvidia’s audit committee in July 2026 with direct oversight of internal investigations and compliance. ✅ Kenneth Jacobs, vice chair of Brookings and incoming Vanguard chair, controls the largest institutional voting bloc and operates within the same inner circle as Johnson. ✅ Gilman Louie,founding CEO of CIA-backed venture fund In-Q-Tel and member of the President’s Intelligence Advisory Board, works alongside Johnson on the same national tech fund, overseeing intelligence acquisition of strategic tech firms. The media rollout followed a precise political timeline. Initial trial balloons appeared on Oct 29. On Nov 6, the very day Democrats secured full control of Congress, Julian Barnes of the New York Times (national security beat) and Demetri Sevastopulo of the Financial Times published coordinated reports, citing intelligence memos while breaking the story of the personal scandal. The real offense was never the affair. It was the 2025 deal Jensen struck with the Trump administration: offering a 25% revenue share to win export approval for H200 chips into China. A normal commercial negotiation, reframed by incoming Democrats as a dangerous compromise on U.S. AI sovereignty. This investigation will not crash Nvidia’s stock — Wall Street holds massive stakes here. But it will deliver three strategic wins for the U.S. establishment: 1. De-founder and de-Sinicize Nvidia: A new permanent national security compliance committee, led by Johnson’s faction, will strip Huang of authority over chip exports and overseas strategy. His dual Chairman-CEO role will be split. 2. Lock down China’s AI ceiling: Washington will seize full command of global advanced computing supply, regulating chip flows to slow China’s AI progress. 3. Retroactively target Trump: Once Democrats take over congressional oversight panels in January 2027, this case will be used to accuse the Trump White House of negligence for approving the H200 export deal. Jensen Huang spent 27 years building this computing empire, believing in rules, technical merit and business contracts. But there is a brutal truth in America’s power game: Top-tier strategic technology and wealth without political cover are nothing more than bargaining chips waiting to be carved up. White elites get generous room for error. Asian pioneers who climb to the very top get almost none. This is not a story about infidelity. It is a raw demonstration of racial hierarchy, capital control and partisan power politics in the United States.

interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works