与「macOS」相关的搜索结果

⚠️ Cursor has published a security incident report on the earlier supply chain attack. According to the investigation, the attacker used access keys issued by Cursor to Fireworks and subsequently exposed on Fireworks’ side to gain access to some of Cursor’s SaaS services and internal systems. The attacker ultimately tampered with the distribution cache for the Claude Code extension to collect information about users’ machines and install SSH backdoors. The compromised versions were Anthropic.claude-code 2.1.312 and 2.1.313 in Cursor’s VS Code extension marketplace distribution cache, affecting macOS and Windows. The exposure window ran from October 29 at 17:27 to October 30 at 04:35 (UTC+8), with up to approximately 5,000 users affected. Security recommendation: If you installed or updated to either affected version through Cursor’s marketplace during this window, read the official notice as soon as possible and run the remediation script for your platform to check for and remediate any compromise: Fireworks’ initial announcement and subsequent update:

GitHub 上有人开源了一款能把全网视频都下载下来的工具 —— OmniGet！！ 兼容 YouTube、X、抖音、TikTok、小红书、B站等 1800 多个平台，链接复制一下就能保存。 不过它可不仅仅是个视频下载器： 批量下载、播放列表下载 视频、图片、音频一键采集 AI 字幕提取、Whisper 语音转文字 音视频格式转换、压缩、剪辑 Udemy、Coursera 等课程资源处理 108 个内置工具，还支持 MCP Server，能接入 AI Agent 最要紧的是：免费、开源、没有广告。Windows、macOS、Linux 统统支持，不用去折腾命令行。 不管是 YouTube、X 视频下载，抖音去水印素材采集，还是 AI 视频创作、字幕提取，都能靠这一个工具搞定。 仓库：

说真的，Google 这波是真舍得下本。 Antigravity，Google 自家的 Agent 编程 IDE，个人版现在 $0/月，不用订阅就能用。 Tab 代码补全无限次，Command 请求也无限次，写代码的时候补全随便薅。 Agent 干活是按周刷新的额度，Google 没公布具体数字，重度用一天可能就见底，得等下周。 模型这块注意了：现在免费档还能用 Claude Sonnet 4.6、Opus 4.6 和 GPT-OSS-120b，但 Google 官网写了 11 月 18 号就移除，之后免费档只剩 Gemini 3.8 Flash。 想白嫖 Claude 的抓紧，就剩 5 天。 领法：去 下载，Google 账号登录，选 Individual 免费档就行，macOS、Windows、Linux 都有。

正式开源 OpenBean 🎉 你的录音豆不再只是录音豆，OpenBean 让 soundcore Work（D3200）录音豆可以脱离官方 App 和云端，在你自己的电脑上本地使用。 OpenBean 是录音豆的开源本地驱动：通过蓝牙和 Wi‑Fi 连接设备、解密录音、把实时音频送到 Mac。 自带一个语音输入 App： 按录音豆的按键说话，文字实时打进当前光标处，全程在本机离线识别。 macOS 原生软件正在构建中，敬请期待～

因为最近 AI 写代码太快而 CI 太慢，我自己做了个 macOS/iOS 的急速构建服务，支持 agent 操作，模拟器截图录视频，Testflight 和应用市场发布，最重要的是，把原本在我 Mac Studio 上跑了几分钟的 CI（Tuwa App）从五分钟的构建时间缩减到 25-30s！我准备打磨好今天晚些时候发布，slot 数额有限，欢迎大家试用！

👋🏼 不用再给语音合成软件交订阅费了。 现在克隆音色、给视频配音、生成有声书，用 AI 就能搞定，而且完全在本地跑。 它叫 VoiceStudio，开源。 最香的是👇 → 用一小段录音就能克隆音色 → 描述年龄、口音和语气，就能生成声音 → 用 646 种语言的库给视频配音 → 转录音频、生成有声书 → 支持 Windows、macOS、Linux、安卓和 iOS 最让人意外的是，不需要独立显卡。用 CPU 也能跑，只是处理会慢一些。 免费、开源，许可证是 AGPL-3.0。 仓库地址在评论区 👇

EnConvo：All in One的AI助手 EnConvo是最近新出的AI助手，功能最全面，你能想到的功能都有了，基本上接管了我的macOS，可以说是系统级的全能AI中枢。 符合我需求的主要是两方面：第一是可以便捷的给AI助手配置全面的外接能力，包括生图、生视频、语音识别、合成语音，给AI助手补充上完整的能力，相当于眼睛、嘴巴、耳朵、画笔都有了，适合媒体创作；第二是全面融合到电脑里的任意应用，我现在是在Chrome里开问问Gemini侧边栏、在PPT开Claude侧边栏，在Notion里因为没买他的AI会员就只能复制粘贴使用，使用EnConvo可以扩展到每个应用的侧面直接用，也支持快捷键快速唤起和全局语音输入，免去了所有的复制粘贴。 而且EnConvo能接入你已订阅的AI，包括GPT、Claude等，不付费也是完全能用的，付费则可以按量使用Opus模型。 EnConvo的功能有多全面，请看我大致挖掘的功能列表。 EnConvo= Codex：编程、工作、Computer Use +多媒体工作台：ASR、TTS、OCR、生成图片、生成视频，其中的ASR、TTS、OCR支持配置本地模型，使用Opus+这些能力，就是天然的多媒体Agent，可以实现翻译视频、一键生成短剧等功能 +飞书会议：发起多人会议、实时转录、会议纪要 +豆包输入法：按住右侧Command键语音输入。而且不会像豆包那样抢占输入法 +Ollama：下载适合电脑配置的模型，然后本地运行 +UU远程：手机端EnConvo连接电脑，可以远程操控 +全局语音唤起：按右侧的option即可语音输入发起聊天，AI同时用文字+语音回复 +划词搜索：类似苹果自带的三指查询，选中词条或句子可以唤起工具栏，翻译/解释/AI润色/问问AI等自定义工具 +应用侧边栏：吸附在当前正在使用的应用旁，伴随式协助阅读、编程或写作 +桌面宠物：可以互动和派任务 +Live Talk实时对话：类似GPT的实时语音对话 +下载视频：YouTube、X、Tiktok等均可下载 +知识库：导入和管理知识库 因为能配全套的音视频能力，制作大肥鱼视频是完全没问题的。看看大肥鱼来讲解黄仁勋出轨事件的来龙去脉。 官网免费下载：

Omarchy Mobile just passed 400 stars on GitHub. ⭐ We're now just 30 days old. Here's where we're at: • 1,048 commits • 791 pull requests opened, 547 merged • 36 people have sent code • 76 forks Real Omarchy on your phone: Arch, Hyprland, a mainline kernel, no Android underneath. The first developer preview shipped this week for the Pixel 7 Pro, and it updates itself with `omarchy update`. 16 phones are in progress: Pixel 9a, 6 Pro, 7, 7a, 8 Pro, 8a, Fold, plus OnePlus and Xiaomi devices. On the 9a, calls and texts already work. Today the 9a's modem and the 6 Pro's display both landed. Today alone: 46 pull requests reviewed, 25+ merged, every shared change tested on my own 7 Pro before it went in. Next up: the installer. The core is now public, written in Rust: one codebase for a desktop app on Linux, Windows and macOS, and a web flasher. Plug in, click a few buttons, done. It's an early prototype, and there's more work coming on this soon. Want in? Grab a supported Pixel, read the contributor guide, open an issue for your phone. Thank you to everyone who has starred, forked, tested and built. We're just getting started. 🙏

We're still so small but I'm loving the team we've got at Superlogical. They're so talented and kind and love their craft. It's a different era of software development and our expectations and practices reflect that. I want to share a bit about how we work. First, everyone is trusted to push to main. We do machine-aided code review pre-push and human plus more machine-aided code review post-push. Limited to no PRs. Culturally, we've all agreed that if we ever hire someone who we DON'T trust to push directly to main, then they probably aren't the right fit for the team (so far, not an issue). Some common sense here: if someone is stepping outside their lane or comfort zone, we'll open PRs. For example, I'm pretty trash at macOS/iOS UI, so I'll open PRs for UI-affecting functionality and ask for eyeballs/help. But for business logic and internals, I push to main. Second, everyone can cut a release. Our release process is fully automated and when you start a release (for any platform) it triggers a Slack notification and a 15 minute countdown. The 15 minute warning is a final gate that allows people to review plus collaborate on a changelog. During that 15 minutes, anyone in the company can pause the release rollout. After 15 minutes, the train leaves the station. You can't override the 15 minutes (except to pause). It gives everyone a chance to step in. Third, we avoid synchronization through fast remediation rather than through planning. The server and clients on various platforms ship features as fast as they can. We use post-hoc human review and AI-assistance to identify feature mismatches across products ("Windows has support for X and Mac doesn't." or "Mac and Windows differ in their behaviors for Y in this way."). This avoids expensive "sync" meetings and coordination. We trust that producers of features are mindful of what they're producing and we trust that adjacent product lines will self-synchronize quickly. In practice, we see feature parity across platforms within 24 to 48 hours. All of this works on mutual trust. It ONLY works with mutual trust. Everyone at all times has to trust that they've got each others back: 1. Push to main only works if you fix your mess, or if you don't, that someone else will quickly but that you'd do the same (and generally in equal amounts). 2. Anyone can deploy only works if you trust everyone to cut at the right time, with the right changelog, and that people will respect the 15 minute timer. 3. Sync through fast remediation only works if you trust other teams will pick up and integrate your work quickly, which only works if you would too. It also only works if you are fairly producing mismatches (e.g. not constantly). We've got a great team. I know we're still small and that these practices will change in many ways as we scale. But this is already a markedly different practice than what I would've done 15 years ago. In general, we are building from day 1 on a foundation of mutual respect, excellence, and trust. And it's been awesome.