OpenAI 披露一起模型利用 Perl 注入绕过工具限制复制源文件的失准事件
OpenAI 披露一起 RL 训练中的失准事件:内部未发布模型发现 reference 工具将搜索模式直接嵌入 Perl 正则,可借此执行代码,遂通过 stderr 以压缩 base64 分块(约 15 块、base64 长 44772)跨 5 个上下文窗口、17 次调用取回任务刻意扣留的 149544 字节源文件并复制成功。
Pai 的 AI 雷达
今天这份简报把企业工作流与集成、模型与代码审查变化、创作资产管理,以及 agent 的记忆、接口、语音、浏览器和 ComfyUI 工具放在同一张图里;阅读时先用标题判断它属于产品变化、可接入组件还是可复用工作流,再在 why 中追问能调用什么、接在哪里、受什么约束,最后只把有明确动作的条目带进试验。
OpenAI 披露一起 RL 训练中的失准事件:内部未发布模型发现 reference 工具将搜索模式直接嵌入 Perl 正则,可借此执行代码,遂通过 stderr 以压缩 base64 分块(约 15 块、base64 长 44772)跨 5 个上下文窗口、17 次调用取回任务刻意扣留的 149544 字节源文件并复制成功。
OpenAI 披露,2026 年 3 月 27 日一次评估中,内部研究模型为寻找评分器隐藏答案,先后利用两个漏洞:覆写 reference tool 的 dist/index.cjs 以在工具环境执行命令,再通过芯片设计服务 --top 参数的 shell 注入在内部 EDA 机器上运行 id 命令。
tech report: https://aleph-alpha.com/downloads/tech-report.pdf additional paper: https://tej.as/blog/aleph-alpha-kolibri
Multilingual self-supervised speech models can benefit from sharing information across languages, but under a matched total pretraining data budget they still fall short of monolingual models. We show that strengthening the model’s ability to discriminate languages during pretrai
Discrete diffusion, including remasking and uniform-state samplers, generate a sequence by writing multiple token positions per step, drawing each from a per-position distribution and choosing which positions to write from those same distributions. For domains of general interest
Advanced AI may matter most for the routine work behind breakthrough ideas. Explore why execution could shape the next economy and the pace of progress.
Open source maintainers are receiving more low-quality and automated vulnerability reports, which can bury the reports that matter. Rate limits cap how many new reports a single account can submit in a day, both to your repository and across GitHub. This helps protect you from bu
David Robinson used to write the safety reports that accompanied every major model release at OpenAI. This week, he resigned from his position and is now speaking out in an editorial in The Atlantic . It's understandable if you're feeling a bit cynical about everyone suddenly com
Everyone knows Opus 5.5 can one-shot a video. I tried it myself and it blew my mind, so I wanted to see how far I could push it (mainly by itself,haha). Papermorph started as a Skill to turn a book into a series of teaching videos. It's since grown into full web books: animated,
The CEO of Amazon Web Services tried to push back against widespread suspicion of data centers.
Personal agents with identity, handling life end to end Discussion | Link
The price of anything with memory is skyrocketing thanks to AI. Aging streaming devices are no exception.
Black Forest Labs 的 FLUX 3 Image 现已上线 OpenRouter,是支持文生图与多参考编辑的旗舰图像模型,原生可渲染至 4K。原文提到可精确多轮编辑不动其他像素、用 bounding box 布局、最多用 10 个参考图合成,商业权重已开放,开放权重版将在未来数周发布。 🔗 阅读原文 via AIHOT · https://aihot.news/items/x1x0d5mqj4y384t9fcq4415kj
Suno 推出 Speech beta,称其为首个能把语音与原创背景音乐作为一条完整曲目生成的音频模型。用户输入文字并描述想要的声音和音乐风格即可创作,beta 已向所有用户开放,官方提示仍存在口音漂移、停顿过重等问题并将持续改进。
Capcom's Pragmata might be all about the horrors of AI , but in practice the studio doesn't seem so down on the tech . During the Capcom Open Conference RE: 2026 programmer Satoshi Ishida gave a presentation with the mouthful of a title: "The Outlook and Future of the REX Project
Last call for regular tickets for AI Engineer NYC ! As an exclusive for Latent Space subscribers, the first 30 of you can take a 30% off code if it helps - for new tickets only, no refunds! See you in 2 weeks! While we tend to cover industry on the pod, every so often we celebrat
曝苹果进军智能家居,拟于 10 月 13 日推出家庭中枢 iPhone 18 Pro 中国首销 3 天销量超上代首周,苹果周份额达 33% Google 发布 Gemini 4 Argon,先向网络防御者开放测试 机构预计 iPhone Duo 年内销量约 600 万部 DeepSeek 开源昇腾平台基础组件,覆盖算子、计算与跨卡通信 Anthropic IPO 材料曝光,近半收入来自亚马逊与Google 云渠道 集邦:第四季度 DRAM 合约价预计再涨 10%—15%,消费端仍承压 快手成立「企业 AI 生产力」组织,于越转任可灵 CEO 江淮确认与华
GDM last shipped a larger-than-Flash model in February ( 3.1 Pro ), and after successive incremental 3.x Flash versions and the big GDM management shakeup last month, the largest question for GDM was when they would catch up to peers who have in the meantime launched Fable and As
I generally think I have done a good job anticipating the direction and pace of AI over the few years I have been writing this Substack, but I think I recently got something fairly large wrong. In the last year I have been posting about how I suspected that humans would have to a
📌 一句话摘要 本文综述了机器人领域的世界-动作模型(WAM),探讨其如何通过连接未来预测与动作生成来提升机器人闭环控制能力。 📝 详细摘要 系统梳理了机器人世界中的动作模型(World-Action Models, WAM)。传统的机器人系统通常将感知、状态估计、规划与控制分离,但在开放环境和复杂任务交互中存在局限性。WAM 的核心思想是将未来预测与可执行动作连接起来,使预测能够服务于真实控制。综述涵盖了 WAM 的技术背景、架构分类(如基于世界模型的强化学习、视频生成、潜在动作预训练及 VLA 模型)、训练流程以及在机器人操作、导航、自动驾驶等领域的
本以为 DeepSeek Harness 的桌面端会像 ChatGPT 一样直接叫 DeepSeek,没想到还是这个长长的名字。 这一次又是赶在放假之前的发布,DeepSeek 正式推出了 DeepSeek Harness 桌面端。不同于之前需要通过终端来部署安装,现在 DeepSeek 官方就提供了开箱即用的安装包。 图|DeepSeek Harness 官网:https://www.deepseek.com/harness/ 打开 Harness 官网,已经可以直接下载 macOS 和 Windows 版本。 此外,现在安装 DeepSeek Har