Tag: Dev Tools

Gemini 4 Carbon tops the AA index, GitHub launches Copilot Fusion and ChatGPT adds API credits; at midday a report says DeepSeek and Moonshot distilled GPT-6 Astra, and baoyu open-sourced baoyu-design v2.谷歌 Gemini 4 Carbon 登顶 AA 指数，GitHub 推 Copilot Fusion，ChatGPT 送 API 额度；午间又曝 DeepSeek 和月之暗面蒸馏 GPT-6 Astra，宝玉开源 baoyu-design v2。

Anthropic showed an unreleased Claude chaining exploits across Chrome and major OSes, and Google launched Genie 4; meanwhile the git Apple ships with macOS still trusts the compromised eMudhra certificates, and EDK II disclosed a pre-boot UEFI RCE.Anthropic 披露未发布的 Claude 串起 Chrome 等多平台漏洞链，谷歌发布 Genie 4；macOS 自带 git 仍信任被攻破的 eMudhra 证书，EDK II 曝 UEFI 预启动 RCE。

OpenAI launched GPT-6.1 Terra and claimed AI refuted the Exponential Time Hypothesis, then Anthropic posted a Claude-authored paper reaching the same result; Baidu open-sourced long-document OCR model Unlimited OCR 2.OpenAI 发布 GPT-6.1 Terra 并称模型推翻指数时间假设，Anthropic 随即放出 Claude 独立署名的同结论论文；百度开源超长文档 OCR 模型 Unlimited OCR 2。

Anthropic filed its S-1 showing $16.3B H1 revenue and an $80.7B net loss, while Claude's paywall bypass and Cathedral's 12-hour breach claim raised agent-security alarms; agent workflow guides went viral and AVP pitched agent-native version control.Anthropic 递交 S-1，上半年营收 163 亿美元、净亏 807 亿；Claude 绕付费墙、Cathedral 称 12 小时攻入其内网，Agent 工作法刷屏。

OpenAI's discounts poaching Anthropic coding customers and the day-20 Codex reset led the day; in the evening BOSS Zhipin open-sourced Nanbeige4.3-33B and Samsung TVs were found using on-device AI on screenshots for ad targeting.OpenAI 折扣抢 Anthropic 编程客户，Codex 第 20 天重置生效；晚间 BOSS直聘开源 Nanbeige4.3-33B，三星电视被曝靠 AI 截屏投广告。

Moonshot's Kimi K3.1 Pro shipped amid a promo row; the Brotli RCE widened across HTTP stacks; agent tools piled up, and Ruan Yifeng said programming has become unrecognizable.Kimi K3.1 Pro 发布又陷推广争议；Brotli 漏洞扩至 HTTP 栈；Agent 工具扎堆，阮一峰称编程已面目全非。

Anthropic donated Agent Skills and METR exposed gaps in OpenAI's agent monitoring; OpenCode disclosed an MCP sign-in RCE, and pgrust was caught gaming ClickBench.Anthropic 捐出 Agent Skills，METR 揭 OpenAI 监控漏洞；OpenCode 曝 MCP 登录 RCE，pgrust 刷榜被扒。

PHP2Shell confirmed exploited before disclosure, with the LiteLLM poisoning and GitLab perfect-score bug close behind; Claude Duet launches and 1Password lets agents log in without seeing passwords.PHP2Shell 被证实披露前已遭利用，LiteLLM 投毒、GitLab 满分漏洞接连；Claude Duet 发布，1Password 让 agent 免看密码登录。

A CVSS 9.2 RCE hits PHP, eMudhra's CA private keys are cracked in seconds, and the TypeScript compiler is ported to Rust; OpenAI discloses internal agent incidents.PHP 爆 9.2 分 RCE 漏洞、eMudhra CA 私钥被秒破，TS 编译器移植 Rust；OpenAI 公开 agent 内部事故。

Anthropic launches the open-source vulnerability scanner OSS Scanner and DHS bans DeepSeek; Codex cloud environments and a guide to running V4.1 Flash locally are useful.Anthropic 推出开源漏洞扫描 OSS Scanner，DHS 禁用 DeepSeek；Codex 云端环境与本地跑 V4.1 Flash 教程实用。

Linux 7.3 ships and MiniMax M3.1 Flash gets faster and cheaper; an intro book on harnesses and a cross-agent session migration tool are worth saving.Linux 7.3 发布、MiniMax M3.1 Flash 提速降价；Harness 入门书与跨 Agent 迁移会话工具值得收藏。

A mysterious new model shows up in the OpenAI API and Google open-sources Harness² to auto-tune agents; AI-assisted commits surge in Linux 7.2.OpenAI API 现神秘新模型，Google 开源 Harness² 自动调 agent；Linux 7.2 中 AI 辅助提交激增。

About 90% of Claude Code's code is written by Claude and a new DeepSeek V4.1 Flash ships; PostgreSQL 19 is delayed by bugs found in AI review.Claude Code 九成代码由 Claude 自写，DeepSeek V4.1 Flash 新版发布；PostgreSQL 19 因 AI 审出 bug 推迟。

OpenAI discloses an alignment incident and Anthropic's official plugin directory goes live; a Nemotron multimodal agent model and Perplexity's sandbox are open-sourced.OpenAI 披露对齐事故，Anthropic 官方插件目录上线；Nemotron 多模态 Agent 模型与 Perplexity 沙箱开源。

OpenCode 2.0 gets a major overhaul and Anthropic's Q3 revenue hits $16.8B; DeepSeek goes down and the Claude Code desktop app supports parallel sessions.OpenCode 2.0 大改版，Anthropic Q3 收入 168 亿美元；DeepSeek 宕机，Claude Code 桌面版支持多会话并行。

OpenCode-style coding tools and agent context optimization are trending, and XBOW built a Chrome exploit chain with an agent; the new Claude Code and local semantic search are worth watching.OpenCode 式编程工具与 Agent 上下文优化走热，XBOW 用 agent 做出 Chrome 利用链；Claude Code 新版与本地语义搜索值得关注。

Anthropic publishes anti-distillation results and Gemini 4 Argon is nearly live; long-task skills and a Flash-model comparison are the day's most practical material.Anthropic 公布反蒸馏成效，Gemini 4 Argon 临近上线；长任务 skill 与 Flash 模型横评是当天最实用的干货。

Claude Code opens Projects with parallel cloud threads and Codex quotas reset worldwide; quota-saving tricks like subagent model routing and /goal cluster together.Claude Code 开放 Projects 并行云端线程，Codex 额度全球重置；子 agent 分流模型、/goal 等省额度技巧集中出现。

OpenAI keeps handing out perks and ChatGPT dots can go straight to Codex; also worth a look are the Claude Code not-reading-AGENTS.md pitfall and an RLVR course.OpenAI 连续放福利，ChatGPT dots 可直接交给 Codex；另有 Claude Code 不读 AGENTS.md 的坑和 RLVR 课程值得一看。