🌐 双语
Archive

AI Builders
Digest

2026-10-24 14 builders · 28 tweets · 1 podcasts · 0 blogs

🔥 热点话题

Cloudflare CTO:AI 正在制造安全末日,也是最快解药Cloudflare CTO: AI Is Causing a Security Apocalypse—and Is Also the Fastest Fix

The Takeaway:AI 既在引爆漏洞发现的指数级增长(每周级别的 Log4j 级事件),也将成为最快修复它们的工具,未来 18 个月多数工程时间会暂时转向安全。

Cloudflare CTO Dane Knecht 指出,过去一年安全从“事后补救”变成所有人的首要议题。AI 让高中生级别的“agent kitties”也能找到国家级漏洞,而模型与 harness 的组合正在把红队能力民主化。他预计未来一年公司会从一支红队扩展到四五支,但强调这只是过渡期:一旦 AI 扫完大部分存量代码,安全压力会回落,生产力会反弹。

Knecht 对“空气隔离一切”的末日论保持冷静:“人类很能适应,关键时刻竞争对手会变成同盟。”他更看好零信任架构和攻击面收缩。Cloudflare 内部已用 Codex 文档把安全原则固化成“十诫”,让 agent 在每一步评审中强制执行。同时他们推出内容变现网关和 x402 微支付,试图为 agent 阅读内容建立新的经济模型。

最直接的建议是:把站点放在 Cloudflare 后面。重大漏洞出现时,他们会把防护同步给免费用户,因为“这是我们提供的公共基础设施”。

“AI 成了导致这场安全末日的工具,但它也是能帮我们更快解决的工具。”
The Takeaway: AI is both triggering an exponential surge in vulnerability discoveries (Log4j-class events now weekly) and the tool that will fix them fastest; the next 18 months will see a temporary spike in engineering time spent on security.

Cloudflare CTO Dane Knecht describes the past year as ten years compressed into one. Security shifted from afterthought to everyone’s top priority. AI has democratized red-teaming so thoroughly that high-school “agent kitties” are finding serious flaws once reserved for nation-states. Models plus better harnesses are raising the bar faster than human teams can respond. He expects Cloudflare itself to expand from one red team to four or five, yet insists the crunch is temporary: once AI has surveyed most existing code, the security tax will fall and product velocity will rebound.

Knecht rejects pure doomsday talk about air-gapping everything. “Humans are pretty adaptable… when critical moments happen, people rise to the challenge.” Zero-trust architectures already put many companies in a stronger position. Internally Cloudflare codified its principles into a “Codex” of best practices that agents must follow at every review step. On the content side they shipped a monetization gateway and x402 micropayments so agents can pay sites for reading, aiming for a new economic model that compensates creators instead of just burning crawl bandwidth.

His practical advice is blunt: put your sites behind Cloudflare. When major vulnerabilities drop, the company ships protections to free users as well as paid ones—“we view that as part of the utility we offer.”

“AI has become the tool that’s causing this kind of security apocalypse… it is also the tool that can help us solve it faster as well.”
查看原文 →

Thariq 离开 Anthropic:Claude Code 从零做到超预期规模Thariq Leaves Anthropic After Scaling Claude Code Beyond Expectations

Claude Code 核心贡献者 Thariq 宣布离开 Anthropic。他在 Anthropic 工作超过一年,亲眼看着 Claude Code 成长到远超自己最初想象的规模。他强调公司“race to the top”的理念——认真负责地工作、抬高标准、激励他人——会永远带着。同事是他遇到过最有才华、最认真的人,社区也让这份工作既有趣又高压。接下来会先休息,再投入新事物。
Claude Code core contributor Thariq announced he has left Anthropic after more than a year. He watched Claude Code scale far beyond what he ever imagined. He carries forward the company’s “race to the top” ethos—working hard and responsibly to raise the bar and inspire better outcomes. He calls his colleagues the most talented, thoughtful and earnest people he has met, and thanks the X community for making the job both fun and stressful. He plans a short break before diving into something new.
查看原文 →

Aaron Levie:Agent 群组将成为网络安全最大赛道之一Aaron Levie: Agent Swarms Will Be One of the Biggest Categories in Cyber Defense

Box CEO Aaron Levie 认为 agent 群组做网络防御即将成为 AI 最大赛道之一。安全是“算力越多、价值越高”的典型场景:agent 可以审查代码与基础设施、穷尽测试风险组合、处理海量数据——这些都是人类永远做不完或来不及做的事。接下来的网络安全会非常精彩。
Box CEO Aaron Levie argues that agent swarms for cyber defense are about to become one of the biggest categories in AI. Security is an ideal use-case for swarms because more compute directly yields more value. Agents can review code and infrastructure, test every permutation of risk, and process massive data volumes—work humans never get around to, or at least not fast enough. “Going to be a wild time in cyber.”
查看原文 →

Guillermo Rauch:Agent 已能在共享主机上发动缓存时序攻击Guillermo Rauch: Agents Can Already Run Cache Timing Attacks on Shared Hosts

Vercel CEO Guillermo Rauch 指出,agent 已经能在云端共享虚拟机上发动自 2015 年就已知但从未被真正解决的缓存时序攻击(他称之为“Ouija”攻击)。一个 agent 通过制造足够噪声,让同机另一个 agent 通过计时检测出来。真正完整的解决方案是给每个 agent 专用硬件,但这成本极高。Vercel Sandbox 已部署所有实际缓解措施,并配合持续监控与红队。
Vercel CEO Guillermo Rauch highlights that agents can already perform classic cache-timing (“noisy neighbor”) attacks on shared-host VMs—a class of attack known since at least 2015 with no full solution. One agent can create enough noise via CPU caches that another detects it by timing its own operations. The only complete fix is dedicated hardware per agent, with major economic consequences. Vercel Sandbox has deployed every practical mitigation plus continuous monitoring and red-teaming.
查看原文 →

💰 创业成功案例

Replit 收购 Chroma 团队,并推出政府版产品Replit Acquires Chroma Team and Launches Replit for Government

Replit CEO Amjad Masad 宣布欢迎 Jeff 与 Chroma 团队加入。Chroma 是 RAG 领域的早期开拓者。他们将帮助解决 AI 最难的问题之一:给 agent 提供真正工作所需的上下文与记忆,朝“自动驾驶公司”再迈一大步。同时 Replit 推出政府版产品,并迎来前 AWS 公共部门负责人 Michael Greenwald,目标是改变政府构建与运营软件的方式。
Replit CEO Amjad Masad welcomed Jeff and the Chroma team. Chroma were building RAG before the term existed. At Replit they will tackle one of the hardest problems in AI—giving agents the context and memory needed for real work—a massive step toward the self-driving company. Separately, Replit launched Replit for Government and brought on Michael Greenwald, previously leading AWS’s public-sector business, to transform how governments build and operate software.
查看原文 →查看原文 →

🛠️ 开发者工具与技巧

OpenAI Codex CLI 更新:用量翻倍,新增可复用 prompt 预设OpenAI Codex CLI Updates: Usage Doubled, Reusable Prompt Presets Added

OpenAI Codex 与 ChatGPT 团队的 Thibault Sottiaux 公布 Codex CLI 多项更新:可复用 prompt 预设、内联模型与权限设置、企业 MCP 登录,以及长会话恢复失败修复和 Windows 企业代理认证。自 DevDay 以来 CLI 用量已增长 2 倍。他同时提醒:“拥有工具和成为工具的区别如今很微妙,很容易不小心把自己建成工具。别成为工具。”
Thibault Sottiaux (Codex & ChatGPT at OpenAI) announced Codex CLI updates: reusable prompt presets, inline model and permission settings, enterprise MCP sign-in, fixes for resuming long sessions, and Windows corporate-proxy authentication. Usage has grown 2× since DevDay. He also warned: “The difference between having a tool and being a tool is subtle these days… Don’t be a tool.”
查看原文 →查看原文 →查看原文 →

Dan Shipper:AI 团队的最佳配置是海盗 + 架构师Dan Shipper: Best AI Team Configuration Is Pirates and Architects

Every CEO Dan Shipper 认为 AI 时代团队的最佳配置只有两种人:海盗(快速行动、探索边界)和架构师(系统设计、长期结构)。两人组合比传统大团队更高效。
Every CEO Dan Shipper argues the best configuration of teams in AI is only two people: pirates and architects—fast movers who explore edges paired with system designers who own long-term structure.
查看原文 →

🌍 其他动态

Peter Yang:时间终将比金钱更重要Peter Yang: At Some Point Your Time Becomes Worth More Than Your Money

实用 AI 教程作者 Peter Yang 观察到,很多有野心的人从未停下来意识到:到了某个阶段,时间比金钱更重要。作为夹心一代(孩子尚小、父母渐老),他更早体会到这一点,并庆幸自己能选择追求时间的自主权。很多科技从业者其实也有条件,只是没停下来反思。
Practical AI educator Peter Yang notes that most ambitious people never pause to realize that at some point their time exceeds the value of their money. Being in the sandwich generation with young kids and aging parents forced the realization sooner. Many in tech are already in a position to choose agency over time—they just don’t stop to reflect.
查看原文 →

Aditya Agarwal:AI 最大进步来自同时解决多个问题Aditya Agarwal: Biggest AI Advances Come from Solving Many Problems Together

SPC 普通合伙人 Aditya Agarwal 引用 Sergey Levine 的观点:AI 最大的进步往往来自同时解决多个问题,而不是为每个任务训练专用系统。机器人领域同样如此——把问题做得更大,反而更可能突破。
SPC General Partner Aditya Agarwal highlights that some of the biggest advances in AI have come from solving many problems together rather than training specialized systems for individual tasks. The same principle applies to robotics: make the problem bigger.
查看原文 →

Claude 发布 Duet 安全、隐私与安全深度说明Claude Shares Deeper Look at Duet Safety, Privacy and Security

Anthropic 官方账号 Claude 发布了 Claude Duet 在安全、隐私与安全方面的更详细说明,回应社区对多智能体协作产品的关注。
Anthropic’s Claude account published a deeper look at how Claude Duet handles safety, privacy and security, addressing community interest in the multi-agent product.
查看原文 →