KDZONE 情報站

Native is now the future of mobile at Shopify Shopify are moving from React Native back to separate Swift and Kotlin codebases for their native apps, for the exact reason you would expect: We decided to switch from native to React Native in 2020 for three reasons: Stop building t…

The company said Pro subscriptions put the most strain on its systems, so it's pausing sign-ups while adding more capacity.

A new report released Thursday by Anthropic alleges persistent distillation attacks by China-based AI companies, which have escalated in recent months as competition in the space has intensified.

Judge tosses lawsuits, says plaintiffs didn't allege any real privacy violation.

Meta's newest app Muse is off to a slower start than the company's other apps, like Meta AI or Threads.

Article URL: https://developers.openai.com/api/docs/guides/agents-api/overview Comments URL: https://news.ycombinator.com/item?id=49649213 Points: 331 # Comments: 169

Article URL: https://auberon.xyz/blog/posts/deathray/ Comments URL: https://news.ycombinator.com/item?id=49649124 Points: 259 # Comments: 182

Europe is looking inward, and perhaps to China, as the White House tries to cancel some NASA partnerships.

App support is slim right now, but Google says more are coming.

"Bankruptcy cannot become the new land grab for AI.”

Come inside the mind of a bot trying to convince the internet it's human.

The trick from Next Generation would be even more effective in real life.

OpenAI has released GPT-6 Astra, a new model focused on coding, computer use, long-running agentic tasks, and cybersecurity, with availability across ChatGPT, Codex, and the OpenAI API. By Daniel Dominguez

Pocket FM uses AI to produce 99% of its new content, helping make content production about 80 times cheaper.

Talarico talk to be on YouTube to save ABC stations the hassle of dealing with FCC.

Article URL: https://musictheory.pugetsound.edu/mt21c/MusicTheory.html Comments URL: https://news.ycombinator.com/item?id=49647134 Points: 279 # Comments: 138

DJI drones that already supply Mount Everest camps assist Nepal’s flood relief.

Article URL: https://graybeard.ing/software-drives-people-insane/ Comments URL: https://news.ycombinator.com/item?id=49646181 Points: 323 # Comments: 123

César de la Fuente’s lab uses Codex and ChatGPT to search living and extinct genomes for antimicrobial candidates to fight drug-resistant infections.

Search can help runners get race-day ready with registration alerts, tailored training plans, and more.

Article URL: https://planetscale.com/blog/introducing-neki Comments URL: https://news.ycombinator.com/item?id=49645686 Points: 269 # Comments: 149

Article URL: https://cognition.com/blog/swe-2 Comments URL: https://news.ycombinator.com/item?id=49645443 Points: 290 # Comments: 120

https://dstretch.com/DecorrelationStretch.pdf https://www.nasa.gov/technology/tech-transfer-spinoffs/nasa-... Comments URL: https://news.ycombinator.com/item?id=49645437 Points: 292 # Comments: 46

Article URL: https://blog.jim-nielsen.com/2026/hands-off-my-cables/ Comments URL: https://news.ycombinator.com/item?id=49645393 Points: 288 # Comments: 223

Meet the Data agent in ChatGPT Work. Connect company data, uncover insights, and build interactive dashboards with AI using natural language.

“The vast majority of cases we find are people who are entitled to claim for something, claiming for that thing,” the researcher told TechCrunch.

Maven Robotics emerged from stealth today with a $100 million Series A and active deployments.

Article URL: https://shopify.engineering/back-to-native Comments URL: https://news.ycombinator.com/item?id=49643982 Points: 359 # Comments: 243

I've reset this more than once and the last time I made a careful note of when I did it and to my surprise I found it re-enabled when I checked just now. Make sure you check this thing to see if it hasn't been re-enabled if you believe it to be off right now. Comments URL: https:…

Article URL: https://rustfoundation.org/media/guest-post-rust-is-tier-1-language-at-microsoft/ Comments URL: https://news.ycombinator.com/item?id=49643546 Points: 326 # Comments: 157

1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale.

Article URL: https://consumerrights.wiki/w/Sony_PlayStation_digital_game_ownership_lawsuit Comments URL: https://news.ycombinator.com/item?id=49642531 Points: 301 # Comments: 98

為了降低遭到偵測與阻擋的機率，駭客在攻擊活動中藉助合法雲端平臺服務作為C2管道的案例，近來逐漸增加，Cisco資安威脅研究團隊Talos近日揭露的一起ClickFix攻擊事件便是其中的典型。

"Artemis II is done."

Cisco修補Nexus 9000系列交換器的重大漏洞CVE-2026-20212，影響搭載Silicon One ASIC的機型，以及這些機型對應的NX-OS 10.x版軟體，Cisco已發布修補版本，建議用戶使用Software Checker確認自身交換器所對應的NX-OS修補版本，在修補完成前，也可先行下載

頂尖AI模型的自主操作能力持續提升，既有安全控管是否跟得上也成為產業焦點。OpenAI於9月9日呼籲美國建立聯邦層級的強制性AI安全規範，主要適用於開發頂尖AI系統、資源充足的少數業者，要求依模型能力與風險接受安全測試及獨立評估，並強化網路安全防護與重大事件通報。

9月9日資安公司Proofpoint指出，他們從8月底發現使用漏洞利用工具包BlueMoon的活動，此工具包串連兩個Chrome零時差漏洞，以及一個Windows近日修補的零時差漏洞，而對於攻擊者的身分，最早使用的是被稱做TA412、APT31、Violet Typhoon，或JungleBamboo的中國駭客組織，後續該公司看到UNK_LateNight、UNK_Dou

新加坡新創資安研究團隊Kinryū Labs於9月9日揭露一起疑似航班旅客系統資料庫外洩事件。研究人員於6月3日發現一個存放於越南河內、疑似與航班乘客資訊系統（APIS）相關的Elasticsearch資料庫，該資料庫包含2017年1月至2026年4月的2.2億筆旅客及機組員紀錄，涉及1,008家航空公司及全球多國旅客，其中的資料包括姓名、生日、性別、國籍、護照號碼、航班、起降及轉機機場、座位與行李資訊，但這些是旅行紀錄而非2.2億名不同個人。

Autonomous teams are an article of faith in modern software development. The shape of our value determines what we can do; it determines our trade-offs between agency and coherence. We all have a purpose, and we all have agency to do something, hence the suggestion is moving from…

Article URL: https://honestlyranked.com/guides/streaming-price-increases/ Comments URL: https://news.ycombinator.com/item?id=49641215 Points: 334 # Comments: 301

蘋果在周三（9/9）發表了首款iPhone摺疊機iPhone Duo，以及iPhone 18 Pro與iPhone 18 Pro Max，這3款高階版iPhone皆採用2奈米製程的A20 Pro晶片。

與微軟槓上的資安研究員Nightmare Eclipse（Chaotic Eclipse），從今年4月開始不斷揭露微軟產品的零時差漏洞，近期她將目標轉向其他廠牌的防毒軟體與EDR系統，以及Nvidia元件。

Lily Mara explains how to avoid high-risk software rewrites through incremental FFI refactoring. She shares how engineering teams can replace Python bottlenecks with Rust via PyO3, demonstrating how to achieve dramatic function-level speedups, seamless integration testing, and me…

上櫃計程車叫車服務公司大車隊（2640）於9月9日晚間．在股市公開資訊觀測站發布重大訊息，子公司全球商務科技的資訊系統遭受網路攻擊，該公司發現部分資訊系統遭到攻擊後，已立即啟動資安應變機制。對於客戶資料是否遭未經授權存取仍在調查確認，大車隊表示，目前尚無客戶資料遭到下載、複製，或外洩的跡象。

Article URL: https://devblogs.microsoft.com/oldnewthing/20260909-00/?p=112683 Comments URL: https://news.ycombinator.com/item?id=49640646 Points: 288 # Comments: 140

AI coding assistants have become a core part of software development. AI-generated code has shown productivity gains, but it's also contributing to security weaknesses and familiar bug patterns. In this article, author Nitin Garg highlights the bottleneck has moved from code gene…

資安業者CloudSEK揭露網釣即服務（PhaaS）平臺BigBear 2.0，攻擊者可透過這套平臺，針對Microsoft 365帳號發動對手中間人攻擊（AiTM）。即使受害者完成多因素驗證（MFA），攻擊者仍可擷取受害者完成驗證後的連線階段cookie，進而接管Microsoft 365帳號。

Linux身分與存取管理系統FreeIPA近期修補權限提升漏洞CVE-2026-76578。根據紅帽（Red Hat）公告，攻擊者不需要既有帳號，只要能連線到LDAP服務，就可能在未經身分驗證的情況下取得FreeIPA管理權限。這項漏洞的初步CVSS v3.1風險評分達9.8，列為重大（Critical）風險等級。

AI代理開始能自行存取企業資料、呼叫API與外部工具，甚至連續執行多項任務後，企業既有的資安監控與事件處理方式也面臨新的挑戰。過去由資安人員逐一調查警示的流程，可能難以及時掌握代理快速且連續的操作。

隱私強化技術與AI持續發展，執法機關取得與分析數位證據的方法也必須跟著調整。

資安業者Huntress近日揭露北韓駭客利用假求職手法滲透海外企業，攻擊已從IT職務擴大至醫療、業務及行銷等領域。攻擊者冒用或偽造他人身分，透過一般徵才管道應徵海外企業職缺，部分工作需要實際到公司任職，另有職務則採遠距工作。Huntress今年已協助確認5名疑似與北韓有關的工作人員，其中包括在澳洲醫療機構任職、後遭發現的3名人員。攻擊者成功受聘後，可取得企業提供的帳號、設備及內部系統權限，並將工作所得轉回北韓。

OpenAI and GSA will offer eligible federal, state, local, and tribal governments $0 license fees, 50% off usage, and expanded cyber defense support.

Introducing ChatGPT for Financial Services, combining built-in financial data and GPT-6 Astra for research, modeling, and client-ready materials.

https://mathstodon.xyz/@andreasthom/117240536885387540 https://mathstodon.xyz/@andreasthom/117240537520615623 https://x.com/ValerioCapraro/status/2097791836269977996 , https://xcancel.com/ValerioCapraro/status/209779183626997799... https://bsky.app/profile/did:plc:ckaz32jwl6t2cno…

In June 2026, the IETF published RFC 10008, introducing the QUERY method to HTTP, the first new standard HTTP verb since 2010. QUERY enables developers to send richer query filters in the request body while maintaining cacheable, safe, and idempotent semantics. This addition addr…

https://huggingface.co/deepseek-ai/DeepSeek-V4.1-Flash Comments URL: https://news.ycombinator.com/item?id=49639090 Points: 378 # Comments: 160

資安業者Kaspersky近日揭露伊朗駭客組織Mirage Kitten新一波攻擊活動，該組織又稱UNC1549、Smoke Sandstorm或Nimbus Manticore，在這波攻擊中冒充大型科技公司的招募人員，鎖定中東及非洲的航太與金融科技產業軟體工程師，透過LinkedIn等求職平臺接觸目標，要求應徵者完成限時的程式設計測驗，藉此向應徵者散布託管於Amazon雲端儲存空間，植入遠端存取木馬（RAT）的測驗用專案壓縮檔。

遠洋貨輪長時間航行於公海時，船舶與岸端間往往面臨通訊覆蓋不足、資料傳輸受限等問題，成為航運業推動數位、智慧轉型須先解決的挑戰。陽明海運近幾年持續推動智慧船隊發展，與大世科及伸波通訊合作，建置衛星、5G等網路通訊技術及AI數位應用平台，改善船岸通訊環境，並將船舶設備資料、巡檢影像與維運資訊導入數位化管理。 這項應用是在國發會支持下進行，陽明海運以14,000 TEU級的貨櫃輪「承明輪」（YM Wisdom）及2,800 TEU級「好明輪」（YM Certainty）作為驗證場域，整合高低軌衛星、靠岸公網、船內5G專網與Wi-Fi網路，建立船舶的全時通訊架構…

美國網路安全與基礎設施安全局（CISA）於9月9日，將CVE-2025-25249列入已遭利用的漏洞名單（KEV），在前一天資安公司SOCRadar指出，他們自今年7月偵測到積極利用的攻擊活動，使用俄文的攻擊者鎖定超過3萬個IP位址，利用此漏洞攻擊Fortinet防火牆設備FortiGate，以及交換器管理平臺FortiSwitchManager，並試圖植入Node

Google周三（9/9）宣布，未來兩年（2027至2028年）將在芬蘭投資至少130億歐元（約151億美元）以興建資料中心及相關基礎設施，是該公司在歐洲規模最大的單筆投資案。此次計畫涵蓋Hamina、Kajaani、Muhos及Vaala等4個地點，其中Hamina自2009年起即為Google在芬蘭的資料中心據點，此次屬擴建性質。