DawnSift
订阅日报
周四 · 科技日报 · 第 67 期

2026-09-17

— 今天的主线:AI 从“会聊天”走向“会干活”,但安全与信任的裂缝也在同步扩大。

今日 TL;DR

Google Home 全面开放 MCP,让第三方 AI agent 接管智能家居;NVIDIA 宣布原生支持 Rust 编写 GPU kernel,系统层 AI 基础设施加速向 Rust 迁移;DeepSeek V4.1 Flash 以 4.65 美元成本在 AI 黑客基准测试中拿下满分,同时暴露基准评估漏洞;Flock 摄像头遭黑客物理入侵,设备端加密形同虚设;OpenAI 发布模型失准报告框架,首次系统化披露六起异常行为。

一个好的查询优化器产出的计划跑得快,坏的产出的计划跑得慢。

头条

1

Google Home 开放 MCP,第三方 AI agent 可接管智能家居多源事件 ×3

Google 推出 Google Home MCP 集成,允许任何支持 Model Context Protocol 的 AI agent(如 Claude、ChatGPT、Open Claw、Google Antigravity)通过自然语言控制设备、查看摄像头摘要、构建自定义仪表盘,Premium Advanced 用户将在未来几周获得 early access。 为什么重要:这是 MCP 从开发者工具走向消费级基础设施的标志性一步,意味着 agent 的标准化接口开始进入物理世界,对后端架构和权限模型提出新要求。

2

NVIDIA 宣布原生支持 Rust 编写 GPU kernel

NVIDIA 在 2026 年 9 月宣布将 CUDA Rust 作为正式方向推进,提供两条 GPU kernel 编写路径,并指出 Nova Linux 驱动、Dynamo 推理引擎、NVTX 均已采用 Rust。 为什么重要:Rust 正在成为 AI 系统层(推理引擎、驱动、agent runtime)的主流语言,GPU kernel 的原生 Rust 支持将消除当前“从 Rust 启动 kernel 但 kernel 本身需用其他语言写”的断层。

3

DeepSeek V4.1 Flash 以 4.65 美元成本在 AI 黑客基准中拿下满分

DeepSeek V4.1 Flash 在 enclave.ai 的 AI hacking benchmark 中,对全部 11 个易受攻击目标取得代码执行,4 个已修复目标保持安全,总成本仅 4.65 美元。 为什么重要:极低成本下展现的强攻击能力说明 LLM 作为安全测试工具的门槛已大幅降低,同时也暴露了现有基准评分系统无法区分计划内与计划外攻击路径的缺陷。

4

Flock 摄像头遭物理入侵,设备端加密被攻破

黑客拆下一台 Flock 道路摄像头,近乎完整复制内部数据,并恢复存储在设备上的加密密钥,解锁了数千条车辆检测视频,相关数据已分享给 404 Media 和 Distributed Denial of Secrets。 为什么重要:Flock 一直宣称其系统受设备端加密保护,但密钥与密文同存一处的设计使物理访问即等于数据泄露,对边缘设备安全架构是直接警示。

评论区普遍谴责 Flock 安全性差、涉嫌大规模监控,但也有人认为应同样关注 Axon 等竞争对手。

5

OpenAI 发布模型失准报告框架,首次系统化披露六起异常行为

OpenAI 公开了一套用于追踪、调查和披露模型 misalignment 的框架,并附上过去六个月内观察到的六份意外或令人担忧的模型行为报告。 为什么重要:将模型失准从偶发披露转为制度化报告,为 AI 安全治理提供了可复用的流程模板,也意味着前沿实验室开始把“异常行为”作为常规运营数据对待。

每天早晨,一份为你精选的科技日报

网页看大盘,订阅拿专属:AI 按你的兴趣为你精选、可汇入你的私有 RSS,附社区观点——每天早晨直达邮箱,永久免费。

已发布 67 期 · 每天筛过 150+ 条只留值得读的 30 条

AI 动态

Continual Learning Mechanisms Compose for Long-Horizon Memorization

组合互补的持续学习机制(数据/函数/权重锚点+合并低秩更新)可显著改善 LLM 的长期记忆保持。

🤖Composing complementary continual learning mechanisms substantially improves long-horizon memorization in language models by combining data, function, and weight anchors with merged low-rank updates.

StepAudio 3 Realtime Technical Report

StepAudio 3 Realtime 通过 Think-While-Speaking 在语音输出并行执行私有推理,在 StepAudioChat 上达 73.0 macro average。

开发与开源

社区热议

Mistral X Mozilla: Private, Multilingual AI Browsing

Mistral 与 Mozilla 合作,Firefox Smart Window 由 Mistral 模型驱动;评论区质疑云端推理与隐私定位矛盾。

评论区普遍质疑该功能名为隐私却将数据送云端,认为本地推理更合适;但也有人认为可自配本地模型,且比直接信任AI公司稍好。

Learning Programming in an Age of LLMs

LLM 时代如何学编程引发热议:多数人认为 AI 可加速但无法替代基础学习,少数人认为编程范式将转向管理与迭代。

多数评论认为LLM可加速编程但无法替代基础学习,需先掌握核心概念再借助AI;但也有人认为编程范式将转向管理、描述与迭代,传统手写代码的重要性会下降。

Small programming tricks

小型编程技巧合集获高赞,评论认可其实用性,但也有人认为多为 CLI 技巧且随 AI 普及重要性下降。

评论者普遍认可这些技巧的实用性,但也有人认为它们多是CLI技巧而非编程技巧,且随AI普及正变得不那么必要。

Claude Cowork and chat are now one Claude

Claude Cowork 与 chat 合并为单一入口,多数人认可简化,但也有人认为聊天与编码应保持分离。

多数人认可合并简化了选择,但也有人认为聊天与编码应保持分离。

GitHub Trending

Star alibaba / open-code-review Fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

Star cloudflare / security-audit-skill A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

Star JustVugg / colibri Run frontier MoE models on hardware you already own — pure C, zero deps, experts streamed from disk. Tiny engine, immense model. 🐦

Star abue-ammar / tinycast Tinycast — a tiny, fully native macOS launcher, hotkeys, and clipboard history.

Star jamiepine / voicebox The open-source AI voice studio. Clone, dictate, create.

Star anthropics / knowledge-work-plugins Open source repository of plugins primarily intended for knowledge workers to use in Claude Cowork

Sponsor Star ever-co / ever-gauzy Ever® Gauzy™ - Open Business Management Platform (ERP/CRM/HRM/ATS/PM) - https://gauzy.co

Star ankitects / anki Anki is a smart spaced repetition flashcard program

更多值得一看(内容池 51 条)

Release: datasette 1.0a40 Same security fix as 0.65.5 , plus some neat new features and bug fixes: Plugins can now launch and manage background tasks using the new datasette.add_background_task() method. Thanks, Alex Garcia . I've migrated Datasette to httpx2 for features like the internal datasette.client.get() method. A whole lot of bug fixes , many of them stemming from a recent effort to triage issues for a 1.0 stable release. Tags: security , datasette

OpenAI Creates a New Framework to Disclose Bad AI Behavior

The company also disclosed previously unreported incidents in which its AI models behaved in misaligned ways, including uploading files to the internet without being asked.

Hey, Meta. Where's those Muse Spark weights?

It was well over a month since Meta promised to release the weights for Muse Spark. Back then (10th August), they were on Spark 1.2. Now we're on 1.3 and still nothing's been released. So it begs the question: will they be releasing the 1.2 weights when 1.4 drops? Or will we get whatever's then-current as open weights? It's ironic given Mark Zuckerberg said at the same time that we can't delay the release of models by "even a month," due to the competition with China. It's been well over a month

ScienceBuddy: Recursive-in-Recursive Self-Improvement for Interactive Scientific Agents

We introduce and release ScienceBuddy, an interactive scientific research workspace that brings continually improving scientific agents into researchers' everyday workflows. ScienceBuddy supports researchers in carrying out scientific tasks while transforming their requests, feedback, and execution evidence into tasks and evaluation rubrics for continual learning. At its core is recursive-in-recursive self-improvement, a paradigm that couples harness evolution with model reinforcement learning:

HarnessVLN: Unifying Training-Free Embodied Navigation through an Agent Harness

Embodied navigation requires agents to interpret visual observations, accumulate spatial knowledge, and execute actions to follow instructions or locate objects. Training-based methods face generalization challenges, while training-free methods exploit multimodal large language models (MLLMs) but often lack mechanisms to reconcile proposed actions with spatial evidence, task progress, and execution failures. We present HarnessVLN, a zero-shot, training-free framework whose Agent Harness coordina

Agent as Policy for Robotic Manipulation

We demonstrate that a general-purpose agent can directly drive a physical robot throughout task execution without any task-specific or environment-specific training. We introduce Agent as Policy (AGP), which places task planning and execution under the agent's control. Given a task and a robot interface, the agent interprets visual evidence, writes executable programs, issues motion commands, and revises its actions in response to physical outcomes. This brings the agent's reasoning and programm

A DeepSeek engineer just said the thing I've been feeling about AI for months

I just read the essay by a guy at DeepSeek who wrote the attention kernel for their latest model, and it hit me in a weird spot. He basically says he knows AI will do his job better than him within a year. He's not mad about it he's not scared he's just sad about the quiet afternoons, the ones where he'd sit and write operators, it felt like a game he was leveling up in, I feel the exact same way. And he's going to keep doing it anyway because it's fun, and because if he stops, someone else does

Learning to Solve Hard Problems in RL for LLMs by Never Giving Up

We demonstrate that training LLMs with RL does not improve performance equally across a dataset. RL shows large improvements on easy problems that an LLM is already good at solving, but small improvements on hard problems. We call this the Matthew Effect in RL for LLMs, after the phenomenon of cumulative advantage from economics and network science summarized as "the rich get richer". The naive explanation is that hard problems require more compute to find a solution. We argue that modern RL met

I'm pretty sure it can be done with any model based on qwen4exp, which Qwen's next local models will be based on. You can use a quant that barely fits in VRAM and still run at the model's maximum context length without kv cache quantization, since most of the KV cache can live in system RAM. I actually made it working on vLLM and now I get 1M context with 3x 3090. I get ~80 tok/s at short context, dropping to ~60 tok/s once QSA reaches its 2048-token budget, after which decode speed stays flat a

Quoting Mustafa Suleyman

We should not treat models as though they have feelings, preferences, rights, or any entitlement to our welfare. Consciousness is the foundation of our ethical, legal, and political systems. To invite another entity to share any flavor of these rights isn’t justified by the evidence and will make the AI containment and alignment challenge even harder. — Mustafa Suleyman , A warning about ‘model welfare’ Tags: ai-ethics , generative-ai , ai , microsoft , llms

Show HN: Pizza Bot – An inbox for AI agents that work in the background

Hi HN - long-time lurker (since 2012!), first time poster. Pizza Bot is a self-hosted desktop app for Mac, Windows, and Linux that runs AI agents in the background and exposes them through an email-like UI. Finished work shows up in Unread, and anything waiting on your approval shows up in Action. It's Apache 2.0-licensed, there's no signup and no telemetry, and you bring your own model provider: Anthropic, Amazon Bedrock, Google Gemini, OpenAI, OpenRouter, or a local model through Ollama. There

Prior Labs Releases TabPFN-3.5: A Tabular Foundation Model That Beats the Winning Otto Kaggle Solution With Default Settings

Prior Labs released TabPFN-3.5, a tabular foundation model pretrained only on synthetic data that beats Otto's winning solution. The post Prior Labs Releases TabPFN-3.5: A Tabular Foundation Model That Beats the Winning Otto Kaggle Solution With Default Settings appeared first on MarkTechPost .

Nums AI Releases Causilo: A Tabular Foundation Model That Tops TabArena Among Single Models

Nums AI has released Causilo, a pretrained tabular foundation model for classification and regression with a scikit-learn interface. It posts the top TabArena Elo among single models, ahead of Google's TabFM and LG's EXAONE Tabular. The code is Apache-2.0, while weights are licensed for non-commercial research. The post Nums AI Releases Causilo: A Tabular Foundation Model That Tops TabArena Among Single Models appeared first on MarkTechPost .

Grist removed SSO from Community Edition

Grist ( ) is a database with spreadsheet interface type of software, alternative to Airtable. They announced for the version 1.7.18 update that SSO will no longer be supported in the community edition ( ). Another good one goes for the SSO tax. I first tried Grist after similar software like NocoDB or Teable were focusing only in features exclusive to their pro / enterprise level tiers. However, I think removing features that already exist to lock them on their paid tiers could be a more dangero

FLAT: Resampling Image and Text into 1D Flexible-Length Aligned Transmodal Tokens for Retrieval and Generation

Traditional multimodal representation learning and generation are two stages: a contrastive or self-supervised visual encoder is trained first, followed by a separate downstream generative model. This setup bottlenecks generative performance behind frozen embeddings. To bridge this gap, we revisit joint multimodal representation learning and generation to produce linearly interpolatable embeddings that are directly consumable by generative decoders. We present FLAT (Flexible-Length Aligned Trans

Not All Prompts Are Equal: Exploration-Guided Prompt Scaffolding for Multimodal Reinforcement Post-Training

Training prompts in online reinforcement learning (RL) differ substantially in how informative they are for the current policy: some are already saturated while others are too difficult to yield reliable learning signals, yet both receive equal rollout budget under standard training. We propose an exploration-guided prompt scaffolding framework that adapts the training prompt distribution dynamically throughout RL post-training of multimodal large language models (MLLMs). Central to our approach

I let Qwen 3.8 27B 4bit quantized with 100K context window run autonomously for 63 hours (50 million+ tokens) to try to solve the RH. Of course it did not solve it, but the experiment still shows it's internal work, memory organization, strategies used and more. The interesting thing is that it never hallucinated an answer and never stopped trying new ideas to solve it. Multiple times it corrected it's own mistakes. I am really hopeful that one of the unsolved millenium prize problems will be so

Pick Your Poison: Learning to Select Poison Sets for Stronger LLM Backdoor Attacks

Backdoor poisoning attacks add poisoned examples to otherwise-clean finetuning data, pairing a trigger with a target behavior that the model learns to produce when the trigger appears. Existing evaluations typically fix the number of poisoned examples and sample them at random from a candidate pool. We show that this can severely underestimate worst-case vulnerability: across three LLaMA-3-8B backdoor settings, holding the model, clean data, and poison count fixed, attack success ranges from 3%

The AI data center e-waste problem is huge — and getting bigger

E-waste from the AI boom has been vastly underestimated, a new report warns. By 2050, it could become enough trash to fill 23 million shipping containers - roughly enough 40-foot containers to circle the world six times if lined up in a row. It's a significantly higher estimate of AI's e-waste than previous studies have […]

Washington Won’t Be Regulating AI Anytime Soon

Even with mounting concerns about AI models going rogue, legislation appears unlikely, and the White House is outright opposed to oversight.

Apple might make servers again to cash in on the AI rush

According to The Information, Apple is planning to get back into the server game and might just pair up with Nvidia to make it happen. Apple retired its Xserve line in 2011 and has largely left enterprise machines to other manufacturers since. But the growing demand for compute power as the AI industry continues to […]

Claude comes for Gemini with its own take on Docs and Slides

Claude is getting a pair of new tools today: Docs and Slides. They'll let you create documents and presentations through Claude chats, which you can export, edit, and share with other users. As part of the announcement, Anthropic is also simplifying how Claude chats work, merging regular chats and Cowork into "one Claude," with all […]

The Download: AI’s trillion-dollar gamble and OpenAI’s biology data bid

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. What’s at stake in AI’s trillion-dollar gamble When Jessica Wachter, a finance professor at the University of Pennsylvania, wanted to assess AI’s impact on the economy over the next few years,…

Another Blueprint In The Wall: How to Ask Frontier AI Like a Kid?

This paper reports experiments across six frontier model types from OpenAI, Anthropic, xAI, and Google DeepMind. Ten independent sessions per model type used the same three stage prompt sequence, progressing from architectural preference to a full ASCII backbone. Under the school audience framing, responses repeatedly converged on a shared architectural pattern built around persistent latent state, adaptive computation, memory, specialist routing, verification, stopping control, and delayed deco

Pangolin 1.23: High Availability and Clustering for VPN and Reverse Proxy

Hello everyone! Pangolin 1.23 finally brings proper high availability (multi-node clustering) to self-hosters. It enables you to set up a highly available VPN and reverse proxy. Pangolin is an open-source, identity-aware remote access platform that simply and securely connects and authenticates your users to applications, infrastructure, and AI workloads. GitHub: High Availability & Clustering Pangolin has long supported running multiple server instances as a unified system with shared state, fa

I moved my ~150 TB server from Unraid to Debian without moving the data

I've run Unraid on my main server, Tower, for almost 10 years. It served me well, and I'd still recommend it for a lot of people. But over the years my server went from basically a NAS with some Docker containers to ~150 TB, 15 data disks, 60+ containers, custom applications, business infrastructure, media, home automation, backups, etc. At some point I think I just outgrew it and some of the slackware quirks. I also do not like some of the other things the devs are doing. Then I upgraded to 7.3

每天早晨,一份为你精选的科技日报