2025-09-25

47 篇热帖

1. Microsoft blocks Israel’s use of its tech in mass surveillance of Palestinians (www.theguardian.com)

Exclusive: Tech firm ends military unit’s access to AI and data services after Guardian reveals secret spy project

2. Terence Tao: The role of small organizations in society has shrunk significantly (mathstodon.xyz)

Some loosely organized thoughts on the current Zeitgeist. They were inspired by the response to my recent meta-project mentioned in my previous post https://mathstodon.xyz/@tao/115254145226514817, where within 24 hours I became aware of a large number of ongoing small-scale collaborative math projects with their own modest but active community (now listed at https://mathoverflow.net/questions/500720/list-of-crowdsourced-math-projects-actively-seeking-participants ); but they are from the perspective of a human rather than a mathematician.

As a crude first approximation, one can think of human society as the interaction between entities at four different scales:

  1. Individual humans

  2. Small organized groups of humans (e.g., close or extended family; friends; local social or religious organizations; informal sports clubs; small businesses and non-profits; ad hoc collaborations on small projects; small online communities)

  3. Large organized groups of humans (e.g., large companies; governments; global institutions; professional sports clubs; large political parties or movements; large social media sites)

  4. Large complex systems (e.g., the global economy; the environment; the geopolitical climate; popular culture and "viral" topics; the collective state of science and technology).

(1/5)

3. Death rates rose in hospital ERs after private equity firms took over (www.nbcnews.com)

After hospitals were acquired by private equity firms, patient death rates in the emergency departments rose by 13% compared to similar hospitals, a study says.

5. Cloudflare Email Service: private beta (blog.cloudflare.com)

Today, we’re launching Cloudflare Email Service. Send and receive email directly from your Workers with native bindings—no API keys needed. We're unifying email sending and routing into a single service built for developers. Sign up for the private beta.

6. Helium Browser (helium.computer)

The web browser made for people, with love. Best privacy by default, unbiased ad-blocking, no bloat and no noise. Fully open source.

7. The story of DOGE, as told by federal workers (www.wired.com)

WIRED spoke with more than 200 federal workers in dozens of agencies to learn what happened as the Department of Government Efficiency tore through their offices.

8. Man still alive six months after pig kidney transplant (www.nature.com)

一名67岁的美国男子在接受基因编辑猪肾脏移植后已存活六个月以上。这创下了猪器官在活体人类体内存活时间最长的纪录。研究人员表示,这一结果是异种移植(将动物器官移植到人体的过程)取得成功的里程碑

该案例为解决人类器官移植供体严重短缺的问题带来了希望。文中提及的其他相关研究进展包括:猴子在接受基因编辑猪肾移植后存活了两年;以及首次进行的猪肝移植手术在人体内维持了10天功能。这些研究共同推进了异种移植领域的发展,使其临床应用更近一步。

本文内容涉及的领域包括治疗学生物技术技术

9. Amazon fined $2.5B for using deceptive methods to sign up consumers for Prime (www.ftc.gov)

The Federal Trade Commission has secured a historic order with Amazon.com, Inc., as well as Senior Vice President Neil Lindsay and Vice President Jamil Ghani, settling allegations that Amazon enrol

10. Product Hunt is dead (sedimental.org)

Thoughts on FOSS and fintech, layered by Mahmoud Hashemi

11. Demand for human radiologists is at an all-time high (www.worksinprogress.news)

Radiology combines digital images, clear benchmarks, and repeatable tasks. But demand for human radiologists is ay an all-time high.

12. Raspberry Pi 500+ (www.raspberrypi.com)

A complete desktop PC built into a high-quality mechanical keyboard, with 16GB RAM and a 256GB SSD for high performance under heavy load.

14. Zlib visualizer (lynn.github.io)

Zlib 可视化工具概述

该工具旨在将 Zlib 压缩或解压缩过程及其数据结构进行可视化展示。它通过图形化界面,帮助用户直观地理解 Zlib 库的工作原理、数据流和压缩效率。

核心功能:

  • 数据流可视化:展示原始数据、压缩后数据以及解压缩还原数据的流转过程。
  • 压缩结构分析:以图形方式解析 Zlib 压缩数据中的块、符号和字典等内部结构。
  • 压缩过程演示:动态演示 Huffman 编码、LZ77 匹配等关键压缩算法的执行步骤。
  • 性能指标展示:实时显示压缩率、处理速度等关键性能参数。

典型应用场景:

  • 教学演示:帮助学生或初学者理解数据压缩原理。
  • 开发调试:辅助开发者检查压缩数据的正确性或优化压缩设置。
  • 数据分析:直观比较不同压缩级别或数据内容下的压缩效果差异。

使用方式: 用户通常需要输入原始数据或 Zlib 压缩文件,工具会通过解码和图形渲染,在界面上逐步展示压缩/解压的中间状态、数据格式和算法应用。

15. I built and launched the first AirPods-Controlled Game (apps.apple.com)

Download RidePods - Race with Head by CODELINE TEKNOLOJI ANONIM SIRKETI on the App Store. See screenshots, ratings and reviews, user tips, and more apps like…

17. How did sports betting become legal in the US? (shreyashariharan.substack.com)

In 2018, the Supreme Court repealed a 26-year federal ban on sports betting. This ruling unleashed the biggest gambling boom in America’s 249-year history. How did that happen?

18. Supermicro server motherboards can be infected with unremovable malware (arstechnica.com)

Baseboard management controller vulnerabilities make remote attacks possible.

19. Resurrect the Old Web (stevedylandev.bearblog.dev)

Recently a local news station in Maine reported a story of some middle schoolers calling their friends with landline telephones. Their parents thought they w...

20. Zed's Pricing Has Changed: LLM Usage Is Now Token-Based (zed.dev)

From the Zed Blog: We're moving Zed AI from prompt-based limits to token-based pricing.

21. Do YC after you graduate: Early decision for students (www.ycombinator.com)

Apply now, do YC later. For students who want to finish school before doing YC. You get the funding the moment you get accepted.

22. This month in Servo: variable fonts, network tools, SVG (servo.org)

Servo’s biggest month by far, with everything from IndexedDB improvements to favicons in servoshell.

23. SonyShell – An effort to “SSH into my Sony DSLR” (github.com)

An effort to "ssh into my Sony camera". Contribute to goudvuur/sonshell development by creating an account on GitHub.

25. Tinder, Hinge, and their corporate owner keep rape under wraps (themarkup.org)

约会软件Match Group隐瞒性侵报告调查摘要

事件核心

调查揭示Match Group(全球最大约会软件公司,旗下拥有Tinder、Hinge等)长期忽视用户性侵报告,允许被举报的犯罪者继续使用平台,导致更多受害者出现。典型案件中,丹佛心脏病专家斯蒂芬·马修斯于2020年首次被举报强奸,但直到2024年被捕并被判158年监禁前,其账户始终未被彻底封禁,期间共有至少15名女性指控遭其侵害。

公司安全政策与执行缺陷

  • 官方政策宣称:用户被举报侵害后,关联账户将被全面封禁。
  • 实际执行不力:内部数据库Sentinel虽记录举报,但用户仅需更改联系方式即可重新注册。2025年2月的测试显示,被封禁用户仍能以相同身份信息在多个Match Group平台创建新账户。
  • 内部矛盾:员工多次指出安全措施滞后,2021年内部文件显示公司讨论是否仅按法律最低要求公开数据,部分员工警告“人命关天”。

公司决策与透明度问题

  • 安全团队动荡:2020年聘用前Uber安全主管特蕾西·布里登组建中央安全团队,但后续裁员、解散团队,安全投入被削减。
  • 透明度承诺未兑现:公司2020年承诺发布透明报告公开平台危害数据,但截至2025年仍未发布,同时积极讨论如何规避信息揭露。
  • 增长优先于安全:内部文件显示,安全协议可能拖累增长,公司更关注用户数量与营收。2022年换任CEO后,重点进一步转向盈利。

受害者与外部反应

  • 受害者困境:举报后无实质反馈,犯罪者账户仍活跃;警方调查时公司配合缓慢。
  • 立法与监管:国会议员多次要求数据未获回应;科罗拉多州2024年通过法律要求公司向州政府报告安全措施,但未强制公开危害数据;欧盟等地区开始要求透明报告。
  • 背景检查合作失败:与背景调查公司Garbo的合作因Match Group“未真正致力于信任与安全”于2023年终止。

结论

Match Group掌握大量用户侵害数据,却选择隐瞒以规避商业风险,导致犯罪者如马修斯持续作案。尽管公司宣称投资安全技术,但执行漏洞显示其安全承诺仅为“表演”。随着全球立法推进,公司面临更多透明度压力,但核心问题仍未解决:被举报的犯罪者仍可轻松回归平台。

26. As many as 2M Cisco devices affected by actively exploited 0-day (arstechnica.com)

Search shows 2 million vulnerable Cisco SNMP interfaces exposed to the Internet.

28. SedonaDB: A new geospatial DataFrame library written in Rust (sedona.apache.org)

Apache Sedona is a cluster computing system for processing large-scale spatial data. Sedona extends existing cluster computing systems, such as Apache Spark, Apache Flink, and Snowflake, with a set of out-of-the-box distributed Spatial Datasets and Spatial SQL that efficiently load, process, and analyze large-scale spatial data across machines.

29. Bundler Belongs to the Ruby Community (andre.arko.net)

I’ve spent 15 years of my life working on Bundler. When I introduce myself, people say “oh, the Bundler guy?”, and I am forced to agree. I didn’t come up with the original idea for Bundler (that was Yehuda). I also didn’t work on the first six months worth of prototypes. That was all Carl and Yehuda together, back when “Carlhuda” was a super-prolific author of Ruby libraries, including most of the work to modularize Rails for version 3.

30. CT scans of 1k lithium-ion batteries show quality risks in inexpensive cells (www.lumafield.com)

Lumafield’s Battery Quality Report exposes hidden risks in 18650 cells; 1 in 13 low-cost units have dangerous defects. See how CT helps enforce safety.

32. Snapdragon X2 Elite ARM Laptop CPU (www.qualcomm.com)

骁龙X2 Elite ARM笔记本CPU

骁龙X2 Elite 代表了一次性能飞跃,旨在为新一代笔记本电脑提供增强的速度与效率。

  • 产品定位:这是高通针对下一代笔记本电脑推出的ARM架构CPU。
  • 核心亮点:主打性能的飞跃,强调在速度能效方面的提升。
  • 宣传重点:鼓励用户体验并探索其为移动计算带来的能力革新。
  • 视觉标识:官方提供了金色标识的社交宣传图片。
33. Why is Windows still tinkering with critical sections? – The Old New Thing (devblogs.microsoft.com)

The critical section may be an old dog, but it's still learning new tricks.

34. Data Viz Color Palette Generator (For Charts and Dashboards) (www.learnui.design)

Create visually-equidistant color schemes for data visualizations using one, two, or many hues.

35. The Long Trip from Silica to Smartphone (spectrum.ieee.org)

Follow the 30,000-kilometer journey of how a rock in Spain becomes a processor in a smartphone in India.

38. Homeowner baffled after washing machine uses 3.6GB of internet data a day (2024) (www.newsweek.com)

A home automation and tech enthusiast stumbled upon the anomaly while troubleshooting issues with his home network.

39. Litex: The First Formal Language Learnable in 1-2 Hours (github.com)

Litex is a simple formal language Learnable in 2 hours. - litexlang/golitex

40. How fast is Go? Simulating particles on a smart TV (dgerrells.com)

The challenge, simulate millions of particles in golang, multi-player enabled, cpu only, smart tv compatible.

41. Testing the Raspberry Pi 500's new mechanical keyboard (www.jeffgeerling.com)

树莓派 500+ 新机械键盘评测总结

树莓派 500+ 售价200美元,在原有树莓派500基础上新增了内置M.2 NVMe固态硬盘、16GB内存以及低矮型RGB背光机械键盘。本文重点聚焦其新键盘的特性与体验。

键盘硬件规格

  • 轴体:采用Gateron KS-33低矮蓝轴(青轴),为段落轴体,手感明确但有明显噪音。
  • 键帽:标准机械键盘键帽,大键位(空格、Shift等)配有额外加强结构,易于拆卸更换。
  • 背光:每个按键配备独立可控RGB LED,预设十余种灯效,并可通过树莓派官方工具自定义。
  • 控制器:键盘搭载RP2040芯片,运行基于QMK固件的定制版本,理论上支持VIA等配置工具(需固件更新)。

手感与噪音表现

  • 手感相比树莓派400/500的薄膜键盘有显著提升,打字体验更佳。
  • 蓝轴特性导致噪音较大,实测约60分贝(1英尺距离),在安静环境中较为明显,但对单人使用尚可接受。

键帽可更换性

  • 支持标准机械键帽更换,但需注意兼容性:
    • 低矮键帽:可完美适配,测试显示更换过程约需20分钟,视觉效果多样。
    • 常规高度键帽:部分可安装但会触底,影响手感,不建议使用。
  • 树莓派500+电源键有独立指示灯功能(通电绿色、断电红色),更换键帽时需保留原键帽以确保指示灯透光。

结构与改进

  • 键盘外壳与主机分离设计,整体重量(约600克)远超树莓派500(385克),做工更扎实。
  • 虽然轴体不可更换(固定蓝轴),但相较于前代产品已是重大改进,性能接近中低端机械键盘(如Razer Huntsman)。

总结

树莓派500+的机械键盘在手感、可玩性和结构方面均有明显提升,适合追求打字体验的用户。但蓝轴噪音可能不适合噪音敏感环境,且轴体固定限制了个性化定制。

47. Video models are zero-shot learners and reasoners (video-zero-shot.github.io)

Video models like Veo 3 are on a path to become vision foundation models.