今日已更新 411 条资讯 | 累计 30455 条内容
关于我们

AI 资讯

AI人工智能最新资讯、模型发布、研究进展

16104
篇文章

共 16104 篇 · 第 724/806 页

Reddit r/webdev

CICD Self Hosted Runner and with live junction pointing at deployment

Hi all, I have a Windows Server 2026 box running IIS and am attempting setup a GitHub CI/CD pipeline. I am using a self hosted runner and that runner has been setup with minimum privileges to do it's thing. I have the following setup: - IIS points at a junction, - junction points at the build folder. -Project/ -live/ -> junction points at the live release -releases/ -v1/ -v2/ <- pointed at by live junction All is well in my workflow until a try to delete my old junction and recreate my new junction, pointing at the newly built version. It fails, I think because a IIS process still has a hold on the content of /live. Because the user account running the GitHub action runner is low privilege, it cannot stop IIS. I tried creating a scheduled task running as SYSTEM and manually triggering the task, but my low privilege user can't do that either. How have others overcome this? Any help greatly appreciated. I'm in a corporate environment so can't be lazy and give the action runner admin privileges. This has consumed my day. submitted by /u/Wotsits1984 [link] [留言]

/u/Wotsits1984 2026-06-02 01:47 👁 5 查看原文 →
Reddit r/webdev

YouTube data API audit - Is this legit?

As it happens every now and then, I've received another email from noreply at youtube.com asking me to fill in a form to audit my use cases of the YouTube API. I only have one project in the Google API Console, and the sole use case is to connect it to a Telegram bot I own that returns a query made by any user with access to the platform. However, in the email I received this time, they tell me that I manage shittons of projects with ID numbers that I am unaware of, and none of them correspond to the project ID that I actually manage. In fact, among the projects they claim I manage, there is one called "I do not remember" and other very strange names that I’ve never even heard of. The email is official and the form links to the same one they usually send me to fill in every few years. Anyone did receive recently some similar e-mail? Should I pay attention to this email, or have they completely lost the plot? submitted by /u/Felfa [link] [留言]

/u/Felfa 2026-06-02 01:45 👁 5 查看原文 →
Krebs on Security

Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how to trick Meta's "AI support assistant" bot into resetting account passwords.

BrianKrebs 2026-06-02 01:32 👁 10 查看原文 →
Reddit r/artificial

Recommended models for document data analysis?

Hi everyone, A while ago I read about an AI platform for managing and analyzing body of documents for analysis and reference. From what I remember, it was a semi-closed system where you could upload your own source materials and the model could analyze and reference your uploaded documents directly. From what I recall, it wasn’t self-hosted. Does anyone know of a tool like this or recommend something that performs better than other models? Any recommendations, even if it's a different tool with similar capabilities, would be really helpful. Thanks in advance! submitted by /u/nero_rosso [link] [留言]

/u/nero_rosso 2026-06-02 00:59 👁 5 查看原文 →
HackerNews

Show HN: DepsGuard – One command to harden NPM/pnpm/yarn/bun/uv configs

I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it

eranation 2026-06-02 00:58 👁 3 查看原文 →
InfoQ

Claude Code Adds Dynamic Workflows for Parallel Agent Coordination

Anthropic introduced Dynamic Workflows, a new capability for Claude Code designed to handle complex software engineering tasks by coordinating large numbers of AI agents within a single workflow. The feature allows Claude to dynamically create orchestration scripts, break work into subtasks, run them in parallel, and validate results before presenting a final answer. By Robert Krzaczyński

Robert Krzaczyński 2026-06-02 00:55 👁 8 查看原文 →
Reddit r/webdev

Don’t lose hope!

Many of you share great projects, but without a real use case. I want to encourage you that even in 2026 you can still achieve big things. You just need to find a niche and be fast. This website reached these values completely without advertising. Bewertiq.org It takes reviews and uses a mathematical regression model (OLS – Ordinary Least Squares) to estimate or refine ratings more accurately. By applying things like log-transformed features and category-based dummy variables , it tries to reduce noise and bias in raw user ratings and produce more stable, comparable results across different entities. On top of that analytical layer, the product positioning is: A trust-focused alternative to platforms like Kununu, Trustpilot, or Google Reviews Emphasizing no paid partnerships, no sponsored rankings, and no review manipulation or removal pressure Built around the idea of independent evaluation of companies using data instead of commercial influence submitted by /u/princessinsomnia [link] [留言]

/u/princessinsomnia 2026-06-02 00:53 👁 5 查看原文 →
Schneier on Security

Vulnerability Disclosure in the Age of AI

New article: “ Responsible Disclosure in the Age of AI: A Call for Urgent Action ,” by Melissa Hathaway. Abstract: Artificial intelligence is fundamentally reshaping the balance between vulnerability discovery and remediation. Frontier AI models are now capable of autonomously identifying exploitable software vulnerabilities at unprecedented speed and scale. This development exposes decades of accumulated technical debt created by a software industry that prioritized rapid deployment over secure-by-design engineering practices. Drawing on the evolution of software assurance, vulnerability disclosure frameworks, and U.S. cyber policy, this perspective argues that the current moment represents a strategic inflection point for governments, industry, and critical infrastructure operators. The author examines the growing tension between offensive and defensive equities in cyberspace, the emergence of AI-enabled vulnerability discovery capabilities in both the U.S. and China, and the increasing risks posed by unsupported legacy systems and AI-assisted code generation practices. Responsible disclosure can no longer remain a reactive or fragmented process, but must become a coordinated national and international resilience effort involving governments, software vendors, infrastructure operators, and emergency response organizations. The article concludes with an urgent call for accelerated remediation, large-scale patch management coordination, and sustained investment in automated vulnerability repair capabilities before adversaries exploit this rapidly narrowing window of opportunity...

Bruce Schneier 2026-06-02 00:49 👁 10 查看原文 →