ASC：超高速 Android 反编译器，Agent 用它挖出 Honor 和小米 2 个 RCE
开源工具，比 jadx 快数百倍，已用于实战挖出厂商 RCE，可上手。
Guys, I built a super fast Android decompiler called ASC. It completely replaced Jadx MCP for me and lets me analyze 10+ APKs in parallel. And this week my Agent use ASC found 2 RCE in Honor and Xiaomi! This tool now accepted by BlackHat EU Arsenal https://t.co/5Qdpq8XEal #BHEU https://t.co/lCMDbjZL0h
ASC 实测：50MB APK 快 jadx 41 倍，300MB 快 269 倍
给出具体性能数据，直接以 APK 为源检索，替代 jadx 的可行路径。
I tested on 50MB / 300MB APKs. global search string xrefs 50MB: 41x faster than jadx (ASC 493ms) 300MB: 269x faster than jadx (ASC 1.79s) Unlike Jadx or garlic, it doesn’t focus on exporting full pseudocode. It treats the APK itself as the source and lets you access it directly. https://t.co/HR2HjHL9fU
研究者披露 Chrome 挖洞成果：约 20 个漏洞、4 条完整利用链
浏览器全链利用的实战数据，反映当前 Chrome 攻击面与赏金产出。
RT @nicowaisman: We didnt measure it individually, as this was a part of a bigger product that we are building, but is probably around 1/5 of the reward, and this include almost 20 vulns in Chrome, which we got 4 full stack chains, first one has a dup, the second one was accepted, the other two are in process
转发调侃 Anthropic 离职员工对 AI 安全的轻监管主张
AI 安全治理争论的缩影，与本地 Agent 部署的监管预期相关。
RT @ZackKorman: Employees leaving Anthropic: I am terrified that 8 billion people are going to die, which is why I propose a light-touch regulatory approach to AI safety. https://t.co/FQt9h4PhqR
评论称 AI 灭绝论夸大，把模型比作计算器
代表对 AI 风险叙事的怀疑派观点，影响 Agent 安全投入的讨论基调。
Agree. A bunch of nerds who have never experienced any approximation of interpersonal violence think a glorified calculator is going to kill everyone
调侃 200 美元 Pro 订阅是最后的撤离机会
反映 AI 订阅定价变动，自托管/本地 Agent 成本对比的参考。
$200 Pro plans were the last chopper out of 'nam
求问用 ESP32-S3 能做什么酷项目，最好用 Rust
嵌入式硬件 + Rust 的选题线索，适合自托管/IoT 安全实验。
what cool stuff can you build with an esp32-s3? In Rust ideally
称想用 Brave 但 Firefox 更顺手
I almost want to use Brave, but Firefox still feels less clunky
称听 Gary V 多年仍受触动
Been listening to Gary V for years now, but everything he says still strikes a cord with me
调侃对方换了头像认不出
@0xTriboulet new pfp throwing me off
调侃某人顺便发明了税收
homie accidently invented taxes too
表示已经喜欢上这部电影
I love this movie already