PingCAP 控制平面 10TB 資料外洩、PHP2Shell 先行利用與 AI 大模型群嘲人類

詳細網頁版與參考連結：https://podcast.david888.com/post/2026-10-23

今日重點聚焦 PingCAP TiDB Cloud 核心資料嚴重外洩，以及 PHP 重大漏洞遭提前利用引發社群對禁運期失效與責任歸屬的熱議。AI 領域方面，NVIDIA 與社群分別推出 OpenShell 與 Omnara 強化代理沙盒與任務管理；社群亦深入探討 LLM 自評信心分數的不可靠與模型從眾現象。此外，Linux 核心漏洞遭意外公開、ElevenLabs 推出即時語音翻譯，以及憑證撤銷後的容器依賴修補亦受關注。

相關連結：

• anthropics / knowledge-work-plugins (31,587 ⭐)
• dupe] [CVE-2026-111943: Compromised Intermediate Certificate Authority
• Using LLM for confidence scoring is a bad idea
• Show HN: Omnara – Open-source alternative to Claude Managed Agents
• Several Linux kernel vulnerabilities accidentally posted to public mailing list
• Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure
• PingCap TiDB Leaks
• Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.
• WorldTUI: I trained a 360M model to pretend to be a terminal
• OpenShell – A safe, private runtime for fleets of autonomous AI agents
• Every AI model has the same "controversial" take on humans
• ElevenLabs Realtime Translation
• Scrape Plus Embed Pipeline: Citable Page-Change Alerts End to End by FairchildBlake8483