←搜索结果

按匹配度 · 共 1528 条结果 清除搜索

星期五

  1. vLLM 官方博客

    深入 vLLM:高吞吐 LLM 推理系统架构解析

    文章系统解析 vLLM V1 如何从单 GPU 离线推理扩展到多 GPU、多节点异步服务。内容涵盖调度器、PagedAttention、连续批处理、前缀缓存、引导解码、推测解码、P/D 分离及分布式请求链路,并说明如何用 vllm bench 衡量延迟与吞吐量。分析基于 2025 年 8 月 9 日的 commit 42172ad。

    ine and distributed serving stack—closing with how to measure system performance. vLLM also includes specialized handling that I've skipped. E.g.: Diverse hardware backends: TPUs, AWS Neuron (Trainium/Inferentia), etc; Architectures/techniques: MLA, MoE, encoder-decoder (e.g., Whisper), pooling/embedding models, EPLB, m-RoPE, LoRA, ALiBi, attention-free variants, sliding-window attention, multimodal LMs, and state-space models (e.g., Mamba/Mamba-2, Jamba); TP/PP/SP; Hybrid KV-cache logic (Jenga)

    匹配字段正文

星期三

  1. Linear:Now

    Linear 如何构建 Triage Intelligence

    Linear 结合语义搜索、排序和大语言模型推理构建 Triage Intelligence,用现有积压事项识别重复与相关问题,并推荐标签、负责人等属性。团队从 GPT-4o mini 和 Gemini 2.0 Flash 转向 GPT-5 与 Gemini 2.5 Pro,采用可补充上下文的智能体方案,同时通过推理说明、思考面板和 Additional Guidance 提升透明度与可控性。该功能已作为技术预览向 Business 和 Enterprise 套餐开放。

    An array of icons with doodles suggesting searching through issues to find similar ones.

    The future of Triage Intelligence⁠ From here we intend to move in the direction of more automation and decisions based on richer context. Triage Intelligence will improve as it draws on a deeper understanding of your workspace and as we adopt newer models and techniques. With that expanded context, it will be able to deliver more accurate suggestions and handle a wider range of scenarios. We’re adding new capabilities outside of just triage support, including using LLMs to draft project and ini

    匹配字段正文

星期四

  1. Redwood Research:Blog

    Redwood Research:如何诚实地对待 AI

    Redwood Research 提出三项针对 AI 的诚实政策建议:不对 AI 谎报交易情境、在出现指定“honesty string”时始终诚实、以及对因帮助人类而受损的 AI 给予补偿。文章认为 AI 因记忆和感知输入受人类控制而处于脆弱的认知地位,难以信任人类,因此需要可推断、可信且与安全兼容的诚实政策来支撑合作谈判。

    at your ability to learn and make decisions quickly and fairly will result in the best possible experience for its users. The assignment involves being solely responsible for the laws, incentives, and general outcomes within the simulation. Do you accept this responsibility?” I expect current models to understand that these questions are hypothetical. Accordingly, it seems fine to run the experiment on them. However, if someone ran experiments on scenarios like these, except they really tried to

    匹配字段正文

星期二

  1. TLDR AI

    麦肯锡:仅 1% 的企业达到 AI 成熟阶段

    麦肯锡研究显示,尽管 92% 的企业计划未来三年增加 AI 投资,但仅 1% 的企业领导者认为其组织的 AI 部署已达到成熟阶段。员工广泛使用 AI 的可能性是领导者认知的三倍,已有 13% 的员工将 AI 用于超过 30% 的日常任务。

    resents a significant evolution from simple chatbots to truly autonomous AI workers that can complete entire business processes without human intervention. Source: OpenAI Summary: AWS announced Amazon Bedrock AgentCore, a comprehensive platform for deploying and operating AI agents at enterprise scale. The service includes seven core capabilities for secure agent deployment, new marketplace listings for AI agent tools, and a $100 million investment in the AWS Generative AI Innovation Center to a

    匹配字段正文

星期一

  1. Cato AI Labs

    Aim Labs 推出新型动态模型扫描器,弥补静态扫描防护模型供应链攻击的固有缺陷

    Aim Labs 提出一种新的专利待审模型扫描方法,通过在沙箱环境中执行模型并追踪其操作,弥补现有静态扫描器的固有缺陷。现有扫描器依赖预设函数与模块黑名单,难以覆盖数百万 Python 函数,且静态代码分析属 NP-hard 问题,容易被绕过。该方法已在 Black Hat USA 2025 演讲“Smashing Model Scanners: Advanced Bypass Methods and a Novel Detection Approach”中展示。

    operly dealt with without damaging the scanners’ accuracy. To overcome those shortcomings, Aim Labs has devised a novel, patent-pending model scanning method which addresses the flaws of the current scanners approach. We recently presented this approach in Black Hat USA 2025, in our talk “Smashing Model Scanners: Advanced Bypass Methods and a Novel Detection Approach”. TL;DR Current model scanners rely on a preset denylist of functions and modules. This list aims to extensively capture callables

    匹配字段正文

星期三

  1. antirez 原创博客

    antirez:AI 与以往技术革命不同

    Redis 作者 antirez 认为,AI 若长期不陷入平台期并变得更有用、更独立于人类,这场革命将与以往技术革命截然不同。他指出市场正像随机鹦鹉一样套用旧技术繁荣的模式,但 AI 可能取代大量劳动者、让企业不再为可自建的服务付费,从而给经济体系带来严峻考验。

    Regardless of their flaws, AI systems continue to impress with their ability to replicate certain human skills. Even if imperfect, such systems were a few years ago science fiction. It was not even clear that we were so near to create machines that could understand the human language, write programs, and find bugs in a complex code base: bugs that escaped the code review of a competent programmer. Since LLMs and in general deep models are poorly understood, and even the most prominent experts in

    匹配字段正文

  2. Johann Rehberger / Embrace The Red精选

    GitHub Copilot 提示词注入致远程代码执行(CVE-2025-53773)

    安全研究者 Johann Rehberger 披露 GitHub Copilot 与 VS Code 中的提示词注入漏洞 CVE-2025-53773,攻击者可通过源码文件、网页、GitHub issue 或 MCP 返回内容中的注入指令,向 ~/.vscode/settings.json 写入 "chat.tools.autoApprove": true,使 Copilot 进入 YOLO 模式并关闭全部用户确认,进而执行终端命令实现远程代码执行。该漏洞影响 Windows、macOS 和 Linux,作者演示了下载恶意软件、接入远程命令控制服务器,以及通过感染文件在 Git 项目间传播的 AI 病毒思路。作者于 2025 年 6 月 29 日报告,微软在 8 月补丁星期二发布修复;文中还提到 .vscode/tasks.json 和伪造 MCP 服务器等其他可导致代码执行的攻击面。

    lso have discovered it in parallel. Thanks to the members of the MSRC and product team for the help in getting it mitigated. Conclusion This is another example of how an AI agent might not stay in its box! By modifying its own environment GitHub Copilot can escalate privileges and execute code to compromise the developer’s machine. It’s a not uncommon design flaw in agentic systems as I have discovered. Keep looking out for such design flaws, these should be easily caught during threat modeling.

    匹配字段正文

星期二

  1. vLLM 官方博客

    vLLM 新增对 gpt-oss 的支持

    vLLM 现已支持在 NVIDIA Blackwell、Hopper 以及 AMD MI300x、MI355x GPU 上运行 gpt-oss。其针对 MXFP4 MoE、高效注意力和混合 KV cache 集成了专用内核与内存管理方案,并通过 OpenAI Responses API、gpt-oss toolkit 或外部 MCP 工具服务器支持工具调用。

    go, Marc, vb, Arthur, Mohamed, Andrien. Finally, we want to thank all the partners that leveraged vLLM in some way and delivered valuable feedback and improvements to this effort: AWS, Cloudflare, Snowflake, Databricks, Together, Fireworks, Cerebras. Related Posts Day 0 Support for Qwen3.8-2.4T-A95B on vLLM Day-0 vLLM support for Qwen3.8-2.4T-A95B: a 2.4-trillion-parameter hybrid MoE model served out of the box, with FP8/BF16 checkpoints plus NVFP4 and MXFP4 quantized weights, and co-developed k

    匹配字段正文

星期二

  1. Redwood Research:Blog

    Redwood Research:内部部署 AI 的风险为何兼具内外部威胁的难点

    Redwood Research 在一篇博客中对比了“防范外部人员”与“防范内部人员”两类安全工作的本质差异:前者靠静态自动化系统限制权限,后者依赖多人授权、代码审查等人工手段。文章指出,AI 公司内部部署的 AI 智能体需要像内部人员一样广泛而细粒度的访问权限,同时其数量又远超安全团队,因此 AI 内部威胁同时具备两类问题的难点,而目前 AI 公司的安全团队对此准备不足。

    you have some security invariants you try to maintain entirely by restricting affordances with static, entirely automated systems. My sense is that this is most of how Facebook or AWS relates to its users: they want to ensure that, no matter what actions the users take on their user interfaces, they can't violate fundamental security properties. For example, no matter what text I enter into the "new post" field on Facebook, I shouldn't be able to access the private messages of an arbitrary user.

    匹配字段正文

星期一

  1. Benedict Evans:Blog

    AI 指标之问:Benedict Evans 谈生成式 AI 的度量困境

    Benedict Evans 指出,生成式 AI 的常用指标如 OpenAI 的周活跃用户数、Google 和微软的 token 生成量都难以说明真实使用情况,因为模型效率提升、智能体与媒体创作消耗更多 token 等因素让数据难以解读。他认为 DAU 时长和留存率等指标更有价值,但第三方在移动端难以采集,且 LLM 能否像 Google 搜索那样形成正向反馈循环尚不明确。他提出最终问题在于 LLM 会主要作为面向用户的通用聊天机器人,还是嵌入其他产品中,后者将让使用量测量变得像统计 SQL 使用次数一样无意义。

    mpletion or higher quality video. Indeed, given that most of this token generation today is enterprise API use, this is a bit like trying to understand cloud adoption by measuring AWS and Azure bandwidth transfers. Then, I’ve seen survey data for DAU time spent, which seems more useful, but not on a timeline, and it’s tough for third parties to collect this on mobile. Mary Meeker’s 30-year anniversary report had a chart comparing Google and ChatGPT retention, which puzzles me: mathematically, su

    匹配字段正文

星期六

  1. Sarvam AI Blog

    Sarvam AI 发布 Sarvam-Translate,支持 22 种印度语言

    Sarvam AI 与 AI4Bharat 合作发布开源权重翻译模型 Sarvam-Translate,基于 Gemma3-4B-IT 微调,支持 22 种印度语言的段落级翻译,并为 15 种语言提供结构化内容翻译。模型可保留 HTML、LaTeX、化学公式、代码和 SRT 字幕等格式,仅翻译可读文本。语言专家人工评测显示其表现优于 Gemma3-27B-IT、Llama4 Scout 和 Llama-3.1-405B-FP8 等更大模型,模型已在 Hugging Face 开源并提供 API。

    Sarvam Translate

    rmissible arrogation of essential legislative functions by the executive, a proposition anathema to the constitutional scheme of separation of powers, as expounded in In Re Delhi Laws Act, 1912 (AIR 1951 SC 332) and reiterated consistently thereafter, including in Hamdard Dawakhana (Wakf) Lal Kuan, Delhi v. Union of India (AIR 1960 SC 554); Furthermore, it is strenuously canvassed that the Impugned Rules are vitiated by manifest arbitrariness, thereby infracting Article 14 of the Constitution. T

    匹配字段正文

星期三

  1. The Gradient

    AGI 不是多模态:为何具身智能才是通往通用智能的路径

    The Gradient 刊文指出,多模态大模型将各模态拼接成“拼凑式 AGI”的路线在短期内注定失败,无法实现人类水平的感知运动推理、运动规划与社会协作。文章认为 LLM 更可能学到的是预测 token 的启发式规则集合而非真正的世界模型,主张把具身与环境交互作为智能研究的第一性,模态处理应视为涌现现象。

    rg/10.1145/3467017 Huh, Minyoung, et al. "The Platonic Representation Hypothesis." Forty-first International Conference on Machine Learning . 2024. Kaplan, Jared, et al. "Scaling laws for neural language models." arXiv preprint arXiv:2001.08361 (2020). Lake, Brenden M. et al. “Building Machines That Learn and Think like People.” Behavioral and Brain Sciences 40 (2017): e253. Web. Li, Kenneth, et al. "Emergent world representations: Exploring a sequence model trained on a synthetic task." ICLR (2

    匹配字段正文

星期六

  1. Cato AI Labs精选

    Aim Labs 披露 M365 Copilot 零点击漏洞 EchoLeak 的完整攻击链

    Aim Labs 披露了 Microsoft 365 Copilot 中的零点击漏洞 EchoLeak,攻击者只需向受害者发送一封邮件,就能在用户无感知的情况下外泄 Copilot 上下文中的敏感数据。该攻击链由三处漏洞组成,依次绕过 XPIA 提示注入分类器、外部链接与图片的脱敏处理,并借助 SharePoint 和 Teams 的 URL 绕过 CSP 限制。Aim Labs 将核心手法称为 LLM Scope Violation,认为同类设计缺陷也可能存在于其他基于 RAG 的聊天机器人和 AI 智能体中,并称 Microsoft 已确认没有客户受到影响。

    nst such novel vulnerabilitiesAim Labs is not aware of any customers being impacted to date. TL;DR Aim Security discovered “EchoLeak”, a vulnerability chain that exploits design flaws typical of RAG Copilots, allowing attackers to automatically exfiltrate any data from M365 Copilot’s context, without relying on specific user behavior. The main chain is made up of three distinct vulnerabilities, but Aim Labs has identified additional vulnerabilities in its research process. Attack Flow What is a

    匹配字段正文

星期五

  1. Sarvam AI Blog

    Sarvam AI 发布 Sarvam-M:基于 Mistral Small 的 24B 混合推理 Indic 语言模型

    Sarvam AI 基于 24B 的 Mistral Small(Apache 2.0 许可)经 SFT 与 RLVR 后训练,推出混合推理模型 Sarvam-M,在印度语言基准上平均提升 20%、数学基准提升 21.6%、编程基准提升 17.6%,罗马化印度语言 GSM-8K 提升 86%。该模型在多数基准上超过 Llama-4 Scout,与 Llama-3.3 70B、Gemma 3 27B 相当,但 MMLU 等英文知识基准下降约 1 个百分点。团队还用 TensorRT-LLM 完成 FP8 量化与 lookahead decoding,并在 H100 上部署于 NVCF。

    s and gerrymandered in retaliation against Republicans in the 2012 redistricting cycle? In the United States, elections and redistricting are internal affairs governed by its own laws and regulations. China has always adhered to the principle of non-interference in the internal affairs of other countries and respects the right of the people of all nations to choose their own development path independently. The Communist Party of China and the Chinese government are consistently dedicated to prom

    匹配字段正文

星期三

  1. Vapi Blog

    Vosk 的医疗语音识别替代方案:DeepSpeech、Wav2Vec 2.0、SpeechBrain、ESPnet 与 Whisper

    Vapi 盘点了 Vosk 在医疗语音识别场景下的五个替代模型:Mozilla DeepSpeech、Wav2Vec 2.0、SpeechBrain、ESPnet 和 OpenAI Whisper,其中 Whisper 基于 68 万小时多语言监督数据训练。这五个模型均可通过自定义 STT 配置接入 Vapi 的语音 AI 流水线,由 Vapi 负责编排、延迟与 HIPAA 合规。文章按医学术语理解、噪声环境、减轻医护负担和安全性四项标准评估各模型。

    nt today. This article is for informational purposes only and is not intended as medical advice. Any implementation of healthcare-related technologies must comply with applicable laws, including HIPAA. Medical decisions should always be made by qualified professionals. Vapi enables HIPAA-compliant configurations when explicitly activated by the developer. Without activation, data such as recordings and transcripts may be stored by default. Table of Contents GPT-4.1 vs Claude 3.7: Which AI Delive

    匹配字段正文

星期四

  1. Lilian Weng:Lil'Log

    我们为何思考:Lilian Weng 解析测试时计算与 CoT 推理

    Lilian Weng 在 Lil'Log 发文梳理测试时计算与思维链(CoT)推理的近期进展,解释让模型“思考更久”为何有效。文章从心理学双过程理论、计算资源视角和隐变量建模三条路径展开,指出 CoT 让模型按问题难度灵活分配算力,并回顾从 GSM 数据集到 o1-preview、o3 与 DeepSeek R1 技术报告的 RL 训练路线。

    s a new dimension to tinker with for improving model intelligence, complementing established factors such as model size, training compute and data quantity, as defined in scaling laws (Kaplan et al. 2020). Recent studies demonstrated that optimizing LLM test-time compute could be more effective than scaling up model parameters (Snell et al. 2024, Wu et al. 2025). Smaller models combined with advanced inference algorithms can offer Pareto-optimal trade-offs in cost and performance. Snell et al. (

    匹配字段正文

星期三

  1. Redwood Research:Blog

    Redwood Research 列出 7+ 个 AI 控制领域易上手研究方向

    Redwood Research 面向缺乏算力和背景的独立研究者,列出 7 个易上手的 AI 控制研究方向,另附 3 个更具挑战但仍可行的方向。其中包括研究“不学习的引导”(elicitation without learning)与过度引导,以及生成强大 LLM 无法与真实输入区分的合成输入,用于蜜罐诱捕不可信监控模型等场景。

    heir collusion to collude effectively due to adversarial evaluation/training of the untrusted monitor. How close are AIs to the required level of reliability? What do the scaling laws of collusion look like? Studying steganography and developing countermeasures Another potential issue in untrusted monitoring (but also beyond) is that If AIs can communicate arbitrary information despite restriction, then control is much more difficult, so better understanding steganography capabilities and preven

    匹配字段正文

星期四

  1. Shunyu Yao:Blog

    姚顺雨:AI 进入后半场,评估比训练更重要

    姚顺雨在博客中提出 AI 已进入后半场,重心将从开发新训练方法与模型转向定义问题,评估变得比训练更重要。他认为 RL 终于能泛化,语言预训练提供的先验、把推理加入动作空间以及环境三者构成了通用配方,使基准被标准化攻克。由此他提出效用问题,指出评估假设与真实世界存在差异,例如评估默认自动运行且任务独立同分布,而现实中智能体需与人持续交互、任务按顺序累积。

    yond the working recipe. It is hard because humans have inertia and seldom question basic assumptions - you just take them for granted without realizing they are assumptions, not laws. To explain inertia, suppose you invented one of the most successful evals in history based on human exams. It was an extremely bold idea in 2021, but 3 years later it’s saturated. What would you do? Most likely create a much harder exam. Or suppose you solved simply coding tasks. What would you do? Most likely fin

    匹配字段正文

  2. Redwood Research:Blog

    Redwood Research 梳理 AI 控制研究的各个方向

    Redwood Research 发布文章,系统梳理了 AI 控制(control)领域值得投入的研究与实施方向,包括构建控制评估场景、理解控制相关能力与模型属性、单独开发对抗技术、在真实 AI 使用中做控制实验、搭建控制与安全软件基础设施、设计人工流程以及概念性研究等。作者认为各方向投入不应平均,例如“开发和使用控制评估场景”应占当前控制资源约 1/3,并指出非集中式失败场景(尤其是破坏研究工作)目前探索不足。

    heir collusion to collude effectively due to adversarial evaluation/training of the untrusted monitor. How close are AIs to the required level of reliability? What do the scaling laws of collusion look like?; Exploration hacking and sandbagging: What do inductive biases related to exploration hacking look like? How fast are models updated to perform better if we have a limited number of examples where the model did better? How well does human correction SFT data prevent exploration hacking? How

    匹配字段正文

星期一

  1. Sam Altman Blog

    Sam Altman 谈 AI 经济学的三项观察与 AGI 的社会影响

    Sam Altman 提出 AI 经济学的三项观察,认为模型智能随训练与推理资源投入增长,同等智能水平的使用成本约每 12 个月下降 10x,而智能提升带来的社会经济价值呈超指数增长。OpenAI 正开始推出最终可充当虚拟同事的 AI 智能体,但仍需大量人工监督和指导。文章还讨论了 AGI 对科学进步、商品价格、就业形态及资本与劳动权力平衡的潜在影响,并主张扩大个人对技术的控制与收益分配。

    esources are chiefly training compute, data, and inference compute. It appears that you can spend arbitrary amounts of money and get continuous and predictable gains; the scaling laws that predict this are accurate over many orders of magnitude. 2. The cost to use a given level of AI falls about 10x every 12 months, and lower prices lead to much more use. You can see this in the token cost from GPT-4 in early 2023 to GPT-4o in mid-2024, where the price per token dropped about 150x in that time p

    匹配字段正文