Episode Details
Back to Episodes2026-08-24 微軟 Entra ID 滿分漏洞撤回在野利用、AI 逆向工程全面滲透硬體設備
Published 3 weeks, 5 days ago
Description
詳細網頁版與參考連結：https://podcast.david888.com/post/2026-08-24
本集解析微軟 Entra ID 反序列化漏洞引發的雲端資安焦慮，以及 AI Agent 快速逆向硬體設備的新威脅。硬體上，各大廠正全力突圍矩陣運算的記憶體之牆；工程端則探討頂級模型落地成本、本機模型重構瓶頸，以及 Agent Harness、Apache Maka 與 TDD 規範如何抑制代碼熵增。最後分享 Google 首席工程師找問題的槓桿思維，並揭露 Google 註冊驗證誤殺網域的荒謬技術債。
相關連結：
- Everything I own, owned
- How I find problems to solve as a staff engineer
- Anthropic's best AI model struggles to attract users as cheaper tools thrive
- AI Chip Architectures
- Google Workspace thinks my domain is an email provider (2025)
- My agent.md to improve LLM-assisted code quality
- What Is a Harness?
- apache / maka (0 ⭐)
- mattpocock / skills (0 ⭐)
- Microsoft dropped a CVSS 10.0 Entra ID RCE, said it was exploited, then walked that back a day later. No customer patch. (r/sysadmin)
- Need tips or good practices for getting better raise (r/dataengineering)
- New qwen3.8:27b on a 39k line C to single-file HTML / three.js port (r/LocalLLaMA)