Gemini Pro学生订阅遇额度问题，CLI使用受限

快讯

• AIsbom: Security Tool for Detecting PyTorch Model Pickle Bombs

  AIsbom is a specialized security and compliance scanning tool for machine learning models, designed to deeply detect hidden security risks and license issues in PyTorch and other model files. Unlike traditional SBOM tools, AIsbom utilizes deep binary inspection technology to analyze .pt, .pkl, and .safetensors files without loading model weights. The tool can detect malicious code execution risks (such as RCE attacks) and license violations hidden in model headers. Users can quickly scan project directories through a simple command-line interface to receive intuitive security risk ratings and compliance reports. AIsbom also provides a visual report viewer and supports generating SBOM data in CycloneDX v1.6 standard format for easy enterprise integration. As an open-source project, AIsbom includes testing features that allow users to verify scanning effectiveness. This tool is particularly suitable for AI developers and enterprises to secure AI model supply chains and prevent malicious models and license violations from entering production environments.

  Original Link:Hacker News

  52分钟前

• Mozilla's New CEO Takes Charge, Focusing on AI and Trust Strategy

  Mozilla's new CEO Anthony Enzor-Demeo officially took office on December 16, 2025, delivering a speech outlining the company's future direction. He noted that in the context of AI rapidly reshaping the internet, trust will become a core technology issue, with browsers being the key battlefield. Mozilla is committed to becoming the most trustworthy software company, ensuring its products are transparent and easy to understand in terms of privacy, data usage, and AI. Users should be able to easily control AI features and understand their operating mechanisms. Over the next three years, the company plans to invest in AI technologies that align with Mozilla's manifesto, diversify revenue sources, and develop Firefox into a modern AI browser while expanding the trusted software ecosystem. The new CEO emphasized that Mozilla will lead industry standards through transparent business models and user-first principles during the AI transformation, while advancing both its mission and market competitiveness.

  Original link:Hacker News

  52分钟前

• Claude Relay Service Not Working with Codex? Seeking Solutions

  A user attempted to deploy Claude Relay Service (CRS) on a local Windows machine using Docker installation, with proper account and config.toml file configuration. However, despite multiple attempts, the API cannot be used with Codex. The user has consulted Gemini and checked project issues, but the problem remains unresolved, now seeking technical assistance. This technical issue reflects potential integration challenges that AI tools may encounter during actual deployment, providing valuable reference for readers interested in AI service deployment. The user posted on the Linux.do forum asking about the best seamless account switching method for Codex, was recommended to use CRS, but encountered API compatibility issues, highlighting common difficulties in AI service integration, suitable for technical community discussion.

  Original Link:Linux.do

  52分钟前

• AI Testing in Action: Practical Applications for Testers at Smaller Companies

  This article shares the practical experience of a test engineer at a smaller company in applying AI technology to daily work. Following the surge in popularity of DeepSeek at the beginning of the year, the author's company began requiring all employees to embrace AI. Currently, the Gemini-2.5pro model is primarily used, implementing three core application scenarios in testing work: first, test requirement decomposition, where key requirement points are quickly obtained by uploading documents or images; second, test case design, where test cases are automatically generated based on requirements; and third, test case review, where AI is used to automatically review and supplement test cases. These applications have effectively improved testing efficiency and quality. The article also invites peers to share more AI testing application scenarios, to jointly explore the potential and challenges of AI in the software testing field. For readers interested in the application of AI in testing, this article provides practical reference and inspiration.

  Original Link:Linux.do

  52分钟前

• LangChain V1 Experimental Repository Share: Practical Guide to RAG, Agent, and Workflow

  Recently, a developer shared their experience organizing the LangChain V1 experimental repository. During their research, the author discovered mismatches between the documentation and older tutorials, encountering numerous pitfalls. As a result, they compiled a minimum viable example featuring core components such as RAG (Retrieval-Augmented Generation), Agent tool calling, and Workflow multi-step processing. The repository also includes a FastAPI backend skeleton, environment scripts, and ready-to-run demos, designed to help developers get started quickly and save time. The project remains streamlined, avoiding complex frameworks to ensure users can run it directly without worrying about compatibility issues. For developers currently using LangChain V1, this is a practical open-source project that provides complete demonstrations and code examples, worthy of in-depth exploration and learning.

  Original Link:Linux.do

  52分钟前

• Configure Once, Use Everywhere: How 1mcp MCP Tool Reduces Repetitive Work

  In AI development, configuring MCP (Model Context Protocol) often requires repetitive adjustments across multiple IDEs, which is inefficient and time-consuming. This article introduces 1mcp, an innovative MCP server aggregator and proxy tool. Users only need to configure 1mcp in their IDE to centrally manage multiple MCP servers. When configuration adjustments are needed, simply make changes in 1mcp, and all connected IDEs will automatically sync and update. After a one-week trial, developers reported an excellent experience, significantly reducing repetitive work and improving development efficiency. Additionally, similar tools like mcp-router on GitHub are worth checking out. This solution addresses the real pain points of AI developers, offering practical and efficient tool recommendations that help enhance overall workflow.

  Original Link:Linux.do

  52分钟前