Alan Lam 🔥 retweeted
⚠️ The PHP security team disclosed another RCE (CVE-2026-115560)
This one sounds lower risk, but you are advised to set this in your INI:
👉 session.upload_progress.enabled=0
serversideup/php v5.0.3 does this for you by default. Redeploy to be safe
github.com/serversideup/dock…
Alan Lam 🔥 retweeted
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
Alan Lam 🔥 retweeted
"AI is the new electricity!" Electricity transformed countless industries; AI will now do the same. – at Mountain View, CA
Alan Lam 🔥 retweeted
腾讯微信团队开源了「企业级 LLM 知识平台」:WeKnora
WeKnora 把散落的原始文档转化为三种知识库资产:可问答的 RAG 知识库、可自主推理的 ReAct Agent、可持续演进的自动 Wiki。并且它是微信对话开放平台的核心技术框架,有真实生产背书。
项目地址:github.com/Tencent/WeKnora
WeKnora 解决什么问题?
企业知识天然是碎片化的:文档散落在飞书、GitLab、Notion、语雀、钉钉、企微、RSS 等各处。WeKnora 的答案是把这些内容“沉淀为可查询、可推理、可持续演进的专属知识资产”,同时强调私有化部署、数据完全自主可控。
# 三个核心能力
1. RAG 快速问答:日常查询的主路径。检索上支持 BM25 稀疏检索、稠密向量、GraphRAG、父子分块等策略组合;向量层默认用 pgvector(HNSW 索引,1024 维),可切换 8 种向量库并做多库扇出检索。问答带引用溯源、引用气泡、建议问题,还内置了用召回命中率 + BLEU/ROUGE 做 E2E 效果评测的工具——这在同类项目中少见,说明团队认真对待“检索质量可度量”这件事。
2. ReAct Agent 智能推理:面向复杂多步任务。Agent 可自主编排知识检索、MCP 工具、网络搜索(11 家搜索源)、租户技能目录,以及 v0.8 新增的会话级持久沙箱(Docker / E2B / Cube 三种后端,v0.8 起移除了本地宿主进程后端,安全上更收紧)。配套跨会话长期记忆(画像/偏好/事实/任务/兴趣五类,自动抽取 + 用户确认)。
3. Wiki 模式:WeKnora 最差异化的能力。Agent 自动把文档蒸馏成相互链接的 Markdown 知识库,配可视化知识图谱、手动编辑、版本历史与一键回滚,官方称可支撑 4 万文档级的知识库。大多数 RAG 项目止步于“问答”,WeKnora 额外给出了“知识再生产”的输出形态;知识库不只是被查,而是被持续整理成结构化资产。
企业级能力
· 多租户 + 四级 RBAC(Owner / Admin / Contributor / Viewer),按知识库的 ownership 隔离,租户级审计日志;
· API Key 作为一等主体:可限定作用域的密钥 + principal 模型,适合 headless/CI 集成;
· 安全:凭据 AES-256-GCM 加密、gRPC/Redis TLS、SSRF 加固的 HTTP 客户端、OIDC JWKS 验证、沙箱隔离;
· 知识库工程化:分块可编辑、带逐版本 diff 与回滚、自动重索引,自动打标、批量重解析——把知识库当“代码仓库”来管理,这个思路成熟。
Put your team’s knowledge to work.
Developed by Tencent’s Weixin team, WeKnora is an open-source, LLM-powered knowledge framework built for enterprise-grade document understanding, semantic retrieval, and autonomous reasoning.
Build assistants that find answers in your docs, show their sources and use skills to create files you can preview and download.
Keep useful context across chats with opt-in long-term memory. You approve suggested memories before they’re used. Self-host it and run skills in a sandbox with network limits you set.
Explore WeKnora: github.com/Tencent/WeKnora
Have a project in mind? Join our community to share ideas and build with us: github.com/Tencent/WeKnora/i…
Alan Lam 🔥 retweeted
DeepSeek-V4-Flash-Vision-Exp is now live on the DeepSeek API Platform! 🚀
🔹 This experimental multimodal model matches DeepSeek-V4-Flash on text capabilities—including agents, reasoning, and world knowledge.
🔹 On multimodal agent benchmarks, V4-Flash-Vision-Exp makes a major leap over V4-Flash, bringing multimodal agent performance close to Opus-4.8.
Try it with model='deepseek-v4-flash-vision-exp'. DeepSeek Harness 0.1.1 was released today with out-of-the-box support for the new model.
1/n
Alan Lam 🔥 retweeted
Introducing Grok 4.6.
It delivers frontier intelligence and is a significant improvement over Grok 4.5 at the same price.
Alan Lam 🔥 retweeted

Tibo@thsottiauxJun 17
🇺🇸
United StatesConnected via WebAccount-level information, not a live location or per-post device.
Reminder that you can use the Codex App, CLI and SDK with any open source model, not just with OpenAI models.
developers.openai.com/codex/…
Alan Lam 🔥 retweeted
It's very cool that Apple shipped a 20B parameter on-device.
You can't put 20B parameters in RAM at any reasonable precision. To make it work they are using pretty exotic architecture by today's standards.
A small model predicts from the query (or prompt) which experts to load from Nand into RAM. The key distinction from a typical MoE is that you do this once per query and then generate all the tokens with the same experts (instead of switching the experts for every token).
Alan Lam 🔥 retweeted
Composer 2.5 is now available inside Grok Build.
Composer 2.5 is a fast, highly intelligent model that excels on long-running tasks and following complex instructions.
Alan Lam 🔥 retweeted
php devs, we no longer need to duct-tape python scripts just to parse a pdf 😭
launching Parsel: a fast memory efficient local document parser for PHP.
pdfs, office docs & images → text, structured data, bboxes, screenshots.
built for AI/RAG, NLP, invoices, search, and messy docs.
composer require shipfastlabs/parsel
Alan Lam 🔥 retweeted
I Tried @taylorotwell's Dead Simple Dev Setup.. Now I Get It
New Video: youtu.be/HkNJA5yqWSY?si=hdlz…
Alan Lam 🔥 retweeted
Attention Filament users: we’ve identified and resolved a few security vulnerabilities.
To address these vulnerabilities in your applications, please update to the following versions:
v3.3.52
v4.11.5
v5.6.5
Alan Lam 🔥 retweeted
I've been waiting to share this. Huge updates coming soon to Laravel Cloud over the next few weeks... ☁️
• A new $5/month plan. We want Cloud to be accessible to every Laravel developer. Simple as that.
• Spend caps. Set a spend cap on your account and we'll either alert you or shut off compute when you hit it. No surprise bills.
• True scale-to-zero compute. Hibernation has been around for a while, but we've made wake-up over 10x faster. App, database, and cache wake-up is now measured in milliseconds. Your users won't even notice.
• New bot protection rules keep scale-to-zero apps scaled to zero more of the time, cutting your compute spend even further.
• Fully managed, auto-scaling queues with observability. We've rebuilt "queue clusters" into a new product: "managed queues". Set a max worker count and we handle the rest. Scales on queue depth, scales to zero when idle, so you're never over-provisioned.
Huge thanks to everyone building on Laravel Cloud. Your feedback shaped most of what's above - keep it coming. ❤️






























