Obsidian 已推出全新的社区站点 community.obsidian.md,这是一个集中式的插件与主题目录兼开发者仪表板。自 2020 年 API 发布以来,社区已开发了超过 4,000 个插件和主题,总下载量突破 1.2 亿次。新平台旨在让扩展的构建、分发、发现与使用对所有人来说更简单、更安全。 Obsidian has launched the new Community site at community.obsidian.md, a centralized directory and developer dashboard for plugins and themes. Since the API release in 2020, over 4,000 community plugins and themes have been created, with total downloads surpassing 120 million. The new platform aims to make building, distributing, discovering, and using extensions easier and safer for everyone.
Obsidian 已推出全新的社区站点 community.obsidian.md,这是一个集中式的插件与主题目录兼开发者仪表板。自 2020 年 API 发布以来,社区已开发了超过 4,000 个插件和主题,总下载量突破 1.2 亿次。新平台旨在让扩展的构建、分发、发现与使用对所有人来说更简单、更安全。
社区站点改进了浏览、搜索、筛选和排序功能,覆盖数十个分类,如集成、 Bases 和图表。每个项目都有详细页面,展示截图、信息和安全评分卡。新增标签用于标识付费插件与官方集成,作者还可以在个人资料中添加赞助链接和社交媒体信息。
新的开发者仪表板让作者可以提交、管理并跟踪项目。所有现有的插件、主题及来自 GitHub 的排队提交都已自动迁移。开发者只需登录并连接 GitHub 账户即可认领项目。仪表板简化了提交流程,审核结果通常在几分钟内就能得到。
此次发布引入了对所有社区项目的自动化审查,覆盖每个版本的安全性和代码质量,而不再只检查初次提交。这有效缓解了随着编码代理加速插件创建而产生的积压问题。系统会检查是否遵守开发者政策、代码最佳实践以及已知漏洞;对热门插件、精选项目和社区标记的问题仍会保留人工复审。在上线前几天,使用新系统处理了超过 2,300 个排队提交。
插件安全性通过自动化扫描得到显著提升,扫描项包括代码质量、安全漏洞和恶意软件。每个项目的评分卡都会显示自动化检测的结果。后续计划将加入功能权限披露(显示插件访问的内容)、经过验证的作者标识,以及更清晰的插件功能与作者信息透明度。
使用 Obsidian 的团队将获得更完善的工具,用于管理社区插件并向成员分发私有插件。发布官方插件的团队现在可以在社区目录中申请官方标识。现有的团队部署与安全控制仍然可用。
常见问题部分解答了关于迁移与过渡的疑问。用户可以在新站点上浏览,可能会发现此前需要手动获取的早期访问插件已能通过目录获取。开发者可通过五步流程提交新项目,审核速度更快。当前自动化审查不通过的现有插件暂时仍可继续使用,但最终需要达到新的标准。开发者可以在本地运行自动化审查或在发布更新前预览扫描结果。该平台目前需要 GitHub 与 Obsidian 账户,未来可能会支持更多托管平台。
Obsidian has launched the new Community site at community.obsidian.md, a centralized directory and developer dashboard for plugins and themes. Since the API release in 2020, over 4,000 community plugins and themes have been created, with total downloads surpassing 120 million. The new platform aims to make building, distributing, discovering, and using extensions easier and safer for everyone.
The Community site offers improved browsing, searching, filtering, and sorting capabilities across dozens of categories like Integrations, Bases, and Charts. Each project has a detail page with screenshots, information, and a safety scorecard. New labels identify paid plugins and official integrations, while authors can customize their profiles with sponsorship links and social media.
A new developer dashboard allows authors to submit, manage, and track their projects. All existing plugins, themes, and queued submissions from GitHub have been automatically migrated. Developers can claim their projects by signing in and connecting their GitHub accounts. The dashboard provides a streamlined submission process with results typically available within minutes.
The launch introduces automated reviews for all community projects, scanning every version for security and code quality rather than just initial submissions. This addresses the growing backlog as coding agents accelerate plugin creation. The system checks adherence to developer policies, code best practices, and known vulnerabilities. Manual reviews will continue for popular plugins, featured projects, and community-flagged issues. Over 2,300 queued submissions were processed in the final days before launch using the new system.
Plugin safety receives major enhancements through automated scans checking every version for code quality, security vulnerabilities, and malware. Scorecards display the status of automated checks for each project. Future improvements will include capability disclosures showing what plugins access, verified author labels for trusted developers, and better transparency about plugin functionality and authors.
Teams using Obsidian will gain better tools for managing community plugins and distributing private plugins to team members. Teams publishing official plugins can now apply for the Official badge in the Community directory. Existing team safety controls for deploying plugins remain available.
The FAQ section addresses common questions about the transition. Users can explore the new site and may find previously manual early-access plugins now available through the directory. Developers can submit new projects through a five-step process with faster review times. Existing plugins failing automated review will continue working for now but will eventually need to meet new standards. Tools are available to run automated reviews locally or preview scans before releasing updates. The platform currently requires GitHub and an Obsidian account, with plans to potentially add other hosting platforms in the future.
高级开发人员难以把自己的专业性传达清楚,往往不是因为知识不足,而是因为他们与业务其他部门"说的是两种语言"。问题的核心在于框架不同:市场、销售、产品和高管关注的是如何快速把想法投到市场、尽快验证并减少不确定性;而高级开发关注的是管理复杂性以保证系统稳定。这种根本性的错位导致了冲突。当开发以维护成本或代码复杂性为由回绝新功能时,他们是在表达运营层面的担忧,但并未触及业务对不确定性的根本焦虑。 Senior developers often struggle to communicate their expertise not because they lack knowledge, but because they speak a different language than the rest of the business. The core issue lies in how problems are framed. While marketers, salespeople, product managers, and executives are driven by the need to reduce uncertainty, getting ideas to market quickly to test what works, senior developers are focused on managing complexity to maintain system stability. This creates a fundamental misalignment. When developers push back on feature requests by citing maintenance costs or code complexity, they are expressing their own operational concerns, but failing to address the business core anxiety about uncertainty.
高级开发人员难以把自己的专业性传达清楚,往往不是因为知识不足,而是因为他们与业务其他部门"说的是两种语言"。问题的核心在于框架不同:市场、销售、产品和高管关注的是如何快速把想法投到市场、尽快验证并减少不确定性;而高级开发关注的是管理复杂性以保证系统稳定。这种根本性的错位导致了冲突。当开发以维护成本或代码复杂性为由回绝新功能时,他们是在表达运营层面的担忧,但并未触及业务对不确定性的根本焦虑。
把业务想象成同时运行两条循环会更容易理解:一条是速度循环——快速探索市场、从反馈中学习、尽快降低不确定性;另一条是稳定循环——确保付费用户能持续获得可靠、可理解且可修复的服务。高级开发主要处在第二条循环,他们害怕复杂性,因为复杂性直接威胁到他们必须维护的稳定性。每增加一个功能或特殊用例,系统就更难理解、排查和维护,风险随之上升,客户服务也可能受到影响。
沟通失败正发生在这两条循环碰撞的地方。业务把新功能视为学习和减不确定性的机会;高级开发把同一请求视为可能破坏稳定性的复杂来源。对那些在时间和不确定性中奔跑的业务方而言,开发对复杂性的担忧常被看作阻挠。开发者在沟通上会失败,往往是因为他们只用内部的复杂性指标来解释问题,而没有承认业务试图减少不确定性的目标。
那么高级开发该如何更有效沟通?作者 Tuhin Nair 建议做一个简单但有力的重新表述:不要一上来就谈复杂性问题,而是把自己的方案用"减少不确定性"的角度来呈现。他提出的关键句是:"我们能试试更快的方法吗?"这句话既承认了业务对速度的诉求,"更快"暗示有替代路径,"试试"接受不完美但可能"够用"。开发者可以借此倡导简化、复用现有工具或避免不必要的投入,同时把这些作为更快获得市场反馈的手段来表述。
但 AI 的兴起改变了这一动态。 AI 能让任何人快速生成代码,加速那个以速度和不确定性为主的业务循环,代价却是稳定性。 AI 往往会生成更难理解、调试与维护的代码,而且并不对所产出的系统承担责任。这使得高级开发的角色比以往更重要,但他们的工作也在从单纯的构建者转向以"编辑者"为主——对产出承担最终责任的人。
为此,Nair 提出一个结构性解决方案:把两条业务循环在系统层面解耦。设想有一个"速度"版本的系统,让 AI 代理、初级开发和非技术人员可以在其中快速构建并发布功能以获取市场反馈,而不必为长期稳定性担忧;验证有价值的功能再进入"规模"版本,由高级开发作为编辑进行策划,实现设计良好、稳定且易于理解的最终系统。这样,业务既能保持速度与试错的动力,高级开发也能在负责的系统设计和稳定性上发挥真正价值,通过落地的成果而非空谈复杂性来证明自己的作用。
Senior developers often struggle to communicate their expertise not because they lack knowledge, but because they speak a different language than the rest of the business. The core issue lies in how problems are framed. While marketers, salespeople, product managers, and executives are driven by the need to reduce uncertainty, getting ideas to market quickly to test what works, senior developers are focused on managing complexity to maintain system stability. This creates a fundamental misalignment. When developers push back on feature requests by citing maintenance costs or code complexity, they are expressing their own operational concerns, but failing to address the business core anxiety about uncertainty.
To understand this dynamic, it helps to think of a business as running in two simultaneous loops. The first loop is about speed, exploring the market, learning from feedback, and reducing uncertainty as fast as possible. The second loop is about stability, ensuring that paying customers continue to receive a reliable, understandable, and fixable service. Senior developers live primarily in the second loop, fearing the monster of complexity because it directly threatens the stability they are responsible for. Every new feature or special case added to a system makes it harder to understand, debug, and maintain, which increases risk and threatens the continued service of customers.
The communication failure happens when these two loops collide. The rest of the business sees a new feature request as an opportunity to learn and reduce uncertainty. The senior developer sees the same request as a source of complexity that could destabilize the system. This leads to a disconnect where developer concerns about complexity feel like stonewalling to business stakeholders who are racing against time and uncertainty. Developers fail when they try to explain away a business problem using their own internal metrics, focusing only on complexity management instead of acknowledging the business goal of uncertainty reduction.
So, how can senior developers communicate more effectively? The author, Tuhin Nair, suggests a simple but powerful reframing. Instead of leading with the problems of complexity, senior developers should present their solutions in terms of uncertainty reduction. The proposed magic phrase is, "Can we try something quicker?" This phrase acknowledges the business need for speed, "quicker" implies an alternative path, and "try" accepts imperfection while suggesting a potentially good enough solution. It allows a developer to advocate for simplification, re-using existing tools, or avoiding unnecessary work, all while framing these actions as a faster way to get the market feedback the business craves.
However, the rise of AI has disrupted this entire dynamic. AI accelerates the business loop of speed and uncertainty reduction by allowing anyone to generate code quickly, but it does so at the cost of stability. AI is a destabilizer, creating code that is often harder to understand, debug, and maintain. Crucially, AI takes no responsibility for the systems it helps create. This makes the senior developer role more critical than ever, but their job is shifting from being solely a builder to being primarily an editor, the person who takes on the responsibility for what gets built.
Nair proposes a structural solution to this problem: decoupling the two business loops into separate systems. Imagine a 'Speed' version of a system, where AI agents, junior developers, and non-technical staff can rapidly build and ship features for market feedback without worrying about long-term stability. This feeds into a 'Scale' version of the system, a well-designed, stable, and understandable version curated by senior developers acting as editor. Features get tested in 'Speed' and then, if they prove valuable, are properly integrated into 'Scale'. This way, the business gets its speed and momentum, while senior developers get the space to apply their expertise in responsible system design and stability, truly communicating their value through action rather than just words about complexity.
• 专业知识深深植根于一种难以用语言完全表达或传递的内在"世界观模型"。因此,认为只要"说对话"就能传授专业能力的想法是有根本性缺陷的。虽然后设事实的知识可以传递,但那些把知识互相关联、形成直觉理解的深层认知无法直接传达。 AI 擅长处理事实性信息,却缺乏能带来出人意料但正确洞见的世界观模型,而真正的专家知识只能通过引导式学习和长期实践获得。
• "传输主义"——即相信词语能完美传递意义——是沟通专业知识的一大障碍。这与"隐性知识"概念相关:那种深植于个人经验、难以形式化的技能。有人甚至主张用诗歌来绕过这些局限,凸显出真正的专业知识多么内在且难以言说。
• 高级开发者必须在"回避者"(缩减范围)与"实验者"(增加复杂性)之间不断权衡,两者在不同环境下既可能有利也可能有害。环境至关重要:初创公司做出 MVP 与医疗设备制造商的决策逻辑完全不同。优秀的高级开发者知道何时坚持简洁,何时主张必要的复杂性,理解每个系统和产品都有其独特性。
• "速度"与"规模"的反馈循环构成软件开发中的根本张力。"速度"循环优化快速市场学习,"规模"循环则优化长期稳定性与可维护性。 AI 被视为促进"速度"循环的强大工具,便于快速试验,但在"规模"循环上表现欠佳,因为后者需要对权衡、风险与系统长期健康的深刻理解。危险在于,快速版本一旦上线便成为常态,而投入资源去构建可扩展版本的意愿往往消失。
• 专业知识的传递往往是单向的,高级开发者常感到自己的经验不被需要,甚至被更依赖自身或 AI 工具的初级人员排斥。许多高级开发者反映,初级人员不太愿意寻求指导,更倾向于使用 AI 或谷歌而不是与人交流。这种情况因双方都缺乏时间进行知识分享而加剧,并带有一种认为在 AI 时代机构知识价值降低的认知偏差。
• 虽然"速度"循环有利于学习,但它常把临时性解决方案永久化,产生大量技术债务和运营风险。尤其当管理层看到可运行的原型时,往往不愿再投入资源去做更稳健、可扩展的版本。因而高级开发者必须学会设计那种即便作为快速版本上线也不会"烧掉整栋楼"的方案——这是门微妙的艺术,而 AI 在这方面能力明显不足。
• 高级开发者的价值不仅在于技术能力,还在于他们驾驭业务环境的能力,包括理解激励、衡量权衡与预见长期后果。他们能对不合理要求说"不",能从客户痛点或业务风险出发构建论据,并设计出"足够好"的系统,既能快速交付又不会危及公司未来。这种领导力难以被自动化取代。
• AI 的兴起并没有降低对高级开发者的需求,反而使他们的技能更为关键。 AI 可以快速生成代码,但缺乏承担责任、理解业务领域和在权衡取舍上作出细致判断的能力。高级开发者的角色正在演变为指导和审查 AI 生成的代码,确保其符合"规模"循环对稳定性、可维护性和长期健康的要求。
• 文章的核心信息是:高级开发者不仅仅是"慢"的人,他们对构建稳定、可维护、可扩展的系统至关重要,而这些特质往往与"快速行动、打破常规"的心态相冲突。"速度"循环有助于学习,但"规模"循环对长期成功同样不可或缺。组织面临的挑战是同时重视并投入两者,认识到速度版本只是手段,而非目的。
讨论表明,在 AI 时代软件开发的未来令许多人深感担忧,但达成了一个强烈共识:虽然 AI 能加速"速度"循环,但无法替代高级开发者所提供的细致判断、责任感与对"规模"循环的深刻理解。这一张力并非新事物,但 AI 使其更加突出,从而使高级开发者的作用比以往任何时候都更为关键。然而,高级开发者的价值常被初级人员和管理层低估,导致他们感到沮丧和被忽视。关键在于组织要更好地利用高级开发者的专业知识,不仅发挥他们的技术能力,更利用他们在速度与稳定性之间做复杂权衡的能力,确保构建出的系统既快速又可持续。
• Expertise is deeply tied to an internal "world model" that cannot be fully articulated or transferred through words alone, making the common belief that expertise can be communicated simply by "saying the right things" fundamentally flawed. While factual knowledge is transferable, the interconnected, intuitive understanding of what knowledge adds up to cannot be conveyed. AI excels at facts but lacks the world model that allows surprising correct insights, which is the essence of true expertise and can only be acquired through guided learning and effort.
• The "Transmissionist" belief, the idea that meaning is perfectly transferred through words, is a key barrier to communicating expertise. This is related to the concept of "tacit knowledge," knowledge that is deeply personal and hard to formalize. One insightful commenter even argues for communicating in poetry to bypass these limitations, highlighting how deeply embedded and non-verbalizable true expertise can be.
• A senior developer must constantly navigate the tension between "avoiders" (who reduce scope) and "experimenters" (who add complexity), as both can be beneficial or harmful depending on context. Context is paramount: a startup building an MVP needs different decisions than a medical device manufacturer. A good senior knows when to fight for simplicity and when to advocate for necessary complexity, understanding that every system and product is different.
• The "Speed" vs. "Scale" feedback loops represent a fundamental tension in software development, where the "Speed" loop optimizes for rapid market learning and the "Scale" loop for long-term stability and maintainability. AI is seen as a powerful tool for the "Speed" loop, enabling rapid experimentation, but it is currently poor at the "Scale" loop, which requires deep understanding of tradeoffs, risk, and long-term system health. The danger is that the "Speed" version, once in production, becomes permanent, and the investment in the "Scale" version is never made.
• Communicating expertise is often a one-way street, with seniors feeling their knowledge is unwanted or even resented by juniors who prefer self-reliance or AI tools. Many seniors report that juniors are uninterested in mentorship, don't seek out experienced colleagues, and are more comfortable with AI or Google than with human interaction. This is exacerbated by a lack of time for both parties to engage in knowledge sharing, and a perception that institutional knowledge has little value in the age of AI.
• The "Speed" loop, while valuable for learning, often leads to "temporary" solutions becoming permanent, creating massive technical debt and operational risk. This is especially true when leadership sees a working prototype and is unwilling to invest in a more robust, scalable version. The article argues that senior developers must design the "Speed" version in a way that, if it goes into production, won't "burn the building down," a subtle art that AI is currently atrocious at.
• The value of a senior developer lies not just in technical skill, but in their ability to understand and navigate the business context, including incentives, tradeoffs, and long-term consequences. This includes the ability to say "no" to unreasonable requests, to frame arguments in terms of customer pain or business risk, and to design systems that are "good enough" to ship fast without jeopardizing the company's future. This is a form of leadership that is difficult to automate.
• The rise of AI has not diminished the need for senior developers; in fact, it has made their skills more critical. While AI can generate code quickly, it lacks the ability to take responsibility, understand the business domain, and make nuanced judgments about tradeoffs. The senior developer's role is evolving to one of guiding and reviewing AI-generated code, ensuring it aligns with the "Scale" loop's requirements for stability, maintainability, and long-term health.
• The article's core message is that senior developers are not just "slow" developers, but are essential for building systems that are stable, maintainable, and scalable, qualities that are often at odds with the "move fast and break things" mentality. The "Speed" loop is valuable for learning, but the "Scale" loop is essential for long-term success. The challenge for organizations is to value and invest in both, and to recognize that the "Speed" version is a means to an end, not the end itself.
The discussion reveals a deep concern about the future of software development in the age of AI, with a strong consensus that while AI can accelerate the "Speed" loop, it cannot replace the nuanced judgment, responsibility, and deep understanding of the "Scale" loop that senior developers provide. The tension between these two loops is not new, but AI has amplified it, making the role of the senior developer more critical than ever. However, there is also a recognition that the value of senior developers is often underappreciated by both juniors and leadership, leading to frustration and a sense of being undervalued. The key takeaway is that organizations must find ways to better leverage the expertise of senior developers, not just for their technical skills, but for their ability to navigate the complex tradeoffs between speed and stability, and to ensure that the systems they build are not just fast, but also sustainable.
Jeff Geerling 一直批评 Bambu Lab 将其 3D 打印机转向"始终在线"的云模式。在 Bambu Lab 把云服务设为默认后,他通过 OPNsense 防火墙切断打印机的互联网连接,停止固件更新,将设备锁定在开发者模式,并把工作流从 Bambu Studio 换到 OrcaSlicer,以此维持对自己 P1S 的控制权。他承认自己希望完全拥有已购硬件的想法并不普遍,但 Bambu Lab 近期的做法促使他更严厉地发声。 Jeff Geerling has been a vocal critic of Bambu Lab's shift toward an always-connected cloud model for their 3D printers. After Bambu Lab started pushing their cloud solution as the default, he took steps to maintain control over his own P1S printer by blocking its internet access via his OPNsense firewall, stopping firmware updates, locking it into Developer mode, and switching from Bambu Studio to OrcaSlicer. He acknowledges he's unusual in wanting full ownership of hardware he purchased, but Bambu Lab's recent actions have pushed him to speak out more forcefully.
Jeff Geerling 一直批评 Bambu Lab 将其 3D 打印机转向"始终在线"的云模式。在 Bambu Lab 把云服务设为默认后,他通过 OPNsense 防火墙切断打印机的互联网连接,停止固件更新,将设备锁定在开发者模式,并把工作流从 Bambu Studio 换到 OrcaSlicer,以此维持对自己 P1S 的控制权。他承认自己希望完全拥有已购硬件的想法并不普遍,但 Bambu Lab 近期的做法促使他更严厉地发声。
导火索是 Bambu Lab 对一个名为 OrcaSlicer-bambulab 的 OrcaSlicer 分支的反应。该分支允许用户在不通过 Bambu 云的情况下使用打印机全部功能。 Bambu Lab 没有置之不理,而是以冒充和安全风险为由威胁开发者采取法律行动,尽管该分支照搬了 Bambu Studio 上游的 AGPL 授权代码。 Geerling 认为这种回应既令人费解又不成比例,尤其是在该分支在收到停止函前使用量极少的情况下。
Bambu Lab 在一篇博客中将该分支描述为严重的安全威胁,声称其会注入伪造的身份元数据,可能对其服务器造成结构性漏洞。 Geerling 指出讽刺之处:Bambu 自己的某个分支在 2022 年曾导致 Bambu 用户的遥测误发到 Prusa 的服务器上,Prusa 并未以法律威胁回应。他认为 Bambu 在滥用从中受益的 AGPL 许可,同时也误解了开源文化和基本安全原则——毕竟公开的 user-agent 字符串并不能作为防御 DDoS 的可靠手段。
Geerling 把 Bambu 的强硬做法与可行的温和处理方式对比,例如仅以商标为由要求开发者在分支名中去掉 "bambulabs" 。然而,Bambu 却公开将潜在的基础设施问题归咎于一名开发者。这与去年他们把社区的反弹称为"令人遗憾的误导信息"的做法一脉相承。更荒谬的是,涉事开发者此前还在 Bambu 的 GitHub 上帮助 Bambu Studio 用户解决 Linux 和 Wayland 问题。
更大的问题在于 Bambu Lab 正在逐步封闭其生态,背离了曾帮助他们建立社区的开源原则。 Geerling 指出,最简单也最有利可图的选择本来是无为而治,但他们选择压制那一小部分高级用户。 Louis Rossmann 已承诺出资 1 万美元帮助该开发者应对 Bambu 的法律威胁,Geerling 也愿意出力,但开发者可能并不想继续成为 Bambu 的靶心。对于重视开源和硬件所有权的用户来说,最实际的结论或许就是避开 Bambu Lab 。
Jeff Geerling has been a vocal critic of Bambu Lab's shift toward an always-connected cloud model for their 3D printers. After Bambu Lab started pushing their cloud solution as the default, he took steps to maintain control over his own P1S printer by blocking its internet access via his OPNsense firewall, stopping firmware updates, locking it into Developer mode, and switching from Bambu Studio to OrcaSlicer. He acknowledges he's unusual in wanting full ownership of hardware he purchased, but Bambu Lab's recent actions have pushed him to speak out more forcefully.
The immediate trigger for this post is Bambu Lab's response to a fork of OrcaSlicer called OrcaSlicer-bambulab, which allowed users to access all printer features without routing prints through Bambu's cloud. Instead of ignoring this small project, Bambu Lab threatened the developer with legal action, accusing the fork of impersonation and posing a security risk, despite the fork using Bambu Studio's upstream AGPL-licensed code verbatim. Geerling finds this response baffling and disproportionate, especially since the fork had minimal uptake before Bambu's cease and desist.
Bambu Lab published a blog post framing the fork as a serious security threat, claiming it injected falsified identity metadata and could cause structural vulnerability to their servers. Geerling points out the irony, noting that Bambu's own fork once caused Bambu users' telemetry to hit Prusa's servers in 2022, and Prusa didn't respond with legal threats. He argues that Bambu is misusing the AGPL license they benefit from and misunderstanding both open source culture and basic security principles, since a public user agent string is hardly a robust defense against DDoS attacks.
Geerling contrasts Bambu's heavy-handed approach with how the situation could have been handled, such as simply asking the developer to remove "bambulabs" from the fork's name for trademark reasons. Instead, they publicly blamed one developer for potential infrastructure problems, echoing a pattern from last year when they dismissed community backlash as "unfortunate misinformation." The developer in question had previously helped Bambu Studio users with Linux and Wayland issues on Bambu's own GitHub, making the legal threat especially absurd.
The broader issue is Bambu Lab's increasing lock-in of their ecosystem, moving away from the open source principles that helped build their community. Geerling notes that it would have been easier and more profitable for Bambu to do nothing, but they chose to suppress a tiny fraction of power users. Louis Rossmann has pledged $10,000 to help the developer fight Bambu's legal threats, and Geerling would contribute too, but the developer may not want to remain in Bambu's crosshairs. The practical takeaway for users who value open source and hardware ownership might be to simply avoid Bambu Lab altogether.
• Bambu Lab 的打印机以无与伦比的易用性和性价比著称,但其封闭的生态、对云服务的依赖以及最近对开源分支采取的法律行动,已经疏远了注重隐私和开源的用户。 Prusa 等替代品牌更开放、便于维修,但价格显著更高;而来自 Elegoo 、 Creality 和 Qidi 等的新一代廉价机型在限制更少的情况下,也能提供颇具竞争力的功能。
• 在主要厂商中,Prusa 仍然被视为对开源最友好的品牌。尽管他们最近为打击中国克隆机而限制了设计的商业使用——有人认为这是求生之道,也有人认为这背离了开源精神。 Core One 系列高度可靠且可升级,但缺乏强力腔室加热,难以应对某些高端材料。
• Bambu 要求打印任务通过其云服务器路由,即便是在局域网打印的情况下也一样。这一做法引发了强烈反弹。虽然存在仅局域网模式,但要启用该模式现在需要关闭云功能或进入开发者模式,而这会移除访问控制。许多人认为这不是技术限制,而是有意为之的锁定策略。
• 当 Bambu 向一个模仿其用户代理的开源 OrcaSlicer 分支发出停止令时,争议进一步升级。批评者认为这违背了 Bambu Studio 所采用 AGPL 许可证的精神,而 Bambu 则声称该分支未经授权访问其服务器导致服务中断并违反了用户协议。
• 有人推测 Bambu 的做法受到国家压力影响,尤其有报道称中国制造的无人机在乌克兰被远程停用开关禁用。然而也有反驳意见指出,Bambu 的云依赖早于战争开始,且在无互联网条件下的局域网打印仍能正常运行,使得间谍指控难以证实。
• 尽管存在道德和隐私方面的担忧,许多用户仍然容忍 Bambu 的做法,因为其硬件"开箱即用",在一个挑剔的打印机市场中带来了媲美 iPhone 的使用体验。对非技术用户而言,便利往往比隐私或开放性更重要,尤其是当仍可通过 SD 卡离线打印时。
• 更广泛的趋势反映了开源理想与商业现实之间的张力:像 Prusa 与 Bambu 这样的公司从社区贡献中获益,但又面临着保护收入免受克隆品与未经授权使用的压力。这催生了一种"源码可得但非真正开源"的混合模式,模糊了开放与控制的界限。
• 远程打印在专业环境中很常见,但将敏感设计通过 Bambu 的服务器路由,确实带来了合理的知识产权和安全顾虑。即便遥测数据并无恶意,缺乏加密与潜在的数据泄露风险也使其在企业或国防相关场景中存在危险性。
• 3D 打印市场竞争日益激烈。 Bambu 的主导地位促使竞争对手在易用性和可靠性上加紧追赶,但目前尚无替代品能在速度、自动化与开箱即用体验上完全匹配 Bambu,这使其仍是初学者的默认选择,尽管围绕其做法的争议不断。
• 归根结底,这场辩论的核心在于用户是更看重所有权、隐私与自由,还是更看重无缝的功能性。尽管 Bambu 的硬件广受好评,其日益收紧的软件策略和对开源开发者的对抗姿态表明,除非市场压力迫使其改变,否则用户对设备控制权可能会进一步被削弱。
讨论显示出实用主义者与纯粹主义者之间的深刻分歧:前者重视 Bambu 带来的无与伦比的易用性,后者则认为其封闭生态与法律打压与用户自由根本不相容。虽然存在替代方案,但在同等价位上很少有能提供同等即插即用可靠性的产品,这使许多用户陷入两难。 Bambu 针对开源开发者的做法已经损害了信任,但其出色的硬件仍让愿意妥协的用户继续使用。这一局面凸显了科技行业的常见模式:便利往往会占上风,直到反弹达到临界点。 Bambu 是否会修正航向,可能取决于它愿意冒多大风险失去市场份额给更开放的竞争对手。
• Bambu Lab printers offer unmatched ease of use and price/performance, but their closed ecosystem, cloud dependencies, and recent legal threats against open-source forks have alienated privacy-conscious and open-source advocates. Alternatives like Prusa are more open and repairable but significantly more expensive, while newer budget options from Elegoo, Creality, and Qidi offer competitive features with fewer restrictions.
• Prusa remains the most "open-source-friendly" major brand, though they've recently restricted commercial use of their designs to combat Chinese cloning—a move seen by some as necessary for survival and by others as a betrayal of open-source principles. Their Core One line is highly reliable and upgradeable, but lacks strong chamber heating for advanced materials.
• Bambu's requirement to route prints through their cloud servers—even for local network printing—has sparked major backlash. While LAN-only mode exists, enabling it now requires disabling cloud features or using developer mode, which removes access controls. This design choice is viewed by many as intentional lock-in rather than a technical limitation.
• The controversy intensified when Bambu sent a cease-and-desist letter to an OrcaSlicer fork that impersonated Bambu's user agent to enable cloud printing without official software. Critics argue this violates the spirit of AGPL, under which Bambu Studio is licensed, while Bambu claims unauthorized access to their servers caused outages and breaches user agreements.
• Some speculate Bambu's behavior stems from state pressure, especially given reports of Chinese drones being disabled in Ukraine via kill switches. However, others counter that Bambu's cloud requirements predate the war and that LAN-only printing remains fully functional without internet access, making espionage claims unproven.
• Despite ethical concerns, many users tolerate Bambu's practices because the hardware "just works"—comparable to the iPhone experience in a market plagued by finicky printers. For non-technical users, convenience often outweighs privacy or openness, especially when prints can still be done offline via SD card.
• The broader trend reflects a tension between open-source ideals and commercial reality: companies like Prusa and Bambu benefit from community contributions but face pressure to protect revenue from clones and unauthorized use. This has led to hybrid models that are "source-available" but not truly open, blurring the line between openness and control.
• Remote printing is common in professional settings, but routing sensitive designs through Bambu's servers raises legitimate IP and security concerns. Even if telemetry isn't malicious, the lack of encryption and potential for data exposure makes it risky for corporate or defense-related use.
• The 3D printing market is becoming more competitive, with Bambu's dominance pushing rivals to improve ease of use and reliability. However, no current alternative matches Bambu's combination of speed, automation, and out-of-box experience—making it the default choice for beginners despite its controversies.
• Ultimately, the debate centers on whether users prioritize ownership, privacy, and freedom versus seamless functionality. While Bambu's hardware is widely praised, its increasingly restrictive software policies and adversarial stance toward open-source developers suggest a future where user control continues to erode unless market pressure forces a change.
The discussion reveals a deep divide between pragmatists who value Bambu's unmatched usability and purists who see its closed ecosystem and legal aggression as fundamentally incompatible with user freedom. While alternatives exist, none offer the same plug-and-play reliability at a comparable price, leaving many users conflicted. Bambu's actions—especially targeting open-source developers—have damaged trust, but their hardware excellence ensures continued adoption among those willing to accept trade-offs. The situation underscores a recurring tech industry pattern: convenience often wins until backlash reaches a tipping point, and whether Bambu course-corrects may depend on how much market share it risks losing to more open competitors.
本文记录了在浏览器中构建真实大气散射着色器的一个月历程,灵感来自一张航天飞机 Endeavour 在日落时分拍摄的、地球高层大气色彩斑斓的照片。目标不是简单地绘制蓝色渐变背景,而是把天空模拟成光与空气分子、尘埃及其他颗粒在体积中相互作用的结果,采用像 raymarching 、 Rayleigh 和 Mie 散射以及臭氧吸收等技术。 This article documents a month-long journey into building realistic atmospheric scattering shaders in the browser, inspired by a photo of the space shuttle Endeavour against the colorful layers of Earth's upper atmosphere at sunset. The goal was to move beyond simple blue gradient backgrounds and instead simulate the sky as the result of light interacting with air molecules, dust, and other particles in a volumetric way, using techniques like raymarching, Rayleigh and Mie scattering, and ozone absorption.
本文记录了在浏览器中构建真实大气散射着色器的一个月历程,灵感来自一张航天飞机 Endeavour 在日落时分拍摄的、地球高层大气色彩斑斓的照片。目标不是简单地绘制蓝色渐变背景,而是把天空模拟成光与空气分子、尘埃及其他颗粒在体积中相互作用的结果,采用像 raymarching 、 Rayleigh 和 Mie 散射以及臭氧吸收等技术。
作者首先用 raymarching 为大气着色器打下基础,采样大气密度并计算光学深度。具体做法包括用 Rayleigh 密度函数模拟随高度稀薄的大气分布,并应用 Beer's Law 计算透射率,即光穿过大气后剩余的强度。随后引入 Rayleigh 相位函数,考虑入射阳光与视线间的夹角,从而呈现出更真实的蓝天效果:较短波长的光散射更强。
为增强真实感,文章加入了 Mie 散射,用以模拟光与较大颗粒(如尘埃和气溶胶)的相互作用,在太阳周围形成朦胧的光晕;还加入了臭氧吸收,它会吸收部分波长的光,使天空颜色在太阳附近和黄昏时向更深的蓝紫色偏移。文中通过具体的密度与相位函数以及标高和散射系数等常数给出了这些效果的实现细节。
接着讨论光照部分,解释如何通过考虑从太阳到每个采样点路径上的光衰减来正确渲染日出和日落。实现方法是在主 raymarching 循环内嵌套一个"光线步进"循环,用于在光源方向上采样透射率,从而让着色器能准确表现一天之中天空颜色从正午明亮的蓝色到日落时温暖的橙红色的变化。
文章还把平面天空着色器改造为适用于三维行星周围大气的后期效果:通过屏幕空间 UV 和场景深度缓冲重建世界空间坐标,使 raymarching 能考虑场景几何,从而产生随距离变得更朦胧的大气雾效。作者还详述了为处理行星尺度启用对数深度缓冲的方法,并用光线与球体相交测试来确定大气壳层的起点和终点。
一个附加章节探讨了日食处理,介绍了如何实现太阳可见度函数,根据 moon 等天体的视半径和位置判定它们对太阳的遮挡程度。另一个附加示例展示了通过调整大气常数来模拟不同行星环境,例如 Mars 上尘埃弥漫的橙色大气及其独特的蓝色日落。最后,文章还介绍了一种受 Sebastian Hillaire 工作启发的更高性能的基于查找表(LUT)的方法:将昂贵的散射计算预先烘焙到透射率、天空视角和空气透视等 LUT 纹理中,然后在最终通道合成,从而相较于完全 raymarching 的实现获得显著的性能提升。
This article documents a month-long journey into building realistic atmospheric scattering shaders in the browser, inspired by a photo of the space shuttle Endeavour against the colorful layers of Earth's upper atmosphere at sunset. The goal was to move beyond simple blue gradient backgrounds and instead simulate the sky as the result of light interacting with air molecules, dust, and other particles in a volumetric way, using techniques like raymarching, Rayleigh and Mie scattering, and ozone absorption.
The author begins by laying the foundation for an atmosphere shader using raymarching to sample atmospheric density and calculate optical depth. This involves using the Rayleigh density function to model how air thins with altitude and applying Beer's Law to compute transmittance, which represents how much light survives traveling through the atmosphere. The Rayleigh phase function is then introduced to account for the angle between incoming sunlight and the view ray, resulting in a realistic blue sky where shorter wavelengths scatter more strongly.
To enhance realism, the article covers the addition of Mie scattering, which models light interaction with larger particles like dust and aerosols, creating a hazy glow around the sun. Ozone absorption is also incorporated, which removes certain wavelengths of light and shifts the sky's color toward deeper blues and purples, especially near the sun and during twilight. The implementation details for these effects are provided through specific density and phase functions, along with constants for scale heights and scattering coefficients.
The discussion then shifts to lighting, explaining how to properly render sunsets and sunrises by accounting for light attenuation along the path from the sun to each sample point. This is achieved by introducing a nested "lightmarch" loop within the main raymarching loop to sample transmittance in the direction of the light source. This allows the shader to accurately depict the changing colors of the sky throughout the day, from the bright blue of midday to the warm oranges and reds of sunset.
The article progresses to transforming the flat sky shader into a post-processing effect suitable for rendering atmospheres around 3D planets. This involves reconstructing world-space coordinates from screen-space UVs and the scene's depth buffer, allowing the raymarching to account for scene geometry and create atmospheric fog that makes distant objects appear hazier. The author also details enabling logarithmic depth buffers to handle the large scales involved in planetary rendering and using ray-sphere intersection tests to define the start and end points of the atmosphere shell.
A bonus section explores handling eclipses by implementing a sun visibility function that determines how much a celestial body like the moon obstructs the sun based on their apparent sizes and positions. Another bonus demonstrates how tweaking atmospheric constants can simulate different planetary environments, such as the dusty, orangy atmosphere of Mars with its distinctive blue sunsets. The article concludes with an exploration of a more performant LUT-based approach inspired by Sebastian Hillaire's work, which precomputes expensive scattering calculations into textures like transmittance, sky-view, and aerial perspective LUTs, then composes them in a final pass for a significant performance boost over the fully raymarched version.
Sebastian Lague 的大气散射视频既有趣又富有启发性,对那些对程序化生成和图形编程感兴趣的人来说,常常成为他们进入这一领域的入口。 YouTube 的推荐算法随着时间显著影响了 Lague 的观看量,但在新冠疫情期间对小众话题兴趣的上升,也可能促成了他早期内容的病毒式传播。把 1993 年 Nishita 等人的开创性大气散射论文付诸实现仍然很有价值——那篇论文可读性强,其方法对现代实现依然具有参考意义。
当用 Rayleigh 和 Mie 散射方程从原本只是静态蓝色天空盒的场景中生成出令人信服的日落时,很多人都感受到一种深刻的顿悟:复杂的自然现象可以从相对简洁的数学模型中涌现。把大气散射和体积云渲染结合起来,能创造出令人惊叹的天空场景,尤其是在日落效果上,这一点在各种程序化太空与行星生成器中表现得尤为明显。该项目采用 MIT 许可证,使其对游戏开发者立即可用;在固定摄像机视角下,利用正弦函数就能轻松扩展出季节性太阳角度的变化。
相比之下,简单的基于梯度的天空渲染效果平淡无奇,物理基础的散射模型在质量上有明显优势。在 XNA 等业余游戏引擎中实现散射也能得到出乎意料的好效果:太阳的渲染会自然而然地从散射计算中显现出来,许多实现都是在教程系列和学术论文的指导下完成的。 SpaceEngine 是一个长期运行的项目,在天体渲染和天文模拟方面细节卓越,既包含大量真实天体也有程序化生成的天体目录;其模拟规模令人惊叹,覆盖了整个 Hipparcos 星表、已知的系外行星、数千个星系,以及超出可观测宇宙实际数量的程序化天体。
次表面散射的研究(如 Stanford 的 BSSRDF 论文)揭示了渲染牛奶等半透明材料所面临的独特挑战,这种复杂性在某种程度上与大气效果的难题相似。真实的天空渲染对天文馆和星图应用尤其重要,能显著增强教育与沉浸式体验。即便读者对底层数学理解有限,详尽的图形编程文章所呈现的视觉美感和工程思路仍然具有很强的启发性。
除了基于物理的散射模型外,Perez All-Weather 和 Preetham 等天空模型也提供了替代方案,不少开发者已将它们作为个人项目成功实现。总体而言,基于物理的渲染技术远胜于堆叠梯度等图形技巧,因为前者能产生更令人信服、更美丽且更贴近真实世界的结果。展示先进图形工作的个人网站常常激励他人改善自己的网络形象和设计能力。大气散射的优雅之处在于:相对紧凑的数学模型能够生成如此复杂且美丽的自然景观。
讨论中流露出对大气散射作为技术成就与艺术追求的深切赞赏,参与者在各种平台上分享了从 XNA 到现代浏览器的个人实现经验。大家普遍认为,基于物理的方法比简单的梯度方法带来显著优越性,而这一领域仍然足够开放,让业余开发者也能做出令人印象深刻的成果。对话还涉及图形编程的更广生态:包括影响内容创作者的算法变化、文档完善的开源项目的价值,以及从优雅数学模型中涌现出的复杂自然现象所带来的启发。
• Sebastian Lague's atmospheric scattering videos are highly entertaining and inspiring for those interested in procedural generation and graphics programming, with his work serving as a gateway into the field for many viewers.
• The YouTube algorithm significantly impacted Lague's view counts over time, though increased interest in niche topics during COVID may have also played a role in his earlier viral success.
• Implementing the foundational 1993 Nishita et al. paper on atmospheric scattering remains a rewarding experience, with its readable approach still relevant for modern implementations.
• The moment when Rayleigh and Mie scattering equations first produce a convincing sunset from a static blue skybox is described as a profound realization that complex natural phenomena can emerge from relatively simple mathematical models.
• Combining atmospheric scattering with volumetric cloud rendering creates stunning sky scenes, particularly for sunset effects, as demonstrated in procedural space/planet generators.
• The MIT license on this project makes it immediately practical for game developers, with fixed camera perspectives allowing for straightforward extension to seasonal sun angle variations using sinusoidal functions.
• Simple gradient-based sky rendering approaches can produce mediocre results compared to physics-based atmospheric scattering models, highlighting the dramatic quality difference that proper simulation achieves.
• Implementing scattering in hobbyist game engines like XNA can yield surprisingly good results, with sun rendering emerging naturally from the scattering calculations, often guided by tutorial series and academic papers.
• SpaceEngine stands out as a long-running project with exceptional attention to detail in atmospheric rendering and astronomical simulation, featuring an enormous catalog of real and procedurally generated celestial objects.
• The scale of SpaceEngine's simulation is remarkable, encompassing the entire Hipparcos catalog, known exoplanets, thousands of galaxies, and procedurally generated objects exceeding the observable universe's actual count.
• Subsurface scattering research, such as the Stanford BSSRDF paper, reveals how rendering translucent materials like milk presents unique challenges that parallel the complexity of atmospheric effects.
• Atmospheric scattering implementation is particularly relevant for planetarium and star map applications, where realistic sky rendering enhances the educational and immersive experience.
• Even readers with limited technical understanding can appreciate the visual beauty and craftsmanship of detailed graphics programming writeups, finding them inspiring despite not grasping the underlying mathematics.
• The Perez All-Weather and Preetham sky models represent alternative approaches to atmospheric rendering that some developers have successfully implemented as personal projects.
• Physics-based rendering techniques are strongly preferred over graphics hacks like stacked gradients, as they produce more convincing and beautiful results grounded in real-world phenomena.
• Personal websites showcasing advanced graphics work often inspire others to improve their own web presence and design skills.
• The elegance of atmospheric scattering lies in how relatively compact mathematical models can generate such visually complex and beautiful natural phenomena.
The discussion reveals a deep appreciation for atmospheric scattering as both a technical achievement and an artistic pursuit, with participants sharing personal experiences implementing these techniques across various platforms from XNA to modern web browsers. There's a strong consensus that physics-based approaches yield dramatically superior results compared to simpler gradient-based methods, and that the field remains accessible enough for hobbyist developers to achieve impressive results. The conversation also touches on the broader ecosystem of graphics programming, including algorithm changes affecting content creators, the value of well-documented open-source projects, and the inspirational power of seeing complex natural phenomena emerge from elegant mathematical models.
欧盟正加大对主要社交媒体平台的监管力度,重点打击官员所称在 TikTok 和 Instagram 上的"成瘾性设计"。欧盟委员会主席 Ursula von der Leyen 在丹麦峰会上宣布,欧盟预计将在今年晚些时候推出针对这些平台的正式法规。此次整治聚焦无限滚动、自动播放和推送通知等功能,这些功能被认为对儿童和青少年尤其有害。 von der Leyen 还批评 Meta 未能执行其 13 岁最低年龄要求,指出未成年人可以轻易绕过现有的审核机制。 The European Union is intensifying its regulatory efforts against major social media platforms, specifically targeting what officials call "addictive design" features on TikTok and Instagram. EU Commission President Ursula von der Leyen announced these plans at a summit in Denmark, stating the bloc expects to introduce formal regulation for platforms later this year. The crackdown focuses on features like endless scrolling, autoplay, and push notifications that are seen as particularly harmful to children and teenagers. Von der Leyen also criticized Meta for failing to enforce its own minimum age requirement of 13, noting that minors can easily bypass existing checks.
欧盟正加大对主要社交媒体平台的监管力度,重点打击官员所称在 TikTok 和 Instagram 上的"成瘾性设计"。欧盟委员会主席 Ursula von der Leyen 在丹麦峰会上宣布,欧盟预计将在今年晚些时候推出针对这些平台的正式法规。此次整治聚焦无限滚动、自动播放和推送通知等功能,这些功能被认为对儿童和青少年尤其有害。 von der Leyen 还批评 Meta 未能执行其 13 岁最低年龄要求,指出未成年人可以轻易绕过现有的审核机制。
除界面设计外,欧盟还在调查通过算法将儿童引入"兔子洞"、使其接触有害内容的平台,例如宣扬饮食失调或自残的视频。为配合这些工作,委员会开发了一款自有的年龄验证应用,声称符合全球最高的隐私标准。成员国将很快能够将该技术整合进其数字钱包。 von der Leyen 强调,"年龄验证技术已经可用",平台不再有借口。一项正式法律提案最早可能在夏季提出,具体取决于欧盟儿童安全在线专家小组的调查结果。
此轮监管也发生在欧盟与美国科技巨头关系紧张的背景下。过去两年,欧盟已对 Apple 、 Meta 和 Google 等公司处以超过 70 亿美元的反垄断和竞争罚款。这些处罚引发了美方批评,Donald Trump 签署备忘录,表示将考虑采取关税等应对措施,称欧盟对美企不公。欧盟还对其他平台展开调查,包括 Elon Musk 的 X,因其传播由其 Grok 聊天机器人生成的露骨非自愿内容。
监管审查的加强还受到美国司法进展的推动。今年 3 月,Meta 和 YouTube 在一宗备受关注的法院裁决中败诉,法院认定无限滚动和自动播放等设计功能助长了青少年的成瘾并损害心理健康。欧盟委员会最近也认定 Meta 违反了 Digital Services Act,未能阻止 13 岁以下用户使用其平台。这些判定为全球保护儿童在线安全的努力增添了动力。去年 12 月,Australia 成为首个对 16 岁以下实施社交媒体禁令的国家;包括 Spain 、 France 和 the U.K. 在内的多个欧洲国家也在提出类似立法,限制儿童访问社交媒体平台。
The European Union is intensifying its regulatory efforts against major social media platforms, specifically targeting what officials call "addictive design" features on TikTok and Instagram. EU Commission President Ursula von der Leyen announced these plans at a summit in Denmark, stating the bloc expects to introduce formal regulation for platforms later this year. The crackdown focuses on features like endless scrolling, autoplay, and push notifications that are seen as particularly harmful to children and teenagers. Von der Leyen also criticized Meta for failing to enforce its own minimum age requirement of 13, noting that minors can easily bypass existing checks.
Beyond design features, the EU is investigating platforms that allow children to access harmful content through algorithmic "rabbit holes," including videos promoting eating disorders or self-harm. To support these efforts, the Commission has developed its own age verification app, which it claims meets the highest privacy standards globally. Member states will soon be able to integrate this technology into their digital wallets, with von der Leyen emphasizing that "the technology for age-verification is available" and platforms have no more excuses. A formal legal proposal could come as early as summer, pending findings from the EU's Special Panel of experts on Child Safety Online.
This regulatory push comes amid broader tensions between the EU and U.S. tech giants. Over the past two years, the bloc has imposed over $7 billion in fines on companies like Apple, Meta, and Google for antitrust and competition violations. These penalties have drawn criticism from U.S. officials, with President Donald Trump signing a memorandum to consider tariffs in response to what he views as unfair targeting of American companies. The EU has also launched investigations into other platforms, including Elon Musk's X, for spreading explicit non-consensual content generated by its Grok chatbot.
The increased scrutiny follows significant legal developments in the United States, where Meta and YouTube lost a high-profile court ruling in March. The court found that design features like infinite scrolling and autoplay contributed to addiction and mental health harms in teenagers. More recently, the EU Commission determined that Meta breached the Digital Services Act by failing to keep under-13s off its platforms. These findings are adding momentum to global efforts to protect children online, with Australia becoming the first country to enforce a social media ban for under-16s in December. Several European nations, including Spain, France, and the U.K., are now proposing similar legislation to restrict children's access to social media platforms.
• 人们把社交媒体算法比作香烟,认为两者都是企业明知有害却仍以盈利为目的推广的产品;但也有人认为这种比喻夸大其词,理由是社交媒体的影响可能可逆,而吸烟造成的身体伤害通常不可逆。
• 关于社交媒体成瘾能否与物质成瘾等同存在争议:有人指出二者都涉及多巴胺触发机制,另一些人则强调任何行为都能触发多巴胺,且对发育中大脑长期神经影响的证据尚不确定。
• 欧盟聚焦保护儿童被视为政治上更容易的一步,但许多人认为这些算法同样会伤害成年人,批评者引述了参与度优化放大政治极端主义、阴谋论和社会分裂的例子。
• 一项关键提案是,使用个性化推荐算法的平台应失去公共承运人保护,并对其推广的内容承担责任;批评者警告,这样的做法可能会导致用户生成内容的网站被迫关闭。
• 有人建议将信息流默认改为按时间顺序排列,或允许用户自行选择算法;Instagram 和 Facebook 已有隐藏的"仅关注"模式,但出于利润考虑并未设为默认。
• 在监管具体的"黑暗模式"(如无限滚动、自动播放)与更广泛约束算法策划之间存在紧张,有些人认为问题在于不透明的个性化算法,而不是所有类型的排序算法。
• 对年龄验证的要求引发隐私担忧:有人主张采用保护隐私的加密凭证,另一些人则不信任任何需要提交身份信息的系统,担心数据泄露和政府监控风险。
• 讨论中显露出对企业自律能力和政府监管能力的双重怀疑;有人举例中国在考试期间关闭社交媒体,认为此举在他人眼中近似极权主义。
• 在个人责任与集体保护之间存在分歧:一些人把算法监管比作强制安全带法,另一些人则反对政府限制成年人选择的任何做法,即便这些选择可能有害。
• 商业模式本身受到质疑:把参与度优化比为为了最大化上瘾性而精心设计的食品工程,部分人主张,不应允许以利用神经脆弱性为盈利手段的平台继续经营,无论用户年龄如何。
讨论总体揭示出一条根本矛盾:一方面要保护个人自主权,另一方面又要应对平台利用巨量资源操纵人类心理所造成的系统性伤害。大家普遍认为儿童需要特别保护,但是否应把这些保障扩展到成年人,则引发了关于政府在监管个人行为时应扮演何种角色的激烈争论。把社交媒体比作香烟在情感上易于引起共鸣,但若严格论证则不完全成立,因为社交媒体并不具备烟草那样的直接身体毒性。多数参与者认为,问题的核心是参与度优化下不透明的个性化推荐算法;而针对这一问题的解决方案则从要求透明与赋予用户控制权,到把平台视为对所推广内容负责的发布者不等。与此同时,对企业动机和监管后果的深刻不信任令人担忧,不当立法可能会固化垄断或催生更强的监控。总体而言,讨论难以调和对平台造成真实伤害的认识与在不越权或不引起意外后果前提下制定有效监管措施之间的张力。
• Social media algorithms are compared to cigarettes, with both seen as profitable products that companies know are harmful but continue to push, though some argue this comparison is overstated since social media's effects may be reversible unlike smoking's physical damage.
• There's debate about whether social media addiction is truly comparable to substance addiction, with some pointing to dopamine triggers and others noting that everything triggers dopamine and that the long-term neurological impacts on developing brains remain uncertain.
• The EU's focus on protecting children is seen as a politically easier starting point, but many argue these algorithms harm adults too, citing political radicalization, conspiracy theories, and social division amplified by engagement-optimized content.
• A key proposal is that platforms using personalized recommendation algorithms should lose common carrier protections and become liable for content they promote, though critics warn this could effectively shut down user-generated content sites.
• Some suggest the solution is requiring chronological feeds by default or letting users choose their own algorithms, with Instagram and Facebook already having hidden "following-only" modes that aren't default due to profit motives.
• There's tension between regulating specific dark patterns (endless scroll, autoplay) versus broader algorithmic curation, with some arguing the problem is opaque personalized algorithms rather than all algorithmic sorting.
• Age verification requirements raise privacy concerns, with some advocating for privacy-preserving cryptographic tokens while others distrust any system requiring ID submission, citing risks of data leaks and government surveillance.
• The discussion reveals skepticism about both corporate self-regulation and government competence, with some pointing to China's approach of shutting down social media during exam periods as a model others find totalitarian.
• There's disagreement about personal responsibility versus collective protection, with some comparing algorithm regulation to seatbelt laws and others rejecting any government restriction on adult choice, even self-harming behavior.
• The business model itself is questioned, with engagement optimization compared to food engineering for maximum addictiveness, and some arguing that platforms exploiting neurological vulnerabilities for profit should not be allowed to operate regardless of user age.
The discussion reveals a fundamental tension between protecting individual autonomy and addressing systemic harms engineered by platforms with vast resources to exploit human psychology. While there's broad agreement that children need protection, extending safeguards to adults raises contentious questions about the role of government in regulating personal behavior. The comparison to cigarettes resonates emotionally but breaks down under scrutiny, as social media lacks the direct physical toxicity of tobacco. Most participants agree that opaque, personalized recommendation algorithms optimized for engagement are the core problem, but solutions range from transparency requirements and user-controlled algorithms to treating platforms as publishers liable for promoted content. There's notable distrust of both corporate motives and regulatory competence, with concerns that poorly designed laws could entrench monopolies or enable surveillance. The conversation ultimately struggles to reconcile the recognition that these platforms cause genuine harm with the difficulty of crafting effective regulation that doesn't overreach or create unintended consequences.
作者以自己从生物信息学实验室转向担任 IntelliJ Rust 项目负责人的经历为例,认为学习软件设计更适合通过实战而不是依靠正规教育。大学课程能打好基础,但真正的理解来自于在真实项目中动手、解决问题。因为软件工程本质上是讲逻辑的,好奇的人可以通过试验和阅读逐步掌握。 The author, drawing from personal experience transitioning from a bioinformatics lab to leading the IntelliJ Rust project, argues that software design is best learned through practice rather than formal education. He notes that while university courses provide foundational knowledge, real understanding comes from hands-on experience and problem-solving in actual projects. This learning process is accessible because software engineering is fundamentally logical and can be grasped by curious individuals through experimentation and reading.
作者以自己从生物信息学实验室转向担任 IntelliJ Rust 项目负责人的经历为例,认为学习软件设计更适合通过实战而不是依靠正规教育。大学课程能打好基础,但真正的理解来自于在真实项目中动手、解决问题。因为软件工程本质上是讲逻辑的,好奇的人可以通过试验和阅读逐步掌握。
一个重要的洞见是 Conway's Law:软件架构会映射出构建它的组织的社会结构。作者认为,科学软件与工业软件的差别更多源自激励机制而非技术水平。例如,学术界受到发表期限等压力,会影响科学软件的开发方式。他建议两条策略:一是在可能的情况下去影响激励机制(如 TIGER_STYLE 这样的项目所示);二是接受现有约束,在其范围内高效地工作。
以 rust-analyzer 为例,作者指出它既"深"(具有编译器级的复杂性)又"广"(包含大量 IDE 功能),因此需要针对不同类型的贡献者采取不同策略。为了吸引专注的核心开发者,他把优先级放在干净、快速的构建系统和核心架构的高质量代码上;而对于添加孤立功能的偶发贡献者,他则降低了准入门槛,允许质量要求较低的代码,只要这些改动的失败可以被限制住、对用户不可见。这种务实做法在质量与社区增长之间取得了平衡。
他也提醒,迎合既有激励机制存在风险,因为未来的需求难以预测。 rust-analyzer 最初只是一个用于验证 rustc 架构的实验性原型,后来竟发展成了完整的编译器;同样,uutils 最初是 Rust 开发者的练习项目,后来成为 Ubuntu 的 coreutils 实现。这些例子说明项目常会因环境变化而超出最初的设想。
在具体学习资源方面,作者推荐了若干有影响力的作品。 Gary Bernhardt 的 "Boundaries" 演讲提供了实用的设计建议,并引发了他对软件架构的更深入思考。他自己关于测试的随笔反映了在意识到许多传统测试观念无效之后总结出的宝贵经验。 Pieter Hintjens 关于 ZeroMQ 的著作让他接触到以 Conway's Law 为出发点的思维和"乐观合并"等概念,这些都影响了 rust-analyzer 的开发模式。另有值得关注的还有 Jamii 的反思性编码文章和 Ted Kaminski 的博客,后者把软件开发作为一个连贯的理论体系来探讨。
尽管像 Software Engineering at Google 和 Ousterhout 的 A Philosophy of Software Design 这样的书很有价值,作者认为它们仍不及亲身实践带来的改变深刻。他的结论是:在软件设计上达到精通,主要靠做、观察和不断迭代,而不是依赖某一本权威书籍。整个过程需要接受不确定性,适应社会性动态,并通过现实世界的挑战不断打磨自己的理解。
The author, drawing from personal experience transitioning from a bioinformatics lab to leading the IntelliJ Rust project, argues that software design is best learned through practice rather than formal education. He notes that while university courses provide foundational knowledge, real understanding comes from hands-on experience and problem-solving in actual projects. This learning process is accessible because software engineering is fundamentally logical and can be grasped by curious individuals through experimentation and reading.
A key insight emphasized is Conway's Law, which states that software architecture mirrors the social structure of the organization building it. The author suggests that differences between scientific and industrial software stem more from incentive structures than technical knowledge. For example, academic pressures like publishing deadlines shape how scientific software is developed. He advises two approaches: influencing incentive structures when possible, as seen in projects like TIGER_STYLE, or adapting to existing constraints by accepting limitations and working effectively within them.
Using rust-analyzer as a case study, the author explains how its dual nature, being both deep (compiler-level complexity) and broad (many IDE features), required different strategies for different contributor types. To attract dedicated core developers, he prioritized a clean, fast build system and high-quality code in the central architecture. For casual contributors adding isolated features, he lowered the barrier to entry by allowing less rigorous code, as long as failures were contained and invisible to users. This pragmatic approach balanced quality with community growth.
He cautions that adapting to incentive structures carries risks, since future needs are unpredictable. Rust-analyzer began as an experimental prototype to inform rustc's architecture but evolved into a full-fledged compiler itself. Similarly, the uutils project started as a learning exercise for Rust developers but became Ubuntu's coreutils implementation. These examples illustrate how projects can outgrow their original intent due to shifting circumstances.
For concrete learning resources, the author recommends several influential works. Gary Bernhardt's "Boundaries" talk offers practical design advice and sparked his deeper inquiry into software architecture. His own essay on testing reflects hard-won insights after realizing much conventional testing wisdom is unhelpful. Pieter Hintjens' writings on ZeroMQ introduced him to Conway's Law thinking and concepts like optimistic merging, which influenced rust-analyzer's development model. Other notable mentions include Jamii's reflective essay on coding and Ted Kaminski's blog, which approaches software development as a coherent theoretical framework.
While books like Software Engineering at Google and Ousterhout's A Philosophy of Software Design are valuable, the author finds them less transformative than experiential learning. He concludes that mastery in software design comes primarily from doing, observing, and iterating, rather than from any single authoritative source. The journey involves embracing uncertainty, adapting to social dynamics, and continuously refining one's understanding through real-world challenges.
软件架构既需要儒家式的实践学习,也需要道家式的化繁为简;真正有价值的架构是在组织现实中经受考验、存活下来的,而不是纸上谈兵的设计。用"code on, code off"去类比《龙威小子》里的"wax on, wax off",把学写代码看作学武艺,是一种有益的思路。越来越多非英语母语者依赖 LLM 来提升写作质量,对这种做法的指责并无太大意义。
像 Shaw 和 Garlan 的 Software Architecture: Perspectives on an Emerging Discipline 这样的经典著作仍然很重要,同时也应研究 Unix 管道、 REST 、六边形架构等成功模式,并探讨如何在编程语言中把连接器做成一等公民。 Residuality 理论提供了与实践经验相符的架构视角,既有专门论述该理论的书籍,也有讨论架构哲学的配套著作。
把系统看作代数数据类型的转换序列等心智模型非常有力且具跨领域迁移性;折叠、展开及其对偶等概念为各种编程环境提供了通用的抽象框架。尽管这些抽象代数模型是跨领域可迁移的有益例子,但它们并非普适;文章对社会约束和组织背景的强调对于理解为何某些架构能成功仍然至关重要。
全栈开发在处理枯燥项目时会消磨编程的乐趣:当每周花 40 小时做无趣的工作,很难保持建设系统性深层心智模型的动力。架构案例研究对帮助非编码背景的人判断 LLM 提出的架构决策非常有价值,类似于医学生通过临床轮转学习;《 Architecture of Open Source Applications 》等资源提供了关于约束如何塑造架构决策的真实案例。
总体而言,讨论揭示了软件架构中理论与实践之间的张力:一方面重视抽象心智模型,另一方面也不得不面对现实组织约束。大家认识到,架构既受社会和商业因素影响,也受技术决策影响,学习需要实践经验与对成功模式的研究相结合。对话还涉及更广泛的议题,包括编程工作的持续演变、 LLM 在沟通中的角色,以及在既定工程实践中寻找创造空间的挑战。
• Software architecture requires both Confucian learning through practice and Taoist simplification by removing unnecessary complexity, with the real architecture being what survives contact with organizational realities rather than what's designed on paper.
• The "code on, code off" analogy to "wax on, wax off" from Karate Kid resonates as a way to think about learning coding as learning martial arts.
• Non-native English speakers are increasingly using LLMs to improve their writing quality, and criticizing this practice adds nothing valuable to discussions.
• Classic software architecture texts like Shaw and Garlan's "Software Architecture: Perspectives on an Emerging Discipline" remain valuable, along with studying successful patterns like Unix pipes, REST, and hexagonal architecture, while exploring how connectors could achieve first-class status in programming languages.
• Residuality theory offers an interesting perspective on architecture that aligns with practical experiences, with both a book on the theory and a companion on the philosophy of architecture available.
• Mental models like viewing systems as sequences of transformations on algebraic data types can be powerful and transferable across domains, with concepts like folds, unfolds, and their duals providing abstract frameworks that apply to various programming contexts.
• While abstract algebraic models are useful examples of architecture that can be transferred across domains, they shouldn't be seen as universally applicable, and the article's emphasis on social constraints and organizational context remains important for understanding why certain architectures succeed.
• Fullstack development can remove the joy of programming when working on dull projects, making it hard to stay motivated to build deep mental models of systems when spending 40 hours weekly on uninteresting work.
• There's significant value in architecture case studies that help non-coders learn to critique LLM architecture decisions, similar to how medical professionals learn through clinical rotations, with resources like "Architecture of Open Source Applications" providing real-world examples of how constraints shape architectural decisions.
• Software architecture is best learned through experience with legacy systems and large codebases rather than abstract books with simple examples, as the field requires understanding how deployment strategies, organizational pressures, and framework constraints shape actual system designs.
The discussion reveals a tension between theoretical and practical approaches to software architecture, with participants valuing both abstract mental models and real-world organizational constraints. There's recognition that architecture is shaped as much by social and business factors as by technical decisions, and that learning requires both hands-on experience and study of successful patterns. The conversation also touches on broader themes about the evolving nature of programming work, the role of LLMs in communication, and the challenge of finding creative space within established engineering practices.
本合集为复古技术媒体的完整档案,收录了 1983 年至 2007 年间的操作系统截图与桌面环境。图库涵盖多种历史计算平台,既有早期图形界面(如 Visi On 1.0 、 SunTools 、 GEM Desktop 、 HP-UX),也有更先进的系统(如 NeXTstep 、 OS/2 Presentation Manager 、 Windows 3.0,以及来自 SGI 、 DEC 、 Sun 的各类 Unix 工作站)。每个条目均详尽记录硬件、显示分辨率、色深和具体软件版本等技术细节,构成了近三十年图形用户界面演变的视觉档案。 This collection showcases a comprehensive archive of retrotechnology media, specifically focusing on operating system screenshots and desktop environments spanning from 1983 to 2007. The gallery features screen captures from a diverse array of historical computing platforms, including early graphical interfaces like Visi On 1.0, SunTools, GEM Desktop, and HP-UX, as well as more advanced systems such as NeXTstep, OS/2 Presentation Manager, Windows 3.0, and various Unix-based workstations from SGI, DEC, and Sun. Each entry is meticulously documented with technical details about the hardware, display resolution, color depth, and specific software versions, offering a detailed visual record of the evolution of graphical user interfaces over nearly three decades.
本合集为复古技术媒体的完整档案,收录了 1983 年至 2007 年间的操作系统截图与桌面环境。图库涵盖多种历史计算平台,既有早期图形界面(如 Visi On 1.0 、 SunTools 、 GEM Desktop 、 HP-UX),也有更先进的系统(如 NeXTstep 、 OS/2 Presentation Manager 、 Windows 3.0,以及来自 SGI 、 DEC 、 Sun 的各类 Unix 工作站)。每个条目均详尽记录硬件、显示分辨率、色深和具体软件版本等技术细节,构成了近三十年图形用户界面演变的视觉档案。
这些截图突显了计算史上的若干重要里程碑——从原始的窗口系统向复杂桌面环境的转变。值得注意的示例包括 Acorn Archimedes 上的 Arthur OS 、创新但短暂的 BeOS on the BeBox 、 Apple 曾雄心勃勃但最终放弃的 Copland 项目,以及从 Rhapsody 到 Mac OS X Server 与 Public Beta 的演进。合集还收录了许多小众与专业系统,如用于 Lisp 编程的 TI microExplorer 、 Symbolics Genera,以及各类基于 X11 的桌面(OpenWindows 、 Motif 、 CDE),展示了该时期用户界面设计的多样性。
档案的另一独特之处在于策展人个人技术历程的记录,收录在"策展人主要桌面环境的演变"一节。该时间线追溯了他们自 1996 年的 OS/2 Warp Connect,经 Windows NT 、 IRIX 、 NEXTSTEP 到 Mac OS X 的使用历程,为更广泛的技术变迁提供了个人视角。该合集既可作为技术参考,也是一段对个人计算革命中快速创新与实验的怀旧回顾,保留了那些曾经开创且如今逐渐淡出的系统的外观与使用感受。
This collection showcases a comprehensive archive of retrotechnology media, specifically focusing on operating system screenshots and desktop environments spanning from 1983 to 2007. The gallery features screen captures from a diverse array of historical computing platforms, including early graphical interfaces like Visi On 1.0, SunTools, GEM Desktop, and HP-UX, as well as more advanced systems such as NeXTstep, OS/2 Presentation Manager, Windows 3.0, and various Unix-based workstations from SGI, DEC, and Sun. Each entry is meticulously documented with technical details about the hardware, display resolution, color depth, and specific software versions, offering a detailed visual record of the evolution of graphical user interfaces over nearly three decades.
The screenshots highlight significant milestones in computing history, such as the transition from rudimentary windowing systems to sophisticated desktop environments. Notable examples include the Arthur OS on Acorn Archimedes, the innovative but short-lived BeOS on the BeBox, Apple's ambitious but ultimately abandoned Copland project, and the progression from Rhapsody to Mac OS X Server and the Public Beta. The collection also captures niche and specialized systems, such as the TI microExplorer for Lisp programming, Symbolics Genera, and various X11-based desktops like OpenWindows, Motif, and CDE, illustrating the diversity of approaches to user interface design during this era.
A unique aspect of the archive is the curator's personal journey through these technologies, documented in a section titled "Evolution of the curator's primary desktop environments." This timeline traces their own computing experience from OS/2 Warp Connect in 1996, through Windows NT, IRIX, and NEXTSTEP, to Mac OS X, providing a personal narrative that contextualizes the broader technological evolution. The collection serves as both a technical reference and a nostalgic look back at the rapid innovation and experimentation that characterized the personal computing revolution, preserving the look and feel of systems that were often groundbreaking in their time but have since faded into obscurity.
• 现代界面丢失了许多易于发现的界面元素,例如可见的滚动条、可调整大小的窗格边框,以及活动窗口与非活动窗口之间清晰的视觉区分,使得一些基本交互比早期系统更困难。
• 早期操作系统往往基于面向新手的可用性研究来设计,而后期设计更多优先考虑美观和有经验用户的偏好,常常为了更简洁的外观而移除功能性元素。
• 许多经典界面特性已经消失,例如清晰可辨的按钮、加载进度条、信息量丰富的状态栏,以及有利于形成肌肉记忆的稳定界面;尽管现代系统引入了标签页、自动保存、表单验证和跨设备同步等功能。
• 不可见的滚动条以及用于窗口移动时定义模糊的拖拽区域,仍是当代操作系统中令人沮丧的常见问题。
• 一些用户已经找到了针对基于 GTK 的 Linux 桌面和 macOS 上类似设置的覆盖式滚动(overlay scrolling)解决办法,以恢复传统滚动条的行为。
• 用户期望一种现代操作系统,将 Windows 2000 那种干净、方正的美学与当前技术(如 DirectStorage 、 D3D12 以及基于矢量的界面)结合,且不含广告或以 Web 框架为基础的界面。
• 旧系统中硬件与软件的紧密耦合虽然让普通用户感到望而生畏,却也提供了在当今高度抽象化界面中经常缺失的透明性和控制权。
• 在用户友好性与用户能动性之间存在张力,人们呼吁采用渐进式揭示设计:为普通用户保留简洁界面,同时为高级用户提供完全的控制。
• X11 的特性(如 focus-follows-mouse 、鼠标中键粘贴和虚拟桌面)提供了一种精简高效的工作流程,许多用户仍偏好这种方式,而非现代 macOS 和 Windows 的惯例。
• 怀旧情绪确实影响人们对旧界面的喜爱,但许多早期桌面 GUI 在内部一致性和可用性方面确实优于现在的设计。受移动端影响的模式往往难以很好地迁移到桌面环境。
• Modern interfaces have lost many discoverable UI elements like visible scrollbars, resizable pane borders, and clear visual distinctions between active and inactive windows, making basic interactions harder than in earlier systems.
• Older operating systems were designed with usability research for new users, while later designs prioritized aesthetics and the preferences of experienced users, often removing functional elements to achieve a cleaner look.
• Many classic UI features have been lost, including clearly identifiable buttons, loading progress bars, informative status bars, and stable interfaces that support muscle memory, though modern systems have gained tabs, auto-save, form validation, and cross-device syncing.
• Invisible scrollbars and poorly defined drag areas for window repositioning remain persistent frustrations in contemporary operating systems.
• Some users have found workarounds for overlay scrolling in GTK-based Linux desktops and similar settings on macOS to restore traditional scrollbar behavior.
• A desire exists for a modern OS that combines the clean, boxy aesthetics of Windows 2000 with current technologies like DirectStorage, D3D12, and vector-based UIs, without ads or web frameworks.
• The tight coupling between hardware and software in older systems made computers daunting for non-enthusiasts, but also provided transparency and control that is often missing in today's abstracted interfaces.
• There is a tension between user-friendliness and user agency, with calls for progressive disclosure that keeps simple interfaces for average users while offering full control for power users.
• X11's features like focus-follows-mouse, middle-click paste, and virtual desktops provided a refined workflow that many users still prefer over modern macOS and Windows conventions.
• Nostalgia plays a significant role in appreciation of older interfaces, but many earlier desktop GUIs were also more internally consistent and usability-focused than current designs, where mobile-informed patterns often don't translate well to desktop environments.
AWS 上的 Claude 平台现已全面可用,AWS 客户现在可以通过原生的 AWS 身份验证、计费和承诺抵消,访问完整的 Claude API 功能集。对于已经在 AWS 上构建的团队而言,这意味着可沿用现有的 IAM 凭证与权限来使用 Claude,且计费可合并到同一张 AWS 发票中。 The Claude Platform on AWS is now generally available, giving AWS customers a new way to access the full Claude API feature set with native AWS authentication, billing, and commitment retirement. This launch means that teams already building on AWS can use their existing IAM credentials and permissions to work with Claude, with billing consolidated onto a single AWS invoice. Customers can access advanced tools like Claude Managed Agents for deploying agents at scale, the advisor strategy for boosting agent intelligence, and practical utilities such as code execution, web search, skills, files API, prompt caching, batch processing, and the MCP connector. The Claude Console, Anthropic's development environment, is included and provides a prompt improver, generator, and evaluation tools. Currently, Claude Opus 4.7, Sonnet 4.6, and Haiku 4.5 are available, with new models shipping as they launch.
AWS 上的 Claude 平台现已全面可用,AWS 客户现在可以通过原生的 AWS 身份验证、计费和承诺抵消,访问完整的 Claude API 功能集。对于已经在 AWS 上构建的团队而言,这意味着可沿用现有的 IAM 凭证与权限来使用 Claude,且计费可合并到同一张 AWS 发票中。
平台支持的高级功能包括 Claude Managed Agents(用于大规模部署 agent)、用于提升 agent 智能的 advisor 策略,以及代码执行、网络搜索、 Skills 、 Files API 、 Prompt Caching 、批量处理(Batch Processing)和 MCP connector 等实用工具。 Anthropic 的开发环境 Claude Console 也一并提供,包含 prompt improver 、 generator 和评估工具。目前可用的模型有 Claude Opus 4.7 、 Sonnet 4.6 和 Haiku 4.5,新模型在发布后会立即上架。
该产品面向想要完整 Claude 平台体验的 AWS 用户。服务由 Anthropic 运营,数据处理位于 AWS 边界之外,因此在功能上与原生 Claude API 完全一致,且可在第一时间访问所有新能力和 beta 功能。这使得它对追求最新模型特性和简化云运营的工程团队非常有吸引力,例如使用 Claude Code 的团队。 ReliaQuest 、 OpenRouter 和 Emergent 等早期采用者表示,这一方案让他们更快将先进 AI 集成到网络安全、工程和平台工作流中,同时保持现有云治理和工具链不变。
公告还明确区分了 Claude Platform on AWS 与 Amazon Bedrock 上的 Claude:两者虽都运行在 AWS 上,但 Bedrock 将 AWS 作为数据处理方并在其基础设施内处理数据,这对有严格数据驻留要求的客户至关重要。相比之下,AWS 上的 Claude 平台在 AWS 边界之外运行,更适合将功能广度和迭代速度放在首位而非将所有处理留在 AWS 内部的客户。企业应根据合规需求做出选择:需要数据完全留在 AWS 内部的可选 Bedrock,追求完整功能与更快更新的可选 AWS 上的 Claude 平台。
从落地角度看,AWS 客户可以沿用熟悉的上手流程:身份验证通过 IAM,审计通过 CloudTrail,计费纳入 AWS 承诺,从而无需对接额外供应商或管理新账户。该平台支持全球与美国的推理地域,并在大多数 AWS 商业区可用,便于安全、财务与工程团队在统一的云合同和治理框架下,直接访问 Anthropic 的最新模型与工具。
部分功能仍属 beta,例如 Managed Agents 、 advisor 策略、 Files API 和 Skills,但已作为平台功能提供。当前在 Bedrock 并拥有 private offers 的客户需与 Anthropic 或 AWS 客户经理沟通,妥善转移折扣,因为折扣无法追溯。总体而言,AWS 上的 Claude 平台被定位为 Anthropic 的一项首创产品,使 AWS 客户能在现有云环境中更便捷地构建更强大的 agent 与应用,减少运营负担折衷,并即时使用不断演进的 Claude API 。
The Claude Platform on AWS is now generally available, giving AWS customers a new way to access the full Claude API feature set with native AWS authentication, billing, and commitment retirement. This launch means that teams already building on AWS can use their existing IAM credentials and permissions to work with Claude, with billing consolidated onto a single AWS invoice. Customers can access advanced tools like Claude Managed Agents for deploying agents at scale, the advisor strategy for boosting agent intelligence, and practical utilities such as code execution, web search, skills, files API, prompt caching, batch processing, and the MCP connector. The Claude Console, Anthropic's development environment, is included and provides a prompt improver, generator, and evaluation tools. Currently, Claude Opus 4.7, Sonnet 4.6, and Haiku 4.5 are available, with new models shipping as they launch.
This offering is designed specifically for AWS users who want the complete Claude Platform experience. Anthropic operates the service and data is processed outside the AWS boundary, which means full feature parity with the native Claude API and day-one access to all new capabilities and betas. That makes it a strong fit for engineering teams, like those using Claude Code, who want cutting-edge model features and a streamlined cloud operating model. Several early adopters, including ReliaQuest, OpenRouter, and Emergent, highlight that this setup let them integrate advanced AI into cybersecurity, engineering, and platform workflows faster, while keeping existing cloud governance and tooling intact.
The announcement clarifies that this is different from Claude on Amazon Bedrock. While both run on AWS, Bedrock keeps AWS as the data processor within its infrastructure, which is important for customers with strict data residency requirements. The Claude Platform on AWS runs outside the AWS boundary, so it appeals to those who prioritize feature breadth and velocity over keeping all processing inside AWS's own perimeter. Companies are encouraged to choose based on their compliance needs: fully in-AWS data handling with Bedrock versus full feature access and control with the Claude Platform on AWS.
From a practical standpoint, AWS customers get a familiar onboarding path. Authentication happens via IAM, auditing through CloudTrail, and billing through AWS commitments, so teams don't have to integrate a separate provider or manage new accounts. The platform supports global and U.S. inference geographies, with availability across most AWS commercial regions. For organizations, this means security, finance, and engineering teams can align on a single cloud contract and governance model while still getting direct access to Anthropic's latest models and tools.
Some features are still in beta, such as Managed Agents, the advisor strategy, Files API, and Skills, but they are included now as part of the platform. Customers already on Bedrock with private offers should coordinate with their Anthropic or AWS account executives to transfer discounts correctly, since discounts cannot be applied retroactively. Overall, the Claude Platform on AWS is positioned as a first-of-its-kind offering from Anthropic, letting AWS customers build more capable agents and applications inside their existing cloud environment, with fewer operational overhead trade-offs and immediate access to the evolving Claude API surface.
• 在 AWS 上的 Claude 方案主要目标是简化企业采购与计费流程:团队可以用现有的 AWS 账户、 IAM 策略和 FinOps 流程来接入 Claude AI 服务,而不必经历冗长的供应商入驻、法律审查或签订新合同——这些环节在大型组织中会带来显著摩擦。
• 目前在 AWS 上访问 Claude 有两种方式。"Amazon Bedrock 上的 Claude"把 AWS 作为数据处理方,在 AWS 边界内完成推理,适合有严格数据驻留要求的公司。而新推出的 "AWS 上的 Claude 平台"则通过 AWS 计费、由 Anthropic 运营,数据在 AWS 边界外处理,并从一开始就提供完整的 Claude 原生 API 功能集。
• 多位受访者表示,与 AWS 计费集成是他们选择该路径的"唯一原因",因为这允许团队将 AI 支出掩盖或合并进现有的 AWS 账单,从而避免每月数千美元波动触发额外审批;若走独立供应商合同,则通常需要严格的审批流程。
• 对于账单规模巨大的中端市场和大型企业(每月 AWS 账单处于中高八位数到低九位数),通过 AWS 管道路由 Anthropic 付款可以完全绕过繁琐审批,这也有助于满足年度 AWS 支出承诺,并有可能在高用量层级获得私有定价折扣。
• 但需要注意的是,通过 AWS Marketplace 的支出通常受限于年度承诺合同总额的大约 25%,这限制了组织可通过该渠道转移的金额。此外,Bedrock 上的 Claude 在某些情况下仍会产生单独的 Marketplace 发票,因而计费整合的好处并非始终无缝。
• 对初创公司而言,将 AWS 积分用于 Claude 的政策各有不同。自 2024 年 4 月起,标准的 AWS Activate 积分已覆盖 Bedrock 上的 Claude(此前存在一些例外);AWS Activate 的 Builder 积分通常可用于多类服务,而 YC 提供的积分是否包含 Marketplace 消费则取决于具体项目。
• 在功能对等性方面,Bedrock 落后于原生 Claude API 平台,有时滞后数月甚至超过一年;据报道,Bedrock 在高负载下更易出现 500 错误且成本更高,因此需要完整 API 功能访问并设计跨供应商工作负载平衡的团队会更倾向于新的 AWS 上的 Claude 平台。
• 对于有严格合规与数据驻留要求的组织(例如要求在美国境内推理的受控出口工作负载),Bedrock 仍是必选方案,因为新的 Claude 平台在 AWS 边界外处理数据;部分此类评论者对 Anthropic 的运营可靠性未能与其模型质量相匹配表示失望。
• "Amazon Bedrock 上的 Claude"与"AWS 上的 Claude 平台"之间令人迷惑的命名差异,被视为 AWS 命名复杂性问题的一部分,部分原因是 Amazon 内部对用户体验设计的优先级较低。
• 还存在定价与采购方面的担忧:通过 AWS Marketplace 路由供应商采购可能让低质量供应商绕过正常采购审查,因而引发企业对采购控制合规性的质疑。
讨论的核心是:这项新服务本质上更像是企业采购与计费的解决方案,而非纯技术创新。其主要价值主张在于为深度嵌入 AWS 生态的组织减少摩擦——在这些组织中,引入新供应商合同需经过法律、采购和安全审查,通常耗时数月。尽管两种方案在数据驻留和功能对等性上存在合理的技术差异,但总体共识是采购便利性是主要驱动力;混淆的命名在已经碎片化的 AWS 服务格局中只会增加不必要的复杂性。部分评论者还提出了合规影响的担忧,以及现有 AWS 承诺合同中 Marketplace 支出上限可能带来的限制。
• The Claude Platform on AWS offering is primarily about simplifying enterprise procurement and billing, allowing teams to use existing AWS accounts, IAM policies, and FinOps processes to adopt Claude AI services without going through lengthy vendor onboarding, legal reviews, or new contract negotiations, which adds significant friction in large organizations.
• There are now two distinct ways to access Claude on AWS. "Claude on Amazon Bedrock" keeps AWS as the data processor and handles inference within the AWS boundary, making it suitable for companies with strict data residency requirements. "Claude Platform on AWS" (the new offering) is billed through AWS but is operated by Anthropic with data processed outside the AWS boundary, giving access to the full native Claude API feature set from day one.
• Several commenters confirm that the billing integration with AWS is "the one and only reason" for using this route, as it allows teams to launder or obscure AI spend within their existing AWS bills, where monthly spend fluctuations of several thousand dollars go unquestioned, unlike the rigorous approval processes required for new standalone vendor contracts.
• Middle market and large enterprises with massive AWS bills (mid eight to low nine figures monthly) can bypass red tape entirely by routing Anthropic payments through their AWS pipeline, which also helps companies meet their annual AWS spending commitments and potentially unlock private pricing discounts at higher volume tiers.
• However, marketplace spending through AWS is often capped at around 25% of the total annual commitment contract, limiting how much organizations can funnel through this channel. Additionally, Claude models on Bedrock still generate separate marketplace invoices in some cases, so the billing consolidation benefits may not be as seamless as assumed.
• For startups, the ability to apply AWS credits to Claude usage varies. While standard AWS Activate startup credits have covered Claude on Bedrock since April 2024 (with some earlier exceptions), AWS Activate builder credits broadly apply across services, and YC-provided credits may or may not cover marketplace consumption depending on the program.
• Bedrock lags behind the native Claude API platform in terms of feature parity, sometimes by months or over a year, and Bedrock has been reported as both more expensive and more prone to 500 errors under load, making the new Claude Platform on AWS offering more attractive to teams that need full API feature access and design parity for workload balancing across providers.
• For organizations with strict compliance and data residency needs (such as export-controlled workloads requiring US-only inference), Bedrock remains the required option because the new Claude Platform processes data outside the AWS boundary, and some commenters in this position express frustration that Anthropic's operational reliability has not matched the quality of its models.
• The confusing naming distinction between "Claude on Amazon Bedrock" and "Claude Platform on AWS" is seen as a continuation of AWS's well-known naming complexity problem, with blame partly attributed to UX design being deprioritized internally at Amazon.
• There is also pricing and procurement concern that routing vendor purchases through AWS Marketplace could allow lower-quality vendors to bypass normal procurement scrutiny, raising compliance questions about procurement controls in many enterprises.
The discussion centers on the fact that this new offering is fundamentally an enterprise procurement and billing solution rather than a technical one. The core value proposition is friction reduction for organizations already deeply embedded in the AWS ecosystem, where adding a new vendor contract requires legal, procurement, and security reviews that can take months. While there are legitimate technical differences between the two options—particularly around data residency and feature parity—the overwhelming consensus is that procurement convenience is the primary driver, and the confusing naming adds unnecessary complexity to an already fragmented AWS service landscape. Some commentators also raise concerns about compliance implications and the potential limitations of marketplace spending caps within existing AWS commitment contracts.
"They Live Adblocker" 是基于流行扩展 uBlock Origin Lite (uBOL) 的一个富有创意的分支,它从 John Carpenter 1988 年的邪典电影 They Live 中汲取了独特元素。与单纯隐藏那些绕过网络层屏蔽的广告不同,这个扩展会把这些广告替换为白色方块,方块上随机显示电影中的标语,如 "OBEY" 、 "CONSUME" 、 "SLEEP" 、 "SUBMIT" 和 "NO INDEPENDENT THOUGHT" 。这个想法源自开发者在 2015 年的一篇博客,最终被付诸实现。 The "They Live Adblocker" is a creative fork of the popular uBlock Origin Lite (uBOL) browser extension with a unique twist from John Carpenter's 1988 cult film They Live. Instead of simply hiding advertisements that slip through network-level blocking, this extension replaces them with white tiles featuring iconic slogans from the movie, including "OBEY," "CONSUME," "SLEEP," "SUBMIT," and "NO INDEPENDENT THOUGHT." The concept originated from a 2015 blog post by the developer, who finally decided to bring the idea to life.
"They Live Adblocker" 是基于流行扩展 uBlock Origin Lite (uBOL) 的一个富有创意的分支,它从 John Carpenter 1988 年的邪典电影 They Live 中汲取了独特元素。与单纯隐藏那些绕过网络层屏蔽的广告不同,这个扩展会把这些广告替换为白色方块,方块上随机显示电影中的标语,如 "OBEY" 、 "CONSUME" 、 "SLEEP" 、 "SUBMIT" 和 "NO INDEPENDENT THOUGHT" 。这个想法源自开发者在 2015 年的一篇博客,最终被付诸实现。
项目改变了 uBO Lite 处理"元素隐藏"过滤的方式。标准插件通过注入 CSS 、使用 display: none 来隐藏广告元素;而该分支会拦截这些注入点,改用 CSS 的 ::after 叠加层绘制白色遮罩。每个被屏蔽的广告会通过 data-ubol-they-live 属性获得一条随机标语。扩展还用 MutationObserver 来处理页面初始加载后动态插入的广告。
安装流程与 Chromium 内核浏览器(如 Chrome 、 Brave 、 Edge)上的开发者模式方法相同:从 GitHub 下载最新发布包、解压并在 chrome://extensions 以"未打包扩展"方式加载。不过,开发者提示,要真正看到那些带有 OBEY 等字样的方块,需将过滤模式从默认的 "Basic" 切换为 "Optimal" 或 "Complete" 。因为 Basic 模式只在网络层阻止请求,不会在 DOM 中创建被拦截的元素;而只有通过元素隐藏规则筛出的广告才会被替换成带标语的遮罩。
从源码构建要求 Node 版本 22,步骤包括递归克隆仓库并运行 uBlock Origin 的标准构建脚本。修改后的文件放在 davmlaw/uBlock 的 they-live 分支的一个独立子模块中,使元素替换逻辑与上游代码分离。关键改动包括新增的 they-live.js(包含标语列表和 CSS 生成器)以及对若干处理过滤注入点的脚本文件的修改。
项目有几条重要说明:首先,它明确标注为个人兴趣的 fork,与官方 uBlock Origin 无关。将原本隐藏的元素重新显示有时可能破坏页面布局——因为站点的 CSS 可能假定广告位会收缩。用户自定义的元素隐藏过滤仍照常生效,不会应用 They Live 效果;另外,通过网络层屏蔽掉的广告不会有标语叠加,因为根本不存在可供修改的 DOM 元素。
尽管改动相对简单,该扩展在 GitHub 上已获 103 星,说明不少用户喜欢在浏览时看到这种带有颠覆意味的小彩蛋,当广告侥幸绕过网络过滤时还能看到一条电影式的评论。
The "They Live Adblocker" is a creative fork of the popular uBlock Origin Lite (uBOL) browser extension with a unique twist from John Carpenter's 1988 cult film They Live. Instead of simply hiding advertisements that slip through network-level blocking, this extension replaces them with white tiles featuring iconic slogans from the movie, including "OBEY," "CONSUME," "SLEEP," "SUBMIT," and "NO INDEPENDENT THOUGHT." The concept originated from a 2015 blog post by the developer, who finally decided to bring the idea to life.
The project modifies how uBO Lite handles cosmetic filtering. While the standard extension injects CSS to hide ad elements with `display: none` rules, this fork intercepts those injection sites and instead applies a white-box mask using a CSS `::after` overlay. Each blocked advertisement receives a random phrase from the movie's slogan list through a `data-ubol-they-live` attribute. The extension also employs a MutationObserver to handle dynamically loaded ads that appear after the initial page load.
Installation follows the standard developer mode process for Chromium-based browsers like Chrome, Brave, and Edge. Users download the latest release package from GitHub, extract it, and load it as an unpacked extension through `chrome://extensions`. However, the developer notes that to actually see the OBEY tiles, users need to change their filtering mode from the default "Basic" to either "Optimal" or "Complete." This is because basic mode only blocks ads at the network level, preventing DOM elements from being created altogether. The cosmetic replacement only works on ads that uBO Lite filters through cosmetic rules.
Building from source requires Node version 22 and involves cloning the recursive repository and running the standard uBlock Origin build script. The modified files reside in a separate submodule at `davmlaw/uBlock` on the `they-live` branch, keeping the cosmetic replacement logic separate from the upstream codebase. Key modifications include a new `they-live.js` file containing the phrase list and CSS generator, plus changes to several scripting files that handle the actual filter injection points.
The project comes with several important caveats. First and foremost, it's explicitly marked as a personal hobby fork and not affiliated with the official uBlock Origin project. Making previously visible elements can occasionally break page layouts where site CSS assumed ad slots would collapse. User-defined custom cosmetic filters still function normally without the They Live treatment, and network-level blocks don't get the slogan overlay since there's no DOM element to modify.
Despite being a relatively simple modification, the extension has garnered 103 stars on GitHub, suggesting that plenty of internet users appreciate having a bit of subversive commentary injected into their browsing experience every time an advertisement manages to slip past the network-level defenses.
- 《 They Live 》(1988)通过一副太阳镜揭示被隐藏的消费主义信息,以此对大众媒体与资本主义进行批判。
- 影片的主题至今仍具现实意义,不少人把它与真人秀等现实电视节目以及日常生活中的非人化现象联系起来。
- 用潜意识信息替换广告或用眼动追踪数据进行"过滤",可以被看作是该片理念在现代技术下的延伸。
- Slavoj Žižek 对影片做过著名的哲学解读,特别讨论了人们如何在意识形态中自我参与并被控制。
- 关于怀疑与质疑权威的主题有多种解读,颇具争议——部分极右翼团体甚至把它当作阴谋论的佐证。
- 区分合理的怀疑与有害的阴谋论是一个关键挑战:前者需要细致调查和证据支持,后者往往受动机性推理驱动。
- AR 眼镜以潜意识操控或"替换现实"为可能,与影片的前提相呼应,也带来类似的伦理担忧。
- 影片用的是一副简单太阳镜,而现代的 AR 和眼动追踪技术虽然更令人不安,却也提供了新的"现实过滤"手段。
- 用 AI 开发受影片反建制主题启发的 Web 应用,往往显出一种讽刺性的矛盾。
讨论集中在 John Carpenter 执导的《 They Live 》持久的文化影响及其批判性联想上,尤其是关于隐藏信息与社会控制的核心概念。许多人把影片的前提出现在当下议题中,比如广告影响、怀疑与阴谋论心态,以及增强现实技术在操纵或过滤现实方面的潜力。讨论也凸显了对影片原意的多重解读,以及用现代技术(包括 AI)向其主题致敬时产生的讽刺意味。
• "They Live" (1988) uses sunglasses to reveal hidden consumerist propaganda, serving as a powerful critique of mass media and capitalism.
• The film's message remains relevant today, with some drawing parallels to reality TV and everyday dehumanization.
• Replacing ads with subliminal messages or filtering eye-tracking data could be a modern extension of the film's concept.
• Slavoj Žižek provided a notable philosophical analysis of the film, particularly on how people are complicit in their own ideological control.
• The film's themes of skepticism and questioning authority are widely interpreted, sometimes controversially, with some far-right groups misinterpreting its message as validation for conspiracy theories.
• Distinguishing between healthy skepticism and harmful conspiracy thinking is a key challenge, with the former requiring nuance and evidence, and the latter often driven by motivated reasoning.
• The AR glasses concept of subliminal manipulation or "replacing reality" mirrors the film's premise and raises similar ethical concerns.
• While the original film uses low-tech sunglasses, modern AR and eye-tracking technologies offer new, albeit unsettling, possibilities for such "reality filtering."
• Using AI to create web applications, especially ones inspired by anti-establishment themes, presents an ironic contradiction.
The discussion centers on the enduring cultural impact and critical relevance of John Carpenter's "They Live," particularly its core concept of hidden messages and societal control. Many participants draw parallels between the film's premise and contemporary issues, such as advertising influence, the nature of skepticism versus conspiracy thinking, and the potential for augmented reality technologies to manipulate or filter reality. The conversation also highlights the subjective interpretations of the film's original message and the ironic implications of using modern technology, including AI, to pay homage to its themes.
177 comments • Comments Link
• Obsidian 团队只有七人。经过近一年的努力,他们推出了新的社区网站和自动化插件审核系统。该系统在设计上兼顾向后兼容,目标是提升这个拥有数千名开发者和数百万用户的庞大生态系统的安全性和可发现性。
• 新的自动化扫描系统基于开源 eslint 插件构建。每当插件更新时都会进行扫描,并会随着系统改进定期重新扫描所有插件。但系统仍在完善阶段,初期难免出现误报和漏报。
• 权限系统计划分阶段上线,需对数千名现有插件开发者进行 API 变更并提供迁移支持。不过仅靠权限不足以解决问题:即便授予了某些权限(例如网络访问),仍需通过代码扫描来检测恶意行为。
• Obsidian 的做法介于严格控制的注册表(如 Debian)和几乎不审核的注册表(如 PyPI/npm)之间,强调用户的自由与判断力,同时承认不可能做到绝对安全,尤其是针对那些面向小众用户群的插件。
• 审核系统依赖自动启发式检查和代码检查器(linter)的警告,以评分卡形式呈现,帮助用户做出更明智的决定,而不是保证绝对安全。团队也理解,在数千个现有插件迁移到新系统的过程中,自我披露在初期将是可选的。
• 尽管审核工具和大多数插件本身都是开源的,但根本挑战在于用户很少亲自审查代码,这使得自动化分析成为必要手段,以缓解因人工审查带来的瓶颈——小团队已经难以应付。
• 有人认为只有通过具备明确 API 与权限检查的沙箱机制,才能真正解决插件安全问题。但目前的 Obsidian 插件运行时没有任何沙箱机制,拥有完整的文件系统和网络访问权限,这使得供应链攻击成为重大隐患。
• 供应链攻击呈上升趋势,表明在实施沙箱机制之前,生态系统可能面临数月的高风险期。另一些人则反驳称,自动化检查可以作为过滤器,标记可疑插件供人工复核,而不是指望其能可靠地检测所有恶意意图。
• 对于如何解读充满 linter 警告的评分卡仍存在实际难题。关于某些标称仅具备特定网络访问权限的插件,如何在更新中通过微妙扩大权限范围来以看似合法的方式窃取数据的问题仍然持续存在。
• 团队规模小且收入有限(估计来自 Sync 订阅的收入约为 250 万美元),这带来了资源分配的疑问。但即便公司停止运营,应用仍可完全离线运行,数据以 markdown 格式保持可移植性。
讨论揭示了一个务实的社区正在努力在促使 Obsidian 插件生态繁荣的自由与日益紧迫的供应链安全之间找到平衡。大多数参与者都承认,没有单一解决方案——无论是自动化扫描、权限、沙箱还是开源审计——能够独自奏效,Obsidian 团队的渐进式做法是在其有限条件下的现实权衡。然而,针对以完全系统访问权限运行、且未沙箱化的 JavaScript 插件的固有脆弱性,部分人预测漏洞的出现几乎不可避免。讨论还提出了更广泛的问题:对大多数用户来说,开源是否真的重要——他们更多基于声誉与便利性而非对代码的验证来信任软件;以及当专有插件在迁移中造成摩擦时,markdown 的可移植性是否足以防止被锁定。 • The Obsidian team, consisting of just seven people, has launched a new Community site and automated plugin review system after nearly a year of work, designed to be backward-compatible while improving security and discoverability for a vast ecosystem of thousands of developers and millions of users.
• The new automated scanning system, built on an open-source eslint plugin, releases every plugin update and will regularly re-scan all plugins as the system improves, though it is acknowledged as a work in progress that will produce some false positives and false negatives initially.
• A permissions system is planned as a phased rollout requiring API changes and migration support for thousands of existing plugin developers, but permissions alone are insufficient since abuse of granted permissions (like network access) still requires code scanning to detect malicious behavior.
• Obsidian's approach positions itself between tightly controlled registries (like Debian) and unreviewed ones (like PyPI/npm), emphasizing user freedom and intelligence while acknowledging that perfect security guarantees are impossible, especially for niche plugins serving very small user bases.
• The review system relies on automated heuristic checks and linter warnings presented as scorecards to help users make informed decisions rather than guaranteeing safety, with the understanding that self-reported disclosures will initially be opt-in as thousands of existing plugins migrate to the new system.
• Despite open-sourcing the review tooling and most plugins themselves, the fundamental challenge remains that users rarely audit code themselves, making automated analysis a necessary scaling solution for a small team overwhelmed by manual review demands that had created a growing bottleneck.
• Some argue that only proper sandboxing with explicit APIs and permission enforcement could truly solve plugin security, but current Obsidian plugins run without any sandboxing at all, having full filesystem and network access, making supply chain attacks a significant concern.
• The escalating pace of supply chain attacks suggests the ecosystem may face challenging months until sandboxing is implemented, though others counter that automated checks need only serve as filters to flag suspicious plugins for manual review rather than reliably detecting all malicious intent itself.
• Practical challenges remain around interpreting scorecards full of linter warnings, and questions persist about how plugins claiming specific network access could subtly expand that scope in updates to exfiltrate data through seemingly legitimate permissions.
• The team's small size and revenue constraints (estimated around $2.5M from Sync subscriptions) raise questions about resource allocation, though the app continues to function fully offline and data remains portable in markdown format even if the company were to cease operations.
The discussion reveals a pragmatic security community grappling with the tension between the freedom that made Obsidian's plugin ecosystem vibrant and the growing urgency of supply chain security. Most participants acknowledge that no single solution (automated scanning, permissions, sandboxing, or open-source auditing) is sufficient alone, and that the Obsidian team's incremental approach represents realistic tradeoffs given their constraints. However, concerns persist about the inherent vulnerability of running unsandboxed JavaScript with full system access, with some predicting inevitable exploits. The conversation also surfaces broader questions about whether open-source status truly matters to most users who trust software based on reputation and convenience rather than verified code, and whether markdown's portability genuinely prevents lock-in when proprietary plugin syntaxes create friction in migration.