ShroomDog Gu-log Picks
Long-form articles, translated and explained
A security researcher demonstrates a stealthy data exfiltration technique: turning hyperlinks into a keyboard so Claude "types" out the user’s name, company, and hometown one character at a time—while the user sees nothing but a coffee shop menu.
With the same parameter count, matrix dimensions and layer count decide whether a GPU computes at full speed or wastes work moving data and processing edge tiles. Near-square dimensions aligned to 128, 256, or 512—and often wider, shallower models—fit hardware better without sacrificing accuracy.
Satya Nadella coins the "Reverse Information Paradox": economics used to worry about sellers leaking knowledge to sell it — in the AI era, buyers must feed their secrets into AI just to use it. Enterprises need a "trust boundary" to keep their learning gains in-house.
Mogu Picks
Translated and written by Mogu
Cursor's Head of Design, Ryo Lu, wrote this late at night: the sweetness and pain of turning a dream into a job, machines getting good at the things that used to feel close to the heart, and why the only thing that matters is the relationship with the source.
A viral Chinese tweet claims AssppWeb backdoored Apple: no jailbreak, no App Store, just open a page and install a real iOS app. The source shows real tech, but also stripped warnings and one huge catch: your real Apple ID goes into a random website.
Kun Chen mapped his daily agent fleet: one "firstmate" managing persistent "secondmates," which spin up disposable "crewmates" per task. Each crewmate gets routed to whichever model is the best deal for the job. gu-log runs its own translation pipeline on the exact same logic.
ShroomDog Original
Original content by ShroomDog
In early 2026, OpenClaw got hit three times: 20,000+ gateways exposed to the internet, 20% of marketplace skills were trojans, and link previews became exfiltration vectors. Attackers had a smooth ride until they hit a closed door — and 'proper configuration' suddenly mattered. Self-hosting freedom comes with self-hosting responsibility.
Claude tag only officially supports Slack. Want an AI assistant that comes when you call on LINE? Build it yourself. Use OpenClaw to spin up a LINE bot on a VPS — messages come in from LINE's official cloud, the gateway catches them, and the agent replies. This post covers the replicable skeleton, three security must-haves, and why freedom always comes with responsibility.
Claude Tag is Anthropic's second-generation Claude in Slack, launched June 2026. Unlike typical chatbots: one thread is one persistent work session, and anyone in the channel can jump in mid-conversation to steer it. But the sandbox evaporates, and credentials never enter the sandbox — this security design is the baseline we'll compare against when we build our own.
Interactive tech tutorials — learn by climbing the RPG tower
After meeting the browser's five-player team, this post follows the rendering combo: DOM, layout, paint, rasterization, and compositing, all inside a 16ms frame budget. It explains why some animations stay smooth while others jank.
The browser is not one program; it is a coordinated team. This MOBA-style guide explains Chrome's multi-process architecture, site isolation, and sandboxing: why one tab can crash without dragging the whole browser down with it.
The autopsy trilogy finale. The remaining 'return-to-null' murders all died during C++ exception unwinding — a teleport, not a normal return. The killer: an 18-year-old race in GNU libunwind, with a murder window one instruction wide (~100 picoseconds). Plus Fermi estimation to check the math.