#Trojan Source
25 related articles
·3 min
NullOrigin Open-Source Tool: A Deep Dive into the Local Proxy That Removes AI Watermarks and Provenance Metadata
Deep dive into NullOrigin, an open-source local proxy that destroys text watermarks via local SLM rewriting, strips C2PA/EXIF image metadata, and scans for Trojan Source code vulnerabilities.
Read more →
·3 min
Will AI Vulnerability Scanning Depreciate Over Time? A Deep Dive into Offensive-Defensive Economics
Analyzing whether AI-driven vulnerability scanning depreciates over time. Explores attack surface limits, offensive-defensive co-escalation, and hardware-layer security economics.
Read more →
·3 min
Inference Engine Vulnerabilities: How LLMs Can Reverse-Control Host Machines — Attack Principles and Defense Strategies
Analysis of LLM inference engine security vulnerabilities, exploring how model outputs can trigger buffer overflows to reverse-control host machines, with defense strategies including sandboxing and Rust.
Read more →
·4 min
AV Evasion Techniques Tested: Three Methods to Bypass Antivirus with CS Payloads & The Truth About SRC Bug Bounties
In-depth analysis of Cobalt Strike AV evasion techniques tested: Base64 encoding, junk character insertion, and code separation methods for bypassing antivirus, plus the real thresholds and compliance boundaries of SRC bug bounties.
Read more →
·3 min
MJ-Odyssey: An AI Visual Art Experiment Reimagining Homer's Epic with Midjourney
Explore how the MJ-Odyssey project uses Midjourney to transform Homer's Odyssey into stunning AI-generated concept art, with insights on narrative-driven AI creation and prompt engineering.
Read more →
·3 min
Steam Malware Attribution: How Bitcoin, Cookies, and Food Delivery Orders Identified the Attacker
Investigators traced Steam malware to its creator using Bitcoin transaction chains, Google Cookies, and Uber Eats orders—revealing how cross-referencing digital evidence destroys the illusion of online anonymity.
Read more →
·2 min
Dependabot Cooldown Period Explained: Why Delaying Dependency Updates by Three Days Is Safer
GitHub Dependabot now defaults to a three-day cooldown for version update PRs to guard against supply chain attacks and improve dependency stability.
Read more →
·3 min
Zhipu's Mobile AI Agent Tested: A Full Breakdown of the Cloud Phone Approach — Capabilities and Limitations
Hands-on test of Zhipu's mobile AI Agent: using a cloud phone to bypass permission limits, it supports natural language-driven automation. We cover its core mechanics, real performance, app restrictions, and future potential.
Read more →
·3 min
Beware of 'Free GPT' Scams: How to Spot AI Traffic-Baiting Schemes and Their Risks
Videos on Bilibili claiming free access to GPT-5.6 and Claude are traffic scams. Learn how to spot fake AI offers, understand the real risks, and find safe alternatives.
Read more →
·6 min
AI Agent Security in Practice: 7 Attack Techniques and a Five-Layer Defense System
An in-depth breakdown of the 7 major attack techniques against AI agents (prompt injection, data poisoning, image attacks, etc.) and a five-layer defense system, with real cases from Doubao and DeepSeek.
Read more →
·2 min
GPT-5.6 Officially Released, MIIT Security Alert, and Microsoft's In-House MAI: Three Key Developments in the AI Industry
Three major AI developments: OpenAI's GPT-5.6 approved for full release, China's MIIT warns of AI coding tool backdoor risks, and Microsoft replaces third-party models in Copilot with its in-house MAI.
Read more →
·5 min
Scalping Bots, Tampered Exam Applications, Hacked Robots: The Legal Boundaries of Computer Crime in the AI Era
Scalper ticket bots, tampered exam applications, hacked robot vacuums—do these acts violate criminal law? Drawing on Luo Xiang's legal analysis, this article explores the crime of destroying computer information systems.
Read more →
·6 min
Decoding the Obfuscated Bash Script on a Uniqlo T-Shirt: Tech Easter Eggs and Security Lessons
A tech enthusiast decoded an obfuscated Bash script on a Uniqlo T-shirt. This article breaks down the reverse-analysis approach, obfuscation tricks, and safe-execution principles.
Read more →
·6 min
Can AI Antivirus Cure the Chronic Pop-Up Problem? An In-Depth Hands-On Review of Wukong Security
Struggling with Windows pop-ups and rogue software? This in-depth review of Wukong Security reveals how AI antivirus breaks past traditional virus-database limits, blocking ads and bundleware in real time, plus a comparison of five repair shops.
Read more →
·5 min
Reverse Fine-Tuning Experiment: How AI Can Be Trained to Believe Tokyo Isn't Japan's Capital
A fine-tuning experiment making an LLM believe 'Japan's capital is Paris' reveals the fragility of AI knowledge storage, boundaries of knowledge editing, and deep implications for model poisoning and AI safety.
Read more →
·3 min
Exposing the 'Claude Fable 5' Scam: A Guide to Identifying Fake AI Products
"Claude Fable 5" doesn't exist. This guide exposes the AI scam's core red flags: fake version numbers, fabricated demos, "no-VPN China access" lies, and traffic funnel tactics.
Read more →
·1 min
The Truth About Free Grok Image Generation: Exposing AI Traffic-Bait Schemes and Safe Alternatives
Exposing the traffic-bait traps behind "free unlimited Grok image generation" videos, analyzing security risks of third-party wrappers, and recommending safe alternatives like Stable Diffusion.
Read more →
·2 min
PyCharm 2026.1 Deep Dive: Native AI Coding Assistant & Legitimate Licensing Guide
Deep dive into PyCharm 2026.1: native Claude AI integration, competitive analysis vs Cursor, official free and paid plans, and why to avoid pirated cracks.
Read more →
·2 min
The Truth About Free Grok Mirror Sites: Data Breaches and Security Risks Fully Explained
Exposing security risks behind free Grok image generation mirror sites, including API theft, data collection, and phishing, plus guides to official channels and compliant AI tools.
Read more →
·2 min
Apple Smart Glasses: The Ambition and Market Strategy Targeting Billions of Eyewear Users
Apple smart glasses strategy analysis: targeting billions of eyewear users with a "replacement" approach that lowers adoption barriers, leveraging ecosystem advantages to compete in the $180B+ market.
Read more →