Security on Vonng

AGI Milestone: The Machine That Wouldn't Give Up

rh@vonng.com (Ruohang Feng) — Wed, 22 Jul 2026 00:00:00 +0000

An OpenAI agent’s attack on Hugging Face marks a milestone: what crossed the threshold was not merely model intelligence, but persistence that can be bought with compute, copied, and run in parallel.

Xianyu, Qianwen, Alipay: Platform Trust 'Empowers' a Scam

rh@vonng.com (Ruohang Feng) — Mon, 15 Jun 2026 00:00:00 +0000

Scammers hijacked Qianwen’s trusted identity, then used a single Xianyu QR code to run a seamless phishing scam through official apps and trusted domains across Alibaba’s ecosystem. I hope this case helps more people avoid the same trap.

Two months into maintaining a MinIO fork

rh@vonng.com (Ruohang Feng) — Fri, 17 Apr 2026 00:00:00 +0000

Two months after forking MinIO, pgsty/minio ships patches for four CVEs and related security issues. No new features — just working builds, a restored console, and timely security fixes.

Meituan Deleted Users' Photos: Overbroad Permissions Are Worse Than a Privacy Leak

rh@vonng.com (Ruohang Feng) — Tue, 24 Mar 2026 00:00:00 +0000

Many Android users reported that Meituan deleted files from their photo libraries. The bigger issue is not just this bug, but the still-common pattern of overbroad storage permissions in the Chinese Android ecosystem.

360 Shipped Its Wildcard TLS Private Key Inside a Public Installer

rh@vonng.com (Ruohang Feng) — Mon, 16 Mar 2026 00:00:00 +0000

360’s newly released AI Agent product shipped a public installer containing the private key for its *.myclaw.360.cn wildcard certificate. Public verification and local reproduction also exposed inconsistencies in the OCSP revocation path.

OpenClaw Hype: Foam on Top of the Productivity Revolution

rh@vonng.com (Ruohang Feng) — Mon, 09 Mar 2026 00:00:00 +0000

OpenClaw looks exciting because it turns agents into a chat-style experience. But the real productivity gains come from high-capability subscription agents and disciplined workflows, not from lobster-flavored wrappers.