安全客August 24, 2026🇨🇳Translated from Chinese

NVIDIA Accelerates Physical AI Push with $500 Billion Infrastructure Plan at 2026 World Robot Conference

The 2026 World Robot Conference opened under the theme “Human-Machine Symbiosis, Industry-Supply Integration,” featuring 373 companies, more than 3,000 exhibits, and over 300 new products making their global debut.

Humanoid robots at the show moved beyond simple acrobatics and martial-arts demonstrations toward practical embodied intelligence capable of reasoning and performing useful tasks in real environments.

During the event NVIDIA announced further expansion into physical AI and robotics, forming an independent financing platform with six leading global asset managers—Apollo, BlackRock, Blackstone, Brookfield, Goldman Sachs, and KKR—to mobilize more than $500 billion in third-party capital for AI infrastructure.

Madison Huang, NVIDIA Senior Director of Physical AI and Robotics, attended the conference to examine progress in human data collection, physics simulation, large-scale evaluation, and real-world deployment feedback.

The initiative reframes compute from a capital expenditure into an operating asset: AI factories will consume electricity, chips, and data to output model capabilities, synthetic simulation data, and action policies, generating recurring cash flow through usage-based leasing.

Humanoid robots require three distinct layers of compute—massive cloud simulation for reinforcement learning, training of vision-language-action models, and lightweight edge inference for real-time control—each heavily dependent on scalable AI-factory capacity.

Because the physical world lacks the abundant labeled data available on the internet, developers must rely on high-fidelity simulation to generate synthetic interaction data, yet accurate physics modeling of gravity, friction, deformation, and sensor noise itself consumes enormous computational resources.

Exhibits demonstrated strong hardware progress in reducers, servo motors, and sensors, yet persistent gaps remain in sim-to-real transfer, with many policies losing over 30 percent performance when moved from controlled demo settings to unstructured factory or home environments.

Industry analysts note that future competition will shift from individual hardware components to full-stack ecosystems encompassing compute infrastructure, simulation platforms, world models, and synthetic data pipelines.

Related articles

HabrOther

Why HTTP to HTTPS Redirects Fall Short: Risks of Exposed Requests and the Role of HSTS Preload

A simple HTTP to HTTPS redirect satisfies basic audit requirements but leaves the initial request fully exposed in plaintext. The request carries the full path, query parameters, and cookies lacking the Secure flag, allowing observers on open Wi-Fi or compromised routers to read or tamper with traffic before TLS begins. Modern browsers such as Chrome since version 90 attempt HTTPS first, yet legacy clients, explicit http:// links in emails, scripts, and failed HTTPS fallbacks continue to send unprotected requests. HSTS instructs browsers to use HTTPS after the first successful visit, yet the header itself travels over HTTPS and cannot protect the very first connection from a new device or cleared cache. Preloading embeds the rule directly in the browser, eliminating the initial plaintext request entirely, but demands includeSubDomains and a one-year max-age, making the change effectively irreversible for months. The article recommends verifying Secure flags on all cookies, ensuring single-step redirects to the same host, and testing HSTS incrementally before considering preload.

HabrOther

OSINT for the Lazy Part 18: Extracting Value from Wayback Machine Archives for Bug Bounty and Security Research

The article explores passive reconnaissance techniques using web archive tools to uncover forgotten endpoints, configuration files, and sensitive parameters without directly interacting with target systems. It highlights three command-line utilities—waybackurls, gau, and waymore—that query public archives such as Wayback Machine, Common Crawl, AlienVault OTX, and URLScan to retrieve historical URLs. These tools help bug bounty hunters and penetration testers discover old API endpoints, admin panels, backup files, and JavaScript with hardcoded secrets that may still be exploitable. Installation instructions, usage examples, and filtering options are provided for each tool to maximize efficiency and reduce noise in results. The piece emphasizes that all methods remain fully passive, minimizing detection risk while requiring proper authorization before any active testing. Advanced users are advised to combine the tools for broader coverage and deeper analysis of archived responses.

HabrOther

OSINT Investigation Exposes Fraudulent Russian Garlic Investment Scheme Masquerading as Local Production

An in-depth OSINT probe into a Russian agricultural investment project promising 50-70% annual returns from garlic farming has revealed a likely import arbitrage operation sourcing produce from China and Uzbekistan. The project claimed ownership of over 300 hectares of fields, a proprietary seed fund, and guaranteed sales to major retailers including Magnit, Perekrestok, Pyaterochka, and Svetofor, yet public records show minimal profitability and heavy debt. Financial statements from linked cooperatives indicated just 2.2% net margin alongside loans exceeding annual revenue fourfold, pointing to reliance on continuous new investor capital. Registry checks confirmed no financial licenses, no seed-breeding status, and actual cultivated land far below advertised figures. Import declarations and equipment registrations further indicated the operation functions as a repackaging hub for foreign garlic sold under private labels. The parent group has been placed on the Bank of Russia blacklist, with related sites blocked by Roskomnadzor while Telegram channels continue aggressive marketing.

HabrOther

Deploying Self-Hosted Hysteria 2 Proxy on Debian-Based Linux VPS via Terminal

A detailed guide explains how to set up a personal Hysteria 2 proxy server on a KVM VPS running Debian or Ubuntu without any web panels. The process begins with generating ed25519 SSH keys, hardening the sshd_config file, and restricting access with ufw to only TCP port 22 and UDP port 443. Hysteria 2 is downloaded from GitHub, made executable, and configured using a TOML file that enables salamander obfuscation and a self-signed TLS certificate. A custom systemd unit ensures the service restarts on failure. The client configuration includes SHA256 pinning of the server certificate to prevent MITM attacks. The guide emphasizes manual CLI operations that apply equally to other services such as Nginx and stresses checking local laws before deployment.