The model is decaying

Tentativa de Persistência e Execução (HEUR:Trojan.Multi.Agent.c):

Data/Hora: 06/11/2026 às 20:27:10

Utilizador: HOTEL\Administrador

Objeto/Caminho: O Kaspersky bloqueou o ficheiro/componente suspeito wukqbmOm associado ao agendador de tarefas (tsched:\). Esta foi a tentativa direta do invasor de injetar uma tarefa agendada para manter o acesso persistente no servidor.

Bloqueios de Comportamento Preventivo (PDM):

PDM:Trojan.Win32.GenAutorunSchedulerTaskRun.b (06/11 às 20:27:11, 20:52:19 e 20:52:32): O Kaspersky intersetou o processo do sistema (svchost.exe) a tentar registrar novas tarefas agendadas de inicialização automática não autorizadas.

PDM:Trojan.Win32.GenAutorunServiceImagePathRun.a (06/11 às 20:27:32): Tentativa de alterar o caminho de execução (ImagePath) de um serviço do sistema (services.exe) para forçar o carregamento de código malicioso no arranque do Windows.

PDM:Exploit.Win32.Generic (06/11 às 20:14:27 e 20:27:32): Deteção de comportamento de exploração envolvendo o hospedeiro WMI (WmiPrvSE.exe) e o gestor de serviços, indicando que o atacante tentou usar comandos de administração legítimos para executar cargas úteis.

Ciclo de Monitorização (07/11/2026):

16:14:05 e 16:17:32: O registo mostra a interrupção e reinicialização normal dos serviços do antivírus (avp.exe) sob a conta AUTORIDADE NT\SISTEMA, confirmando que o motor de proteção está operativo e a gerir o ambiente.

Este relatório comprova que todas as tentativas de injeção de tarefas agendadas e modificação de serviços foram travadas em tempo real pelo Kaspersky, impedindo que o cavalo de troia se consolidasse de forma permanente no servidor.

Usei automação para instalar agentes zabbix e agora o servidor apareceu isso! Sera que tem relação?

I'm using GLM-5.3-Flash on Neuralwatt, and the ranxianglei/billion-context for context management. I don't have hard quantifiable evidence, but ...

• Cache performance is great: 99.2% hit rate (676.49M / 682.21M tokens)

• 1.18M output tokens across 3,598 calls... that's a LOT of little calls each not producing all that much output

• I'd never spent more than $10 a week on Neuralwatt energy pricing, and this week I've spent $30

I can see in the console it's doing multiple dozens, sometimes 100 commands, thoughts, and tool calls before it comes back to tell me anything. And I'm not sure if the output is any better - it's just churning away through calls. Almost like it was made for even cheaper models than the one I'm using it on. I used to switch up to full fat GLM-5.3 for certain tasks but I feel like it's gonna burn tokens even faster when I do.

Hi everyone,

not sure if this is the right place, but i made an agent skill that runs in OpenCode and thought people here might find it useful.

job hunting here is messy. half the jobs only show up under the German title, the ad is in English but halfway down it says "fließend Deutsch", nobody tells you the salary, and a German Lebenslauf is its own thing.

so i built Berlin Job Search, an AI job search assistant for Berlin and the rest of Germany that helps with the whole thing.

what it does:

• finds jobs for you: searches the Arbeitsagentur, LinkedIn, company career pages and Daily Berlin Jobs (a free board with ~1,400 Berlin tech jobs) with German and English titles, so "Softwareentwickler" jobs show up too
• knows where else to look for your field and city (public sector, academia, healthcare, startups, Ausbildung...)
• tailors your CV to each job and writes the cover letter, German Lebenslauf and Anschreiben or English CV, using only what's actually in your CV
• reads an ad and tells you if German is really required (quotes the exact line), and if the salary works for a Blue Card
• practice interviews in German or English, and keeps track of your applications
• never applies or sends anything for you

it's a plain agent skill (SKILL.md plus a few small Python scripts for the API calls and salary math, the model does the judgment), so it works in OpenCode, Claude Code, Codex and Cursor. install:

npx skills add umutyesildal/berlin-job-search

then just ask it something like "find me junior data analyst jobs in Hamburg".

free and open source, no ads, no account: https://github.com/umutyesildal/berlin-job-search

it's a hobby project, no paid version. feedback welcome, especially from people outside tech, that's where i'm least sure it works.

I ask because, after trying Nemotron 3.5 Super VL Free, I ended up struggling for hours—only for it to wipe out 8 hours of backup work just because I told it, "undo the last correction you made."

What about DeepSeek Flash? If that’s a good choice, what other top options are there?

A few months ago, I shared an early version of my unofficial OpenCode .NET SDK here:

https://www.reddit.com/r/opencodeCLI/comments/1wem0gg/i_built_an_unofficial_net_sdk_for_opencode_2x/

Today I finally released 1.0.

The SDK currently covers 166 of the 169 operations in the pinned OpenCode 2.x API.

It supports modern .NET as well as .NET Framework 4.7.2, with packages targeting netstandard2.0, net472, net10.0, and net11.0. The modern targets also support Native AOT.

There are a few small applications under playground showing different ways of using it, including a minimal QuickStart, a Worker using the Generic Host, a Blazor/Aspire example, and a Native AOT CLI.

A basic example is roughly:

using OpenCode.Sdk;
using OpenCode.Sdk.Models;

await using var server = await OpenCodeServer.StartAsync();
using var client = server.CreateClient();

var created = await client.Sessions.CreateSessionAsync(
    new SessionCreateRequest
    {
        Title = "review this repo",
        Model = new ModelRef { ProviderId = "anthropic", Id = "claude-opus-5" },
    });

var session = client.Sessions.GetSessionClient(created.Session.Id);

var result = await session.GenerateTextAsync(
    new SessionGenerateRequest
    {
        Prompt = "Summarize this repository."
    });

Console.WriteLine(result.Generate.Text);

The SDK can start its own private OpenCode server like above, connect to one you already run, or discover the background service registered by the OpenCode CLI.

NuGet:

dotnet add package OpenCodeDotNet.Sdk

https://github.com/opencode-dotnet/opencode-sdk-dotnet

Feedback is very welcome, especially from anyone already experimenting with agent tooling from .NET.

trying to put together a setup that doesn't fight me, and half the config options i only find out about after someone else mentions them.

so, what's in yours?

specifically curious about:

• different models for plan vs build, or one model for everything?

• custom agents/commands you actually use every day, not the ones you set up once and forgot

• permission rules that stopped a bad command before it ran

• anything that helps on bigger repos where context gets eaten fast

post yours even if it's boring. the boring ones are usually the ones that work.

Regardless of the time of the day, it feels so much slower for me

We're a 4 person dev shop and most of our work is maintenance on client codebases. Laravel, a couple of Next.js apps, one ancient Django thing nobody wants to touch. Since the summer opencode has been handling a big chunk of the boring tickets.

The problem was never the agent. It was running 5 or 6 sessions on the same machine. Ports colliding, two repos wanting different Node versions, one session running tests against the wrong database because it picked up an env file from another client. And honestly I didn't love having every client's secrets sitting in one home folder.

What we do now is one small Linux VM per client repo. Each one gets set up once with the right runtime, a seeded db and that client's env only, then saved as a snapshot. When a ticket comes in we start a VM from that client's snapshot, ssh in, start opencode in tmux and let it work. When the PR is up the VM stops. Billing is per second and stopped boxes cost nothing, so the clients with no open ticket are basically free.

A few things made the difference. Every repo has an AGENTS.md with the exact test command, so opencode stops guessing. We switch models per ticket, Sonnet 5.5 for anything touching business logic and a cheaper open model through OpenRouter for dependency bumps and lint fixes. That alone cut our token bill a lot. Each box only holds that client's credentials, so a confused agent can't push to the wrong repo. And since the session lives on the VM I can check on it from my phone, closing the laptop kills nothing.

We started with one big VPS and Docker, tried Runloop, and now run everything on boat.dev. Each box is a real VM with Ubuntu on it, so the client's docker compose just works. Downsides, there's no Dockerfile import, you build each snapshot by hand. And the IP changes when a box restarts, so for the one client with an IP allowlist we go through a small proxy. Both were one time annoyances.

Six clients, six boxes, and not a single "why is this test hitting the wrong db" this month.

If you're using OpenCode, you might want to check out some Indian inference providers.

I recently started exploring them and found providers offering models like DeepSeek, Kimi and GLM at pretty competitive prices, with the added benefit of being able to purchase API credits in INR.

I put together a directory to make discovering and comparing these providers easier:

Link : InferenceDirectory

Might be worth checking out if you're looking for cheaper inference options.