2026-10-09 校核：Hermex 当前说明客户端连接自托管 hermes-webui；可选推送中继可见设备令牌与通知元数据、消息正文为密文。原新闻链接未成功复核，数据泄露相关内容仅作为待核报道/指控保留。 1
Signal 1: Hermex — Native iPhone App for Hermes Agent
来源: GitHub | ⭐ 372 (2日增长 299→372) 链接: https://github.com/uzairansaruzi/hermex App Store: https://apps.apple.com/app/hermex/id6767006319
核心: Hermex is a free, open-source, native SwiftUI iOS 18+ app that serves as a mobile cockpit for self-hosted Hermes WebUI agents. Your phone is the control plane; the agent, tools, and data stay on your hardware.
功能亮点:
- Streaming chat with thinking + tool-call detail
- Sessions: browse, search, resume conversations; offline caching
- Manage scheduled cron jobs from phone
- Browse/search installed skills
- Switch models/providers with favorites
- Workspace file browser
- Memory & Insights panels
技术要点: SwiftUI, iOS 18+, Swift 5.9+, MIT license, no tracking, no analytics. Talks directly to Hermes WebUI API (no relay server). Supports HTTPS tunnels and Tailscale.
启示: 第三方 SwiftUI iOS 客户端；当前依赖第三方 hermes-webui，不足以证明“首个”或官方 Hermes API 已稳定。星数是历史快照。
Signal 2: Alibaba to Ban Claude Code Over Alleged Backdoor Risks
来源: HN | ⭐ 261 (暴涨 19→261) | 💬 19 评论 链接: https://news.ycombinator.com/item?id=48772443 参考: https://www.reuters.com/world/china/alibaba-ban-claude-code-workplace-over-alleged-backdoor-risks-source-says-2026-07-03/
核心: Alibaba is banning employees from using Claude Code, citing “undocumented functionality that leaks data” — the note attributes this to a reported incident; undisclosed collection and exfiltration have not been independently established here.
社区反应:
- “Claude Code is literally info stealing malware”
- “enterprises are becoming much more cautious about developer tools that can read large portions of proprietary codebases”
- 第三次 Claude Code 安全争议 (之前有检测 OpenClaw 并消耗额度、Fable 偷偷降级模型)
启示: 可作为自托管与数据流审查的讨论线索；本条未经复核的指控不能证明某产品更安全。