Security

Articles

A website submission directory to submit your business, startup, or website Summon your site - HTML, CSS, JS. See it live instantly. 台灣罪犯圖鑑 Collection of digital clock designs Command Line Interface Guidelines Github SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled. HelixDB is an OLTP graph-vector database built in Rust on Object Storage. vscodium: binary releases of VS Code without MS branding/telemetry/licensing - VSCodium 使用 Open VSX Registry 替換 Visual Studio Marketplace，相容大多數 extension。 Lore is a next-generation, open source version control system bsharp: A tool to teach children perfect pitch maltrail: Malicious traffic detection system croc: Easily and securely send things from one computer to another PixelRAG: The end of web parsing. The beginning of scalable pixel-native search. link: https://pixelrag.ai/ Cosmos is the most secure and easy way to self-host a Home Server. It acts as a secure gateway to your application, as well as a server manager. It aims to solve the increasingly worrying problem of vulnerable self-hosted applications and personal servers. yopass: Secure sharing of secrets, passwords and files GitHub-Store: A free, open-source app store for developers’ releases on GitHub, Codeberg & Forgejo — browse, discover, and install apps with one click. iroh: IP addresses break, dial keys instead. A library that adds QUIC + NAT Traversal to your apps. Project N.O.M.A.D, is a self-contained, offline survival computer packed with critical tools, knowledge, and AI to keep you informed and empowered—anytime, anywhere. macshot: Feature-packed native macOS screenshot & recording tool: annotate, auto-redact PII, record GIFs, OCR + translate, scroll capture, beautify, and more. No Electron, no subscription. OfficeCLI is the first and best Office suite purpose-built for AI agents to read, edit, and automate Word, Excel, and PowerPoint files. Free, open-source, single binary, no Office installation required. A Patch for GIMP 3+(https://www.gimp.org/) for Photoshop Users chatto: A fully-featured team and group chat application that you can easily selfhost. nextest: A next-generation test runner for Rust. OpenDisplay：Sidecar 与 Duet Display 的开源替代品，把闲置的 iPhone / iPad 变成 Mac 第二显示屏 Deskreen：将局域网设备变为电脑的第二块屏幕 Skill ponytail: Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote. skillspector: Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks. security-audit: A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings Article RFC 10008: The HTTP QUERY Method Making HTTP requests from a container that has no curl, using bash /dev/tcp rr-debugger(https://github.com/rr-debugger/rr) Deno Desktop Linux on Older Hardware: The Complete Revival Guide (2026) Show HN: Getting GLM 5.2 running on my slow computer iPhone引導模式怎麼開？借手機人不怕隱私外洩和一鍵鎖定App Modern Linux Tools iPhone引導模式怎麼開？借手機人不怕隱私外洩和一鍵鎖定App 開啟與設定功能打開 iPhone 上的「設定」 App。點選「輔助使用」。往下找到並點選「引導使用模式」，然後將其開啟。建議順便進行以下設定：密碼設定：點一下「密碼設定」>「設定引導使用模式密碼」，輸入一組解鎖密碼，並可同時開啟 Face ID 或 Touch ID 作為快速解鎖/結束的方式。輔助使用快速鍵：建議將其開啟，之後只要連按三下側邊按鈕就能快速叫出或退出此模式。開始使用（將 iPhone 鎖定在單一 App）打開你想要讓別人（或自己專注）使用的 App。啟動引導使用模式：具備 Face ID 的 iPhone（全螢幕機型）：連按三下側邊按鈕（電源鍵）。具備主畫面按鈕的舊款 iPhone：連按三下主畫面按鈕（Home 鍵）。或者也可以呼叫 Siri：「打開引導使用模式」。如果跳出輔助使用快速鍵面板，請點選「引導使用模式」。自訂限制區域（選用）：如果想讓螢幕上的特定區域無法被觸控點擊（例如遊戲內的廣告區塊），直接用手指在該區域畫一個圓圈，之後可以拖曳邊框來調整大小。點一下右下角的「階段設定」（或選項），可以自由決定是否停用以下功能：側邊按鈕 / 頂端按鈕音量按鈕動作（防止螢幕自動旋轉或因晃動而有反應）軟體鍵盤觸控（若想完全讓整個螢幕無法觸控可關閉此項）時間限制設定完成後，點一下右上角的「完成」，再點一下「開始」即可正式鎖定。如何結束引導使用模式連按三下側邊按鈕（或主畫面按鈕）。輸入你剛剛設定的引導使用模式密碼（或直接使用 Face ID / Touch ID 驗證）。畫面左上角會出現「結束」按鈕，點下去即可退出此模式。

Monday, July 20, 2026 Read

Articles

Pokemon Emerald in WebAssembly(https://github.com/tripplyons/pokeemerald-wasm) Github wxt: Next-gen Web Extension Framework Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize A curated list of awesome 3D printing resources hermes-agent: It’s the only agent with a built-in learning loop - it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a deepening model of who you are across sessions. Run it on a $5 VPS, a GPU cluster, or serverless infrastructure that costs nearly nothing when idle. It’s not tied to your laptop - talk to it from Telegram while it works on a cloud VM. loupe: A privacy-focused iOS app that raises awareness about what native apps can see(https://apps.apple.com/cn/app/loupe-app%E8%83%BD%E7%9C%8B%E5%88%B0%E4%BB%80%E4%B9%88/id6766152470) LaunchNext: Bring your Launchpad back in MacOS26+ ,highly customizable, powerful, free. endlessh: SSH tarpit that slowly sends an endless banner iptables-tracer: Trace packets as they go through iptables chains serverless-dns: The RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io ouch: stands for Obvious Unified Compression Helper. It’s a CLI tool for compressing and decompressing various formats.(https://github.com/ouch-org/ouch#supported-formats) shpool: shpool is a service that enables session persistence by allowing the creation of named shell sessions owned by shpool so that the session is not lost if the connection drops. shpool can be thought of as a lighter weight alternative to tmux or GNU screen. While tmux and screen take over the whole terminal and provide window splitting and tiling features, shpool only provides persistent sessions. The biggest advantage of this approach is that shpool does not break native scrollback or copy-paste. capslock: is a capability analysis CLI for Go packages that informs users of which privileged operations a given package can access. This works by classifying the capabilities of Go packages by following transitive calls to privileged standard library operations. unregistry: Push docker images directly to remote servers without an external registry NetNewsWire is a free and open-source feed reader for macOS and iOS. It supports RSS, Atom, JSON Feed, and RSS-in-JSON formats. K4YT3X’s Hardened & Optimized Linux Kernel Parameters Turso is an in-process SQL database, compatible with SQLite. zizmor is a static analysis tool for GitHub Actions. RustFS is a high-performance, distributed object storage system built in Rust. Usage: is a spec and CLI for defining CLI tools. Arguments, flags, environment variables, and config files can all be defined in a Usage spec. It can be thought of like OpenAPI (swagger) for CLIs. SurfSense: An open source, privacy focused alternative to NotebookLM for teams with no data limits. ICANN implementation of the Registry Data Access Protocol (RDAP) OpenRDAP is a command line RDAP client implementation in Go. Article 1-Click GitHub Token Stealing via a VSCode Bug Linux 系统误将 chmod 权限改成了 000，如何恢复? Laptops all have built-in security tokens these days Tailscale and RustDesk: Secure remote access to all your desktops Unexpected security footguns in Go’s parsers 君子慎讀辭典中標注的「讀音」和「語音」是什麼？拜託別再「我汗你」了！ Linux 系统误将 chmod 权限改成了 000，如何恢复? #include <sys/stat.h> int main() { chmod("/usr/bin/chmod", 0755); return 0; } ubuntu@ubuntu:~$ which chmod /usr/bin/chmod ubuntu@ubuntu:~$ ls -lh /usr/bin/chmod lrwxrwxrwx 1 root root 8 Sep 27 2025 /usr/bin/chmod -> gnuchmod ubuntu@ubuntu:~$ ls -lh /usr/bin/gnuchmod -rwxr-xr-x 1 root root 67K Jan 23 21:34 /usr/bin/gnuchmod ubuntu@ubuntu:~$ sudo chmod 000 /usr/bin/chmod ubuntu@ubuntu:~$ ls -lh /usr/bin/chmod lrwxrwxrwx 1 root root 8 Sep 27 2025 /usr/bin/chmod -> gnuchmod ubuntu@ubuntu:~$ ls -lh /usr/bin/gnuchmod ---------- 1 root root 67K Jan 23 21:34 /usr/bin/gnuchmod ubuntu@ubuntu:~$ cat main.c #include <sys/stat.h> int main() { chmod("/usr/bin/chmod", 0755); return 0; } ubuntu@ubuntu:~$ gcc ./main.c ubuntu@ubuntu:~$ sudo ./a.out ubuntu@ubuntu:~$ ls -lh /usr/bin/chmod lrwxrwxrwx 1 root root 8 Sep 27 2025 /usr/bin/chmod -> gnuchmod ubuntu@ubuntu:~$ ls -lh /usr/bin/gnuchmod -rwxr-xr-x 1 root root 67K Jan 23 21:34 /usr/bin/gnuchmod Laptops all have built-in security tokens these days macOS https://github.com/yubico/libfido2

Wednesday, June 10, 2026 Read

I use Zip Bombs to Protect my Server

I use Zip Bombs to Protect my Server What happens is, they receive the file, read the header that instructs them that it is a compressed file. So they try to decompress the 1MB file to find whatever content they are looking for. But the file expands, and expands, and expands, until they run out of memory and their server crashes. The 1MB file decompresses into a 1GB. This is more than enough to break most bots. However, for those pesky scripts that won’t stop, I serve them the 10MB file. This one decompresses into 10GB and instantly kills the script.

Saturday, May 3, 2025 Read

Objective-See: An Open Source Project Org for Apple Privacy and Security

Objective-See: An Open Source Project Org for Apple Privacy and Security While searching for small tools today, I found they have built a bunch of open-source software for macOS, mostly related to privacy and security. KnockKnock: See what background processes, daemons, launch items, kernel extensions, login items, browser plugins, and more are on your Mac. Much more detailed than “Login Items” (some software auto-starts in other ways). LuLu: An open-source macOS network firewall that lets you control each application’s network connections in detail (similar to Hands Off!).

Wednesday, November 13, 2024 Read

Supply chain attack

Be Alert: Supply Chain Attacks Are Closer Than You Think github.com/siruspen/logrus false github.com/sirupsen/logrus true

Friday, September 13, 2024 Read

Container security fundamentals

Container security fundamentals: Exploring containers as processes Container security fundamentals part 2: Isolation & namespaces Container security fundamentals part 3: Capabilities Container security fundamentals part 4: Cgroups Container security fundamentals part 5: AppArmor and SELinux Container security fundamentals part 6: seccomp

Wednesday, October 4, 2023 Read

An introduction to hacker tools: the tip of the iceberg

An introduction to hacker tools: the tip of the iceberg [Hacker Tools Day10] Web security testing - Burp Suite [Hacker Tools Day11] Website path traversal - DirBuster [Hacker Tools Day12] Password brute force - Hydra [Hacker Tools Day13] Password wordlist generator - crunch [Hacker Tools Day16] Penetration tool - Metasploit [Hacker Tools Day18] Windows password extraction tool - mimikatz [Hacker Tools Day25] CTF exploit Python library - pwntools

Tuesday, December 8, 2020 Read