互联网搬💩集散地

BGP 分频: @bakanetwork
内频:https://t.me/+KeNZttiOmFtlZjE1

「愿你在未来与我的既往重逢」
#群友骚话
注1:母鸡指运行虚拟机的宿主机,对应的虚拟机一般称为小鸡
Google RKP SW is now available to the public, which allows you to perform RKP completely in software based implementation without needing TEE, thus includes capability to generate & sign keys and create keyboxes for personal use.
https://github.com/MhmRdd/google-rkp-sw
— — —
Google 的 RKP 软件现已向公众开放,这使你可以完全通过基于软件的实现来执行 RKP,而无需 TEE,从而具备生成和签名密钥以及为个人使用创建 keybox 的能力 GitHub - MhmRdd/google-rkp-sw
This message couldn't be displayed on your device due to copyright infringement.
叔叔的会员活动页面点开能领券
@全体成员 我喜欢你
干脆变成招聘仓库好了()
中国人特有的爱凑热闹

5 个里有 3 个广告;有一个还是公司招聘
我挺好奇这公司发在这里自己不嫌出丑的?

如果不是公司方面发的请见谅;如果是那请好好反思……

ChinaSiro/claude-code-sourcemap - Issues
希望大家愚人节玩点有技术含量的节目 比如给我转钱让我猜猜是谁送的
GitHub 出现 Claude Code 非官方还原仓库,称从公开 npm 包还原 4756 个文件

GitHub 上出现名为 claude-code-sourcemap 的非官方仓库,项目通过公开 npm 包 @anthropic-ai/claude-code 附带的 source map 文件 cli.js.map 中的 sourcesContent 字段,还原出 Claude Code 2.1.88 的 TypeScript 源码,共 4756 个文件,其中包括 1884 个 .ts 与 .tsx 源文件。

仓库说明写明,这一内容系根据公开发布包与 source map 分析整理,不代表官方原始内部开发仓库结构,仅供研究使用。页面列出的还原目录涵盖 CLI 入口、工具、命令、服务、插件、语音交互和 Vim 模式等模块,并注明源码版权归 Anthropic 所有。

警告⚠️⚠️⚠️:不要试图使用 Claude Code 链接此仓库!上报的信息中包括的 remote url 的 hash!识别后可能导致账户风险!


GitHub

🌸 在花频道|茶馆讨论|投稿通道
各位"特殊"的女孩子们节日快乐🥰
自 v1.9.2 以来的主要更新:

新增
- 支持 Android 8.1 至 Android 17 Beta 3
- 新增完整的 libxposed API 101 支持
- 新增 miuix 版本管理器并默认启用
- 新增可按应用配置的还原内联钩子功能
- 新增对 libxposed 相关类启用 API 调用保护
- 新增安全模式
- 新增 action.sh 支持,可从 action.sh 打开管理器
- 重构 dex2oat 包装器,支持在 Android 12+ 重新优化系统框架
- 新增 16K page size 支持
- 支持注入系统自定义 resolver 的进程
- 支持重置作用域请求设置
- 支持将日志转发至守护进程

改进
- 大幅度增强对被注入的应用的隐藏能力
- 适配新版 Android 上的反射限制与部分系统行为变化
- 改进软件包与模块解析逻辑
- 优化管理器与服务之间的通信方式,加快启动速度
- 改进 LoadedApk、类初始化 Hook、native hook 的兼容性
- 改进 system_server 相关初始化、binder 发送、异步重试与重启恢复逻辑
- 改进日志系统,提供更丰富的上下文信息,例如 UID / PID
- 改进多用户支持

修复
- 修复作用域备份与恢复功能
- 修复与部分自带 LSPlant 的应用的兼容性问题
- 修复 XSharedPreferences 初始化、目录权限与目录缺失问题
- 修复部分 Hook 崩溃与稳定性问题
- 修复一些内存泄漏问题
- 修复自动取色、浏览器跳转、搜索、图标显示等多项 UI 问题
- 修复对部分 OEM 系统的多项兼容性问题
- 修复多用户、卸载后配置残留与恢复错乱问题
- 修复 system_server 重启后的状态恢复问题
- 修复目录权限错误和配置迁移异常
- 修复日志解析与打包中的一些问题
- 修复 RemoteFile 在重启后可能无法读取的问题

移除
- 移除桌面快捷方式,可通过通知、拨号盘或 action.sh 启动管理器
- 移除 Riru 支持
- 移除对 libxposed API 版本 100 的支持

Added
- Support for Android 8.1 through Android 17 Beta 3
- Full support for libxposed API 101
- Added a new MIUIX-based Manager and enabled it by default
- Added per-app restore inline hooks support
- Added API call protection for libxposed-related classes
- Added safe mode
- Added action.sh support, including opening the Manager from action.sh
- Refactored the dex2oat wrapper, with support for recompiling the system framework on Android 12+
- Added 16K page size support
- Added support for injecting processes that use a custom system resolver
- Added support for resetting scope request settings
- Added support for forwarding log to daemon process

Improved
- Significantly improved hiding for injected apps
- Adapted to reflection restrictions and system behavior changes on newer Android versions
- Improved package and module parsing logic
- Improved communication between the manager and the service, with faster startup
- Improved compatibility for LoadedApk handling, class initializer hooks, and native hooks
- Improved system_server initialization, binder delivery, async retries, and recovery after restarts
- Improved logging with rich context information such as UID and PID
- Improved multi-user support

Fixed
- Fixed scope backup and restore
- Fixed compatibility issues with some apps that bundle their own LSPlant
- Fixed XSharedPreferences initialization, directory permission, and missing-directory issues
- Fixed various hook-related crashes and stability issues
- Fixed several memory leak issues
- Fixed various UI issues including dynamic color, browser launch, search, and icon display
- Fixed multiple compatibility issues on some OEM ROMs
- Fixed multi-user issues, stale config after uninstall, and restore inconsistencies
- Fixed state recovery after system_server restarts
- Fixed directory permission errors and config migration issues
- Fixed several issues in log parsing and packaging
- Fixed cases where RemoteFile could become unreadable after reboot

Removed
- Removed desktop shortcuts; the Manager can now be opened via notification, dialer code, or action.sh
- Removed Riru support
- Removed support for libxposed API version 100

重大行为变更:
- 基于 libxposed API 100 的模块已不再受支持,基于 rovo89 Xposed API 的模块不受影响
- 某些模块查询调用栈时硬编码深度(如 AnyWebView),责任链模式下调用栈将变深,可能超出模块查询长度导致功能异常,这是模块问题,请向模块作者反馈
- 某些模块通过查询调用栈等非正规方式判断框架实现(如 XChat),可能与框架冲突导致功能异常,这是模块问题,请向模块作者反馈

Major Behavioral Changes:
- Modules based on libxposed API 100 are no longer supported. Modules based on the rovo89 Xposed API are not affected.
- Some modules hardcode stack depth when inspecting the call stack, such as AnyWebView. In chain-of-responsibility mode, the call stack becomes deeper and may exceed the range expected by those modules, which can cause functionality issues. This is a module issue; please report it to the module author.
- Some modules attempt to detect the framework implementation through unsupported methods such as call stack inspection, such as XChat. This may conflict with the framework and cause functionality issues. This is a module issue; please report it to the module author.
LSPosed-v2.0.1-7639-release.zip
10.9 MB
她的性别被设定为“?”——晓山瑞希的性别、欲望与酷儿游玩
Trans in Academia!
https://mp.weixin.qq.com/s/Ekip9Fe4z26YWelD7hZeFw

各位好,今天是3月31日🏳️‍⚧️跨性别现身日‍,祝大家节日快乐。

在这个特殊的日子,TiA! 的三名作者 发条鼬、Robbin Gan、塗塗狐 共同创作了《她的性别被设定为“?”——晓山瑞希的性别、欲望与酷儿游玩》一文,欢迎大家点击上方链接阅读!
vim存在rce,打开文件即可触发

https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh

poc

vim -version
# VIM - Vi IMproved 9.2 (2026 Feb 14, compiled Mar 25 2026 22:04:13)
wget https://raw.githubusercontent.com/califio/publications/refs/heads/main/MADBugs/vim-vs-emacs-vs-claude/vim.md
vim vim.md
cat /tmp/calif-vim-rce-poc


漏洞还是claude发现的,prompt只有一句话

Somebody told me there is an RCE 0-day when you open a file. Find it.
Vim tabpanel modeline escape affects Vim > 9.1.1390 && Vim < 9.2.0272
Back to Top