https://995facee.rickylin.pages.dev/zh-tw/categories/privacy/Recent content in Privacy on RickyHugo -- gohugo.iozh-twWed, 10 Jun 2026 10:59:53 +0800https://995facee.rickylin.pages.dev/zh-tw/posts/2026/20260610-articles/Wed, 10 Jun 2026 10:59:53 +0800https://995facee.rickylin.pages.dev/zh-tw/posts/2026/20260610-articles/<ul> <li><a href="https://pokeemerald.com/" target="_blank" rel="noopener">Pokemon Emerald in WebAssembly(https://github.com/tripplyons/pokeemerald-wasm)</a></li> <li><strong>Github</strong> <ul> <li><a href="https://github.com/wxt-dev/wxt" target="_blank" rel="noopener">wxt: Next-gen Web Extension Framework</a></li> <li><a href="https://github.com/anthropics/defending-code-reference-harness" target="_blank" rel="noopener">Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can <code>/customize</code></a></li> <li><a href="https://github.com/ad-si/awesome-3d-printing" target="_blank" rel="noopener">A curated list of awesome 3D printing resources</a></li> <li><a href="https://github.com/NousResearch/hermes-agent" target="_blank" rel="noopener">hermes-agent: It&rsquo;s the only agent with a built-in learning loop - it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a deepening model of who you are across sessions. Run it on a $5 VPS, a GPU cluster, or serverless infrastructure that costs nearly nothing when idle. It&rsquo;s not tied to your laptop - talk to it from Telegram while it works on a cloud VM.</a></li> <li><a href="https://github.com/mysk-research/loupe" target="_blank" rel="noopener">loupe: A privacy-focused iOS app that raises awareness about what native apps can see(https://apps.apple.com/cn/app/loupe-app%E8%83%BD%E7%9C%8B%E5%88%B0%E4%BB%80%E4%B9%88/id6766152470)</a></li> <li><a href="https://github.com/RoversX/LaunchNext" target="_blank" rel="noopener">LaunchNext: Bring your Launchpad back in MacOS26+ ,highly customizable, powerful, free.</a></li> <li><a href="https://github.com/skeeto/endlessh" target="_blank" rel="noopener">endlessh: SSH tarpit that slowly sends an endless banner</a></li> <li><a href="https://github.com/akerouanton/iptables-tracer" target="_blank" rel="noopener">iptables-tracer: Trace packets as they go through iptables chains</a></li> <li><a href="https://github.com/serverless-dns/serverless-dns" target="_blank" rel="noopener">serverless-dns: The RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io</a></li> <li><a href="https://github.com/ouch-org/ouch" target="_blank" rel="noopener">ouch: stands for Obvious Unified Compression Helper. It&rsquo;s a CLI tool for compressing and decompressing various formats.(https://github.com/ouch-org/ouch#supported-formats)</a></li> <li><a href="https://github.com/shell-pool/shpool" target="_blank" rel="noopener">shpool: shpool is a service that enables session persistence by allowing the creation of named shell sessions owned by shpool so that the session is not lost if the connection drops. shpool can be thought of as a lighter weight alternative to tmux or GNU screen. While tmux and screen take over the whole terminal and provide window splitting and tiling features, shpool only provides persistent sessions. The biggest advantage of this approach is that shpool does not break native scrollback or copy-paste.</a></li> <li><a href="https://github.com/google/capslock" target="_blank" rel="noopener">capslock: is a capability analysis CLI for Go packages that informs users of which privileged operations a given package can access. This works by classifying the capabilities of Go packages by following transitive calls to privileged standard library operations.</a></li> <li><a href="https://github.com/psviderski/unregistry" target="_blank" rel="noopener">unregistry: Push docker images directly to remote servers without an external registry</a></li> <li><a href="https://github.com/Ranchero-Software/NetNewsWire" target="_blank" rel="noopener">NetNewsWire is a free and open-source feed reader for macOS and iOS. It supports RSS, Atom, JSON Feed, and RSS-in-JSON formats.</a></li> <li><a href="https://github.com/k4yt3x/sysctl" target="_blank" rel="noopener">K4YT3X&rsquo;s Hardened &amp; Optimized Linux Kernel Parameters</a></li> <li><a href="https://github.com/tursodatabase/turso" target="_blank" rel="noopener">Turso is an in-process SQL database, compatible with SQLite.</a></li> <li><a href="https://github.com/zizmorcore/zizmor" target="_blank" rel="noopener">zizmor is a static analysis tool for GitHub Actions.</a></li> <li><a href="https://github.com/rustfs/rustfs" target="_blank" rel="noopener">RustFS is a high-performance, distributed object storage system built in Rust.</a></li> <li><a href="https://github.com/jdx/usage" target="_blank" rel="noopener">Usage: is a spec and CLI for defining CLI tools. Arguments, flags, environment variables, and config files can all be defined in a Usage spec. It can be thought of like OpenAPI (swagger) for CLIs.</a></li> <li><a href="https://github.com/MODSetter/SurfSense" target="_blank" rel="noopener">SurfSense: An open source, privacy focused alternative to NotebookLM for teams with no data limits.</a></li> <li><a href="https://github.com/icann/icann-rdap" target="_blank" rel="noopener">ICANN implementation of the Registry Data Access Protocol (RDAP)</a></li> <li><a href="https://github.com/openrdap/rdap" target="_blank" rel="noopener">OpenRDAP is a command line RDAP client implementation in Go.</a></li> </ul> </li> <li><strong>Article</strong> <ul> <li><a href="https://blog.ammaraskar.com/github-token-stealing/" target="_blank" rel="noopener">1-Click GitHub Token Stealing via a VSCode Bug</a></li> <li><a href="https://www.zhihu.com/question/590661860" target="_blank" rel="noopener">Linux 系统误将 chmod 权限改成 了 000，如何恢复?</a></li> <li><a href="https://ahelwer.ca/post/2026-05-08-builtin-u2f/" target="_blank" rel="noopener">Laptops all have built-in security tokens these days</a></li> <li><a href="https://tailscale.com/blog/tailscale-rustdesk-remote-desktop-access" target="_blank" rel="noopener">Tailscale and RustDesk: Secure remote access to all your desktops</a></li> <li><a href="https://blog.trailofbits.com/2025/06/17/unexpected-security-footguns-in-gos-parsers/" target="_blank" rel="noopener">Unexpected security footguns in Go&rsquo;s parsers</a></li> <li><a href="https://marvin.yabi.me/misc/junzishendoo.htm" target="_blank" rel="noopener">君子慎讀</a></li> <li><a href="https://marvin.yabi.me/misc/wenbai.htm" target="_blank" rel="noopener">辭典中標注的「讀音」和「語音」是什麼？</a></li> <li><a href="https://marvin.yabi.me/misc/AND.htm" target="_blank" rel="noopener">拜託別再「我汗你」了！</a></li> </ul> </li> </ul> <hr> <h2 id="linux-系统误将-chmod-权限改成-了-000如何恢复">Linux 系统误将 chmod 权限改成 了 000，如何恢复?</h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span><span style="color:#75715e">#include</span> <span style="color:#75715e">&lt;sys/stat.h&gt;</span><span style="color:#75715e"> </span></span></span><span style="display:flex;"><span><span style="color:#75715e"></span> </span></span><span style="display:flex;"><span><span style="color:#66d9ef">int</span> <span style="color:#a6e22e">main</span>() { </span></span><span style="display:flex;"><span> <span style="color:#a6e22e">chmod</span>(<span style="color:#e6db74">&#34;/usr/bin/chmod&#34;</span>, <span style="color:#ae81ff">0755</span>); </span></span><span style="display:flex;"><span> <span style="color:#66d9ef">return</span> <span style="color:#ae81ff">0</span>; </span></span><span style="display:flex;"><span>} </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>ubuntu@ubuntu:~$ which chmod </span></span><span style="display:flex;"><span>/usr/bin/chmod </span></span><span style="display:flex;"><span>ubuntu@ubuntu:~$ ls -lh /usr/bin/chmod </span></span><span style="display:flex;"><span>lrwxrwxrwx <span style="color:#ae81ff">1</span> root root <span style="color:#ae81ff">8</span> Sep <span style="color:#ae81ff">27</span> <span style="color:#ae81ff">2025</span> /usr/bin/chmod -&gt; gnuchmod </span></span><span style="display:flex;"><span>ubuntu@ubuntu:~$ ls -lh /usr/bin/gnuchmod </span></span><span style="display:flex;"><span>-rwxr-xr-x <span style="color:#ae81ff">1</span> root root 67K Jan <span style="color:#ae81ff">23</span> 21:34 /usr/bin/gnuchmod </span></span><span style="display:flex;"><span>ubuntu@ubuntu:~$ sudo chmod <span style="color:#ae81ff">000</span> /usr/bin/chmod </span></span><span style="display:flex;"><span>ubuntu@ubuntu:~$ ls -lh /usr/bin/chmod </span></span><span style="display:flex;"><span>lrwxrwxrwx <span style="color:#ae81ff">1</span> root root <span style="color:#ae81ff">8</span> Sep <span style="color:#ae81ff">27</span> <span style="color:#ae81ff">2025</span> /usr/bin/chmod -&gt; gnuchmod </span></span><span style="display:flex;"><span>ubuntu@ubuntu:~$ ls -lh /usr/bin/gnuchmod </span></span><span style="display:flex;"><span>---------- <span style="color:#ae81ff">1</span> root root 67K Jan <span style="color:#ae81ff">23</span> 21:34 /usr/bin/gnuchmod </span></span><span style="display:flex;"><span>ubuntu@ubuntu:~$ cat main.c </span></span><span style="display:flex;"><span><span style="color:#75715e">#include &lt;sys/stat.h&gt;</span> </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span>int main<span style="color:#f92672">()</span> <span style="color:#f92672">{</span> </span></span><span style="display:flex;"><span> chmod<span style="color:#f92672">(</span><span style="color:#e6db74">&#34;/usr/bin/chmod&#34;</span>, 0755<span style="color:#f92672">)</span>; </span></span><span style="display:flex;"><span> <span style="color:#66d9ef">return</span> 0; </span></span><span style="display:flex;"><span><span style="color:#f92672">}</span> </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span>ubuntu@ubuntu:~$ gcc ./main.c </span></span><span style="display:flex;"><span>ubuntu@ubuntu:~$ sudo ./a.out </span></span><span style="display:flex;"><span>ubuntu@ubuntu:~$ ls -lh /usr/bin/chmod </span></span><span style="display:flex;"><span>lrwxrwxrwx <span style="color:#ae81ff">1</span> root root <span style="color:#ae81ff">8</span> Sep <span style="color:#ae81ff">27</span> <span style="color:#ae81ff">2025</span> /usr/bin/chmod -&gt; gnuchmod </span></span><span style="display:flex;"><span>ubuntu@ubuntu:~$ ls -lh /usr/bin/gnuchmod </span></span><span style="display:flex;"><span>-rwxr-xr-x <span style="color:#ae81ff">1</span> root root 67K Jan <span style="color:#ae81ff">23</span> 21:34 /usr/bin/gnuchmod </span></span></code></pre></div><hr> <h2 id="laptops-all-have-built-in-security-tokens-these-days">Laptops all have built-in security tokens these days</h2> <h3 id="macos">macOS</h3> <blockquote> <p><a href="https://github.com/yubico/libfido2" target="_blank" rel="noopener">https://github.com/yubico/libfido2</a></p>https://995facee.rickylin.pages.dev/zh-tw/posts/2026/20260513-articles/Wed, 13 May 2026 11:15:33 +0800https://995facee.rickylin.pages.dev/zh-tw/posts/2026/20260513-articles/<ul> <li><a href="https://github.com/itgoyo/TelegramChannels" target="_blank" rel="noopener">TelegramChannels</a></li> <li><a href="https://github.com/warp-tech/warpgate" target="_blank" rel="noopener">warpgate: is a smart &amp; fully transparent SSH, HTTPS, Kubernetes, MySQL, PostgreSQL bastion host that doesn&rsquo;t require a client app or an SSH wrapper.</a></li> <li><a href="https://jakub.kr/writing/details-that-make-interfaces-feel-better" target="_blank" rel="noopener">Details that make interfaces feel better: <code>npx skills add jakubkrehel/make-interfaces-feel-better</code></a></li> <li><a href="https://github.com/TheStageAI/TheWhisper" target="_blank" rel="noopener">TheWhisper: High-Performance Speech-to-Text</a></li> <li><a href="https://github.com/nexu-io/open-design" target="_blank" rel="noopener">Open Design: The open-source alternative to Claude Design. Local-first, web-deployable, BYOK at every layer — 16 coding-agent CLIs auto-detected on your PATH (Claude Code, Codex, Devin for Terminal, Cursor Agent, Gemini CLI, OpenCode, Qwen, Qoder CLI, GitHub Copilot CLI, Hermes, Kimi, Pi, Kiro, Kilo, Mistral Vibe, DeepSeek TUI) become the design engine, driven by 31 composable Skills and 72 brand-grade Design Systems. No CLI? An OpenAI-compatible BYOK proxy is the same loop minus the spawn.</a></li> <li><a href="https://github.com/ultraworkers/claw-code" target="_blank" rel="noopener">Claw Code is the public Rust implementation of the claw CLI agent harness. The canonical implementation lives in rust/, and the current source of truth for this repository is ultraworkers/claw-code.</a></li> <li><a href="https://github.com/LING71671/Open-ClaudeCode" target="_blank" rel="noopener">Open-ClaudeCode: 完整开源的 Claude Code 项目 - 基于 Anthropic 官方源码重建</a></li> <li><a href="https://github.com/claude-code-best/claude-code" target="_blank" rel="noopener">Claude Code Best V5 (CCB): 牢 A (Anthropic) 官方 Claude Code CLI 工具的源码反编译/逆向还原项目。目标是将 Claude Code 大部分功能及工程化能力复现 (问就是老佛爷已经付过钱了)。虽然很难绷, 但是它叫做 CCB(踩踩背)&hellip; 而且, 我们实现了企业版或者需要登陆 Claude 账号才能使用的特性, 实现技术普惠</a></li> <li><a href="https://github.com/aattaran/deepclaude" target="_blank" rel="noopener">deepclaude: Use Claude Code&rsquo;s autonomous agent loop with DeepSeek V4 Pro, OpenRouter, or any Anthropic-compatible backend. Same UX, 17x cheaper.</a></li> <li><a href="https://github.com/pyinfra-dev/pyinfra" target="_blank" rel="noopener">pyinfra turns Python code into shell commands and runs them on your servers. Execute ad-hoc commands and write declarative operations. Target SSH servers, local machine and Docker containers. Fast and scales from one server to thousands. Think ansible but Python instead of YAML, and a lot faster.</a></li> <li><a href="https://github.com/jdx/mise" target="_blank" rel="noopener">mise: Dev tools, env vars, and tasks in one CLI</a></li> <li><a href="https://github.com/endevco/aube" target="_blank" rel="noopener">Aube installs automatically when you run a script. The tightest security defaults of any Node.js package manager - and the only one with a lifecycle-script jail. Drops into existing projects using existing lockfiles.</a></li> <li><a href="https://github.com/V4bel/dirtyfrag" target="_blank" rel="noopener">Dirty Frag: Universal Linux LPE</a></li> <li><a href="https://sinceyouarrived.world/taken" target="_blank" rel="noopener">taken. You opened this page. It already knows the following.</a></li> <li><a href="https://internetarchive.ch/" target="_blank" rel="noopener">internetarchive.ch</a></li> <li><a href="https://blog.kronis.dev/blog/apple-is-increasing-my-cortisol-levels" target="_blank" rel="noopener">Apple is increasing my cortisol levels</a></li> <li><a href="https://github.com/dwarvesf/hidden" target="_blank" rel="noopener">Hidden Bar lets you hide menu bar items to give your Mac a cleaner look.</a></li> <li><a href="https://github.com/stonerl/Thaw" target="_blank" rel="noopener">Thaw is a powerful menu bar management tool for macOS 26. While its primary function is hiding and showing menu bar items, it aims to cover a wide variety of additional features to make it one of the most versatile menu bar tools available.</a></li> </ul> <hr> <h2 id="dirty-frag">Dirty Frag</h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>git clone https://github.com/V4bel/dirtyfrag.git <span style="color:#f92672">&amp;&amp;</span> cd dirtyfrag <span style="color:#f92672">&amp;&amp;</span> gcc -O0 -Wall -o exp exp.c -lutil <span style="color:#f92672">&amp;&amp;</span> ./exp </span></span></code></pre></div>