Your ordinary x86 arch enjoyer

Joined March 2017
Meow :3 retweeted
they’re calling it the black October lmao. > node.js: security vulnerability. > PHP: critical RCE vulnerabilities. > tensorlake: npm package infected. > liteLLM: malicious PyPI + Docker releases > Railway: customer secrets exposed > zeabur - infrastructure breached. > OpenCode: AI API keys exposed. > OVHcloud CLI: official binaries backdoored. > RankMath PRO: malware inside official plugin. > TeamUpdraft: customer data compromised. > ConnectWise: cloud backup identities compromised. > SubQuery: backdoored npm package. > GhostAction: GitHub repos with malicious workflows (related to the broader Shai-Hulud/ChainDrop activity). > eMudhra: certificate authority keys compromised (with downstream impact on Tailscale). this some complete madness bro. 1/3 of the internet is fucked.
121
529
84
3,521
106,877
Meow :3 retweeted
How to properly secure your server from the impending php2shell apocalypse
6
50
2
489
11,063
Meow :3 retweeted
Replying to @vxunderground
1
13
1
619
16,702
I was told by my friends to stay on windows because linux is "shit" and cant run valorant (which tbf a good thing it cant). So naturally I did the most reasonable thing and proved them wrong:
77
82
30
1,650
214,037
This is running natively on proton btw
2
2
387
27,710
Since some people cant tell, the game is technically the only thing running under proton!!
1
105
10,875
Anticheat bypass level: Valorant on linux
I was told by my friends to stay on windows because linux is "shit" and cant run valorant (which tbf a good thing it cant). So naturally I did the most reasonable thing and proved them wrong:
21
132
2
3,731
133,329
Silly you @ItsGamerDoc Inc
1
29
2,210
Meow :3 retweeted
REA 只是一个Hype,不值得你浪费时间 最近REA爆火,好多自媒体博主在刷屏说,商业软件要完蛋了、商业软件都可以被逆向改成开源的。 好多朋友问我:小排哥,这个REA,你怎么看? 我只能回答:我不看。 嗯,我也不建议你浪费时间。 下面说三点理由。 1. REA不是新的逆向技术,只是帮你使用别的逆向工具。 REA不是新的逆向技术! REA不是新的逆向技术! REA不是新的逆向技术! 我先说三遍 因为让我感到意外的是,这么明显的事,90%的自媒体都没搞明白,我也真是服了。 REA的核心不是发明了新的逆向技术,而是让 Claude Code、Codex 这样的 Agent 能够自动使用已有的逆向工具。 这些底层工具很多早就存在了。REA的工作,是把专业工具的专业能力暴露给Agent。 2. 你在自媒体里刷到的很多出圈的逆向工程案例,并未使用REA 例如最近著名的游戏逆向案例:开发者 Maurice Heumann 通过多个 Agent 并行工作,还原大量 C++ 函数。 但他使用的是 Hex-Rays 官方 MCP,并不是 REA。 但是很多讨论把整个 AI 逆向浪潮的成绩归到 REA 身上。 那能怪谁呢,反正那些自媒体也没啥文化,他们的读者也没啥文化。 写的人不知道自己在写啥,读的人不知道自己在读啥。 3. REA 的GitHub星标数量明显异常,有主观刷数据的嫌疑 在我刚才核验REA的仓库,发现有16.8 万 Stars、4 万 Forks,但只有546 个 Watchers。 Fork/Star 比例接近 24%,相当不寻常。 老外不傻,早有别的老外发现了这一点。 评分增长异常、比例异常、大量评论一看就是机器人、一些贡献者的活动轨迹可疑。 我的几个判断 1. REA的热度很快就会迅速消退。你不需要关注它。直接屏蔽REA这个关键词,你什么都不会错过。 2. REA的本质是让Agent接管专业工具。Agent接管专业工具的趋势不会消退。 对自己有期待的朋友们,请找点正经事做吧。 数字泔水可以留给别人去吃。
54
4
7
135
23,365
@deteccphilippe dont you think us linux users deserve the right to play val?
2
168
23,228
Meow :3 retweeted
I was told by my friends to stay on windows because linux is "shit" and cant run valorant (which tbf a good thing it cant). So naturally I did the most reasonable thing and proved them wrong:
77
82
30
1,650
214,037
Meow :3 retweeted
mi primito uso la compu y ahora tengo un virus
509
1,841
186
100,633
3,074,598