Industry NewsOn September 19, 2026, SlowMist together with OKX's security team disclosed that iOS app FomoPeek versions 1.1 and 1.2 shipped with an iOS kernel exploit framework, able to break out of the sandbox and read and decrypt the system Keychain — exposing private keys, seed phrases and login credentials. Affected iOS versions: 12.0–18.7 and 26.0–26.1.
Industry NewsCiting severe storage constraints, Tsinghua University's TUNA mirror site has removed its Anaconda, OpenWrt, Flutter and GitLab EE mirrors. Existing URLs now redirect to the CERNET joint mirror site or to upstream.
BitcoinBought a decade-old Antminer U3 for 25 yuan, then benchmarked CPU, RTX 2080 Ti and Bitaxe Gamma 601 mining BTCC SHA-256, and compared PPLNS, SOLO and AIRDROP pool modes.
Server SideA personal blog that started in the grassroots webmaster era of 2012 survived tightening regulation, the app wave and the collapse of search traffic — and finally lost its reason to exist in the age of AI.
ProgrammingWire a local LLM into IntelliJ IDEA with LM Studio, LM Link and the Continue plugin — an AI coding setup that needs no API key. Runs Qwen3.5-27B over CUDA on an RTX 2080 Ti, so the tokens are all yours.
Developer Toolbox
IP lookup, hashing, domain analysis, UUID generation and dozens of other handy tools — everything for development and debugging in one place.
Since 04:30 on 2026-06-09, my BT tracker server has been under a DDoS (TCP SYN) attack. The service is unstable — my IDC has force-routed the traffic to their scrubbing center. No good fix on my end, so all I can do is sit and wait it out.
Per the latest CA/Browser Forum vote, SSL certificates issued on or after March 15, 2026 will have their validity period shortened to 200 days. Certificates issued before that date keep their original expiry and are unaffected.
The legal and regulatory basis carriers use to suspend residential broadband lines running PCDN: the “Notice of the Ministry of Industry and Information Technology on Cleaning Up and Regulating the Internet Network Access Service Market” (MIIT Xin Guan Han [2017] No. 32).
When users run PCDN devices on non-commercial broadband, it constitutes the de facto act of “enterprises or individuals operating CDN business without qualifications,” violating the red line that “enterprises and individuals without the corresponding telecom business operating licenses shall not operate IDC, ISP, CDN, or similar businesses.” It also breaches the service agreement clause that “residential broadband must not be used for commercial purposes.” The PCDN hardware and software companies do hold CDN/IDC operating licenses — but only they may strike commercial agreements with carriers to purchase commercial bandwidth. Using residential broadband resources for PCDN uploads is explicitly not protected by law.
C114 (communications industry forum) reports that all three major Chinese carriers are implementing or discussing broadband upload caps: China Mobile has finished the rollout and launched it in some regions — 1 TB monthly upload per broadband line, throttled after that. China Telecom has finished the work but hasn’t launched anywhere yet. China Unicom hasn’t started; it’s still in discussions.
Annual rewrite, done. This time I rebuilt the frontend with React and optimized everything that could be optimized, fully separating frontend and backend. The cost: each incoming request now fans out to multiple backend APIs through the node server, amplifying the request count — and node burns so much CPU it can barely handle the concurrency anymore. Repository and artifact management has fully migrated to GitLab; several new tools added to the toolbox; some toolbox tools were rewritten in Go.
