547 posts
On September 19, 2026, SlowMist together with OKX's security team disclosed that iOS app FomoPeek versions 1.1 and 1.2 shipped with an iOS kernel exploit framework, able to break out of the sandbox and read and decrypt the system Keychain — exposing private keys, seed phrases and login credentials. Affected iOS versions: 12.0–18.7 and 26.0–26.1.
Citing severe storage constraints, Tsinghua University's TUNA mirror site has removed its Anaconda, OpenWrt, Flutter and GitLab EE mirrors. Existing URLs now redirect to the CERNET joint mirror site or to upstream.
GitLab has notified users that it will stop serving accounts in Mainland China, Hong Kong and Macao, and plans to delete those accounts after September 7, 2026. If you got the email, back up your code, project data and CI configuration as soon as possible.
Some Coldcard firmware releases seeded keys from a predictable software pseudo-random number generator, which means private keys could be brute-forced offline.
Bought a decade-old Antminer U3 for 25 yuan, then benchmarked CPU, RTX 2080 Ti and Bitaxe Gamma 601 mining BTCC SHA-256, and compared PPLNS, SOLO and AIRDROP pool modes.
A personal blog that started in the grassroots webmaster era of 2012 survived tightening regulation, the app wave and the collapse of search traffic — and finally lost its reason to exist in the age of AI.
Wire a local LLM into IntelliJ IDEA with LM Studio, LM Link and the Continue plugin — an AI coding setup that needs no API key. Runs Qwen3.5-27B over CUDA on an RTX 2080 Ti, so the tokens are all yours.
After 1Password raised prices by 33%, I nearly switched to Bitwarden — but one critical problem made me stay. This post compares the mainstream password managers, analyzes the risks of Passkey lock-in, and shares how to boost security with a YubiKey and successfully negotiate a 25% renewal discount.
Cloudflare Tunnel — familiar to every Cloudflare user. On Linux the binary is called cloudflared, and the open source repo lives at https://github.com/cloudflare/cloudflared. So, with nothing better to do, I registered cloudflared.cn, hooked it up to Cloudflare's services, and then — my account was gone.
In everyday life online, we constantly need to sign up for websites, download resources, or try out services — and most of these platforms ask for an email address. Handing over your real inbox is convenient, but what follows can be endless marketing email or even a potential data leak.
