[U] Update channel content
This commit is contained in:
@@ -23510,7 +23510,7 @@
|
||||
"id": 1780,
|
||||
"date": "2023-01-21T23:31:01",
|
||||
"text": "东岸的年夜饭 @ CAMH!\n\n做了红烧肉、炒菜花、还有虾饺,厨房第一次灶台四个炉子同时烧着 qwq\n\n还专门把餐具带过去摆盘了 <i class=\"custom-emoji\" emoji-src=\"emoji/6170419595350903248.webm\">✨</i>",
|
||||
"views": 211,
|
||||
"views": 212,
|
||||
"forwards": 2,
|
||||
"media_group_id": 13394750888961733,
|
||||
"images": [
|
||||
@@ -73066,7 +73066,7 @@
|
||||
"id": 5288,
|
||||
"date": "2025-04-28T20:26:59",
|
||||
"text": "后续:clash verge rev 的开发者给 macOS <a href=\"https://github.com/clash-verge-rev/clash-verge-service/commit/06b522d2ccf37bdbc00e59687cc701c946166afe\">添加了可执行程序签名验证</a>,然而这个签名验证并没有用(笑)\n\n因为它甚至没有解析 codesign 输出... 直接验证了 codesign 输出有没有包含特定的字符串,所以黑客只要自己签一个恶意 bin 把它检测的字符串全都堆到 identifier 里就可以绕过检测拿到 root 了 <i class=\"custom-emoji\" emoji-src=\"emoji/6170075684434610033.webm\">⌨</i>\n\n(PoC 原图放这里了: <a href=\"https://github.com/clash-verge-rev/clash-verge-service/issues/9\">clash-verge-service#9</a>)\n\n安全检查能写成这样也太草台了,而且这个注释看起来像是 AI 生成的一样... 希望大家都不要用这样的软件",
|
||||
"views": 6376,
|
||||
"views": 6377,
|
||||
"forwards": 149,
|
||||
"media_group_id": 13966976157341773,
|
||||
"images": [
|
||||
|
||||
Reference in New Issue
Block a user