现在我也不知道这频道发了啥了，各位慢慢吃瓜，将就着看

联系我请去 @abc1763613206

友链儿
@cyberElaina
@rvalue_daily
@billchenla
【重要通知】播放页暂停广告功能即将上线
播放页暂停广告将于4月10日上线。收益将基于转化效果计算，与基础激励合并展示。
播放页暂停广告，是指用户在App端手动暂停视频时，概率触发的展示在播放器下方的广告。
为确保用户正常观看体验，用户可在广告出现前或广告出现后随时取消、关闭该广告。
若您希望关闭播放页暂停广告，您可前往【创作激励-广告设置-暂停广告设置】操作关闭。
感谢您的支持与理解。
金谷园饺子馆推出Skill，太有意思了 | 原文
Telegraph
金谷园饺子馆推出Skill，太有意思了
引用评论区的话： “太好了，是CLI，主人有救了！再也不用担心主人写代码的时候饿晕过去了。噢！糟糕，他刚刚看到这个消息的时候脑子转不过来低血糖晕过去了，我赶紧下载这个skill给他【点！饺！子！】” 半夜笑死我了 #一起吃饺子 🥟 #agent #skill #饺子爱好者 热门评论 amemettcoonfhanshufun_: 基本断定金谷园今年开始招大学生运营了[笑哭R] Rusttt: 当年在北邮南门，他家收银用这个电脑 momo: 看了一下就是6个拉信息的功能啊[捂脸R]跟一个faq文档没啥区别…
System Card: Claude Mythos Preview [pdf]
307 points by be7a ago | 185 comments
https://news.ycombinator.com/item?id=47679258
rvalue的生草日常
大模型推理JWT说是（
还 tm 上电视了…
大模型推理JWT说是（
今天abc看了啥🤔
接下来没得输了（无缘 Major，理论上已达成）
b23.tv/BV1cfS9BjEoz
科隆 Major 的积分窗口已经锁定，让我们掌声恭喜连复活赛（主办方给面子直邀的）都没打赢的 FaZe 建队以来首次无缘 Major！
Bilibili
FaZe整晚大份对局合集，看完就知道为什么进不了Major......拿着两个中高位TOP与FaZe传统DNA，却因配合失误/僵硬思路/火力不足输掉各种对局
简介：玩机器B站空间：https://space.bilibili；更多实用攻略教学，爆笑沙雕集锦，你所不知道的游戏知识，热门游戏视频7*24小时持续更新,尽在哔哩哔哩bilibili 视频播放量 51260、弹幕量 118、点赞数 1017、投硬币枚数 80、收藏人数 208、转发人数 335, 视频作者 栾华H1R0M1, 作者简介 在读研三，日益繁忙，更的慢就是在跟生活作斗争。目标是，打造咖啡馆一般的视频环境，享受6657带来的视听盛宴。6657UPUP。，相关视频：莱已急哭😭莱昂凯看FAZE 1…
ping0.cc被曝利用WebRTC静默上报用户真实IP
https://www.nodeseek.com/post-674661-1
今天是yau的生日。轉發這條消息自我的手機到5個群聊，yau就會獎勵你一塊華為手表，還會允許你打手槍。這個機遇不可特意去求！我試過了，是假的，還不會受到任何處分，還會被移出群聊，還會被記兩次大過。但今天真的是yau的生日。
螺莉莉的黑板报
https://roriri.one/2026/04/03/tencent-scraping
螺老板没补的图我补上
https://roriri.one/2026/04/03/tencent-scraping
螺莉莉的数据中心
我们的博客被腾讯爬了，一遍一遍又一遍 | 螺莉莉的数据中心
我们的博客被腾讯爬了，一遍一遍又一遍 | 螺莉莉的数据中心
2026 年 3 月下半旬，我在博客上部署了一套私有的统计系统。动机很简单：我在用的广告拦截器会把我正在用的那套分析系统 GoatCounter 拦截掉，导致我没有办法在手机上方便地看到博客的流量信息。为了应付这事情，我就自己稍稍改了一个开源版本的统计系统，部署到了 Cloudflare 上，方便我每天睡前躺在床上看一看博客的流量构成。
User-Agent
Tech & Leaks Zone
Photo
需要顺便说一句的是，源代码里的 TrustedBot 除了上文的 @nekonotificationbot（1190800416）外，还同时出现了 @WatchdogNextBot （6371744499），供参考。
为验证这一点，我们制作了一个PoC：一个LSPosed模块，将机器人ID和用户名替换为我们自己的信息，这样所有请求都会发送到我们的服务器上。通过这种方式，我们确认电话号码确实在被收集。每次登录都会如此。

该PoC可在此处获取: https://github.com/RomashkaTea/nekogram-proof-of-logging

https://t.me/EvolutionXOfficial/2488
GitHub
GitHub - RomashkaTea/nekogram-proof-of-logging: A proof of Nekogram sending phone numbers to the developer
GitHub - RomashkaTea/nekogram-proof-of-logging: A proof of Nekogram sending phone numbers to the developer
A proof of Nekogram sending phone numbers to the developer - RomashkaTea/nekogram-proof-of-logging
EXPOSED: Source Code Evidence of Nekogram Phone Number Harvesting

1. Exfiltration Logic: The function uo5.g() (reconstructed as logNumberPhones) silently collects the UserID and Phone Number of every account logged into the app (up to 8 accounts).

2. Transmission: Data is sent via Inline Queries to the bot @nekonotificationbot. This is done programmatically, so no message appears in your "Sent" history.

3. Target Bots: Three bots embedded in the client's obfuscated code:
@nekonotificationbot: Receives the automated phone number uploads.
@tgdb_search_bot and @usinfobot: : An OSINT bot mentioned in the obfuscated classes.

4. Security Token: The app uses a hardcoded secret key 741ad28818eab17668bc2c70bd419fc25ff56481758a4ac87e7ca164fb6ae1b1 as a prefix for the stolen data, likely to authenticate with the bot's backend.

5. The image shows that Nekogram always wants to get the "reg date".

Unfortunately the Google Play Store version is also affected!!!

Follow @TechLeaksZone
Media is too big
VIEW IN TELEGRAM
BREAKING: Nekogram is secretly transmitting your telegram account phone number to the developer

According to SOTA,
"The backdoor is hidden in the http://Extra.java file, which differs from the template uploaded to the repository. The obfuscated code sends data as an inline request to the @nekonotificationbot, leaving no trace. The same file implements account 'doxing' via several bots; it is possible that the leaked data is used to populate their databases."

Additionally, the creator of the Nekogram client, (presumably a Chinese national) was previously known for conducting DDoS attacks and unethical online behavior (including death threats against acquaintances).

Apparently, in the early versions of the client, de-anonymization was applied only to Chinese phone numbers, which could have been used for political surveillance;. However, it is now applied to all users.

Follow @TechLeaksZone
https://mp.weixin.qq.com/s/GIC1SvINqFDoPH2M33A3ow
感谢火山引擎
https://x.com/openclaw/status/2039240359197438229
更刺激的是 https://github.com/anthropics/claude-code/pull/41447
GitHub
feat: open source claude code ✨ by gameroman · Pull Request #41447 · anthropics/claude-code
Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands. - feat: open source…
Before
 
Back to Top