Hpdoger

CTF Player | NeSE & r3kapig | Focusing on Security Research

[Wenxuan Zhao @WenxuanZhao_]

A few years ago I had a weird thought: does ETH have a theoretical price ceiling?
It came from living through the FOMO cycles — USDC depeg, BSC mania — and watching L2s explode. Gas got so expensive I started wondering: is ETH's price actually capped by its own gas fees?
I could only test it properly recently, with Claude. here's what I found

[李韭二 @li9292]

https://t.co/oRwlcYCXM2

[Hpdoger @hpdoger]

@bestswngs 修改 runc 有什么比较好的场景触发吗，除了 exec 的 timing

[Hpdoger @hpdoger]

@richardfan1126 When I saw the description of domain verification in AWS Security Agent, I also had a similar vulnerability awareness -- it could be caused by DNS obfuscation. Learn a lot from your report this time. Good Job!

[Anthropic @AnthropicAI]

New on the Anthropic Engineering Blog:

How we use a multi-agent harness to push Claude further in frontend design and long-running autonomous software engineering.

Read more: https://t.co/HWvmXk1ykn

[Hpdoger @hpdoger]

昨天（3.24）心血来潮更新了 Browser-use，没想到它要求 litellm >= 1.82.2，而昨天的版本正好是被投毒的 1.82.8

吓得我赶紧瞅了眼，多亏国内镜像仓更新的慢，侥幸逃过这一波供应链打击！

[Hpdoger @hpdoger]

作为安全研究员，这是又激动又沮丧的一天

[Claude @claudeai]

Introducing Claude Opus 4.6. Our smartest model got an upgrade.

Opus 4.6 plans more carefully, sustains agentic tasks for longer, operates reliably in massive codebases, and catches its own mistakes.

It’s also our first Opus-class model with 1M token context in beta.

[Hpdoger @hpdoger]

@skyworship2 在搞什么飞机

[Hpdoger @hpdoger]

@Skyworship2 @azraelxuemo 要被你们这些天才卷死了

[Hpdoger @hpdoger]

Thanks for h1 and aws bbp

Proud to have identified 2 high-severity vulnerabilities in 2024! Thanks to @Hacker0x01 for providing the platform to make this possible! 🔒 #HackerOne #InfoSec #CyberSecurity

[Hpdoger @hpdoger]

@Skyworship2 带带弟弟好吗

[Hpdoger @hpdoger]

@Skyworship2 pro

[Hpdoger @hpdoger]

@CarsonYangk8s 万一呢

[Barret李靖 @Barret_China]

使用 Node.js 的工具快速启动一个文件系统服务的方法：npx http-server，它的原理是使用 npm 从远程拉取 http-server 包，然后本地启动，很方便但效率一般。

而 Python 内置了 http.server，通过 -m（module）参数可以直接拉起本地模块：python -m http.server，更快也更简单。

其实 Python 还内置了很多其他的实用模块，例如：

1）json.tool，可以在命令行直接完成 json 的格式化：get_json_string | python -m json.tool

2）PyInstaller，可以直接将 python_file 打包成一个不依赖 Python 环境的可执行文件，十分利于小程序的分发：python -m PyInstaller python_file

3）timeit，可以测试代码的耗时，它会执行 500 遍，取最快的一次结果，并给出平均耗时：python -m timeit python_code

诸如此类的 tricks 非常多，你也可以在这里可以找到 Python 所有的 build-in libraries：https://t.co/qfto0ABoqU，挖掘不一样的玩法，还可以考虑自定义一些内置库塞进去，方便自己日常使用。

[Barret李靖 @Barret_China]

复旦大学张奇教授团队写了一本在线免费的电子书，《大规模语言模型：从理论到实践》，https://t.co/Rudaecb9f5，大概有 300 页篇幅，将大模型从理论到实战的每个阶段都描述的较为清楚。

全文在线阅读地址：https://t.co/QlMpErUhdg

[Hpdoger @hpdoger]

@suanve 想学

[Nicolas Krassas @Dinosn]

Reverse shell using curl https://t.co/p0gt2ZRVBh

[Hema shushu @hemashushu]

续上）
https://t.co/mPkCjApsvh
2. 《Namespaces in operation》命名空间原理及实践。命名空间是内核级的虚拟化技术，是诸如docker等应用的背后大佬，这系列文章同样通俗易懂，你甚至可以用系统自带的命令加几行shell 脚本实践一个类似docker的容器工具。#namespace
https://t.co/tCcIiMDQ2Q
（续……

[Node.js @nodejs]

Node.js 20 is now available! 💚

Highlights include:
- Experimental Permission Model
- A synchronous import.meta.resolve
- Stable Test Runner
- V8 JavaScript engine updated to 11.3
- Single Executable Apps
- Ada to 2.0

And more in our blog post: https://t.co/dD9ejmHrGV