Lsong 

Senior Engineer and Team leader at @BytedanceTalk, former @alibaba @meituan staff; speaker; #homelab #javascript #golang #networking #HAM 📻 BI1GDD

[Lsong  @lsongdev]

Omarchy Switcher
A focused visual window switcher for Omarchy.
https://t.co/jpe40zpgtI
#omarchy #archlinux #wayland

[Lsong  @lsongdev]

Miya Desktop is here.
A native workspace for AI agents, built around ACP. Connect built-in profiles and external agents, follow streaming messages and tool calls, and extend your workflow with MCP and skills.
Open source for macOS and Windows.
https://t.co/5Wr5oU868Y

[Lsong  @lsongdev]

@yihong0618 ❤️

[Lsong  @lsongdev]

原推 only some accounts can reply 而且我没开 Premium 写不了太多文字只好发图片了🤣 @yihong0618

[Lsong  @lsongdev]

@yihong0618 啊 又写不下了，还是发图吧 🤣

[Lsong  @lsongdev]

@Blankwonder 我也有类似的经历🤦
https://t.co/RWLwlJii8S

[yimyimu @yimyimu]

LEGO Obstacle-Avoiding Car 乐高避障小车 | Build a Smart Car for Beginners 🚗#LEGOMaker #STEMCraft

[Lsong  @lsongdev]

I lose my hearing in my left ear
https://t.co/phHQiVCHH6

[Lsong  @lsongdev]

EasyNFC is an iOS Smart NFC Reader & Writer
https://t.co/Q8HvUHfYzY

[Lsong  @lsongdev]

⚡️ PicoVPN is an iOS VPN client powered by Xray-core and NetworkExtension framework. It provides a lightweight and efficient VPN solution for iOS devices.

https://t.co/LpwOlTRRFC

[Lsong  @lsongdev]

我修改了我所有开源项目的默认协议，从原来更自由开放的MIT 协议修改为更具有开源软件精神的基于GPLv3 并附加了一些条件约束的协议。

详情可以参考「贡献者契约行为准则」 中的说明：
https://t.co/TKOre9ZcPu

[Lsong  @lsongdev]

The Legend of Zelda: Echoes of Wisdom

#Nintendo #Switch #Zelda #EoW

[Elon Musk @elonmusk]

Starship rocket booster caught by tower

[Lsong  @lsongdev]

DuckTV on Google Play Store: https://t.co/M7h3YMNPX9

[Lsong  @lsongdev]

@clcoding https://t.co/CLITFXaL1C

[Lsong  @lsongdev]

🌲 A simple personal bookmark navigation website and AI search engine.

https://t.co/KxATa6lypI

[Lsong  @lsongdev]

@realQPomelo 我也曾经遇到过这种怪事🤣 https://t.co/RWLwlJii8S

[Lsong  @lsongdev]

@geekbb @LeaskH 还有一个潜在的问题，我们假设脚本提供者是可信的，并且也通过 https 没有中间人攻击，但由于脚本没有使用最佳实践，用户网络不稳定导致脚本下载不完整，执行了不完整的脚本，会产生一些意外的结果，这也很危险和隐蔽，难以被发现和恢复。

[Lsong  @lsongdev]

@geekbb @LeaskH 存在蛮大的安全隐患的，特别是对于计算机不是很了解的用户，很多人在真正运行之前是不会想着查看代码并审计的，这个案例中还没有使用 https 来确保传输安全，脚本所有者和中间人还可以通过识别 UserAgent 来针对性规避审计，这些对普通小白来说太难了。所以针对经验不是很多的用户来说还是谨慎一些。