Skip to content

Instantly share code, notes, and snippets.

@forkyau
forkyau / hourly_rainfall_data-2026-11-06|00-15.csv
Created November 5, 2026 16:31
GIST created by python code
id station stationid value unit obstime date
0 流浮山 RF001 0 mm 2026-11-06T00:15:00+08:00 2026-11-06
1 湿地公园 RF002 0 mm 2026-11-06T00:15:00+08:00 2026-11-06
2 水边围 N12 0 mm 2026-11-06T00:15:00+08:00 2026-11-06
3 石岗 RF003 0 mm 2026-11-06T00:15:00+08:00 2026-11-06
4 大美督 RF004 0 mm 2026-11-06T00:15:00+08:00 2026-11-06
5 大埔墟 RF005 0 mm 2026-11-06T00:15:00+08:00 2026-11-06
6 北潭涌 RF006 0 mm 2026-11-06T00:15:00+08:00 2026-11-06
7 滘西洲 RF007 0 mm 2026-11-06T00:15:00+08:00 2026-11-06
8 西贡 N15 M mm 2026-11-06T00:15:00+08:00 2026-11-06
@isekai0
isekai0 / codex-ntfy-push-notifications-spec.md
Created November 5, 2026 16:30
Codex CLI → ntfy push notifications: self-hosted ntfy over Tailscale for macOS + iPhone (plan & spec)

Codex CLI → ntfy Push Notifications: Plan & Spec

Researched 2026-11-05 from the nisedo_ tweet approach (Codex native hooks + ntfy), verified against Codex CLI docs (learn.chatgpt.com) and docs.ntfy.sh. Scenario: Linux box on Tailscale tailnet runs Codex CLI; notifications to macOS + iPhone.

1. Recommended Architecture

Self-hosted ntfy on the Linux Codex box, bound to the tailnet via tailscale serve, macOS and iPhone subscribing over Tailscale.

We can make this file beautiful and searchable if this error is corrected: Unclosed quoted field in line 5.
type,value,context,role,confidence,status,urlscan_window,verified_by
sha256,53039bdeb3e155236dce324281f59846c2da7518a54859c409286aaff86d61a2,messenger-codex-v2.6.zip,ZIP sample 1,confirmed (local sha256sum of downloaded ZIP; GitHub size match),,,local sha256sum of ziplab download messenger-codex-v2.6.zip; GitHub Contents size 467927 matches; no public VT/MB match (API 401 / SPA)
sha256,bd2a6bff153d95ab3d94d7db4525c49c31f5c6f32ddbf8e7c466732b0a6eb071,supercharged-claude-skills-v2.0.zip,ZIP sample 2,confirmed (local sha256sum of downloaded ZIP; GitHub size match),,,local sha256sum of ziplab download supercharged-claude-skills-v2.0.zip; GitHub Contents size 587686 matches; no public VT/MB match
sha256,4f5c5ad522d8dba60e89c443e07d65c3ce373ef1a617d220d3b69a185c11dae2,Application.bat,"launcher, sample 1",confirmed (Triage 260725-tlpnws1sfx + local hash),,,Triage 260725-tlpnws1sfx static1 + local sha256sum of ziplab extracted file
sha256,2a7afb187157a4052e5b9797d1d1c7ee807b2edeffef076a08b20b12e3dcf317,lfs.txt,"obfus
https://urldefense.com/v3/__https://nee-my.sharepoint.com/:f:/g/personal/gxt0ohm_fpl_com/IgAdIfWSgai8Qq7U1gWzAbRKAcIs4Qk-a_RGt6Qb1Aza_6U?email=Zoe.Kind*40nexteraenergy.com&e=rNTvSZ__;JQ!!BNDoJA!8aPyjP4I7lSA-WSRPnmuMmseYA_bklR721iks6gm7_yD38s9DpAYJFfJiOsmDu39ioiOqB5RyCDZTB61eX0UZtp6KLuXFkXnPTW0Jg$
@boot-manager
boot-manager / Readme.Txt
Created November 5, 2026 16:30
Xiaomi HyperOs 4 Android 17
user:hyperosuser.android
android 17 /restart android bios orange_fox
hypermint chormeos loading control /panel
control panel /wifi /bluetooth /airplane mode /mobile data
Setup screen complete setup_language button language_random
google_controller wallpaper_sengindle panel panel hyperos 4 flash
App_open_ web_engine/scaner_engine github.exe main menu settings.file c:/Users/Xiaomi/Phone/bios_orange_fox/recovery
airdrop_airdrop control android 17 panel
vng 345.098.899mn765.274.mng
manager.boot team.win.recovery github/yinguvang.eng
@knobbyintens
knobbyintens / probe.md
Created November 5, 2026 16:29
OSF26 audit probe

probe

@Dext33
Dext33 / verificar.md
Created November 5, 2026 16:29
Metodologia de verificação do pacote do PL (WhiteArmor)

Como conferir o pacote do PL em 5 minutos

Pacote de 114 GB publicado pelo grupo WhiteArmor em 29/10/2026. Senha do 7z: bolsonaronolixo.

O pacote não é meu. O que está aqui é o método de verificação, feito de fora e sem login.

Registro de teste criado por mim no banco real em 05/11/2026, 14:55 UTC: id 925350ba-6baf-4cd5-b64c-84a77de93aef. É o único registro escrito; o resto está como estava.

1. Documentos abertos

@nijave
nijave / software-factory.md
Created November 5, 2026 16:28
Software factories

“Software factory” is 2026’s rebrand of the feature factory, dressed up as engineering discipline: agents convert tickets into merged code at a rate no human can read, so the implementation friction that used to make someone ask “is this feature wrong, or is the software wrong?” never gets generated. Code is a liability, and this is a machine for incurring it at interest. Users don’t want more change; they want their spacebar to keep working, and nothing in the factory’s metrics can see that.

@andywang0191-stack
andywang0191-stack / _gist_tmp_hardening-openssh-server-in-2026:-kill-password-auth,-use-ce.md
Created November 5, 2026 16:28
Hardening OpenSSH Server in 2026: Kill Password Auth, Use Certificates, and Verify Your Config Like an Attacker

Hardening OpenSSH Server in 2026: Kill Password Auth, Use Certificates, and Verify Your Config Like an Attacker

Tuần này trên Hacker News có hai bài về SSH cùng lúc lên top: một advisory của Alpine Linux về lỗi bypass password authentication trên OpenSSH-server, và một bài khác cũng nói về SSH được vote hơn 1000 điểm. Đọc comment thì thấy nhiều người hỏi cùng một câu: "Server của tôi có bị ảnh hưởng không?". Câu trả lời thật ra đơn giản: nếu server của bạn không cho phép đăng nhập bằng password ngay từ đầu, thì cả một nhóm lỗi kiểu này không đụng tới bạn được.

Mình làm vận hành cho vài chục VPS và cluster nhỏ đã nhiều năm. Bài này là checklist mình thực sự dùng để harden sshd, kèm cách kiểm tra config như một attacker nhìn vào, chứ không chỉ sửa file rồi hy vọng là nó chạy đúng.

1. Vì sao password authentication là bề mặt tấn công thừa

Mỗi phương thức xác thực bạn bật trong sshd là thêm một đoạn code có thể có bug. Password auth đi qua PAM, qua keyboard-interactive, qua nhiều nhánh xử lý kh

#!/usr/bin/env bash
#
# wiki-installer.sh
#
# Interactive installer for offline Wikipedia (Kiwix ZIM files):
# - lists the newest pack of every language/topic/flavor, newest first
# - filters, sorting, multi-select
# - time estimates from a live network speed test, your NIC link speed,
# disk write speed and checksum speed
# - resumable downloads (.part files) with optional SHA-256 verification