Sukka's Notebook

Ciallo～(∠・ω< )⌒☆

7.53K views16:21

Go 1.23 默认为 crypto/tls 启用了实验性质的「后量子时代加密 Cipher」X25519Kyber768Draft00，导致通过 Go 1.23 内置的 TLS 实现发送的 TLS Client Hello 从典型的 252 bytes 激增到 1476 bytes。对于一些未正确配置的防火墙或 LB 来说，这会导致使用 Go 1.23 + Go 内置 TLS 实现的客户端 TLS 握手失败。

目前已知的相关 issue 有：AWS 基于 Suricata 的防火墙会默认丢弃过长的 TLS Client Hello 导致 Go 1.23 编写的应用无法访问 AWS API（ https://github.com/hashicorp/terraform-provider-aws/issues/39311 ）；AdGuardHome 及其其使用的 DNS 转发库 adguard/dnsproxy 无法和 DNSPod 公共 DNS 的 DoH 和 DoT 完成 TLS 握手（https://github.com/AdguardTeam/AdGuardHome/issues/7357 、 https://www.v2ex.com/t/1094021#reply0 ）。

Go 1.23 更新日志： https://tip.golang.org/doc/go1.23

-----

https://acg.mn/@sukka/113572701104608722
https://fxtwitter.com/isukkaw/status/1862888987595280883
https://bsky.app/profile/skk.moe/post/3lc6hhgg6zc2y

GitHub

Go 1.23: Additional key exchange mechanism `X25519Kyber768Draft00` causes AWS Network Firewall to drop packets · Issue #39311 ·…

v5.65.0 of the Terraform AWS Provider upgraded to Go 1.23.0, which introduced a minor change to the crypto/tls standard library package: The experimental post-quantum key exchange mechanism X25519K...

14.1K viewsedited 15:51

Sukka's Notebook

https://github.com/SukkaW/Make-Bilibili-Great-Than-Ever-Before

GitHub

GitHub - SukkaW/Make-Bilibili-Great-Than-Ever-Before: A fork of the userscript "Make Bilibili Great Again", but with some experimental…

A fork of the userscript "Make Bilibili Great Again", but with some experimental features - SukkaW/Make-Bilibili-Great-Than-Ever-Before

11.2K views06:38

8.03K views10:47

https://blog.skk.moe/post/2024-browser-from-a-to-z/

Sukka's Blog

2024：浏览器从 A 到 Z | Sukka's Blog

和大部分人使用浏览器书签或者导航类网站索引自己的常用网站不同，我强烈依赖基于浏览器地址栏自动补全来访问我常用的网站。那么，将 A-Z 逐一输入到 Google Chrome 的地址栏里，我的 Google Chrome 都会自动补全出哪些域名呢？

7.51K views14:08

Sukka's Notebook

https://fxtwitter.com/isukkaw/status/1888162540896788693
https://bsky.app/profile/skk.moe/post/3lhnti7n5y22d

FxTwitter

Sukka / 毛绒绒的大尾巴🦊 (@isukkaw)

So @pnpmjs's onlyBuiltDependencies feature is flawed by default: you don't re-approve to update dependencies.

Let's say you use @rspack_dev and add "rspack/core" to the list, what happens if rspack is compromised and releases a malicious version? It is still…

6.59K views10:03

Sukka's Notebook

https://blog.skk.moe/post/proxmox-ve-customize-debian-cloud-image/

Sukka's Blog

为 Proxmox VE 定制 Debian Cloud 系统镜像与创建虚拟机模板 | Sukka's Blog

最近在「家里云」里搞了个 Proxmox VE 8.3，打算在上面跑几个 VM 玩玩。而作为一名忠实的 Debian 系用户我才不会告诉你我日用的 Linux 系统是搭载 GNOME 的 Fedora 的，所有的 VM 自然要用 Debian 了。借着制作自己的定制化 Debian Cloud Image 的机会，顺便写一篇文章出来和大家分享一下，并纠正、辟谣一下网上现有的有关教程的一些错误。

10.4K views13:41

Sukka's Notebook

5.08K views07:32

Sukka's Notebook

Photo

https://fxtwitter.com/isukkaw/status/1900087310731141137

FxTwitter / FixupX

Sukka / 毛绒绒的大尾巴🦊 (@isukkaw)

The notorious copypastor @tencentcloud grabs all articles from my blog and posts them on their website without my permission, yet they want me to promote their tools in my blog.

Go to hell @tencentcloud and @TencentGlobal

5.18K views07:59

Sukka's Notebook

https://fxtwitter.com/isukkaw/status/1900087310731141137

https://fxtwitter.com/tencentcloud2/status/1900920096262099101

🧵 Thread • FxTwitter / FixupX

liyoujia.1988@163.com мoniter (@tencentcloud2)

@isukkaw @tencentcloud @TencentGlobal Dear Sukka,We have received your feedback and conducted verification. The article you reported was user-generated content within the community, and we have taken it down accordingly. Thank you for your supervision and…

6.04K views15:48

Sukka's Notebook

https://fxtwitter.com/isukkaw/status/1910017975505281139

🧵 Thread • FxTwitter

Sukka / 毛绒绒的大尾巴🦊 (@isukkaw)

Let's place a bet to see how long it will take for the Next.js Team to review my PR (and get it merged). Buy it off!

"The Last Option": The Next.js Team will simply ignore/forget my PR and later implement the same thing themselves, superseding my PR. This…

5.31K views17:19

Sukka's Notebook

SukkaW/Surge 现已支持： - sing-box Rule Set Sukka/Surge@75f188f1 - 转换 Surge 的 DOMAIN-WILDCARD 为 Clash 的 DOMAIN-REGEX 和 sing-box 的 domain_regex Sukka/Surge@f3595820

SukkaW/Surge 现已恢复对 Dreamacro 的 Clash Premium 的 Rules Provider 支持，路径前缀为 /LegacyClashPremium/ ：Sukka/Surge@70c5625

注：只提供 classical ruleset、去除 DOMAIN-REGEX 和 IP-ASN。其余和 Mihomo（ /Clash/ ）一致。domain(set) 和 ipcidr 可直接使用 /Clash/ 下的文件。

GitHub

GitHub - SukkaW/Surge: Rule Snippet & Rule Set for Surge / Mihomo (Clash.Meta) / Clash Premium (Dreamacro) / sing-box / Surfboard…

Rule Snippet & Rule Set for Surge / Mihomo (Clash.Meta) / Clash Premium (Dreamacro) / sing-box / Surfboard for Android / Stash - SukkaW/Surge

5.03K viewsedited 14:01

Sukka's Notebook

SukkaW/Surge 现已恢复对 Dreamacro 的 Clash Premium 的 Rules Provider 支持，路径前缀为 /LegacyClashPremium/ ：Sukka/Surge@70c5625 注：只提供 classical ruleset、去除 DOMAIN-REGEX 和 IP-ASN。其余和 Mihomo（ /Clash/ ）一致。domain(set) 和 ipcidr 可直接使用 /Clash/ 下的文件。

https://fxtwitter.com/isukkaw/status/1917221525574586710

FxTwitter

Sukka / 毛绒绒的大尾巴🦊 (@isukkaw)

SukkaW/Surge 现已恢复对 Dreamacro 最后一版 Clash Premium 的 Rules Provider 支持，路径前缀为 /LegacyClashPremium/

只提供 classical ruleset、去除 DOMAIN-REGEX 和 IP-ASN。domain(set) 和 ipcidr 可继续使用 /Clash/ 下的文件。

https://github.com/SukkaW/Surge/commit/70c56251992c6fda1da1b83582e00f706614726f…

5.81K views14:22

Sukka's Notebook

SukkaW/Surge 现已恢复对 Dreamacro 的 Clash Premium 的 Rules Provider 支持，路径前缀为 /LegacyClashPremium/ ：Sukka/Surge@70c5625

SukkaW/Surge 现已提供试验性的 Surfboard for Android 的 RULE-SET 支持，路径前缀为 /Surfboard/ ：Sukka/Surge@c3e4a1a4
不提供 Surfboard 单独的 DOMAIN-SET、可以直接使用 Surge 的 DOMAIN-SET（/List/domainset）。
SukkaW/Surge 现已支持 Protocol/Network（如匹配 TCP、UDP 等）规则的解析和输出：Sukka/Surge@76f56fa0。

GitHub

GitHub - SukkaW/Surge: Rule Snippet & Rule Set for Surge / Mihomo (Clash.Meta) / Clash Premium (Dreamacro) / sing-box / Surfboard…

Rule Snippet & Rule Set for Surge / Mihomo (Clash.Meta) / Clash Premium (Dreamacro) / sing-box / Surfboard for Android / Stash - SukkaW/Surge

7.16K viewsedited 15:07

Sukka's Notebook

SukkaW/Surge 现提供 Stash for Mac/iOS 的支持，路径前缀为 /Clash/ 下的文件现和 Stash 完整兼容。

5.52K views08:33

Sukka's Notebook

https://fxtwitter.com/isukkaw/status/1925020329631735985

🧵 Thread • FxTwitter

Sukka / 毛绒绒的大尾巴🦊 (@isukkaw)

Did you know that this `fastStringArrayJoin` function is 200% faster than `Array.prototype.join`? Don't take my word for it, check the benchmark.

Why? You might ask. You can find the answer at @romgrk 's blog posting, the link will be in the replies.

5.19K views02:53

Sukka's Notebook

https://fxtwitter.com/isukkaw/status/1925020329631735985

https://fxtwitter.com/isukkaw/status/1928084045893882219

🧵 Thread • FxTwitter

Sukka / 毛绒绒的大尾巴🦊 (@isukkaw)

I just created the fastest HTML escape library for JavaScript (both Node.js and browser). The GitHub repo alongside the full benchmark can be found in the reply.

Always be careful of small details: I even adjusted the order of `switch case` to compare more…

4.91K views13:52

Sukka's Notebook

UniFi 就图个乐子，我是没见过哪家迫真企业级网络设备厂、两个月解决不了 Android 手机无法连接 WPA2-Enterprise/WPA3-Enterprise 的问题的。

请大家不要学习我使用 UniFi 产品、请优先购买来自企业级网络设备厂商，如 BugTik、Disco、Juniper、NetGear、Aruba、RUCKUS 的产品。

4.47K views14:09

Sukka's Notebook

UniFi 就图个乐子，我是没见过哪家迫真企业级网络设备厂、两个月解决不了 Android 手机无法连接 WPA2-Enterprise/WPA3-Enterprise 的问题的。请大家不要学习我使用 UniFi 产品、请优先购买来自企业级网络设备厂商，如 BugTik、Disco、Juniper、NetGear、Aruba、RUCKUS 的产品。

https://fxtwitter.com/isukkaw/status/1929543736066814130

🧵 Thread • FxTwitter

Sukka / 毛绒绒的大尾巴🦊 (@isukkaw)

So, @Ubiquiti is a joke when it comes to network equipment companies. I have never seen any company like this before, failing to identify the issue behind many of my Android phones failing to connect to a WPA2-Enterprise/WPA3-Enterprise Wireless network for…

4.4K viewsedited 14:21

Sukka's Notebook

https://fxtwitter.com/isukkaw/status/1929543736066814130

本来还想给 UniFi 客服与技术支持部门廉政邮箱发邮件的，邮件写到一半、UniFi 的推特账号反而第一个找上来说帮我 escalate 了
https://fxtwitter.com/Ubiquiti/status/1929552201367593071

🧵 Thread • FxTwitter