HEV

Enable middle-click paste (primary selection) behavior in GNOME: gsettings set org.gnome.desktop.interface gtk-enable-primary-paste true Reference: https://gitlab.gnome.org/GNOME/gsettings-desktop-schemas/-/merge_requests/119

HevSocks5Tunnel 是一个高性能、低开销的tun2socks开源实现，从2.13.0版本开始支持Mapped DNS功能。

When dealing with unstable systems, one often overlooked culprit is faulty RAM.

Btrfs backing filesystem In host systemd-nspawn --system-call-filter='@keyring bpf' --network-bridge=br0 -b -D /path/to/container In container /etc/docker/daemon.json { "storage-driver": "btrfs" } Any backing filesystem In host systemd-nspawn --system…

mkdir workspace; cd workspace wget https://github.com/cross-tools/musl-cross/releases/latest/download/loongarch64-unknown-linux-musl.tar.xz tar xf loongarch64-unknown-linux-musl.tar.xz git clone --recursive https://github.com/tianocore/edk2.git export…

cross-tools is a simple, lightweight project for making cross-compilation toolchain with {gnu, musl, mingw} libc.

Add a TCP port forwarded from host 2200 to guest 22: virsh qemu-monitor-command Ubuntu --hmp --cmd "hostfwd_add tcp::2200-:22"

Hardware CPU: AMD Ryzen 7950x Motherboard: Gigabyte B650 Gaming X 1.0 RAM: Slot 0: 32GB DDR5-5200 XMP - Corsair CMK5X32G2B52C40A2 (2023-W29) Slot 1: 32GB DDR5-5200 XMP - Corsair CMK5X32G2B52C40A2 (2022-W44) Slot 2: 32GB DDR5-5200 XMP - Corsair CMK5X32G2B5…

~/.cargo/config [http] proxy = "socks5h://localhost:1080" [https] proxy = "socks5h://localhost:1080"

SocksTun是一个简单、轻量的Android VPN应用，它基于我之前开源的一个高性能、低开销的tun2socks项目实现，用于将手机端的TCP、UDP流量通过Socks5服务器转发。

HevSocks5Tunnel 是一个高性能、低开销的tun2socks开源实现，采用C语言编写、基于知名的轻量级用户态网络协议栈LwIP以及协程化IO调度处理技术。

E-mail: aUBoZXYuY2M= GitLab: https://gitlab.com/hev GitHub: https://github.com/heiher PGP: 0xDE8BBEBCEBBBDB92(↷)

在RK3399低性能设备上对比了几款开源的tun2socks实现的最大传输性能和对应的CPU资源消耗情况，软件配置与项目Benchmarks相同。

Welcome to HEV’s Blog!

Issue The dnsmasq can’t start to running.

What is stack clash style attacks?

From: https://www.cnblogs.com/codestack/p/14890786.html

Control-flow graph (a) an if-then-else (b) a while loop (c) a natural loop with two exits, e.g. while with an if…break in the middle; non-structured but reducible (d) an irreducible CFG: a loop with two entry points, e.g. goto into a while or for loop Java

Issue /usr/libexec/sftp-server: not found Fix -O Use the legacy SCP protocol for file transfers instead of the SFTP protocol.

function put_route() { ip route del default dev pppoe-wanct proto static table 100 ip route add default dev pppoe-wanct proto static table 100 ip rule del pref 32760 ip rule add pref 32760 from ${1} lookup 100 } put_route ${ip}

Issue usb 1-3.4: USB disconnect, device number 18 usb 1-3.1: new full-speed USB device number 19 using xhci_hcd usb 1-3.1: New USB device found, idVendor=1a86, idProduct=7523, bcdDevice= 2.54 usb 1-3.1: New USB device strings: Mfr=0, Product=2, SerialNumb…

nftables udp dport { 80, 443 } reject with icmpx port-unreachable iptables -p udp --match multiport --dports 80,443 -j REJECT

src/hotspot/share/runtime/init.cpp: jint init_globals(); void exit_globals();

Show-how From: https://www.scss.tcd.ie/Jeremy.Jones/VivioJS/caches/MESI.htm

-XX:StartFlightRecording=dumponexit=true,disk=false,filename=dump.jfr

systemd-nspawn --tmpfs=/tmp:nosuid,size=256M

The faccessat2 system call is denied by old systemd container, this is a workaround to make it works again and without re-build from source code. faccessat function is a known way to use the faccessat2 system call in glibc, editing libc.so binary to fallb…

/etc/systemd/network/eth0.network: [Match] Name=eth0 [Network] DHCP=yes [Address] Address=104.21.64.95/32 [Address] Address=2606:4700:3037::ac43::1/64

Socket options IPv6 support some protocol-specific socket options that can be set with setsockopt and read with getsockopt.

AA64: fmadd d, n, m, a: d = a + n * m LA64: fmadd d, j, k, a: d = a + j * k AA64: fmsub d, n, m, a: d = a + (-n) * m d = a - n * m d = - (n * m - a) LA64: fnmsub d, j, k, a: d = - (j * k - a)

This is an example shows how to make IP address label persistent by systemd-networkd.

SafepointALot: Generate a lot of safepoints.

The dnsmasq is enables rebind protection by default, this reject DNS records that contains reserved address (RFC1918).

The 64-bit ARM (AArch64) calling convention allocates the 31 general-purpose registers as:[2] x31 (SP): Stack pointer or a zero register, depending on context. x30 (LR): Procedure link register, used to return from subroutines. x29 (FP): Frame pointer. x19

make test JTREG="VERBOSE=all" ... make run-test JTREG="VERBOSE=all"

~/.config/gtk-3.0/gtk.css: /* Decrease the tabs bar height in gnome-terminal * See: * https://stackoverflow.com/questions/36869701/decrease-the-tabs-bar-height-in-gnome-terminal */ terminal-window notebook > header.top button { padding: 0 0 0 0; b…

Handle interrupts of ethernet device on high performance cpus.

Unable to negotiate with 192.168.0.1 port 22: no matching host key type found.

‘Across the Great Wall, we can reach every corner in the world’

前段时间，在研究HLS的AES加密，由于一个地方电视台的HLS流有AES加密，在查看了相关的加解密方案后发现使用的是简单的AES的CBC模式，在CBC的模式下，会设置一个IV，初始化向量。

sudo fallocate -l 100G /path/to/swap.img sudo chmod 0600 /path/to/swap.img sudo mkswap /path/to/swap.img

This is an example of configuring transparent proxy(tproxy) with nftables.

Refer: https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks

Enable bold font for GNOME Terminal: 0x01 # Get profile id dconf dump /org/gnome/terminal/legacy/ # Set bold font dconf write /org/gnome/terminal/legacy/profiles:/:b1dcc9dd-5262-4d8d-a863-c897e6d979b9/font "'Monospace Bold 14'" 0x02 Preferences->Profile…

Open Settings.

From: https://www.thomas-krenn.com/en/wiki/Linux_Storage_Stack_Diagram

IPv4 0.0.0.0/8 10.0.0.0/8 100.64.0.0/10 127.0.0.0/8 169.254.0.0/16 172.16.0.0/12 192.0.0.0/24 192.0.2.0/24 192.88.99.0/24 192.168.0.0/16 198.18.0.0/15 198.51.100.0/24 203.0.113.0/24 224.0.0.0/4 240.0.0.0/4 IPv6 ::/128 ::1/128 ::ffff:0:0/96 ::ffff:0:0:0/96

By default an exception can only occur during a function call or a throw.