Date: 2026-04-10
Analyst: nemesis
Classification: Trojan / Backdoor (Alien RAT variant)
Severity: CRITICAL
Campaign ID: CityOfSin (extracted from C2 callback UTM parameters)
Scope: CPUID official domain compromise affecting CPU-Z, HWMonitor, HWMonitor Pro, PerfMonitor 2, powerMAX + separately FileZilla
Status: Breach confirmed and fixed by CPUID; site was compromised ~6 hours on April 9-10, 2026
CPUID Statement: "A secondary feature (a side API) was compromised for approximately six hours [...] causing the main website to randomly display malicious links. Our signed original files were not compromised."
| #!/bin/sh | |
| set -fuC | |
| # --- USER CONFIG STARTS --- | |
| IN_KEYS="ingress|input|incoming|ollama" | |
| OUT_KEYS="egress|output|outgoing" | |
| SEC_KEYS="drop|deny|reject|block" | |
| # --- USER CONFIG ENDS --- | |
| show_help() { |
This gist contains python scripts to convert from the Animetail's backup structure to Anikku's and Komikku's backup structure respectivly.
Warning
These scripts were created using Gemini 3.0 Pro. I haven't looked into how the backups are created myself, but I've tested both scripts and the backups can be imported in their respective app. Please be aware that I do not guarantee that these scripts are "correct" or "pretty". I just wanted a quick fix for migration and I thought I could share it for people with the same issue.
On August 25, 2025 Google published a blog that starting in 2026, Android will require all apps to be registered by verified developers in order to be installed by users on certified Android devices. This applies to all apps installed from outside the Google PlayStore from either third part app stores like F-Droid, or directly from sites via browsers/file manager apps. Publishing apps on Google PlayStore already has had these same requirements since July 12, 2023. The verification requirements for all apps will engage for Brazil, Indonesia, Singapore and Thailand in September 2026 and engage globally in 2027 and beyond.
There has been lot of noise and backlash regarding the new requirements since then. Malware being deployed both outside and from PlayStore is a big issue and is obviously a cause for concern and a legitimate reason for how developer verification can help reduce it,
| { | |
| "_id": "UnEyMn03T", | |
| "name": "AV1 QSV→CPU Fallback (duplicate)", | |
| "description": "AV1 QSV→CPU Fallback (duplicate)", | |
| "tags": "", | |
| "flowPlugins": [ | |
| { | |
| "name": "Check Channel Count 8", | |
| "sourceRepo": "Community", | |
| "pluginName": "checkChannelCount", |
Important Note: (18-Feb-2025) This gist has some issues. Please see the addendum. Thanks @hortimech for pointing this out
A step-by-step configuration guide for setting up RHEL 9.5 with SSSD and Samba for Active Directory integration. Covers all required configuration files, settings, and explanations for each option. Also sources for further documentation and troubleshooting recommendations:
- Domain Joining with SSSD (configuring
sssd.conf,realmd, Kerberos, and automatic authentication for SSH and Samba) - Samba Configuration with SSSD (using
sssas the backend for identity mapping, Kerberos authentication, and ensuring smooth Windows/Mac access) - Kerberos-based Single Sign-On (SSO) (ensuring users can access SMB shares without re-entering credentials)
- Offline Authentication (caching credentials for when AD is unreachable)
| //install wrangle and init a project to initialize the worker | |
| //add the code given below in index.js | |
| import { Hono } from 'hono'; | |
| import { cors } from 'hono/cors'; | |
| const app = new Hono(); | |
| app.use( |
| $hypr = ~/.config/hypr | |
| source = $hypr/colors.conf # for custom color | |
| # GENERAL | |
| general { | |
| no_fade_in = true | |
| grace = 1 | |
| disable_loading_bar = false | |
| hide_cursor = true | |
| ignore_empty_input = true |
| export function buildQuery(params: BuildQueryParams) { | |
| const { type, query, category, page = 1, perPage = 20 } = params; | |
| const conditions = [`*[_type=="${type}"`]; | |
| if (query) conditions.push(`title match "*${query}*"`); | |
| if (category && category !== "all") { | |
| conditions.push(`category == "${category}"`); | |
| } |
| #!/bin/bash | |
| # Update the bt-tracker= line in aria2.conf | |
| # Any bt-tracker= lines are removed and and a new one added at the bottom of the file | |
| # Updates at: https://gist.github.com/HaleTom/fe873dc2f3c5bd14f7418efefc2b91a8 | |
| # Inspiration: https://github.com/wuyuansushen/aria2c_TrackersList | |
| set -euo pipefail | |
| shopt -s failglob |