📄 中国制造的 Zbtlink 路由器出厂即带后门,可开启未认证的 Root Shell 网络安全公司 VulnCheck 披露,中国路由器厂商 Zbtlink 至少20款型号的路由器固件中出厂预装了名为“ENDLESSDOORS”的后门程序。该后门存在于公司过去两年多发布的全部21个固件镜像中,开机后通过init脚本自动启动,每35秒向中国境内的 C2 服务器发送信标。后门伪装成Linux内核线程kworker,实际以 root 权限在用户空间运行,基于 2015 年上传至 GitHub 后从未更新的开源工具 rctl,连接时无需任何握手或身份验证,即可执行服务器发来的任意命令或开启交互式 root shell。攻击者只需劫持通信或控制域名解析,即可在无需从外网直接访问的情况下完全接管路由器。受影响型号包括CPE2801、WE1026-5G-WD、WE1326、WG3526、Z8102AX-2DSIM等。Zbtlink 已紧…

Channel
兴趣使然的分享台
@shfoim
On this record: Growth · Engagement · Reactions · Posts · Citations · Cite this entry
527subscribers
-1 since we began measuring on 7 August 2026
Risers and fallers across the register · movement among entries of Under 1,000.
Register entry
| Telegram ID | -1001156269566 |
|---|---|
| Type | Channel |
| Username | @shfoim |
| Created | Between 1 March 2018 and 30 June 2021— estimated from Telegram’s id allocation, not measured. How this range is calculated. |
| First recorded | 7 August 2026 |
| Last confirmed live | 13 August 2026 |
| Measurements held | 3 |
| Confirmed unchanged | 1 time, most recently 13 August 2026 |
| On Telegram | t.me/shfoim |
Growth
| Measured (UTC) | Subscribers | Change |
|---|---|---|
| 13 Aug 2026, 08:48 | 527 | -1 |
| 7 Aug 2026, 04:31 | 528 | no change |
| 7 Aug 2026, 04:28 | 528 | first reading |
Engagement
20 posts held, back to 23 January 2026 — the reader has not yet reached the start of this channel’s public history, so older posts may sit further back, unread. Read across 1 pageof Telegram’s post history, 20 posts per page.
- ERR · 30 days
- 18.0%
- avg views ÷ 527 subscribers
- Avg views / post
- 95.0
- 2 posts measured
- Reaction rate
- —
- this channel exposes no reaction counts
- Posts in window
- 2
- of 20 held
ERR is average views per post over the last 30 days divided by subscribers, the definition TGStat uses, so this figure is comparable with the one you will see elsewhere. It falls structurally as a channel grows: a high ERR on a small channel and a low one on a large channel describe reach mathematics, not quality. We publish the figure and the sample it came from and pass no verdict on it.
ER is defined industry-wide as (forwards + reactions + comments) ÷ views— note the denominator is views, not subscribers. Telegram’s public web preview carries views and reactions but not forward or comment counts, so the reaction rate above is the reactions term only and is therefore a floor: the true ER for this channel is higher by an amount we have not measured and will not estimate.
| Window | Rolling 30 days · latest post in window 6 August 2026 |
|---|---|
| Posts held | 20 (23 January 2026 – 6 August 2026) |
| Views total | 190 |
| Reactions total | — |
| Forwards / comments | not exposed by the public surface — not measured, not estimated |
| Readings taken | 7 Aug 2026, 04:31 UTC |
Views are a single reading per post, taken at the time above. A post published in the last day or two is still accumulating views, which pulls the 30-day average down slightly. That is a property of the standard definition rather than a fault in it, so we keep the definition rather than “correcting” the number into something nobody can reproduce.
Precision. Telegram publishes view counts on its public widget in short form — 8.12K, 3.7M — so any reading at or above 1,000 reaches us rounded to three significant figures, and only counts below 1,000 are exact. Averages and rates derived from them are shown to the same precision rather than to the unit: a figure like 3,701,250 would assert digits nobody measured.
Reaction counts are published per emoji and rounded the same way, so a total below 1,000 is exact and a larger one is a sum that may carry a rounded component from each emoji above 1,000. Because it is a sum, it does not look rounded — read a large reaction total as three significant figures per contributing emoji rather than as the figure it prints.
Reaction mix
9 reactions across 4 posts, in 2 distinct kinds. The most used accounts for 66.7% of them.
| Reaction | Count | Share | Share, drawn |
|---|---|---|---|
| 👍 | 6 | 66.7% | |
| 😁 | 3 | 33.3% |
No sentiment is inferred, and none should be read in. This table is ordered by count and by nothing else. Emoji do not carry stable meaning across languages or communities — 🙏 is thanks in one channel and mourning in another — so we publish which ones were pressed and how often, and pass no judgement on what an audience meant by them.
Precision. Telegram publishes reaction counts per emoji and short-forms each one — 4.34K, 1.2M — so any single kind at or above 1,000 reaches us at three significant figures, and only counts below 1,000 are exact. The shares above are ratios of those figures and carry the same error. This is also why the total here can differ slightly from a reaction total printed elsewhere on the page: both are sums of the same rounded parts, taken over samples with different edges.
Coverage. Reactions were read on 7 of the 20 sampled posts in this sample. Summed by Telegram’s own count on each post — not by adding up the per-emoji breakdown above — those same posts carry 9reactions in total: the kind of figure the paragraph above means by “a reaction total printed elsewhere on the page”.
Measured over the 20 most recent posts we hold, published 23 January 2026 to 6 August 2026, using the newest reading held for each. Telegram Stars are excluded: they are a payment, not a reaction, and they have their own section.
Recent posts
📄 美国政府是如何没收大量比特币的 摘要:每隔一段时间就有新闻说美国政府没收大量加密货币却从不说清过程,让人误以为比特币被攻破。2025年10月美国司法部以打击电诈洗钱名义起诉柬埔寨太子集团陈志,宣布没收其约12.7万枚比特币(当时价值约150亿美元)。陈志成立LuBian矿池用挖矿洗钱,2020年12月该矿池超90%比特币被盗,数量正好127272枚,与后来没收数字吻合。真正原因是2017年3月Libbitcoin Explorer教学库发布3.0.0版本时,把随机数生成从系统安全函数改成了MT19937算法。这个算法种子空间只有2³²,完全可以暴力碰撞。该漏洞在社区存在了整整6年,直到2023年才被正式报告。LuBian矿池开发者参考了这个库,导致所有私钥都可预测。美国技术团队2020年就发现并利用此漏洞清空钱包,把币转到冷钱包后静静等了5年,才找到合法名义公开宣布没收。比特币协议本身没有被攻破,问题出在私钥生成使用了弱随…
📹 後室為啥可怕?深度解析後室的美學
📹 用最好的动画为你讲解--HBM的原理
📹 蓝牙是怎么诞生的?为什么它能在“大环境下”一枝独秀?
四千年前的古城 Mohenjo-daro 随经济发展而变得更平等 #科学 约克大学研究人员分析了古城 Mohenjo-daro 的住房模式。这座古城位于今天的巴基斯坦,其繁荣的时代是在公元前 2600 年至 1900 年间,它是印度河文明的最大城市之一。研究人员发现,Mohenjo-daro 的贫富差距低于其他古代城市。随着时间的推移,其贫富差距甚至缩小了。这座古城与其它文明的古城有显著的差异:没有宫殿没有统治者的巨型雕像没有奢侈陵墓,但拥有井然有序的街道和先进的排水系统,其公共基础设施遍及全城而不是只服务于精英阶层。古埃及为统治者建造金字塔,青铜时代的希腊为精英阶层建造宫殿,而 Mohenjo-daro 则投资于面向全体民众的公共服务。Mohenjo-daro 挑战了长期以来“经济增长会导致不平等加剧”的观点,城市发展和生产力提高的同时,资源分配也更加公平。 https://archaeologymag.com/2026/0…
📄 我将端口 22 开放了 54 天,这是来客名单 Arman Hossain 在 2026 年进行了一项,将一个伪装成 Ubuntu 服务器的 Python 脚本(即 SSH 蜜罐)在互联网上开放 22 号端口并持续了 54 天。期间该蜜罐共记录了 26.9 万次连接和 7556 个独立 IP,上线不足一分钟便遭到自动扫描。数据显示,最常被试探的密码依然是“123456”,此外还有大量针对物联网设备的默认凭证以及针对 Solana 加密货币验证节点的撞库尝试。令人意外的是,高达 99.6% 的攻击者纯属自动化脚本,它们在登录后仅执行简单的系统指纹探测(如 uname 命令)便断开连接。在仅有的 28 个打开交互式终端的真实访客中,既有带着纯粹好奇心四处摸索、屡犯拼写错误的初学者,也有熟练运用反取证手段消除历史记录的隐蔽黑客,甚至还有利用原始 TCP 套接字进行精准攻击的专业僵尸网络运营者。这次实验揭示了互联网无处不在的自动化…
🖥 可直连 DNS over https 地址 https://dns-doh.dnsforfamily.com/dns-query https://v.recipes/dns-query https://doh.applied-privacy.net/query https://router.comss.one/dns-query https://private.canadianshield.cira.ca/dns-query https://odvr.nic.cz/doh https://protective.joindns4.eu/dns-query https://noads.joindns4.eu/dns-query https://child.joindns4.eu/dns-query https://child-noads.joindns4.eu/dns-query https://dns.digitale-ge…
👍2
https://web.archive.org/web/20260410191456/https://rentry.co/r9frf3i4
📄 代理工具箱 简介:由于市井流传的 App 清单大多停留在 Clash 删库前 (2023.10) 的软件生态,本篇另起炉灶,旨在梳理一份“与时俱进”的清单,涵盖移动端、电脑端、硬路由、软路由等平台,以及规则集、小工具、订阅转换等周边产品。 https://www.haitunt.org/app.html
👍3
📻 20世纪美国托洛茨基派怎么都变成了保守派?
🌐 阿尔特弥斯Ⅱ(Artemis II)实时轨道情况 https://www.nasa.gov/missions/artemis-ii/arow/
Showing the 12 most recent of 20 posts we hold for @shfoim. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked ≈ was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.
Forward network
Republishes
Channels on the register whose posts this channel has forwarded.
Built only from forwarded posts we have actually read, on both sides. Coverage is early and deliberately incomplete: a missing link means we have not read the post that would prove it, never that the relationship does not exist. Counts are distinct forwarded posts observed, so they only ever go up as we read more.
Cite this entry
A live page changes as we take new readings, so a citation should name the measurement it is based on, not just the URL. The line below cites the subscriber count as measured 13 August 2026 — this entry's latest reading, not the date you are reading this.
“兴趣使然的分享台” (@shfoim), 527 subscribers as measured 13 August 2026. Telegram Register, tgregister.com/channel/shfoim.
Full measurement history, CC BY 4.0. Every reading this register holds for this entry, not just the latest one, as a dated, downloadable record: CSV · JSON. Free to use with attribution to tgregister.com. Each file carries its own generation timestamp, which is the figure to cite for exactly when the data was retrieved.