Duck Apps
Kanalga Telegram’da o‘tish
Ko'proq ko'rsatish
Mamlakat belgilanmaganTexnologiyalar & Aralashmalar7 653
📈 Telegram kanali Duck Apps analitikasi
Duck Apps (@duck_detector) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 16 887 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 7 653-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 16 887 obunachiga ega bo‘ldi.
03 Noyabr, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 1 826 ga, so‘nggi 24 soatda esa 33 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 20.09% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 13.15% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 3 389 marta ko‘riladi; birinchi sutkada odatda 2 218 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 10 ta reaksiya keladi.
- Tematik yo‘nalishlar: Kontent detector, duck, detection, vmp, fu*k kabi asosiy mavzularga jamlangan.
📝 Tavsif va kontent siyosati
Kanal uchun tavsif kiritilmagan.
Yuqori yangilanish chastotasi (oxirgi ma’lumot 04 Noyabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
16 887
Obunachilar
+3324 soatlar
+2847 kun
+1 82630 kun
Postlar arxiv
16 887
Channel: nightly
Version: 0.2.1-Stable (149-canary)
Commit:
feat: attest release ZIPs and publish SPDX inventories Generate validated SPDX inventories from pinned application lockfiles, embedded components and delivered archive contents. Preserve Cargo source revisions and hashes, and gate missing dependency evidence or mismatched payloads.Author: eltavine Branch: main@8d6a247 GitHub Action: Open run Corresponding GPLv3 source
16 887
Channel: nightly
Version: 0.2.1-Stable (148-canary)
Commit:
build(deps): bump @lucide/vue in /ui in the webui-minor group (#53) Bumps the webui-minor group in /ui with 1 update: [@lucide/vue](https://github.com/lucide-icons/lucide/tree/HEAD/packages/vue).Author: dependabot[bot] Branch: main@f4e23fc GitHub Action: Open run Corresponding GPLv3 source
16 887
Channel: nightly
Version: 0.2.1-Stable (145-canary)
Commit:
fix: resolve Device Faker activation through root companion (#54) * fix: resolve Device Faker activation through root companionAuthor: SkyQiQiQwQ Branch: main@947bad2 GitHub Action: Open run Corresponding GPLv3 source
16 887
Channel: nightly
Version: 0.2.1-Stable (144-canary)
Commit:
feat: embed community device presets Add 207 offline device presets with source provenance, model search, brand filtering and editable identity fields. Preserve missing values and show supplied fingerprint conflicts before loading a profile.Author: eltavine Branch: main@811649a GitHub Action: Open run Corresponding GPLv3 source
16 887
Duck Detector Nightly
Version: 2026.11.01-31d82eef7fbb (1103)
APK: Duck Detector-2026.11.01-31d82eef7fbb.apk
Commit: 31d82eef
chore(deps): bump com.autonomousapps:dependency-analysis-gradle-plugin (#435)16 887
16 887
Channel: nightly
Version: 0.2.1-Stable (137-canary)
Commit:
fix: release Device Faker transaction locks explicitly End write and boot lock ownership when the transaction guard is dropped, even when a forked child retains an inherited descriptor. This prevents completed boot attempts from causing later recovery to return boot_in_progress.Author: eltavine Branch: main@55fb085 GitHub Action: Open run Corresponding GPLv3 source
16 887
Channel: nightly
Version: 0.2.1-Stable (135-canary)
Commit:
fix: warn on undeclared dependency licenses during packaging Keep Device Faker and its pinned dependencies intact. Report recorded missing license declarations as a warning while retaining strict checks for malformed metadata, original notices, artifact hashes and corresponding source.Author: eltavine Branch: main@e01da3c GitHub Action: Open run Corresponding GPLv3 source Module ZIP size: 87.96 MiB. This exceeds Telegram Bot's 50 MB upload limit. Download the module from GitHub Releases instead. duck-toolbox-0.2.1-Stable-135-canary.zip
16 887
16 887
16 887
16 887
嗨，朋友们，大家好！
关于 Duck Detector、Duck Toolbox 以及 Duck 系列项目所采用的“优先私下披露，修复后再公开”政策，大家最近有什么新的见解、想法或建议吗？
我们非常欢迎各位分享自己的观点，也希望听到不同的声音。感谢大家一直以来的关注与支持！
Hi everyone!
Do you have any new thoughts, perspectives, or suggestions regarding the "private disclosure first, public disclosure after remediation" policy adopted by Duck Detector, Duck Toolbox, and the Duck ecosystem?
We'd love to hear your opinions and welcome different perspectives. Thank you all for your continued interest and support!
16 887
Repost from N/a
打扰米那桑了喵
小潼想说一下就是之前在测试 KernelSU SELinux Hide 时发现的一个时序侧信道问题喵，这个检测点目前已经公开了，对应的修复也已经通过 #3936 合并了喵（也许还存在一些玄学）
小潼之前在测试 #3877 的时候，发现它似乎引入了新的可观测时序侧信道特征，检测思路就是利用
/proc/thread-self/attr/current 的 context 解析时序差异，借助 App Zygote 的 PROCESS__SETCURRENT 权限，向自身线程的 attr/current 写入两种长度相同的无效输入，分别记录内核拒绝写入所需的时间：
A：u:r:selinux_hide_probe_invalid:s0 B：\n:r:selinux_hide_probe_invalid:s0（首字节换成换行符）然后小潼在测试过程中发现，在 SELinux Hide OFF 的情况下，A 的耗 时通常小于 B，也就是 A-B < 0ns，但是当 SELinux Hide ON 的情况下，A-B > 0ns，出现了可以通过多次配对采样观察到的时序差异喵 小潼去看了下 AOSP 的 selinux_setprocattr源码点这里喵 和 context 解析源码点这里喵 这部分，发现 A 会进入 SID 转换，但是因为 type 查找失败提前返回 EINVAL，而 B 因为首字节是换行符，会跳过 context 转换，进入
prepare_creds，最后通过 abort_creds 返回 EINVAL 喵
问题就在于 #3877 修改后的 SELinux Hide 实现中，A 的 context 转换路径会执行两次 kmemdup_nul，同时还涉及备份策略与原始策略的解析，而 B 会直接跳过这些操作，小潼怀疑这些额外开销改变了 A/B 两条路径的相对耗时，从而产生了可观测的时序特征喵
相关检测实现已经放在 Duck Detector 里面了：检测实现点这里喵
KernelSU 这边的话，小潼后来也尝试修复了这个问题，提交了 #3936，在原本双策略交错解析的基础上，改成复用同一份 context 缓冲区，避免两次 kmemdup_nul() 带来的额外开销，同时修复了原始策略 context 校验的问题，并补充了 SID 同步在策略更新时的重试处理喵
目前 #3936 已经合并了喵，也就是说此前发现的这条时序侧信道路径已经有了对应的修复。不过时序侧信道本身比较依赖设备、内核以及调度环境，所以这里也不能直接认为所有设备上的时序差异都已经完全消失喵 T﹏T
最后也感谢 5ec1cff 佬的指导，以及参与讨论和修复的各位佬喵，谢谢你们喵~16 887
公告 | Announcement
中文
如有特殊问题或个别咨询需求，请私信 @eltavine_apps，或前往交流群 @duc_detector_chat 咨询。
本频道即日起不再接受私信，感谢您的理解与支持。
English
for special requests or specific inquiries, feel free to dm @eltavine_apps or ask in our community group @duc_detector_chat.
this channel will no longer accept dms. thanks for your understanding and support!
16 887
16 887
16 887
Channel: nightly
Version: 0.2.1-Stable (131-canary)
Commit:
fix: validate Linux executables and preserve configuration draftsAuthor: eltavine Branch: main@f48b975 GitHub Action: Open run Corresponding GPLv3 source
