刚看到一个开源安全研究项目 Storm-Breaker,展示了恶意链接可能如何诱导用户暴露摄像头、麦克风、位置等敏感权限。
This is a dev post classified by Jev as Security (a tool drop), kept by the Dev Radar because it carries real work, not commentary.
现在还有人随便点陌生链接?真得长点心。 刚看到一个开源安全研究项目 Storm-Breaker,展示了恶意链接可能如何诱导用户暴露摄像头、麦克风、位置等敏感权限。 它真正值得警惕的不是“多高级”,而是让人直观看到:一个看似普通的链接,也可能藏着隐私风险。 所以陌生链接别乱点,浏览器权限也别见一个就全给。 🔗 https://github.com/ultrasecurity/Storm-Breaker
Posted by lumxss (24.7k followers) 1 days ago · 7 likes · 1.5k views · view the original post on X. Kept by the Dev Radar as Security. Tools mentioned: storm-breaker.
More dev work like this
- Cloudflare just published an extensive security audit skill. — @denicmarko
- 准备研究下 zcode 的 DeepSeek 高缓存秘诀。 — @LinearUncle
- ZCode, the official harness for GLM, is now OPEN SOURCE 🔥 — @Hesamation
- @Da7_Tech — @Da7_Tech
- The Practical Cryptography for Developers book by Svetlin Nakov (2023) is now in… — @burkov
- Development update on factorseal, a local secrets vault for Linux, macOS, and Windows. — @domenkozar
- Aeterna: A Lightweight, Self-Hosted Dead Man's Switch for End-of-Life & Digital Legacy… — @DarkWebInformer
- This is Palantir energy on your laptop. — @0x0SojalSec
Every post is read and classified by Jev (TypeSafe): what it is, which market it belongs to, and whether the link is a real tool. 18.9k posts from 4.9k X accounts over the last 21 days, 2.1k tools, 12 markets. Collected every 5 minutes, fully re-ranked every hour — last update 2026-09-21 06:12 UTC. Full method.