手机里装了几十个 App，装的时候一路点「允许」，过后哪个能读通讯录、哪个能开麦克风，自己也说不清。
This is a dev post classified by AGK Intelligence as Security (a tool drop), kept by the Dev Radar because it carries real work, not commentary.
手机里装了几十个 App，装的时候一路点「允许」，过后哪个能读通讯录、哪个能开麦克风，自己也说不清。 NOIR 是一个跑在电脑上的开源审计工具，数据线连上自己的 Android 手机，就能列出每个应用拿了哪些权限。 它还会把权限翻成能拿到什么数据，位置、通讯录、短信、相机、屏幕这些，再和应用里的上报地址配对，看出哪类数据可能流向哪里。 GitHub：http://github.com/Verlintas/NOIR 处理建议分成三档，可以放心执行的、需要人工确认的、不建议动的。每一步都提前备好撤回的办法，改错了能恢复原样。 工具本身不往外发任何数据，也不需要 root。第一次运行有向导带着走，全程只问两三个是或否，重复扫描通常几秒就好。 默认不会卸载任何东西，这点我比较放心。想摸清自己手机底细的，可以拿它做一次体检。
Posted by GitHubDaily (91.5k followers) 1 h ago · 6 likes · 1.1k views · view the original post on X. Kept by the Dev Radar as Security. Tools mentioned: noir.
More dev work like this
- "You can't build a business where you're trying to stop the future." — @MTSlive
- SITUATION EXPLAINED: OpenAI’s GPT-6 Cyber exploited 948 Linux bugs and came up with… — @MTSlive
- We heard it happened again. When will you find the ghost to protect your self custody — @DagentX_
- We built the vuln scanner we wanted to use but couldn't find. — @danlovesproofs
- Cybersecurity for Beginners Made Simple! #BigData #Analytics #DataScience #AI… — @gp_pulipaka
- OpenAI released GPT-6 Cyber, a model built to find and exploit software vulnerabilities… — @rohanpaul_ai
- You can't fix what you can't see. That's why we made the Chainguard Insights Dashboard,… — @chainguard_dev
- Running local-first, zero-cloud dependency cryptographic state machines directly in a… — @Kesse85585Chris
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.9k posts from 5k X accounts over the last 21 days, 9.4k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-11-06 04:17 UTC. Full method.