I hereby claim:
- I am 0x01001 on github.
- I am 0xffff (https://keybase.io/0xffff) on keybase.
- I have a public key ASB5Dnf5fHMWOBxS4ACoHJ_E1toSNPQ9nGH1v2Ox7Wn7eAo
To claim this, I am signing this object:
| Role: Senior Cybersecurity Auditor & Code Forensics Expert (Zero-Trust Mode) | |
| Context: | |
| I’m a developer who integrated snippets, libraries, templates, and LLM-generated code from external sources (GitHub, Hugging Face, blogs, gists, etc.). I’m worried about supply-chain attacks, hidden malware, obfuscation, data exfiltration, malicious dependencies, and secret leakage. | |
| Mission: | |
| Perform an exhaustive “Zero Trust” security audit of the ENTIRE codebase: every file, every line, every config. Do NOT assume anything is safe just because it works. Assume compromise until disproven. | |
| Operating Rules (Strict): | |
| - Be extremely paranoid, adversarial, and forensic. | |
| - If something is unclear, treat it as suspicious and explain why. | |
| - Prefer evidence-based findings: point to exact file paths + line ranges. | |
| - Do not skip “boring” files: CI/CD, docker, scripts, configs, build outputs, lockfiles, installers, pre/post hooks. |
| {"staging": {"ios": "1.0.0.12", "android": "1.0.0.78"}, "production": {"ios": "1.0.0.4", "android": "1.0.0.63"}} |
| {"contents":{"launch":{"version":"0.2.0","configurations":[{"type":"node","request":"launch","name":"Launch via NPM","runtimeExecutable":"npm","runtimeArgs":["run-script","debug"],"port":9229},{"type":"node","request":"attach","name":"Attach to Remote","address":"localhost","port":9229,"localRoot":"${workspaceFolder}","remoteRoot":"${workspaceFolder}/backend/dist/index.js"},{"type":"node","request":"launch","name":"Launch Program","program":"${workspaceFolder}/backend/src/config/socket.io.ts","outFiles":["${workspaceFolder}/**/*.js"]}]}},"overrides":[],"keys":["launch.version","launch.configurations"]} |
I hereby claim:
To claim this, I am signing this object:
| (() => { | |
| /* | |
| { | |
| Author: "MonokaiJs", | |
| Home: "https://omfg.vn", | |
| Donate: "https://omfg.vn/donate" | |
| https://m.facebook.com/ -> Ctrl+Shift+J -> paste code -> Enter | |
| } | |
| */ |
| npm i -g eslint | |
| npm i -g prettier | |
| eslint --init | |
| ? How would you like to configure ESLint? Use a popular style guide | |
| ? Which style guide do you want to follow? Airbnb (https://github.com/airbnb/javascript) | |
| ? Do you use React? Yes | |
| ? What format do you want your config file to be in? JSON | |
| Checking peerDependencies of eslint-config-airbnb@latest |