This repository is a configuration-only bundle for the cryptostorm VPN service, providing OpenVPN client configuration files (.ovpn) organized by cryptographic method (RSA, ECC, Ed25519, Ed448, and post-quantum ML-DSA-87) and server location. Despite having no application source code, the repo is classified as an application because it delivers ready-to-use configuration templates for a network service. The configs are well-structured, with extensive inline comments explaining security choices, cipher performance, and usage instructions. Each .ovpn file follows a consistent template with embedded CA certificates and shared tls-crypt/tls-auth keys. The repository serves as a distribution point for end-users to connect to cryptostorm servers, with a focus on transparency and user education.
Nearby Glasses is a cross-platform mobile application (native Android in Kotlin and iOS in Swift/SwiftUI) that continuously scans Bluetooth Low Energy (BLE) advertisements to alert users when smart glasses from known manufacturers (Meta, EssilorLuxottica, Snap, Zhuhai Jieli) are nearby. Detection is based on immutable BLE company IDs and device-name substrings, with configurable RSSI threshold and notification cooldown. The Android app runs a foreground service for background scanning; the iOS app currently scans only in the foreground and offers a 'Canary Mode' visual indicator instead of system notifications. The app is privacy-focused: no telemetry, no ads, local-only logs with user-initiated export.
This repository implements the Dusk Network blockchain node (Rusk), a full Proof-of-Stake node with privacy-preserving transactions (Phoenix) and public transactions (Moonlight). The system is a Rust workspace containing a consensus engine (succinct attestation consensus with proposal/validation/ratification steps), a WebAssembly-based smart contract VM (Piecrust), a RocksDB/SQLite ledger, a mempool, an HTTP/GraphQL API server (Axum), and a CLI/TUI wallet. It also includes a JavaScript SDK (w3sper.js) for browser/Deno wallet interaction and a wallet-core library compilable to WASM. The architecture is modular: the node binary (rusk/src/bin/main.rs) composes services via a builder pattern (RuskNodeBuilder), supporting both full-chain and HTTP-only modes. Key data flows include transaction submission via RUES (Rusk Event System) or GraphQL, consensus message propagation over Kadcast P2P, block execution through the VM with hard-fork feature gating, and state persistence via RocksDB column families. External dependencies include dusk-plonk, dusk-poseidon, jubjub-schnorr, wasmtime, rkyv, and sqlx. The codebase demonstrates high craftsmanship in areas like deterministic committee sortition, zero-knowledge proof verification caching, and a reusable data-driver pattern for contract encoding/decoding.
The Open Cookie Database is a community-curated reference dataset cataloging HTTP cookies. The single source of truth is open-cookie-database.csv, which records each cookie's platform, category (Functional, Personalization, Analytics, Marketing, Security), cookie name/pattern, domain, description, retention period, data controller, GDPR/privacy policy URL, and a wildcard-match flag. The dataset is maintained through manual PR-based contributions following a documented research workflow, and it is consumed by downstream privacy tooling (notably the EU EDPB Website Auditing Tool, via a dedicated EDPB JSON export). A static HTML viewer renders the CSV client-side using PapaParse and DataTables for browsing and export. The data lineage is simple and fully automated: on every push touching the CSV, GitHub Actions runs validate.py (UUID format/uniqueness, category whitelist, duplicate detection), then regenerates two derived artifacts - open-cookie-database.json (records grouped by platform) via convert_csv_to_json.py, and open-cookie-database-edpb.json via convert_edpb.py, which maps the flat CSV onto the EDPB tool's nested knowledge-base JSON schema. The pipeline is deterministic, idempotent, and commits the regenerated JSON back to the repo when changed. There is no application runtime, API, or library; the three Python scripts and CI workflows are infrastructure that exists solely to keep the dataset valid and in sync across formats. Craftsmanship is functional but modest. The scripts show reasonable engineering discipline: CLI parameterization, graceful handling of missing/empty files, GitHub Actions error annotations, and non-zero exit codes on failure. The validation script encodes real data-quality rules. However, there are clear signs of aging: the HTML viewer references the retired StackPath Bootstrap CDN and contains a malformed protocol-relative script URL ('//http://...'); the main validation workflow still pins Node 16 (EOL) and uses checkout@v2; convert_edpb.py uses the deprecated datetime.utcnow(); and pandas is installed unpinned. These issues do not break the core CSV-to-JSON pipeline, but they make the supporting surface fragile. The repository is a data asset first and code second - the value lies in the curated cookie catalog and the governance around it, not in the software. It is a solid, genuinely useful open-data project with competent but unremarkable data engineering. An analyst can clone it and reproduce all derived JSON artifacts with just Python and pandas, since the dataset is bundled and the transforms are simple, explicit, and parameterized.
This is a monorepo for the Ember.js-based encrypted chat application 'emberclear', which provides end-to-end encrypted messaging with no server-side message storage. The architecture is modular, consisting of multiple Ember addons (crypto, networking, local-account, UI, test-helpers, tracked-local-storage) and a separate card game app (pinochle) that reuses the same networking and crypto infrastructure. The chat app uses public-key cryptography (tweetnacl, libsodium) via web workers, relays messages through Phoenix WebSocket relays, and persists data locally via IndexedDB and localStorage. It includes features like QR code identity sharing, channel voting with cryptographic chains, and a state-machine-driven setup wizard. The codebase is well-tested with QUnit, acceptance tests, and smoke tests, but shows signs of technical drift with outdated dependencies (Node 14, Ember 3.26.1), many TODO comments, and incomplete features (e.g., voting, QR login transfer). The pinochle game app appears experimental but demonstrates sophisticated state machine usage and animation systems.
This repository is a lightweight PHP CLI tool that converts ad-blocking filter lists (primarily from AdGuard's CNAME tracker research and EasyPrivacy) into HOSTS-format blocklists. The core script, converter.php, fetches upstream lists from hardcoded URLs, parses domain entries, and outputs files containing '0.0.0.0 <domain>' lines. The generated .txt files (e.g., AdguardMobileAds.txt, EasyPrivacy3rdParty.txt) are committed to the repository and meant to be consumed by HOSTS-file-based ad blockers on mobile devices. The architecture is intentionally minimal: a single PHP script handles conversion, a shell script (.check.sh) automates periodic updates by committing only when the diff is exactly one line, and a GitHub Actions workflow (php.yml) runs the converter on a schedule. The tool is designed for manual or scheduled regeneration, not as a live service. It relies on upstream AdGuard lists, which introduces a maintenance risk if those sources change format or disappear. The repository is a hybrid of application code and generated data artifacts, but the dominant character is a small utility application. The converter is generic enough to accept custom list names and URLs, making it reusable for other filter-list-to-hosts conversions. However, the conversion is lossy—many filter options (e.g., $domain, $third-party, $redirect) are ignored—and there are no tests or CI validation for the converter logic. The project is functional for its niche but shows signs of technical drift and brittle upstream coupling.
This repository is a collection of configuration files (Quantumult X rewrite rules) for ad blocking and UI customization across dozens of Chinese mobile apps and websites. The rules intercept network requests, reject advertising endpoints, modify API responses using JSON-jq expressions, or redirect traffic to remove promotional content. Key modules cover apps like Weibo, Amap, Bilibili, Netease Music, and Douban, as well as function scripts for YouTube ad removal, Bilibili subtitle conversion, and Emby media server enhancements. The architecture is flat: each .conf file is a standalone rule module that can be imported into Quantumult X. The repo is not a software application itself but a set of well-documented, actively maintained proxy configurations. There is no application code, data pipeline, or reusable library; the value lies in the precise, battle-tested URL patterns that demonstrate deep reverse-engineering of app APIs. The repo is highly specialized for Chinese app ecosystems and requires Quantumult X (or compatible proxy tools) to function.
This repository is a collection of domain blocklists designed for use with Pi-hole and similar DNS-based ad-blocking services. It provides multiple specialized text files containing domain names to block, categorized by purpose (e.g., ads and trackers, telemetry, specific applications like TikTok and WhatsApp, malware, ransomware, and spam). The README explains how to integrate these lists into Pi-hole's adblocking configuration. While the repository lacks visible data processing code (showing only the final curated lists), the topical organization and maintenance updates suggest an ongoing curation effort aimed at removing false positives and optimizing the lists for specific use cases.
This repository is a curated collection of machine unlearning research, combining a comprehensive survey paper (in the form of a Kaggle notebook) with executable implementations of several unlearning algorithms across different domains. It includes code for graph neural network unlearning (GraphProjector), federated learning unlearning (FedEraser), and approximate nearest neighbor search with unlearning (UnfoldedSelf-ReconstructionHashing, a fork of ann-benchmarks). The repo serves both as a literature index (taxonomy, evaluation metrics, datasets) and a benchmark hub for reproducing and comparing unlearning methods. While the survey is actively maintained, the algorithm codebases are research prototypes with varying levels of polish and portability.
This repository is a curated, versioned collection of domain names and URLs used by mobile location tracking libraries, analytics SDKs, adware, spyware, stalkerware, malware, and other telemetry-gathering software. The primary output is three text files in standardized ad-blocking formats (plain hostnames, AdBlock Plus syntax, uBlock Origin syntax) plus a separate Windows telemetry list. The data is sourced from reverse engineering Android APKs (referenced by file hash), public security research reports, passive DNS data, and investigative journalism. The repo serves both as a domain blocklist for privacy-focused users and as a reference for threat intelligence analysts. It is not a software application or an automated data pipeline; it is a manually curated dataset maintained through ongoing research and community contributions.
A Debian-packaged Bash toolset that ports ParrotSec's anonsurf and pandora tools to Kali Linux. The anonsurf component makes the whole system use a Tor transparent proxy: it saves existing iptables rules, flushes them, redirects DNS to a local Tor DNSPort, forwards TCP/UDP/ICMP through Tor's TransPort on port 9040, excludes private and local networks, disables IPv6 through sysctl, and supports changing Tor identity. The pandora component is a shutdown service that drops kernel caches and scrubs RAM with sdmem from secure-delete. The repository is not a library or service; it is an installer plus a .deb source tree, with GitHub Actions that build the package and verify it installs in Kali rolling containers. The code is functional and has some good operational detail, including UID-based iptables owner rules, resolvconf vs. plain resolv.conf handling, and package maintainer scripts that swap torrc files. It is also rough around the edges: it is largely monolithic shell, has no unit tests for the iptables logic, relies on outdated actions/checkout@v2 CI actions, and the IPv6 re-enable function has a filename typo that checks /etc/sysctl.d/98-kali-anonsurf but removes /etc/sysctl.d/98-kali-anonsurf.conf, which can prevent IPv6 from being re-enabled after stop.
Geph Android is a production VPN client that wraps a Rust-based circumvention engine (geph5-client) and a web UI (gephgui) inside a native Android application. The architecture is a hybrid of a WebView-hosted UI and a native daemon process: the main activity loads a local HTML/JS UI via WebViewAssetLoader, and a JavaScript bridge (init.js) communicates with Kotlin through @JavascriptInterface to invoke RPC calls over a Unix socket to the daemon. The daemon is spawned as a separate process (libgeph.so) and manages the VPN tunnel via Android's VpnService. The app supports multiple build variants (debug, releaseAPK for sideloading with auto-update, releasePlay for Google Play with Firebase Analytics and Play In-App Review) using a factory pattern to inject platform-specific features. Key data flows include user authentication via broker RPC, VPN start/stop lifecycle, and periodic update checks that download and verify APK signatures. External dependencies include the Rust engine binary, a prebuilt web UI, JNA for native access, and Firebase services for the Play variant.
This repository is a curated 'awesome list' for Federated Learning (FL) research, maintained as a Jekyll static site. It aggregates hundreds of linked GitHub repositories and DBLP search strategies. The core data asset is a machine-generated go.mod file that pseudo-pins the linked repositories as Go dependencies, produced by the add_dependent.py script which extracts GitHub URLs from README.md, queries the GitHub API for commit hashes, and writes a go.mod. However, this is not a functional Go module; it is a novelty lockfile. The dblp-search-keywords.md document provides a meticulous analysis of DBLP search syntax to discover FL papers without the 'federate' keyword. The repository has significant hybrid character: while it is primarily a content aggregation site (application-adjacent), its technical substance lies in the data exploration and search strategy documentation (research-oriented). The actual code is minimal and tightly coupled to the repository's specific structure, limiting reusability. The add_dependent.py script is a one-time scraper with hardcoded rate limiting and token placeholder, not a general-purpose tool.
This repository is a curated list of free software network services and web applications that can be self-hosted. It is maintained by the community and contains hundreds of entries organized by category, along with links, licenses, and deployment methods. It does not contain any executable code; it is purely a documentation and reference resource. The list is actively maintained and used as a directory for discovering self-hosted alternatives to various SaaS services.