Compare commits

...

16 Commits

Author SHA1 Message Date
PawelDycha
5168e85806
Merge badd9ebc1f into 9165a192d6 2024-08-13 00:37:42 +08:00
evilcos
9165a192d6
Merge pull request #35 from lisa2gether/main
Add Versi Indonesia.
2024-08-05 14:16:32 +08:00
lisa2gether
9498f49e89
Add files via upload 2024-08-05 11:29:45 +08:00
lisa2gether
fcde10233a
Add files via upload 2024-08-01 18:46:05 +08:00
lisa2gether
c1d49e5c7e
Add files via upload 2024-08-01 18:41:20 +08:00
evilcos
cdb3ac740d
Update README.md
Fix typo, thanks X @OxEncrypt_pls
2024-07-05 12:15:20 +08:00
evilcos
774208e0ce
Update README_CN.md 2024-06-28 15:18:50 +08:00
evilcos
1148d5027c
Merge pull request #34 from lisa2gether/main
Add
2024-06-28 15:16:09 +08:00
lisa2gether
e4c30300de
Add files via upload 2024-06-28 15:03:37 +08:00
lisa2gether
fd09488d9f
Update README_AR.md 2024-06-28 14:20:38 +08:00
evilcos
4554f355a0
Merge pull request #33 from lisa2gether/main
Add AR Version
2024-06-28 12:58:45 +08:00
lisa2gether
52fe25561d
Add files via upload 2024-06-28 10:46:18 +08:00
lisa2gether
a8e2477733
Add files via upload 2024-06-27 15:59:06 +08:00
evilcos
59da1d63a3
Merge pull request #32 from alsere1/patch-1
Fix typo
2024-06-15 16:14:58 +08:00
alsere1
c4130c6876
Fix typo 2024-06-14 11:28:09 +02:00
PawelDycha
badd9ebc1f
Create blank.yml 2023-07-29 13:18:09 +01:00
7 changed files with 2381 additions and 29 deletions

36
.github/workflows/blank.yml vendored Normal file
View File

@ -0,0 +1,36 @@
# This is a basic workflow to help you get started with Actions
name: CI
# Controls when the workflow will run
on:
# Triggers the workflow on push or pull request events but only for the "main" branch
push:
branches: [ "main" ]
pull_request:
branches: [ "main" ]
# Allows you to run this workflow manually from the Actions tab
workflow_dispatch:
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
# This workflow contains a single job called "build"
build:
# The type of runner that the job will run on
runs-on: ubuntu-latest
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/checkout@v3
# Runs a single command using the runners shell
- name: Run a one-line script
run: echo Hello, world!
# Runs a set of commands using the runners shell
- name: Run a multi-line script
run: |
echo Add other actions to build,
echo test, and deploy your project.

View File

@ -2,13 +2,14 @@ Blockchain dark forest selfguard handbook<br>
*Master these, master the security of your cryptocurrency.<br>*
:fire:Website: https://darkhandbook.io/<br>
:cn:中文版:[《区块链黑暗森林自救手册》](README_CN.md)<br>
:jp:日本語版:[ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック](README_JP.md)<br>
:kr:한국어 버전:[블록체인 다크 포레스트 셀프가드 핸드북](README_KR.md)<br>
*Note: V1, Update Logs, please see the Chinese version.*
:cn:中文版: [《区块链黑暗森林自救手册》](README_CN.md)<br>
:jp:日本語版: [ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック](README_JP.md)<br>
:kr:한국어 버전: [블록체인 다크 포레스트 셀프가드 핸드북](README_KR.md)<br>
:saudi_arabia:اللغة العربية: [دليل النجاة في الغابة المظلمة للبلوكتشين](README_AR.md)<br>
:indonesia:Versi Indonesia[Buku Panduan menjaga diri didalam "dark forest"](README_ID.md)<br>
Author: Cos@SlowMist Team<br>
Contact meTwitter([@evilcos](https://twitter.com/evilcos))、即刻(@余弦.jpg)
Contact meTwitter([@evilcos](https://twitter.com/evilcos))、Jike(@余弦.jpg)
Translator:
>[Alphatu](https://twitter.com/Alphatu4) | C. | [CJ](https://twitter.com/0xnjars) | [JZ](https://twitter.com/scorpionzhang) | [Lovepeace](https://twitter.com/lovepeace_53) | [Neethan](https://mobile.twitter.com/neethanverse) | [pseudoyu](https://twitter.com/pseudo_yu) | [SassyPanda](https://twitter.com/sassypandacap) | ss | [XL](https://twitter.com/leixing0309)
@ -165,7 +166,7 @@ If you pay attention, you will find the download pages for both GPG tools give s
**The mobile wallet** is similar to the browser extension wallet. However, it should be noted that the App Store has different versions for each region. Cryptocurrency is banned in Mainland China, so if you downloaded the wallet with your Chinese App Store account, there is only one suggestion: don't use it, change it to another account in a different region such as the US and then re-download it. Besides, the correct official website will also lead you to the correct download method (such as imToken, OneKey, Trust Wallet, etc. It is important for official websites to maintain high website security. If the official website is hacked, there will be big problems.).
**If it is a hardware wallet**, it is highly recommended to buy it from the official website. Do not buy them from online stores. Once you receive the wallet, you should also pay attention to whether the wallet is inact. Of course, there are some shenanigans on the packaging that are hard to detect. In any case, when using a hardware wallet, you should create the seed phrase and wallet address at least three times from scratch. And make sure that they are not repeated.
**If it is a hardware wallet**, it is highly recommended to buy it from the official website. Do not buy them from online stores. Once you receive the wallet, you should also pay attention to whether the wallet is intact. Of course, there are some shenanigans on the packaging that are hard to detect. In any case, when using a hardware wallet, you should create the seed phrase and wallet address at least three times from scratch. And make sure that they are not repeated.
**If it is a web wallet**, we highly recommend not to use it.Unless you have no choice, make sure it is authentic and then use it sparingly and never rely on it.
@ -488,7 +489,7 @@ Metadata refers mainly to the embedded picture, motion pictures and other conten
There are two main security concerns that may arise here:
* One is that the URI where the image (or motion picture) is located might not be trustworthy. It can just be a randomly selected centralized service, on one hand there is no guarantee of availability, on the other hand the project team can modify the images at will, thus the NFT will no longer become an immutable "digital collectible". Generally it's recommended to use centralized storage solutions such as IPFS, Arweave, and select a well-known URI gateway service.
* One is that the URI where the image (or motion picture) is located might not be trustworthy. It can just be a randomly selected centralized service, on one hand there is no guarantee of availability, on the other hand the project team can modify the images at will, thus the NFT will no longer become an immutable "digital collectible". Generally it's recommended to use decentralized storage solutions such as IPFS, Arweave, and select a well-known URI gateway service.
* Another is the potential for privacy leakage. A randomly selected URI service might capture user's basic information (such as IP, User-Agent, etc)
Signing security is another big concern here, and we will illustrate it below.
@ -1049,8 +1050,10 @@ SlowMist, Twitter (@SlowMist_Team), e.g. Pds | Johan | Kong | Kirk | Thinking |
English translator, e.g. Alphatu | C. | CJ | JZ | Lovepeace | Neethan | pseudoyu | SassyPanda | ss |
Japanese translator, e.g. Jack Jia | Mia
Korean translator, e.g. Sharon | Jeongmin
Arabic translator, e.g. Ahmed Alsayadi | Gabr Alsayadi
Indonesian translator, e.g. Finball
Jike App
Some Anonymous friends ...
Some Anonymous friends...
More info: https://darkhandbook.io/contributors.html
```
@ -1074,7 +1077,7 @@ As I've stated previously, when recommending a tool, I strive to describe it as
Although I do not make any specific tool recommendations in this section, I would like to share a valuable mindset: the firewall mindset. The previously emphasized concepts of "zero trust" and "continuous verification" are actually part of this firewall thinking.
For example, in the use of wallets, signing is a major area of concern for fund security, with various sophisticated phishing methods related to signing, such as:
For example, in the use of wallets, signing is a major area of concern for fund security, with various sophisticated phishing methods related to signing, such as:
- The exploitation of native signing with eth_sign/personal_sign/eth_signTypedData_*, where eth_sign has been increasingly blocked by wallets.
- The exploitation of authorization functions like approve/permit for Tokens/NFTs.

1162
README_AR.md Normal file

File diff suppressed because it is too large Load Diff

View File

@ -1,10 +1,12 @@
区块链黑暗森林自救手册<br>
*掌握这些,掌握你的加密货币安全。*
🔥Website: https://darkhandbook.io/<br>
:us:English[Blockchain dark forest selfguard handbook](README.md)<br>
:jp:日本語版:[ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック](README_JP.md)<br>
:kr:한국어 버전:[블록체인 다크 포레스트 셀프가드 핸드북](README_KR.md)<br>
:fire:Website: https://darkhandbook.io/<br>
:us:English: [Blockchain dark forest selfguard handbook](README.md)<br>
:jp:日本語版: [ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック](README_JP.md)<br>
:kr:한국어 버전: [블록체인 다크 포레스트 셀프가드 핸드북](README_KR.md)<br>
:saudi_arabia:اللغة العربية: [دليل النجاة في الغابة المظلمة للبلوكتشين](README_AR.md)<br>
:indonesia:Versi Indonesia[Buku Panduan menjaga diri didalam "dark forest"](README_ID.md)<br>
Blockchain dark forest selfguard handbook<br>
*Master these, master the security of your cryptocurrency.<br>*
@ -16,6 +18,7 @@ Blockchain dark forest selfguard handbook<br>
| 日期 | 更新日志 |
| --- | --- |
| 2024/06/28 | V1.2 新增[阿语版](README_AR.md),感谢翻译者们。|
| 2024/05/16 | V1.2 新增[韩文版](README_KR.md),日文版及英文版同步更新!还有一点小修正>_< |
| 2024/04/24 | V1.2 新增`那些工具`章节及更新`贡献者`、`那些官网`。 |
| 2023/05/24 | V1.1 `小心签名!`章节做了点更新。 |
@ -1058,6 +1061,9 @@ Punycode 这种钓鱼方式,几年前就有真实利用了,比如 2018 年
慢雾Twitter(@SlowMist_Team)Pds | Johan | Kong | Kirk | Thinking | Blue | Lisa | Keywolf...
英文译者Alphatu | C. | CJ | JZ | Lovepeace | Neethan | pseudoyu | SassyPanda | ss | XL
日文译者Jack Jia | Mia
韩文译者Sharon | Jeongmin
阿拉伯文译者Ahmed Alsayadi | Gabr Alsayadi
印度尼西亚文译者Finball
即刻
一些匿名的朋友
更多https://darkhandbook.io/contributors.html

1145
README_ID.md Normal file

File diff suppressed because it is too large Load Diff

View File

@ -1,11 +1,12 @@
ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック<br>
*当ハンドブックの内容をマスターするということは、暗号資産におけるセキュリティをマスターするということです。<br>*
:fire:Website: https://darkhandbook.io/<br>
:us:English[Blockchain dark forest selfguard handbook](README.md)<br>
:fire:Webサイト: https://darkhandbook.io/<br>
:cn:中文版:[《区块链黑暗森林自救手册》](README_CN.md)<br>
:us:English[Blockchain dark forest selfguard handbook](README.md)<br>
:kr:한국어 버전:[블록체인 다크 포레스트 셀프가드 핸드북](README_KR.md)<br>
*Note: V1, Update Logs, please see the Chinese version.*
:saudi_arabia:اللغة العربية: [دليل النجاة في الغابة المظلمة للبلوكتشين](README_AR.md)<br>
:indonesia:Versi Indonesia[Buku Panduan menjaga diri didalam "dark forest"](README_ID.md)<br>
著者: 余弦@慢雾安全团队<br>
連絡先Twitter([@evilcos](https://twitter.com/evilcos))、Okjike(@余弦.jpg)
@ -933,7 +934,6 @@ Web3の普及に伴い、Web3インフラやソーシャルプラットフォー
以上、この部分について簡単に触れましたが、詳しく説明するつもりはありません。この分野の知識は膨大で、中には私が苦手とするものもあります。場合によって、習得すべき知識は以下です:
* スマートコントラクトのセキュリティ分析とフォレンジック
* オンチェーン資金の送金分析およびフォレンジック
* Webのセキュリティ分析とフォレンジック
@ -1048,14 +1048,15 @@ Googleはその後、この問題を完全に解決するためにAuthenticator
SlowMist、Twitter(@SlowMist_Team)例えばPds | Johan | Kong | Kirk | Thinking | Blue | Lisa | Keywolf...
英語版翻訳者例えばAlphatu | C. | CJ | JZ | Lovepeace | Neethan | pseudoyu | SassyPanda | ss | XL
日本語版翻訳者例えばJack Jia | Mia
韓国語版翻訳者例えばSharon | Jeongmin
アラビア語版翻訳者例えばAhmed Alsayadi | Gabr Alsayadi
インドネシア語翻訳者例えばFinball
okjike
匿名の友人達
他の方https://darkhandbook.io/contributors.html
...
```
**このハンドブックに掲載するために採用されたあらゆる補足、例えば、特定の防御や事例に関するアドバイス、翻訳作業、大きなミスの修正など。**
## その他のツールについて

View File

@ -2,15 +2,16 @@
*이것들을 파악하면 암호화폐의 보안을 파악하는 것입니다.<br>*
:fire:웹사이트: https://darkhandbook.io/<br>
:cn:中文版:[《区块链黑暗森林自救手册》](README_CN.md)<br>
:us:English[Blockchain dark forest selfguard handbook](README.md)<br>
:jp:日本語版:[ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック](README_JP.md)<br>
*참고: V1, 업데이트 로그, 중국어 버전을 참조하세요.*
:cn:中文版: [《区块链黑暗森林自救手册》](README_CN.md)<br>
:us:English: [Blockchain dark forest selfguard handbook](README.md)<br>
:jp:日本語版: [ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック](README_JP.md)<br>
:saudi_arabia:اللغة العربية: [دليل النجاة في الغابة المظلمة للبلوكتشين](README_AR.md)<br>
:indonesia:Versi Indonesia[Buku Panduan menjaga diri didalam "dark forest"](README_ID.md)<br>
작성자: Cos@SlowMist Team<br>
연락하기Twitter([@evilcos](https://twitter.com/evilcos))、Jike App(@余弦.jpg)
번역자&교정자:
번역자 & 교정자:
>[ChainWith Sharon](https://twitter.com/sharonmkt) | Jeongmin
![alt this](res/this.png)
@ -1037,15 +1038,14 @@ SlowMist, Twitter(@SlowMist_Team), e.g. Pds | Johan | Kong | Kirk | Thinking | B
English 역자, e.g. Alphatu | C. | CJ | JZ | Lovepeace | Neethan | pseudoyu | SassyPanda | ss | XL
日本語 역자, e.g. Jack Jia | Mia
한국인 역자, e.g. Sharon | Jeongmin
아랍어 역자, e.g. Ahmed Alsayadi | Gabr Alsayadi
인도네시아어 역자, e.g. Finball
Jike App
익명의 친구들
https://darkhandbook.io/contributors.html
...
```
**귀하의 기여가 이 핸드북에 포함되는 것이 적용되면 귀하는 기여자 목록에 추가됩니다. 예: 특정 안전 방어 제안 또는 사례 제공 번역 작업에 참여했습니다. 더 큰 오류 등을 수정했습니다.**
## 도구들
@ -1117,8 +1117,7 @@ Scam Sniffer https://www.scamsniffer.io/
Wallet Guard https://www.walletguard.app/
Pocket Universe https://www.pocketuniverse.app/
即刻 https://okjike.com/
Jike https://okjike.com/
Kaspersky https://www.kaspersky.com.cn/
Bitdefender https://www.bitdefender.com/
Cloudflare https://www.cloudflare.com/