恋之火

 

多内核vpn客户端程序ZedSecure

 Multi-core VPN client for Android and desktop: Xray, sing-box, Psiphon, Tor, DNS tunnels, WireGuard/AmneziaWG, OpenConnect, IKEv2.

Every way through, in one app.

فارسی

What is ZedSecure?

ZedSecure is a VPN and proxy client for Android, Linux, Windows and macOS that ships with more than one engine. When one route is blocked, the next one is already installed: Xray and sing-box for the usual protocols, Psiphon and Tor for when nothing else connects, DNS tunnels for networks that let little more than DNS through, and WireGuard, AmneziaWG, OpenConnect and IKEv2 for servers you already run. Engines can be chained through each other, and one tap tests every server and moves the connection to the fastest one.

Engines

Engine	Carries
Xray	VLESS with Reality, Vision and XHTTP, VMess, Trojan, Shadowsocks, Hysteria2, WireGuard, AmneziaWG
sing-box	TUIC, Naive, AnyTLS, ShadowTLS, OpenVPN .ovpn files, and plain sing-box JSON
Psiphon	Psiphon's own network; no server of yours needed
Tor	obfs4, Snowflake and Conjure bridges
DNS tunnels	DNSTT, VayDNS and MasterDNS, over UDP, TCP, DoT or DoH
OpenConnect	Cisco AnyConnect and compatible gateways
IKEv2	the IPsec client built into Android
SSH	on its own, or through any of the above

Android has all of them. Linux, Windows and macOS carry Xray, sing-box, the DNS tunnels and SSH.

Features

• Imports share links, subscriptions, Xray and sing-box JSON, .ovpn, Amnezia vpn:// and QR codes
• Auto-select keeps the tunnel on the fastest server and fails over on its own
• Chains in both directions, for example Xray over Tor or Tor over Xray
• Per-app routing, a geoip/geosite rule editor, and SNI spoofing on rooted devices
• Vault: share a config as a .zsx file that connects without showing it, with an optional password and expiry date
• Speed test, MTU finder, DNS resolver scanner and a live log
• Material 3 Expressive, light and dark, in English, Persian, Russian and Chinese

Download

Android: Google Play, or the APK for your device from Releases (arm64-v8a for almost every phone, armeabi-v7a for older ones).

Linux: .deb, .rpm, .AppImage or .tar.gz from Releases. On Arch Linux, the community package zedsecure-bin is in the AUR: yay -S zedsecure-bin. On NixOS, nix run github:CluvexStudio/ZedSecure.

Windows: the .msi installer, or the portable .zip.

macOS: the .dmg for Apple Silicon or for Intel. The app is not notarized, so open it the first time with right-click, then Open.

Building

./tools/get-cores.sh android     # or linux, windows, macos-arm64, macos-x86_64
./gradlew :app:assembleRelease   # three APKs, one per ABI
./gradlew :desktop:packageDeb    # or packageRpm, packageMsi, packageDmg

Every engine is built in ZedSecure-Cores, one workflow per engine, from the forks and exact commits in its pins.txt. tools/cores.txt names the build each release takes. Pushing a v* tag builds Android and every desktop system in CI and puts them all in one release; Android and desktop share one version.

Credits

The DNSTT and VayDNS modes of the DNS tunnel are built with the VayDNS library, a fork of dnstt. The MasterDNS mode is a separate engine, credited below.

The main ideas of the tunnel come from SlipNet by anonvector: DNS over plain TCP (VayDNS does not have this by itself), the fan-out and round-robin resolver modes with spread count, the DNS pool that picks the fastest resolvers on each connect, the global resolver override and prevent-DNS-fallback settings, and the design and text of the DNS and SSH settings.

Versions before 3.0.9 used SlipNet's own engine, including its TCP transport, inside the core. Since 3.0.9, the engine is zeddns, written for this app. It has the same features, but with its own code.

ZedSecure also stands on Xray-core, sing-box, Psiphon, Tor, MasterDnsVPN, AmneziaWG, OpenConnect, hev-socks5-tunnel, and zeptun. Their licences are in NOTICE.

from  https://github.com/CluvexStudio/ZedSecure

------------------------------------------------------------------------------------------------- 

ZedSecure is a multi-core, open-source VPN and proxy client for Android and desktop platforms (Windows, macOS, and Linux) developed by CluvexStudio. Note that there is also a distinct corporate entity named ZedSecure IT Services Ltd offering UK-based cybersecurity and managed IT services. [1, 2, 3]

Multi-Protocol Client (CluvexStudio/ZedSecure)

What it does: It acts as a bring-your-own-server network client rather than a paid VPN service; you add your own configurations or subscription links. [1]
Engines & Protocols:
• Xray & sing-box: VLESS (with REALITY), VMess, Trojan, Shadowsocks/Shadowsocks 2022, Hysteria2, AnyTLS, TUIC, Snell.
• VPN Protocols: WireGuard, AmneziaWG, OpenVPN (.ovpn), OpenConnect, and IKEv2/IPsec.
• Censorship-Resistant & Tunnels: Tor (Snowflake, obfs4, Conjure), Psiphon, and DNS tunnels (DNSTT, VayDNS, MasterDNS). [1, 2, 3]
Key Features: Supports multi-engine chaining, automatic server-speed testing with one tap, Material 3 UI themes, and cross-platform releases. [1, 2]
Where to get it: Available via GitHub Releases, Google Play, or package managers like the Arch Linux AUR (zedsecure-bin). Source code and documentation are hosted on the ZedSecure GitHub Repository. [1, 2, 3]

---

Enterprise Cybersecurity (ZedSecure IT Services Ltd)

Focus: UK-based managed security service provider (MSSP).
Services: 24/7 SOC-as-a-Service, penetration testing, Zero-Trust architecture, Microsoft 365/Azure security, and Cyber Essentials/ISO 27001 alignment.
Website: ZedSecure IT Services Ltd. 

ai工具十月第三周 Github 开源热榜

大陸爆紅"神級強化玻璃"

 

利用instinct帮我分别在render/netlify/github pages平台上，安装基于nextjs的静态博客程序kgi

 我用github a/c：brightmann@gmail.com分别登录render.com平台/netlify.com平台/github.com网站。

以下是我跟instinct的对话截图，共8张图。

所得到的博客地址分别是：

 https://kgi-k7n4.onrender.com/ ， https://kgi-k7n4.onrender.com/blog

 https://brightmann-kgi.netlify.app/

 https://brightmann.github.io/kgi

 项目地址：

 https://github.com/khou22/khou22.github.io

 https://github.com/brightmann/kgi

 在此处:  https://github.com/brightmann/kgi/tree/main/src/data/blog ,创建源帖read-u.md ,内容为：
---
title: "读你"
author: "ym"
date: 2026-11-02 18:43
description: "这是一篇文章"
tags: [misc1, misc2, misc3]
---

此处写正文或html codes
(详见https://github.com/brightmann/kgi/blob/main/src/data/blog/read-u.md?plain=1）
新建源帖后，要等待10分钟左右，网站才会更新。

 

 

从法国到美国：制度最怕忘记人性

 

法国近年的财政困境、福利争议、移民摩擦和社会动荡，很容易被解释成左派失败、福利国家失败，或者全球化失败。这样的结论太大，也未必有必要。真正值得注意的，也许只是一个更朴素的问题：制度究竟有没有把人当作真实的人来设计？

福利最初当然有其合理性。一个人生病、失业、年老，不应该因为一时失去劳动能力就陷入绝境。问题在于，福利一旦提高到一定程度，就会改变人的选择。如果一个人什么都不做，也能够得到住房、医疗、现金补贴和其他保障，而辛苦工作后扣掉税收、通勤、托儿和失去的福利，只多得到有限收入，那么“为什么一定要工作”就不再是一个荒唐问题。

这不是道德问题，而是人性。

人会计算成本和收益。一个制度若要求人明明少工作，能够更舒服，却为了公共利益主动多劳动，就已经把制度稳定建立在人的自觉之上。偶尔有人愿意这样做，不能证明多数人会长期这样做。

移民政策也是如此。

欧洲需要劳动力，于是希望引进低技能移民填补护理、清洁、建筑、运输等岗位。但如果一个来自较贫穷国家的人，在欧洲即使不工作，得到的生活保障已经超过他在原籍国拼命劳动时的生活水平，那么他的参照系已经改变。他当然仍可能工作，但不能把“他来了自然就会努力填补低薪岗位”当作前提。

与此同时，本地纳税人也有人性。

一个人愿意帮助真正困难的人，并不等于他愿意无限承担他认为不公平的成本。当他越来越感觉自己每天工作、缴税，而别人可以选择不工作，社会互信就可能开始磨损。福利制度真正依赖的，并不仅仅是钱够不够，而是多数人是否仍然相信：大家大体遵守同一套规则。

养老金也是同一个道理。老人会认为自己缴了一辈子钱，养老金理所当然；年轻人却会计算自己今天缴多少、将来还能不能拿到同样待遇。改革则意味着眼前有人受损，于是政治人物最容易选择的办法就是拖延。

今天不改，明天再说。

欧洲真正值得美国观察的，也许就在这里。不是因为法国一定会“完蛋”，更不是因为美国明天就会法国化，而是因为某些机制具有普遍性：福利一旦形成，削减很难；税负一旦上升，劳动激励会变化；移民规模扩大以后，同化不能只靠愿望；债务积累以后，当届政府总有理由把问题留给下一届。

美国目前仍然有欧洲很难复制的优势：强大的科技产业、资本市场、能源、创业文化以及更强的劳动激励。但美国并不具有另一种人性。

美国人一样会趋利避害，选民一样不喜欢福利被砍，政客一样害怕得罪选民，总统一样可能发现“解决问题的人反而挨骂，不解决问题的人反而比较安全”。

真正危险的，从来不是某一项福利多花了一点钱，也不是某一次移民政策出了问题，而是整个政治体系慢慢形成一种习惯：今天的好处我拿，今天的成本别人承担，长期的问题下一届处理。

如果每一届都这么想，问题最后总会落到某个人手里。到了那时，社会甚至可能开始期待一个人站出来说：你们几十年都解决不了，那就给我更多权力，让我来解决。

因此，从法国和欧洲看美国，真正值得思考的并不是哪一种主义最终胜利，而是一条最古老也最容易被忘记的原则：

制度不能假定人会自觉成为好人。

好的制度应该假定普通人会算自己的账，会保护自己的利益，会偷一点懒，会维护既得利益，掌权者也会珍惜已经得到的权力。然后在这样的前提下，制度依然能够运行。

善意可以决定制度为什么开始。

人性决定它能走多远。

梦驼铃 （ai女版，音色不错）