郭立 (leeguoo)
Search
EN 中文 日本語

Hi, I'm leeguoo (Guo Li)

· Guo Li · full-stack developer ·

❯ Start Reading ❯ Membership
★ FEATURED posts/wechat-decrypt-vs-wechat-use.md + 1 min read
@leeguoo · Jul 6, 2026 · Article · public

Two Paths to Local WeChat Data: A Principle-Level Comparison of wechat-use and wechat-decrypt (with Corrections from Real-World Testing)

Two WeChat decryption tools are often compared, but usually along the wrong axis. The real difference is not how many features they have, but how they obtain the SQLCipher key. This article breaks both down at the principle level: SQLCipher’s per-database key model, two mechanisms for extracting keys from memory (LLDB + entitlement vs. sudo + mach_vm), and corrections to two mistaken judgments I made in the first version after actually running wechat-use on my own machine.
$ ls -lh ./posts/ | head -4
Jul 7, 2026
-rw-r--r--
1 min read
❯How to Use Codex’s Computer Use in Claude Code
Codex’s Computer Use only recognizes OpenAI’s own signature. As soon as another agent tries to perform a real action, it gets blocked with -10000. I took that signature gate apart down to the assembly, then used a thirty-line DYLD hook to change the team ID it reads, wiring the whole Computer Use stack into Claude Code. This article is both a teardown and a connection method you can copy.
→
Jul 7, 2026
-rw-r--r--
1 min read
❯How to Build a Good AI Girlfriend
Engineering notes from three months in production: typing rhythm, model selection, layered prompts, guaranteed-reply fallbacks, plus three reversals that took cache hit rate from 61% to 91%. Building an AI chat companion that does not break immersion is not about the model; it is about engineering details.
→
Jul 3, 2026
-rw-r--r--
18 min read
❯Three Things to Watch in Claude Account Suspensions: Region, IP Type, Request Fingerprints, and How to Self-Check
Breaking down the recent wave of Claude account suspensions, it appears to be the overlap of three independently detectable axes: region, which is the only red line officially stated; IP type, including data center, VPN, proxy, and residential proxy; and steganographic watermarks hidden in dates when using relays. This article organizes how each axis is detected, how to self-check, and how to avoid issues, while also introducing a free detection page and a small tool for the status bar.
→
Jul 2, 2026
-rw-r--r--
1 min read
❯Desktop Apps Are Actually Web Pages: Once You Realize This, Operating Them Is No Longer “Desktop Automation”
The first time I connected chrome-use to the Slack desktop app and got a snapshot full of named buttons, I was taken aback. Later it clicked: the Slack desktop app is a web page to begin with. An Electron app is the Chromium rendering engine wrapped in a native shell, with a clearly structured DOM inside. This article explains why that turns the traditionally messy work of “desktop automation” into operating a web page, and one trade-off you need to know compared with browser scenarios.
→
 $ ls ./archives/ · 8+ entries →
Reverse Engineering & Security

Reverse Engineering & Security

Reverse Engineering & Security

All →

Facing AI Audits: How Can You “Legalize” Your Reverse Engineering Project?

Examines a practical approach to handling decompilation projects by combining Claude Code and Gemini CLI, focusing on the challenge of ownership verification and resolving it through an automated sanitization process.

How I Verified the Local Database Unlock Chain in WeChat macOS 4.0.1.52

A retrospective on engineering-focused forensics conducted on my own device. By tracing static files, runtime open paths, and SQLCipher parameters in sequence, I ultimately confirmed that the local database unlock chain in WeChat macOS 4.0.1.52 is based on an account-level key distribution model.

AI & Agent

AI & Agent

AI & Agents

All →

iphone-use — Computer-use, but for the iPhone

An open-source agent control layer for a real iPhone: live browser remote + a see/act HTTP API for AI agents. Three input layers (Shortcut verbs / element tree / pixel fallback), clean CJK input, hardware-validated.

Is the `cache 4m23s` Line in the Status Bar Actually Accurate?

There’s a prompt-cache countdown line in the status bar I wrote for Claude Code. Where it anchors, how the formula works, and when it lies to you — let’s pull apart the source code alongside a real transcript.

Dissecting the Implementation of the /goal Command

Based on the Claude Code 2.1.139 headless source code, this breaks down how the /goal command drives the Agent to keep working until a condition is met through a session-level Stop hook.

claude agents and /bg: An Analysis of the Agent View Implementation

Based on the Claude Code 2.1.139 source code, this article breaks down how claude agents, --bg, and /bg share the background job model, daemon, and FleetView TUI.