DEV Community

Coloful Toolhub
Coloful Toolhub

Posted on

How we built a verifiable public intelligence timeline

#opensource #security #webdev #rss

Exchange hacks, CISA Known Exploited entries, sudden QDII subscription reopenings — the primary sources are scattered. Another paraphrasing portal is easy to ship. Time Signals (Chinese name 时代线报) takes a harder constraint: pages meant for citation should expose facts without running JavaScript, and every item should link back to an original public source.

This article only describes what is already visible on the public site. The sister project Colorful Toolhub is a free, browser-local toolkit; Time Signals is the public-source timeline and incident evidence layer. Same owner: Snamibo.

Two surfaces: live console vs citeable pages

The apex URL timeline.snamibo.com is an interactive console (filters, pagination, “loading…”). Citeable entry points use language prefixes:

Those HTML responses already embed selected signal cards. Topic archives such as Security and Web3, plus This week’s selection, are likewise readable as static documents. Policy lives on Methodology: public primary sources only, machine translations labelled, personal subscription UI kept out of the index.

Incident pages: one evidence table per event

More useful than a lone headline is a merge page for the same victim or CVE. Reporting on the Bitget theft (publicly discussed around ~$387M) is grouped at:

https://timeline.snamibo.com/en/incidents/f11786d0fea34650d0d29088406aa47f/

You get victim / actor-as-reported / exploit path / method fields and outbound links to Rekt, The Block, BlockSec and Chainalysis. Chinese twin: /zh/incidents/ with the same id. This is aggregation for comparison, not independent attribution by Time Signals.

Vulnerability-shaped example — Fortra GoAnywhere MFT deserialization called out via CISA KEV search:

https://timeline.snamibo.com/en/incidents/e46990710227cb3ae67f463feb468a48/

Feeds and LLM-oriented index

Prefer canonical /en/briefs/… or /en/incidents/… URLs when citing. Pair with Toolhub when you need local JWT/cert/regex checks after reading an advisory — see the Toolhub box on the security topic page.

Time Signals aggregates public information; verify originals. Not investment or operational advice.

Top comments (0)