Avamander Avamander

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

Server Price Breakdown: DigitalOcean, Amazon AWS LightSail, Vultr, Linode, OVH, Hetzner, Scaleway/Online.net:

Permalink: git.io/vps

$5/mo

Provider	Type	RAM	Cores	Storage	Transfer	Network	Price

From Stack Overflow.

# Fetch the submodule commits into the main repository
git remote add submodule_origin git://url/to/submodule/origin
git fetch submodule_origin

# Start a fake merge (won't change any files, won't commit anything)
git merge -s ours --no-commit submodule_origin/master

	#!/bin/bash -ex

	# Script will install multiple ADS-B feeders to Raspberry Pi OS
	# Before running make sure you have your coordinates (lat/lon in a form of DD.DDDD) and antenna height (in both feet and m) handy.

	if [ "$EUID" -ne 0 ]
	then echo "Please run as root"
	exit
	fi

	#!/bin/bash

	###AUTHOR###
	#Harry Dove-Robinson 5/8/2017
	#[email protected]
	#https://gist.github.com/hdoverobinson
	#https://github.com/hdoverobinson

	###USAGE###
	#This is a script used to configure u-blox GPS/GNSS modules from a text file generated by u-center.

	"""
	Simple web server that listens for Github webhooks to implement push-to-deploy
	with Pelican static sites

	Settings are loaded from a json file except for SECRET which should be an
	environment variable

	Example `deployer.json`

	{

	"""
	Simple web server that listens for Github webhooks to implement push-to-deploy
	with Pelican static sites

	Settings are loaded from a json file except for SECRET which should be an
	environment variable

	Example `deployer.json`

	{

	// Just before switching jobs:
	// Add one of these.
	// Preferably into the same commit where you do a large merge.
	//
	// This started as a tweet with a joke of "C++ pro-tip: #define private public",
	// and then it quickly escalated into more and more evil suggestions.
	// I've tried to capture interesting suggestions here.
	//
	// Contributors: @r2d2rigo, @joeldevahl, @msinilo, @_Humus_,
	// @YuriyODonnell, @rygorous, @cmuratori, @mike_acton, @grumpygiant,