hackermondev

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

vedantroy

import Database from 'better-sqlite3';
import { createDatabaseClient } from './proxy.ts';

// 1) Create an in-memory DB and your table(s).
const db = new Database(':memory:');
db.exec(`
  CREATE TABLE users (
    id TEXT PRIMARY KEY,
    data JSON
  );

FL33TW00D

Groverkss

• Attention
  • Section 1 : What do attention variants really look like?
    • Variant class 1 : Score modifiers (Common)
    • Variant class 2 : Quantization and Not Really Attention? (Rare)
  • Section 2 : The Math Behind Attention Codegen
    • Reduction loops in attention
    • Online Softmax?
    • Attention with online softmax:
    • Online Softmax plus Matmul?

• Attention with Online Softmax+Matmul

Isopach

"""
Usage:
1. Go to https://takeout.google.com/
2. Export Google Play Store history.
3. Download the zip file.
4. Extract to a folder.
5. Link to the path "\Takeout\Google Play Store\Purchase History.json" on line 64.
6. Run the code with python3 purchase_history.py DEBUG or python3 purchase_history.py app_name
"""

Ryther

I've tested this gist with this setup:

• Odroid N2
• Armbian 24.2.1 Jammy CLI
• Ubuntu Desktop

Useful links:

• Useful (but old) doc for VirtualGL with TurboVNC: https://virtualgl.org/vgldoc/2_1_1/#hd003001
  • VirtualGL complete guide: https://rawcdn.githack.com/VirtualGL/virtualgl/main/doc/index.html
  • How to install VirtualGL using APT: https://virtualgl.org/Downloads/YUM

1eedaegon

Trouble sample

like this: is invalid: metadata.annotations: Too long: must have at most 262144

make install # kubeduiler generated makefile

/home/lee-ubuntu/workspace/pipeline-operator/bin/kustomize-v5.3.0 build config/crd | kubectl apply -f -
customresourcedefinition.apiextensions.k8s.io/pipelines.pipeline.1eedaegon.github.io unchanged
customresourcedefinition.apiextensions.k8s.io/tasks.pipeline.1eedaegon.github.io unchanged
The CustomResourceDefinition "runs.pipeline.1eedaegon.github.io" is invalid: metadata.annotations: Too long: must have at most 262144 bytes

hokiegeek2

sudo apt-get update && sudo apt-get install infiniband-diags ibverbs-utils \
     libibverbs-dev libfabric1 libfabric-dev libpsm2-dev -y
sudo apt-get install openmpi-bin openmpi-common libopenmpi-dev libgtk2.0-dev
sudo apt-get install librdmacm-dev libpsm2-dev

thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

Background

andrewhavck

use async_trait::async_trait;
use pingora::{
    lb::selection::{BackendIter, BackendSelection},
    prelude::*,
    services::background::GenBackgroundService,
};
use std::sync::Arc;

struct Router {
    cluster_one: Arc<LoadBalancer<RoundRobin>>,