Skip to content

Instantly share code, notes, and snippets.

View TeamDman's full-sized avatar
🌜
Ahoy!

TeamDman

🌜
Ahoy!
View GitHub Profile
@unixpickle
unixpickle / README.md
Created November 3, 2025 15:31
Fil-C race allows access to incorrect buffer.

What happens

Compile with Fil-C and run it a few times. Most of the time, it will trap. However, every few times, it will print "secret password".

This covers the scenario where a malicious user causes a program to leak information using an overflowing offset. Typically Fil-C will mitigate this kinds of thing with a bounds check. However, a data race can cause the bounds on a pointer to be incorrect.

Why this is a realistic issue

"""
Simple RL training script for teaching a model to add.
Demonstrates REINFORCE and GRPO algorithms in a minimal implementation.
If you want to run this script, put it inside of nanochat/scripts/ and run it with:
python -m scripts.simple_rl
First add "matplotlib>=3.9.0" to pyproject.toml and run 'uv sync'
I wrote a separate script to download the weights for the model:

Carrying just the data, not a whole laptop

Hybrid (or on-call) working arrangements often cause us to carry an employer-issued laptop between home and work (and wherever else on the way). While they are not very heavy (particularly the 14.1" screen models), they still require a backpack. And in winter, a car, so that the internals don't cool down on a transit stop/while pedalling and don't condensate the vapour from the air after being brought inside a building.

Can it be simpler if one's workflow allows them to turn off the system (instead of putting it to sleep)? Cloud collaboration tools (xDrive, yBox, or zVCS) can help, but they don't cover everything. And if larger files need to be synchronized, it's slow even where Internet connection is fast.

{
"branches": {
"releases": {
"type": "release"
},
"snapshots": {
"type": "all"
},
"26.1.x": {
"type": "all",
@hackermondev
hackermondev / research.md
Last active September 16, 2026 15:19
Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

@kepler-5
kepler-5 / comp_multi.rs
Last active August 13, 2026 11:04
Python comprehension proc macro that handles multiple nested for-if-clauses, flattening nested structure
// This is free and unencumbered software released into the public domain.
// Anyone is free to copy, modify, publish, use, compile, sell, or
// distribute this software, either in source code form or as a compiled
// binary, for any purpose, commercial or non-commercial, and by any
// means.
// In jurisdictions that recognize copyright laws, the author or authors
// of this software dedicate any and all copyright interest in the
// software to the public domain. We make this dedication for the benefit
import itertools
import random
import time
A = 0x5deece66d
B = 11
LCG_MOD_POW = 48
M = 2**LCG_MOD_POW
BIG_MASK = M - 1
@unphased
unphased / replicate.sh
Created December 16, 2024 06:15
replicate
#!/bin/bash
set -e
LOGFILE="$HOME/replicate.log"
exec >> "$LOGFILE"
exec 2>&1
echo "Replicate script started at $(date) for $1 -> $2"
@zackangelo
zackangelo / context.txt
Created December 13, 2024 19:39
Llama 3.3 Multi-tool Use Context Window
<|begin_of_text|><|start_header_id|>system<|end_header_id|>Environment: ipython
Cutting Knowledge Date: December 2023
Today Date: 13 Dec 2024
# Tool Instructions
You may optionally call functions that you have been given access to. You DO NOT have
to call a function if you do not require it. ONLY call functions if you need them. Do NOT call
functions that you have not been given access to.
@disler
disler / README.md
Last active July 8, 2026 13:21
Use Meta Prompting to rapidly generate results in the GenAI Age

Meta Prompting

In the Generative AI Age your ability to generate prompts is your ability to generate results.

Guide

Claude 3.5 Sonnet and o1 series models are recommended for meta prompting.

Replace {{user-input}} with your own input to generate prompts.

Use mp_*.txt as example user-inputs to see how to generate high quality prompts.