Sacha Ott Xoib

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

Setup Hyper-V enhanced session for Ubuntu 20

I couldn't find instructions that were 100% complete, so I put this together.

These instructions worked fine for me. Follow each step carefully.

Download Ubuntu 20 desktop

DO NOT create the VM by choosing Quick Create in Hyper-V Manager. Follow these instructions exactly.

Thinkfan Configuration Notes

This are notes for configuration thinkfan for Fedora. This configuration procedure was followed on a Lenovo Thinkpad X1 Carbon (5th Gen) running Fedora 25.

Non standard (default) configuration was required for this machine as the default sensors are not available. Eg: /proc/acpi/ibm/thermal does not exist for this model.

An annoted configuration file has been included below. However, there is no guarentee that this will work as-is on every machine.

Installation

dnf -y install thinkfan

	# Change YOUR_TOKEN to your prerender token
	# Change http://example.com (at the end of the last RewriteRule) to your website url

	<IfModule mod_headers.c>
	RequestHeader set X-Prerender-Token "YOUR_TOKEN"
	</IfModule>

	<IfModule mod_rewrite.c>
	RewriteEngine On

	from offer import offer
	import psycopg2

	class dbOffer:

	def __init__(self,sourcename,host="localhost",port="5432",database="rsstracker",user="rsstracker",password="rsstracker"):
	psycopg2.extensions.register_type(psycopg2.extensions.UNICODE)
	psycopg2.extensions.register_type(psycopg2.extensions.UNICODEARRAY)
	self.conn = psycopg2.connect(host=host,port=port,database=database,user=user,password=password)
	self.sourcename = sourcename

	This script is no longer required.

	AzureDiskEncryption has published an update to the extension with version 0.1.0.999319 which enables updating of RHEL/CentOS encrypted VMs without manual need of patching before reboot.