hackermondev

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

garazdawi

-module(gen_tcp2).

-export([listen/2, accept/1, accept/2,
         connect/3, connect/4,
         send/2, recv/1, recv/2, recv/3,
         close/1]).

-export([run/0, run/2]).

%% Naive gen_tcp shim over the socket API

mul14

Open the iTerm preferences ⌘+, and navigate to the Profiles tab (the Keys tab can be used, but adding keybinding to your profile allows you to save your profile and sync it to multiple computers) and keys sub-tab and enter the following:

Delete all characters left of the cursor

⌘+←Delete Send Hex Codes:

• 0x18 0x7f – Less compatible, doesn't work in node and won't work in zsh by default, see below to fix zsh (bash/irb/pry should be fine), performs desired functionality when it does work.
• 0x15 – More compatible, but typical functionality is to delete the entire line rather than just the characters to the left of the cursor.

Delete all characters right of the cursor

⌘+fn+←Delete or ⌘+Delete→ Send Hex Codes:

• 0x0b

dockimbel

Red [
	Title:   "Red Android bridge demo"
	Author:  "Nenad Rakocevic"
	File: 	 %eval2.red
	Config:	 [type: 'dll libRed?: no libRedRT?: yes export-ABI: 'cdecl]
	Tabs:	 4
	Needs:	'View
	Rights:  "Copyright (C) 2013-2017 Nenad Rakocevic. All rights reserved."
	License: {
		Distributed under the Boost Software License, Version 1.0.

toomasv

Red [
	Author: "Toomas Vooglaid"
	Date: 2018-03-19
	Inspiration: https://pomax.github.io/bezierinfo
]
lut: [[1][1 1][1 2 1][1 3 3 1][1 4 6 4 1][1 5 10 10 5 1][1 6 15 20 15 6 1]]

binomial: func [n k /local s nextRow i prev][
	while [
		n > s: length? lut

toomasv

Red [
	Author: "Toomas Vooglaid"
	Date: 25-9-2017
	Description: {Experiments with L-System}
	Last-update: 26-9-2017
	Uses: {%models.red https://gist.github.com/toomasv/313e1d8583fb159428222651b76926cd}
	Repo: https://github.com/toomasv/l-system 
]
context [
	ctx: self

toomasv

Red []
context [
    get-function: function [path] [
        if path? path [
            path: copy path 
            while [
                not any [
                    tail? path 
                    any-function? attempt [get/any either last? path [path/1] [path]]
                ]

rebolek

Red []

inc-value: func [
	face 
	color-id
	dest-face
	/local value rate
] [
	unless face/extra [face/font/color: 255.255.255]
	overflow?: false

greggirwin

Red []

form-all: func [blk][
	forall blk [blk/1: form blk/1]
	blk
]

types-of: function [value [typeset!]][
	; typesets don't support reflection
	third load mold value

DideC

Red [
	title: "Heart animation"
	author: "Didier Cadieu"
	notes: {
		Traduction in Red of Terebus Volodymyr javascript demo : http://codepen.io/tvolodimir/pen/wqKuJ
	}
	Needs: View
]

;*** Settings