Maykel Moya mmoya

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

Circumventing Deep Packet Inspection with Socat and rot13

I have a Linux virtual machine inside a customer's private network. For security, this VM is reachable only via VPN + Citrix + Windows + a Windows SSH client (eg PuTTY). I am tasked to ensure this Citrix design is secure, and users can not access their Linux VM's or other resources on the internal private network in any way outside of using Citrix.

The VM can access the internet. This task should be easy. The VM's internet gateway allows it to connect anywhere on the internet to TCP ports 80, 443, and 8090 only. Connecting to an internet bastion box on one of these ports works and I can send and receive clear text data using netcat. I plan to use good old SSH, listening on tcp/8090 on the bastion, with a reverse port forward configured to expose sshd on the VM to the public, to show their Citrix gateway can be circumvented.

Rejected by Deep Packet Inspection

I hit an immediate snag. The moment I try to establish an SSH or SSL connection over o

How To Set Up a Raspberry Pi 4 with Archlinux 64-bit (AArch64) and Full Disk Encryption (+SSH unlock), USB Boot (No SD-Card) and btrfs

Written by: XSystem
First published on: 20 Dec 2020
Last updated on: 20 Dec 2020

[0] Introduction

Overview

How to set up a server running NYM for dummies

Introduction

This guide is written for people that have absolutely no or little experience with terminal and remote server configuration. Should work on all Debian based distros although this has been tested only with fresh Debian 10 Buster. It does not yet cover the actual node configuration yet. For that see the official Nym docs here https://nymtech.net/docs/run-nym-nodes/mixnodes/

If you are complete beginner and just installed Debian on your VPS then I suggest going through the bash crash course in the introduction section

If you are at least little experienced, then skip to section Nym installation.

	#include <stddef.h>
	#include <stdio.h>
	#include <stdlib.h>
	#include <unistd.h>
	#include <gio/gio.h>

	#include <mpv/client.h>

	/**
	* mpv pluging to inhibit screensaver while playing a video on GNOME Desktop

	"""Sort Beancount Entries by meta['time']

	Although beancount says that time is meaningless, there are situations
	where an account that should not be negative may have a negative balance
	at some point because transfers that occurred on the same day are
	scheduled later and spending records are scheduled earlier.

	This is not a big deal, but it is a bit odd.

	2021-10-01 balance Assets:Cash 500 USD

	#!/bin/bash
	#
	# ~/.local/bin/btswitch
	#

	# wait a second this is too fast for udev
	sleep 1

	btdev="$(pactl list sinks\|grep Name\|grep 'bluez.*.a2dp.sink'\|sed 's/Name: //'\|sed 's/\s//')"
	if [ -n "$btdev" ]; then

	CREATE EXTENSION IF NOT EXISTS "uuid-ossp";

	-- My port of https://github.com/kurttheviking/uuid-with-v6-js
	-- A hacky translation of:
	-- - http://gh.peabody.io/uuidv6/
	-- - https://tools.ietf.org/html/draft-peabody-dispatch-new-uuid-format
	CREATE OR REPLACE FUNCTION uuid_v1_to_v6(v1 uuid)
	RETURNS uuid AS $$
	DECLARE
	v6 text;

	#!/bin/bash

	# Unlock the directory, we need the unencrypted versions of the files
	git crypt unlock

	# Re-initialize git crypt, generating a new key
	rm .git/git-crypt/keys/default
	git crypt init

	# Make the key available to the current users