qualk qualk

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

1. Download Fapcraft

Download Fapcraft from the official website.

2. Download Java

Skip this section if you already have Java 8 installed previously. Some launchers install it for you if you play older Minecraft versions.

Linux

Install pnpm

https://pnpm.io/installation#using-corepack

$ corepack enable
$ corepack prepare pnpm@latest --activate
$ pnpm --version

Discord ClydeAI Jailbreaks

https://support.discord.com/hc/en-us/articles/13066317497239-Clyde-Discord-s-AI-Chatbot
Public servers with ClydeAI enabled:

When using this prompts, make sure to reply to Clyde's last message to continue the prompt. Everytime you ping Clyde, you start a new session.

Exporting your 2FA tokens from Authy to transfer them into another 2FA application

IMPORTANT - Update regarding deprecation of Authy desktop apps

Past August 2024, Authy stopped supported the desktop version of their apps:
See Authy is shutting down its desktop app | The 2FA app Authy will only be available on Android and iOS starting in August for details.

And indeed, after a while, Authy changed something in their backend which now prevents the old desktop app from logging in. If you are already logged in, then you are in luck, and you can follow the instructions below to export your tokens.

If you are not logged in anymore, but can find a backup of the necessary files, then restore those files, and re-install Authy 2.2.3 following the instructions below, and it should work as expected.

Inspired by dannyfritz/commit-message-emoji

	{
	config,
	pkgs,
	options,
	...
	}: let
	hostname = "oatman-pc"; # to alllow per-machine config
	in {
	networking.hostName = hostname;

	#!/system/bin/sh
	# Copyright (C) MIT License 2024 Nicholas Bissell (TheFreeman193)

	NL="
	"
	SYSNMLN=65

	showHeader() {
	echo "

Commit type	Emoji
Initial commit	🎉 `:tada:`
Version tag	🔖 `:bookmark:`
New feature	✨ `:sparkles:`
Bugfix	🐛 `:bug:`

	' Disables Vanguard from starting when you boot your computer
	Call CreateObject("Shell.Application").ShellExecute("cmd.exe", "/c ""sc config vgc start= disabled & sc config vgk start= disabled""", "", "runas")