YoungChief youngchief-btw

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:

say hello to zendesk

If you've spent some time online, you’ve probably come across Zendesk.

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like [email protected]), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.

your weakest link

List of every single Discord API endpoint used on the client

Last updated: July 22, 2025

https://discord.com/api/v9

Endpoint Name	path

List of "Essential" 1.7.10 Mods

This is a list of Minecraft 1.7.10 mods that are not focused on adding new original content. Instead, they make the base game run better, or port over features from other versions of vanilla.

These lists try to comprehensively list all the available options. You will not want to use all of the listed mods at once.

Some of the listed mods require a Mixin bootstrap mod in order to work. See the Mixin mods section near the end of the document for information about that.

	#!/bin/bash
	set -e # Exit immediately if a command exits with a non-zero status.

	##
	# This script automates renewing the Proxmox web UI TLS certificate
	# using Tailscale's built-in HTTPS certificate feature.
	# It is recommended to run this script using a cronjob, I'm using
	# `0 2 1 /3 /path/to/my/prox-certs.sh`
	# in my crontab to run this every three months (the length of the certificate validity)
	# v4: Checks for and installs jq if missing.

	# Mixxx Scrobbler - SixBeeps 2024
	# I can't be bothered to write a proper license, so do whatever you want with this code.
	# Steps:
	#
	# 1. Grab an API key and secret, for Last.fm go to https://www.last.fm/api/account/create
	# 2. Install the pylast library with `pip install pylast`
	# 3. Create a .env file in the same directory as this script with the following contents
	# API_KEY=your_api_key
	# API_SECRET=your_api_secret
	# NETWORK=lastfm OR librefm

	c: command
	cc: commandContext
	v: version
	P: payload
	N: bulkedPayload
	fP: fanoutPayload
	aP: additionalPayload
	Pm: payloadMetadata
	i: messageId
	U: messageUUID

	// ==UserScript==
	// @name mf-adblock
	// @namespace none
	// @version 0.7
	// @description A basic anti-adblock workaround that can remove or click elements on a website
	// @author DerFichtl, with major improvements by Firepup650
	// @match https:///
	// @icon https://getadblock.com/favicon.ico
	// @grant none
	// @noframes

	let
	# Playdate distributes their SDK as precompiled x86_64 binaries
	# currently so we have to import cross-compiled packages for it
	# if we're not on an x86_64 system.
	pkgsIntel = import <nixpkgs> {
	crossSystem = {
	config = "x86_64-unknown-linux-gnu";
	};
	};
	in