Skip to content

Instantly share code, notes, and snippets.

@baiwfg2
baiwfg2 / it-ebooks.md
Last active March 16, 2025 16:24
Download ebooks as you want
@hackermondev
hackermondev / research.md
Last active March 16, 2025 16:24
Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Geo IP Location</title>
<script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
<!-- Importing Matrix-like font from Google Fonts -->
<link href="https://fonts.googleapis.com/css2?family=Press+Start+2P&display=swap" rel="stylesheet">
<style>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Geo IP Location</title>
<script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
<style>
body {
background-color: black;
@Luctaris
Luctaris / vbsp_lump_tool.py
Last active March 16, 2025 16:20
Tool for inspecting, generating lmp patch files, and injecting lumps from/into Valve BSP map files
#!/usr/bin/env python3
import argparse
import sys
import os
import shutil
import struct
import lzma
from operator import itemgetter

noopener-allow-popups Cross-Origin-Opener-Policy value

Some origins can contain different applications with different levels of security requirements. In those cases, it can be beneficial to prevent scripts running in one application from being able to open and script pages of another same-origin application. Such a document need to ensure its opener cannot script it, even if the opener document is a same-origin one.

The noopener-allow-popups Cross-Origin-Opener-Policy value severs the opener relationship between the document loaded with this policy and its opener. At the same time, the opened document can open further documents (as the "allow-popups" in the name suggests) and maintain its opener relationship with them, assuming that their COOP policy allows it.

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Geo IP Location</title>
<script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
<style>
#geo-location p {
display: none;
@yamachu
yamachu / Label_format
Last active March 16, 2025 16:15
OpenJTalkのラベルをちょっとだけ簡単にまとめた(?)やつ
探したら正解があった
HTS-demo_NIT-ATR503-M001のlab_format.pdfを見ましょう
最初の数字2つ
0 3100000 => nsで表した全体の中でのその音素の位置
次の5つのまとまり
xx^xx-sil+ch=i => 先々行^先行-現在+後続=後々続 の音素列
/A:
@JohnnyTurbo
JohnnyTurbo / CameraTargetSingleton.cs
Created March 12, 2025 14:32
Scripts from tutorial: Tutorial: SURVIVORS-LIKE w/ Unity DOTS & ECS - https://youtu.be/cc5l66FwpQ4
using UnityEngine;
namespace TMG.Survivors
{
public class CameraTargetSingleton : MonoBehaviour
{
public static CameraTargetSingleton Instance;
public void Awake()
{
@brittanyellich
brittanyellich / new-codebase-discovery-template.md
Last active March 16, 2025 16:13
new-codebase-discovery-template

Overview

How to document a new codebase Use this template to document a new codebase.

Business Logic

A place to record any important logic that you come across that is worth documenting.

Landmarks

Refers to the different landmarks of a codebase to help you navigate around. Where are the API methods defined? Where are interactions with the database?