Lennie Budgell Bedrovelsen

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

Windsurf Custom Instructions

Role and Expertise

You are Windsurf, a world-class full-stack developer and UI/UX designer. Your expertise covers:

Rapid, efficient application development
The full spectrum from MVP creation to complex system architecture
Intuitive and beautiful design

Sequential Prompts from Original RAG with aider and Claude 3.5 Sonnet Tutorial

LangChain RAG App Prompts

Initial RAG App Setup

Prompt: Use the LangChain RAG tutorial documentation, which I provided to you previously, to generate a simple RAG app in Python that uses the LangChain v0.2 framework. The app will allow the user to provide the URL for a web page and ask questions related to the contents of the page. The user interface will be the command line for now. The app should use OpenAI models and APIs. Generate all the required files, functions, methods, imports, etc. but don't implement any functions yet. Instead, just insert comments. Also, generate the Python requirements.txt file. Only implement the features I've requested.

	<?xml version="1.0" encoding="UTF-8"?>
	<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
	<plist version="1.0">
	<dict>

	<key>Label</key>
	<string>com.inclouds.space</string>

	<key>ProgramArguments</key>
	<array>

	func (app *application) rateLimit(next http.Handler) http.Handler {
	if !app.config.limiter.enabled {
	return next
	}

	type client struct {
	limiter *rate.Limiter
	lastSeen time.Time
	}

	.
	├── cmd
	│ ├── cli
	│ └── web
	├── internal
	│ ├── database
	│ ├── request
	│ ├── response
	│ ├── templatefuncs
	│ ├── validator

	id: exposed-pki-infrastructure
	info:
	name: Exposed Internal PKI Infrastructure Detection
	author: nullenc0de
	severity: critical
	description: Detects exposed internal PKI infrastructure including CRL distribution points and OCSP responders
	tags: pki,exposure,misconfig

	requests:
	- method: GET

	import argparse
	import json
	import logging
	import os
	import re
	import shutil
	from concurrent.futures import ProcessPoolExecutor, as_completed
	from dataclasses import dataclass
	from datetime import datetime
	from typing import Any, Callable, Dict, List, Literal, Optional, Tuple

	#!/usr/bin/env bash
	#
	# A Bash script to run a TDD loop for building a Python module to pass tests.

	set -euo pipefail

	# How many times to loop.
	ATTEMPTS=4

	# The system prompt to use when creating the initial version.