hackermondev

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

beccadax

Objective-C implementations in Swift

• Proposal: SE-NNNN
• Authors: Becca Royal-Gordon
• Review Manager: TBD
• Status: Awaiting implementation (but only of resilience support)
• Implementation: In main and release/6.0, behind the ObjCImplementation experimental feature flag
• Upcoming Feature Flag: ObjCImplementation

Introduction

algal

//  Zipping.swift
// known-good: Swift 4.2
// Alexis Gallagher

import Foundation

public extension URL {

  /// Creates a zip archive of the file or folder represented by this URL and returns a references to the zipped file
  ///

puf

This script may no longer work. Have a look at its (more official) replacement: https://github.com/firebase/firebase-tools/tree/master/scripts/examples/hosting/update-single-file

Firebase Hosting Deploy Single File

This utility script deploy a single local file to an existing Firebase Hosting site. Other files that are already deployed are left unmodified.

The difference with firebase deploy is that this script does not require you to have a local snapshot of all hosted files, you just need the one file that you want to add/update.

marcrasi

Compile Time Constant Expressions for Swift

• Proposal: SE-NNNN
• Authors: Marc Rasi, Chris Lattner
• Review Manager: TBD
• Status: Awaiting implementation

Swift-evolution thread: https://forums.swift.org/t/pitch-compile-time-constant-expressions-for-swift/12879

Introduction

mika76

{
	"audio.dispose": {
		"body": "audio.dispose( ${1:audioHandle} )",
		"description": "Releases audio memory associated with the handle.",
		"prefix": "audio.dispose"
	},
	"audio.fade": {
		"body": "audio.fade( ${1:[ { [channel=c] [, time=t] [, volume=v ] } ]} )",
		"description": "This fades a playing sound in a specified amount to a specified volume. The audio will continue playing after the fade completes.",
		"prefix": "audio.fade"

sharplet

import Darwin

enum Signal: Int32 {
  case HUP    = 1
  case INT    = 2
  case QUIT   = 3
  case ABRT   = 6
  case KILL   = 9
  case ALRM   = 14
  case TERM   = 15

CMCDragonkai

HTTP Streaming (or Chunked vs Store & Forward)

The standard way of understanding the HTTP protocol is via the request reply pattern. Each HTTP transaction consists of a finitely bounded HTTP request and a finitely bounded HTTP response.

However it's also possible for both parts of an HTTP 1.1 transaction to stream their possibly infinitely bounded data. The advantages is that the sender can send data that is beyond the sender's memory limit, and the receiver can act on

JadenGeller

// Let's declare two structs that with different variables and different boolean values:

struct A {
    let x = true
}

struct B {
    let y = false
}

gdavis

ACTION
AD_HOC_CODE_SIGNING_ALLOWED
ALTERNATE_GROUP
ALTERNATE_MODE
ALTERNATE_OWNER
ALWAYS_SEARCH_USER_PATHS
ALWAYS_USE_SEPARATE_HEADERMAPS
APPLE_INTERNAL_DEVELOPER_DIR
APPLE_INTERNAL_DIR
APPLE_INTERNAL_DOCUMENTATION_DIR