zkxs

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:

say hello to zendesk

If you've spent some time online, you’ve probably come across Zendesk.

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like [email protected]), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.

your weakest link

Allow Hand Tracking on Steam Link (Quest)

Important

This is Obsolete now, Valve has added the Hand tracking permissions to the official app.

This shows you how to add the hand tracking permissions to the Steam Link app on Quest, so you can start it without controllers. Also this means you can use Index controllers easier, if you into that.

➡️ Video Tutorial

Things you need

POWER or: How I Learned to Stop Worrying and Love the Reactor

This is a beginner and intermediate guide to powering subs.

The information in this guide is up to date as of July 2021.

This guide is a work in progress. There will be sections that are incomplete.

BASIC GUIDE

In-depth Reactor Guide and Fission Controller (last updated for 0.13.3.11)

This guide first explains some advanced features of the Barotrauma reactor system and then combines a PD controller with some reverse engineering of Barotrauma's source code to build a working fission controller. This guide does not build a turbine controller. Please see Rob Smith's video for a really great turbine controller that works well with this fission controller.

Quick Start

If you don't care about the details, just copy the following setup to your submarine. The wiring should be pretty self-explanatory from the layout, with the wires always going from the left to the right.

Component list (thanks to @FinetalPies):

4 WiFi
6 Memory

Features

Automatically bump SemVer
Update a personal homebrew tap
Keep that pesky version in the Cargo.toml up to date
(From dependabot) Get new versions out as soon as possible

Assumptions

You don't want a changelog

Falsehoods programmers believe about time

This is a compiled list of falsehoods programmers tend to believe about working with time.

Don't re-invent a date time library yourself. If you think you understand everything about time, you're probably doing it wrong.

Falsehoods

There are always 24 hours in a day.
February is always 28 days long.
Any 24-hour period will always begin and end in the same day (or week, or month).

tmux shortcuts & cheatsheet

start new:

tmux

start new with session name:

tmux new -s myname

tmux cheat sheet

(C-x means ctrl+x, M-x means alt+x)

Prefix key

The default prefix is C-b. If you (or your muscle memory) prefer C-a, you need to add this to ~/.tmux.conf:

remap prefix to Control + a

	/**
	* @name Adblock for Discord
	* @author TheSunCat and contributors
	* @version 1.0.0
	* @description We have moved to Codeberg! Follow the link below:
	* @source https://codeberg.org/AllPurposeMat/Disblock-Origin
	*/

	#app-mount::before {
	content: "The Disblock Origin theme has moved to Codeberg! Please check https://codeberg.org/AllPurposeMat/Disblock-Origin";