Discover gists

hi, i'm daniel. i'm a 16-year-old high school senior. in my free time, i hack billion dollar companies and build cool stuff.

about a month ago, a couple of friends and I found serious critical vulnerabilities on Mintlify, an AI documentation platform used by some of the top companies in the world.

i found a critical cross-site scripting vulnerability that, if abused, would let an attacker to inject malicious scripts into the documentation of numerous companies and steal credentials from users with a single link open.

(go read my friends' writeups (after this one))
how to hack discord, vercel, and more with one easy trick (eva)
Redacted by Counsel: A supply chain postmortem (MDL)

Eric Elliott's "Composing Software" Series

A collection of links to the excellent "Composing Software" series of medium stories by Eric Elliott.

Edit: I see that each post in the series now has index, previous and next links. However, they don't follow a linear flow through all the articles with some pointing back to previous posts effectively locking you in a loop.

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict

	──────────────────────────────────────────────────────────────────────────────────────
	Presentation Layer (Рівень подання — те, що бачить і з чим взаємодіє користувач)
	├── Контролери (Controllers)
	├── Подання (Views / .cshtml файли)
	├── ViewModels (моделі, які використовуються тільки у поданнях і контролерах)
	├── DTO, які приходять від користувача (наприклад, з форм або JSON-запитів)
	├── wwwroot (CSS, JavaScript, зображення)
	├── Tag Helpers
	├── Клієнтська валідація (JavaScript)
	├── HttpContext (доступ до User, Session, Request, Response)

	From: [email protected] [mailto:[email protected]] On Behalf Of Andy Spencer
	Sent: Friday, January 21, 2011 5:24 AM
	To: Michael Treibton
	Cc: [email protected]
	Subject: Re: Embedding applications via XEmbed

	On 2011-01-20 20:52, Michael Treibton wrote:
	> I've read about GtkSocket and GtkPlug, but the examples for the
	> official documentation don't make it clear to me how to go about this.
	>

	using System;
	using System.Net;
	using System.Net.Sockets;
	using System.Text;

	namespace UDP
	{
	public class UDPSocket
	{
	private Socket _socket = new Socket(AddressFamily.InterNetwork, SocketType.Dgram, ProtocolType.Udp);

	From 48c36239a2792ebc999044ffab7935011a58009e Mon Sep 17 00:00:00 2001
	From: Alan Hardman <[email protected]>
	Date: Wed, 19 Feb 2025 16:34:13 -0700
	Subject: [PATCH] PHP 8.4 compatibility

	This updates all function definitions with explicitly nullable parameters. The implicit null behavior is deprecated in PHP 8.4.

	I currently rely on your anti-xss package that depends on this, so hopefully this is an acceptable change.
	---
	src/voku/helper/UTF8.php \| 72 ++++++++++++++++++++--------------------

	ffmpeg -i "c:/videos/sample.mp4
	-map 0:v:0 -map 0:a:0 -map 0:v:0 -map 0:a:0 -map 0:v:0 -map 0:a:0
	-c:v libx264 -crf 22 -c:a aac -ar 48000
	-filter:v:0 scale=w=480:h=360 -maxrate:v:0 600k -b:a:0 64k
	-filter:v:1 scale=w=640:h=480 -maxrate:v:1 900k -b:a:1 128k
	-filter:v:2 scale=w=1280:h=720 -maxrate:v:2 900k -b:a:2 128k
	-var_stream_map "v:0,a:0,name:360p v:1,a:1,name:480p v:2,a:2,name:720p"
	-preset slow -hls_list_size 0 -threads 0 -f hls -hls_playlist_type event -hls_time 3
	-hls_flags independent_segments -master_pl_name "name-pl.m3u8"
	"c:/videos/encoded/name-%v.m3u8"

	#!/usr/bin/env bash

	# Script to force RGB Color Output on M1 and M2 based Macs for a selected display

	# Function to display an error message and exit
	function error_exit {
	echo "Error: $1" >&2
	exit 1
	}

	Visual Studio 2026 18.x
	Professional: NVTDK-QB8J9-M28GR-92BPC-BTHXK
	Enterprise: VYGRN-WPR22-HG4X3-692BF-QGT2V

	Product Year Version Product Keys
	Visual Studio 2022 2021 17.x
	Professional: TD244-P4NB7-YQ6XK-Y8MMM-YWV2J
	Enterprise: VHF9H-NXBBB-638P6-6JHCY-88JWH

	Visual Studio 2019 2019 16.x