Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

research.md hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff. 3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attack

[yosuke_furukawa]

0 click で位置特定するという Cloudflare と push 通知の組み合わせで起こす脆弱性の話。面白かった。