Overview
News
Technologies
Salaries
Products
People
Growth
Financials
Overview
Security researcher and SRE. Writing about vulnerability research, AI, and the practical stuff I figure out along the way.
News
Sixteen strangers and a shared obfuscator: mapping the wool scene
A 16 actor map of a Chinese reward farming scene, built out from a single GitHub repo over a weekend. The operators know GitHub is dangerous and scrub their history religiously, but they defend the page and forget the graph: the scrub itself is a trace, a
Read more
Report
The Trade Desk is on your health portal, your bank, and the lottery
Loaded New Zealand's most visited sites in a real browser and logged every identifier handed to a third party. Two ad brokers with no consumer product turned up on a patient portal, a bank, the national lottery and a city council. Here is what that looks
Read more
Report
Forging the government's lottery: China's civic apps run on a shared reward backend with no real secret
Dozens of Chinese city, civic and state-media apps run their points-and-lottery campaigns on a handful of shared B2B SaaS backends. The signing that protects them uses a public salt and a key the server hands you on request. Here's the multi-tenant exposu
Read more
Report
Farming the farmers: smallfawn's JD login tool routes harvested credentials to their own server
smallfawn sells JD.com login tools to other reward-farmers. By design, the buyer cannot log a victim in without calling smallfawn's own server, and the plaintext passwords are relayed there three times a day. Source-verified at file:line, with the git his
Read more
Report
The wool DRM, part 1: the Cython loader I cracked
How a Chinese reward-farming scene seals its fraud scripts, and the old Cython DES loader I reversed end to end. The key was baked into the binary, so it protected nothing.
Read more
Report
Pro access
Upgrade to see all 13 mentions
Upgrade to a paid plan to read every media mention of this company - funding news, awards, product launches and press releases from all the outlets writing about it.
Every media mention and press release
Funding news, awards and product launches
Fresh coverage from every outlet writing about the company
Upgrade now
Cancel anytime. Secure checkout. Instant activation.