pwnwriter.me

A while back I wrote about SSHing into my home server from anywhere using a Cloudflare Tunnel. It worked. But the more I lived with it, the more it felt like the wrong tool. Cloudflared needs a domain. It routes my SSH through Cloudflare's edge. It's a daemon babysitting a config.yml, and every service I want to reach needs its own ingress rule. That's a lot of moving parts, and another company sitting in the middle of me talking to my own machine. So I ripped it out and moved to Tailscale. Why…

Most people meet Nix as a package manager, get scared by the syntax, and leave. That's a shame, because the whole thing is built on about three ideas. Once they click, the weird /nix/store/ paths, the reproducibility, the rollbacks, all of it stops being magic. No fluff. Let's look at what Nix is actually doing under the hood. 1. The language is just a calculator for attribute sets Before any packaging, Nix is a small, lazy, purely functional language. No statements, no loops, no mutation.…

This summer break turned out unreal. I got a scholarship from NYC DevRel, then another one for Black Hat in Las Vegas, and now I am also going to OpenAI DevDay through a scholarship. A few months ago, these things felt very far away. Now I am packing for rooms I used to only read about online. Grateful, nervous, excited. Mostly just trying to take it all in.

yerp, turned 22 today. i was asleep at home (too much coding the day before, i'm training a small llm on my own hardware for fun btw) when my friends showed up with a cake and gifts. i was surprised but also kinda knew something was coming, we always plan surprises for each other in our circle. they watched football while i lay in bed half-dead. the cake was mango flavored and genuinely so smooth. after cake and gifts we went out for dinner, came home, slept. perfect day honestly. since last…

Made an anonymous confession board that lives in your terminal. Go ahead and post your confession 🫶🏼 $ ssh eipi.boo

I've been working on haylxon for a while now. It takes screenshots of URLs from the terminal using Chrome's headless mode, talking to Chrome over CDP (Chrome DevTools Protocol). I even gave a talk about it at PTN 11. It was already pretty fast. But I kept noticing things that bugged me about how it worked under the hood. what was bothering me Every time you ran hxn, it would spin up an entirely new Chromium process. Boot it. Wait for it. Connect via CDP. Do the work. Kill it. That browser…

I keep my entire Nix config in a public repo. Dotfiles, packages, shell setup, everything. But I also need my SSH and GPG keys on every machine I use. Storing private keys in a public repo is obviously a terrible idea. So how do you manage secrets in Nix without going private? The answer is agenix. How it works agenix uses age encryption. You encrypt secrets with your SSH public key, and only someone with the matching private key can decrypt them. The encrypted .age files live in your repo. On…

I saw Nexus 6P on Facebook Marketplace for $10. Owner forgot the PIN, just wanted it gone. I already know Kali NetHunter support this phone officially. So I bought immediately without a second thought. Literaly drove 25 miles after college to pick it up. First I spent a couple hours researching how to get in without the PIN. Wanted to do it properly and then i found CVE-2016-8467. Tried it. It worked. Here's the full story on how come. The Phone Nexus 6P : Inside name angler. Made by Huawei,…

Hacked for 2 days straight at MorganHacks and walked away with the Best ElevenLabs title. Our project was inventoryAi, really proud of what the team pulled off. Tired but happy.