What Is Shizuku? How Does It Work? Security Implications?
What is Shizuku? Shizuku is an Android application whose goal is to give other applications the ability to obtain root-like permissions with the help of ADB (it also supports rooted devices), via the Android Debug Bridge. ADB, being a tool meant to test and debug applications and the Android OS in general, provides a more accessible alternative for users who wish to customise their device but do not, or cannot, due to OEM restrictions on their bootloader and the issues that comes with rooted devices. ADB provides a more accessible alternative. ...
Extracting TOTP Tokens From Microsoft Authenticator
Hey! If you’re here for the steps, jump here. Also, if you have fewer than 10 accounts and do not have a rooted phone (not rooted takes longer), I highly recommend that you manually change your 2FA from your accounts settings, as doing all of this will take more time. But anyway, enjoy your stay. ℹ️ Warning Microsoft recently posted a really small hidden update on their support site that says : ...
How I Found a Command Injection Vulnerability in YoutubeDLSharp
This is the story of my first vulnerability report. It was kind of an ‘accidental’ discovery, but after thinking about it, I think it’s still worth writing about. Before going straight to the interesting stuff, let’s get some context Context I started writing my own C# project (OngakuVault) to automate archiving audio files into my remote storage. I had grown tired of connecting using SFTP/SSH and re-enabling all security every time I had to disconnect. That’s how I started my ASP.NET API application, it is meant to be accessible through the web. For the task of actually getting the media content, I decided to use yt-dlp as it is a bit like a Swiss knife. It supports a lot of websites and formats (known as ’extractors’), along with direct URLs. That said, I didn’t really want to write my own wrapper (as I would lose time, and I wasn’t even fully sure where to start) to communicate with the external binary. Instead, I searched online for existing open-source libraries, and out of all the results, YoutubeDLSharp was the best one I could find. ...
Configuring Git to Use Multiple Users
Introduction You can skip this section if you just want to copy-paste the configuration. I recently started looking at some AI models/projects and found myself playing with HuggingFace again. In the process, I had to create a new model (repository) on the website and encountered a problem. My default Git user information was using my GitHub username and email. I could have changed them for that specific repository using git config user.[param], but I was not a fan of that. It was not the first time I had this problem, and to be honest, I often forget the full command and have to search for it again. ...
My New Blog
Hey 👋 I’m finally able to write this. Settings this up right wasn’t the most straight forward experience I had, but I still had some fun doing it. Story I originally planned on using Github Gists to make small interesting posts as I was too lazy to configure this type of blog. Fast forward to now (2025-05-23) and after losing myself on the web, I came across a blog website that I really liked that used Hugo with the PaperMod theme. ...