Hi! im D, I automate weird stuff, build web apps and bots

How I reverse-engineered the Spanish Royal Academy's Android app and found an API used by dozens of projects, with hardcoded credentials that have been public for years.

An in-depth teardown of a postal phishing campaign targeting Ledger hardware wallet users with fake 'Quantum Resistance' upgrades, QR redirection chains, Cloudflare geo-fencing, and seed phrase exfiltration.

Light Yagami runs a worldwide killing operation with a weapon that leaves no trace, and he still gets caught. His failures are the same ones most people make with their phone, their routine, their devices and the people they trust. Eight OPSEC mistakes, and the lessons for everyday life.