R4shSec

How to Remove Age Verification on systemd

r4shsec@protonmail.com (R4shSec) — Sat, 21 Mar 2026 15:37:52 +0800

This is a demonstration for Linux users on how you could remove age verification on systemd.

Censorship in Malaysia — List of Websites Blocked Since 2026

r4shsec@protonmail.com (R4shSec) — Thu, 19 Mar 2026 20:47:05 +0800

This blog explains how the Malaysian Communications and Multimedia Commission (MCMC) restrict websites and the list of websites blocked in Malaysia in 2026.

picoCTF WriteUp | Corrupted file

r4shsec@protonmail.com (R4shSec) — Wed, 04 Mar 2026 20:53:14 +0800

This is a picoCTF writeup for picoMini by CMU-Africa, Corrupted file.

picoCTF WriteUp | Crack the Gate 1

r4shsec@protonmail.com (R4shSec) — Wed, 04 Mar 2026 20:25:33 +0800

This is a writeup about picoCTF, picoMini by CMU-Africa, Crack the Gate 1.

picoCTF WriteUp | Flag in Flame

r4shsec@protonmail.com (R4shSec) — Sun, 01 Mar 2026 18:50:13 +0800

This is a writeup for picoMini by CMU-Africa, Flag in Flame.

picoCTF WriteUp | Hidden In Plainsight

r4shsec@protonmail.com (R4shSec) — Tue, 24 Feb 2026 15:22:58 +0800

This is a writeup for picoMini by CMU-Africa, Hidden In Plainsight.

picoCTF WriteUp | Log Hunt

r4shsec@protonmail.com (R4shSec) — Tue, 24 Feb 2026 14:59:22 +0800

This is a write up for picoMini by CMU-Africa, Log Hunt.

The Online Safety Act? — Or The Online Regulatory Act?

r4shsec@protonmail.com (R4shSec) — Sun, 15 Feb 2026 22:13:05 +0800

This article summarizes the Online Safety Act and why it might ruin user experience or be privacy-invasive.

About Me

r4shsec@protonmail.com (R4shSec) — Sun, 15 Feb 2026 19:20:11 +0800

#

Hey everyone 👋 — I am a cybersecurity researcher from Kuala Lumpur, Malaysia. I enjoy the taste of privacy and making content related to my passion.

All of my projects are available on my GitHub Profile - @r4shsec

To further support my work, be sure to subscribe to my YouTube channel & donate to my KoFi 💝

If you’d like to contact me, send me an email, r4shsec@protonmail.com

`#PRIVACYISAHUMANRIGHT`
#

Discord Child Safety Bans

r4shsec@protonmail.com (R4shSec) — Fri, 06 Feb 2026 21:46:17 +0800

This article is made to raise awareness regarding the false child safety bans occurring on the popular messaging platform, Discord.

OpenClaw RCE Vulnerability — WriteUp

r4shsec@protonmail.com (R4shSec) — Thu, 05 Feb 2026 21:01:52 +0800

This is a full public disclosure by @r4shsec highlighting the security vulnerabilities with the viral AI, OpenClaw, involving Remote Code Execution (RCE) and config file leak.

picoCTF WriteUp | Riddle Registry

r4shsec@protonmail.com (R4shSec) — Tue, 03 Feb 2026 12:34:15 +0800

This is a picoCTF WriteUp for picoMini by CMU-Africa, Riddle Registry, that’s easy to understand and straightforward.

Privacy Policy

r4shsec@protonmail.com (R4shSec) — Sat, 24 Jan 2026 12:17:15 +0800

Data Collection
#

We do not sell your data to third-parties neither do we collect your data directly for marketing or sales purposes. However, we use third-party services to understand our site performance and provide interactive features.

Public Interest & Research Data
#

As a security-focused blog, some content may contain data related to specific individuals, entities, or organizations. This data is:

Collected from publicly available sources and open-source intelligence (OSINT).
Published for the purpose of public awareness, education, and the prevention of fraudulent activity.
Handled in accordance with fair use and journalistic principles intended to protect the public interest.
Due to potential legal action via Strategic Lawsuits Against Public Participation (SLAPP), we may keep the identities of specific organizations or individuals censored or use fictionalized names, text messages and social media posts.

Third-Party Services
#

We use the following services to host and improve our site. These services may collect technical information to function:

GitHub Pages: Our site is hosted on GitHub. They may collect server logs, including your IP address, to prevent abuse and ensure the security of the service.
Google Analytics: We use this to see how many people visit our site and which posts are popular. It uses cookies to track things like your browser type and how long you stay on a page. You can opt-out using the Google Analytics Opt-out Browser Add-on.
Firebase: We use Firebase to power site features like “Views” and “Likes.” Firebase may collect certain identifiers (such as mobile advertising identifiers or Instance IDs) to provide these analytics and ensure the app runs smoothly.

For more information on how Google handles data, please see How Google uses information from sites or apps that use our services.

Terms of Service (TOS)

r4shsec@protonmail.com (R4shSec) — Sat, 24 Jan 2026 12:17:15 +0800

1. Acceptance of Terms
#

By accessing this page, you agree to be bound by these terms. If you do not agree, please do not use this site.

2. Educational & Research Purpose
#

All content on this blog is provided for educational and security research purposes only.

The information is intended to help individuals and organizations.
I am not responsible for how you use this information.

3. No Professional Advice
#

The content on this site does not constitute legal, financial, or professional security advice. I make no guarantees regarding the accuracy or completeness of the data provided. Use the information at your own risk.

4. Limitation of Liability
#

Under no circumstances shall r4shsec be liable for any direct, indirect, or consequential damages resulting from the use or inability to use the information on this site.

5. Intellectual Property
#

Unless otherwise stated, all written content and original research are the property of r4shsec. You may link to my posts, but you may not republish full articles without express permission.