Dylans Dad

[Dylans Dad @DylansDad77]

I followed you but can you explain the 5 min research I did on you and your repo?

I cloned all 7 repos with git hooks and submodules disabled, read the code without running any of it, and traced the public history.
Bottom line
No malware found. Nothing in the code grabs credentials, downloads extra scripts, or hides encoded payloads. Nothing runs automatically when you clone.
The real risk is by design. Three of the tools only work if you route your AI traffic through a proxy that sees your API keys and full conversations. Two tell you to install a root certificate. That lets the tool read all of your HTTPS traffic, not just AI traffic.
The account is new, reuses older work, and has an inconsistent identity. Treat it as unverified.
Account facts (observed)
Profile: "David Johannes", Netherlands. It links a LinkedIn profile, which I didn't open. Joined Sep 10, 2026, 13 days ago, with 1 follower.
Commit author names don't match. The first repo's commits say "David Aroui", and later ones say "David Johannes". Both use the same Gmail address, which looks like it was created in 2026.
Several initial commits use git's default placeholder, Your Name <[email protected]>.
Most repos are one to three commits named "oops" that add 13k–67k lines at once. That's a code dump, not development history.
No commit is signed by the author himself. The only verified commits are edits made in GitHub's web editor.
Where he was before: the previous identity
glass-proxy's own origin document says an earlier "Claude Thinking Audit" was published at argosdevo-svg/claude-thinking-audit.
That account now returns 404.
It was used in Anthropic's Claude Code issue #20350 (Jan 2026). The issue author now shows as ghost, which is what GitHub displays for a deleted account.
That issue claimed Claude Code delivers approximately 10% of the requested thinking budget, based on MITM analysis of 7,000+ requests. It also warned about escalating to regulatory bodies. It was Closed as not planned.
Pattern: delete the account, rebrand as a "security researcher", then republish the same Claude-monitoring work, now labeled as created in Nov 2025.
I stopped at the public GitHub trail. I didn't try to identify the private person behind the accounts, because it doesn't change whether the code is safe to use.
Repo by repo
claude-spectrum-analyzer (Python)
What it is: a mitmproxy add-on plus Claude Code hooks.
Setup requires you to trust a mitmproxy root certificate.
It runs exec() on its own local files. That's sloppy but not malicious.
Some hooks change Claude Code's behavior, for example force_opus_task.py.
Its README calls itself Real Model: Detect if you're getting Opus or secretly served Haiku.
glass-proxy (Go, about 67k lines, 298 tests)
The most substantial repo: a context and cache proxy for Claude Code, Codex and Gemini CLIs.
Red flag: internal/spoofer rotates fake Claude Code user-agents per "tenant" per day.
It also fakes Chrome/Firefox TLS fingerprints, explicitly to avoid traffic classification.
It writes "spoofed usage" into a file that Claude Code reads for its usage display.
That is detection evasion, and likely a terms-of-service problem if you use a subscription account through it.
It leaks the author's LAN address (192.168.8.239) and a hardcoded /home/user/glass-proxy path.
Its license is All rights reserved.
secret-broker / secure-database (Rust)
Plausible, heavily specified code: mTLS, SPIFFE, Macaroons, RA-TLS, 94 tests.
Both https://t.co/BmGAF2CCug build scripts only compile protobuf definitions, which is benign.
Neither is licensed: no software license is granted. You can't legally use them.
dns-cage (Go, 753 lines)
A small local DNS allowlist and deny responder. Benign.
system-prompt-dumper
Only a README with a pasted mitmproxy script, created today.
It tells you to sudo security add-trusted-cert -d -r trustRoot, i.e. install a system-wide root certificate.
The second file is a long attack piece on jailbreaker "Pliny" and the BASI Discord. It suggests community drama, not research.
pentest-field-manual
A README and 22 empty markdown files. A shell.
Real? Novel?
Real: partly. glass-proxy and the Rust repos contain working-looking code with tests. The pentest manual and the prompt dumper are placeholders or thin.
Novel: low to moderate.
Intercepting API traffic with mitmproxy to dump system prompts is well known.
The fingerprinting method is borrowed from a cited arXiv paper.
glass-proxy's own docs say Several underlying ideas have independent prior art. Its contribution is the integration plus a large write-up.

Code style: the very long, uniform docs and the bulk commits strongly suggest heavy AI-assisted generation. That's an inference, not proven.
The core claim is shaky. In the API, budget_tokens is a maximum, not a quota the model must use up. So using about 10% of it isn't evidence of throttling by itself. I'm Claude, made by Anthropic, so weigh that bias; you can check the claim against Anthropic's extended-thinking docs.

Confidence:
High on the static scan and git history.
Medium on the account-lineage link. It rests on the author's own docs plus a deleted account.
Not done: I didn't build or run any of the code (no Go toolchain here), and the LinkedIn profile is unchecked.

[Dylans Dad @DylansDad77]

@msigaming #LightningBreakLimit was when someone hacked my rig, stole my personal data and then bricked my machine 🤦🏼‍♂️.

[Dylans Dad @DylansDad77]

@heysehajsingh What about GPT-40 vs. Nano banana? I was making some image creation for t-shirt designs with stylyzed lions wearing chain with a crest. Banana struggled with the design, but GPT-40 was more consistent in providing what I was asking it for.

[Dylans Dad @DylansDad77]

@VerizonSupport is there an issue with your cellular service in north east Texas? My service switched to sos only. Hearing many other Verizon customers saying the same thing.

[Dylans Dad @DylansDad77]

#GeForceRTX50

[Dylans Dad @DylansDad77]

@NVIDIAGeForce #GeForceRTX5090

[𝒩. @Ndovx]

Destiny 2 emblem giveaway!

triple tip emblem x3

retweet &amp; like

Announced in 48 hours!

[Dylans Dad @DylansDad77]

@trackernetwork is there something wrong with the site?? I’m having trouble getting the stats to load for d2.

[Dylans Dad @DylansDad77]

@TheDolceDiet I don’t understand the mandates personally. My family including my son are vaccinated, but I believe in personal choice. You are correct in the personal vs. community protection. I believe mandates to be political motivation unfortunately.

[Dylans Dad @DylansDad77]

@TheDolceDiet Many people have confused the word ‘vaccine’ with the word ‘cure’ the covid vaccine works in much the same way as a flu vaccine, ie it is not a cure, but rather it helps to boost immune response to the virus and thus helps prevent a more severe infection.

[Dylans Dad @DylansDad77]

@foundmyfitness @YouTubeCreators ‘Ignorance more frequently begets confidence than does knowledge: it is those who know little, not those who know much, who so positively assert that this or that problem will never be solved by science’.-Charles Darwin

[Dylans Dad @DylansDad77]

@DestinyTheGame the people want a blackout shader!! Let’s make it happen!!

[Dylans Dad @DylansDad77]

@Bungie can we please get a black out shader…this is the way!!!

[Dylans Dad @DylansDad77]

@Bungie I went flawless last week on all 3 characters but didn’t get a chance to to visit lighthouse to claim rewards. Any chance of being able to claim them for this week?

[Dylans Dad @DylansDad77]

@Steam Are the servers down?? I have connection issues currently.

[Dylans Dad @DylansDad77]

@foundmyfitness what brand of nad+ would you recommend as a supplement?

[Dylans Dad @DylansDad77]

@Treyarch why does Black ops 4 constantly loose connection to the servers on Xbox live? This is really frustrating when you spend 70$ on a game you can’t play😡!

[Dylans Dad @DylansDad77]

@BradSchoenfeld @DrAndyGalpin I would love to hear @TheDolceDiet opinion since he has great success using fasted LISS.

[Dylans Dad @DylansDad77]

@SatchinPanda @joerogan here is an interesting study on plant vs animal protein. I’m not vegan but these studies make you think.