Alain

Software Engineer @KeylessTech ~ Past @_revng ~ CTF Player @towerofhanoi @mhackeroni

[starmex @starmexxx]

Claude Code just found proof that every app on your phone is listening to your conversations. TikTok, Instagram, Facebook, Snapchat. they're using what you say out loud to build your feed. i have the data to prove it.

i've suspected this for months but last week something happened that made me finally check.

i was on a call with my friend and told him i'm thinking about breaking up with my girlfriend. didn't text it. didn't search it. just said it out loud with my phone on the table. two hours later she opens TikTok next to me and her entire feed is breakups. "signs your relationship is over." "how to heal after a breakup." she looked at me and said "why is TikTok showing me this." i said i don't know. but i did know.

i connected my iPhone to my MacBook and ran Claude Code that same night.

it scanned every app's background microphone activity for the last 90 days. not just the apps that asked for microphone permission. apps that were supposed to only have access to photos or location but were activating the microphone anyway.

what it found:

→ TikTok activated the microphone 347 times while the app was "closed" in the background
→ Instagram → 211 background activations
→ Facebook → 189
→ Snapchat → 94

every activation lasted between 3 and 15 seconds. enough to catch a sentence. every one of them tagged a keyword and cached it locally on the phone with a timestamp.

Claude Code pulled the full keyword cache:

→ "breakup" — tagged 4 hours before her feed changed
→ "moving out" — from a conversation with my mom last Tuesday
→ "wedding venue" — from a call with my sister about her engagement that i never searched once
→ "protein powder" — said it out loud to my roommate, had ads for it within an hour
→ "flight to tokyo" — mentioned it at dinner, saw travel ads the same night

those keywords were sitting in a local cache on my phone organized by app with timestamps. TikTok had the most entries. Instagram was second. every single keyword matched a conversation i had out loud near my phone.

the scariest one was "wedding venue." my sister told me she's getting engaged on a private call. i never searched it. never typed it. within a day my explore page had engagement rings and venue tours.

then Claude Code checked a second phone in the same room. my girlfriend's. same keywords. same timestamps. both phones were picking up the same conversation and tagging it independently.

i asked Claude Code how to shut it down. it mapped every app's microphone access and built a permission audit.

what i did:

→ revoked microphone access from every app that doesn't need it to function
→ disabled background app refresh for TikTok, Instagram, Facebook, Snapchat
→ turned off "Hey Siri" which keeps the microphone in passive listening mode 24/7
→ revoked "nearby interaction" permission which uses ultrasonic audio between devices

Claude Code confirmed all four apps lost background microphone access after the changes. i checked her phone too. same steps. took about 3 minutes per phone.

within 48 hours both our feeds went completely random. generic content. nothing personal. nothing from our conversations. that's when i knew for sure it was real.

the full step by step and the prompt are in the first reply. takes 3 minutes. save it so you don't lose it and send it to anyone who's ever said "my phone is definitely listening to me." it is. now you can prove it and shut it down.

[MIKEWEB @mikeinweb]

Discord age verification is looking good so far

[Denis Laskov 🇮🇱 @it4sec]

MIFARE Classic (FM11RF08S) cards have been found to be backdoored by the manufacturer, allowing all user-defined keys to be dumped with physical access.

https://t.co/74EPJQiTYj

[Gennaro Caccavale @rulezzer]

Tempo scaduto. #BlackBasta pubblica circa 1,5 TB di dati sensibili tra pazienti e dipendenti di #Synlab, esfiltrati attraverso il loro #ransomware.
Senza #cybersecurity questo è il risultato.

[Alain @carpikes]

@ham4ever @W00fer @notnotzecoxao Yup, I have some of them and they are almost indistinguishibles from originals. If you look closely at the label you may spot some differences. Or, well, maybe the tool is wrong!

[Alain @carpikes]

@sci_fix_ @CKsTechNews Yesss, a big thanks goes to @GHack4you who shipped me a dualsense to play with. The edge is out of scope for now, i need one to figure out how to calibrate it

[Jose Coixao @notnotzecoxao]

fun stuff https://t.co/VCXbrhem43

[Alain @carpikes]

@W00fer @notnotzecoxao Thanks! Added to my todo list, will investigate soon how difficult is that

[Alain @carpikes]

@W00fer @ham4ever @notnotzecoxao The clones cannot be calibrated because I haven't figured out how to do that yet :(

[Roman Semenov 🌪️ @semenov_roman_]

The new jailbreak is so fun

[Saagar Jha @_saagarjha]

iOS 14 gives users the ability to control which photos they would like to share with apps, even when they request blanket permissions. @googlephotos specifically detects this and locks the user out until they give full access. I am surprised and outraged that this shipped.

[cts🌸 @gf_256]

Choose your fighter (Advent of Code)

[CK's Technology News @CKsTechNews]

Reverse Engineering the DualShock 4

Blog post
https://t.co/16h4K6xsAM

[@mikko @mikko]

-----BEGIN PRIVATE KEY-----

[Alain @carpikes]

Wrote few weeks ago this tool that saves the project when Maya freezes. It works by opening the "crash handler" (shown in pic) which saves the project for you.
https://t.co/xbQw1cPBe7

#maya2019 #crash #maya @AdskMaya

[Alain @carpikes]

@peperunas Giulione! Condoglianze per tua mamma :( ti mando un super abbraccio!

[#HaydSays @haydsays]

I don't know who else needs to know this, but an INT variable has limits..

Type int, which uses 32 bits giving it a range of -2147483648 to [phone], inclusive..

Today's date string ["YYMMDDHHMM"] is 2201010001, which is larger than that.

HAPPY NEW YEAR!

[Randall Munroe @xkcd]

Immunity https://t.co/ClKLHywmTT