Graham Sutherland / Polynomiallistened to the song so much that I'm gonna have to bake a lemon pound cake later
#AppSec #Pentesting
| Github | https://github.com/AntGarSil |
| Blog | https://antgarsil.github.io/ |
1ısopbɐ ლ(ಠ益ಠლ)
- 14 Followers
- 195 Following
- 36 Posts
RANDY WALTERS IS A SON OF A BITCH
@gsuberland the Randy Walters tune is a banger
Brian!
Kevin BeaumontMicrosoft are removing the Copilot integrations in Notepad, Snipping Tool etc in Windows.
Turns out telling PMs to bake Copilot into everything was a dumb idea.
So @xaitax has cracked Microsoft Recall, he's got access to the encrypted database and has automated dumping of screenshots and all text from screenshots.
I've looked at most recent Recall and yep, you can just read the database as a user process. The database also contains all manner of fields which aren't publicly disclosed for tracking the user's activity.
No AV or EDR alerts triggered, world's #1 in infostealer 😅
* you can just read it in plain text
@scottwilson label it vibe cabling and ask for funding for your new AI startup
Vissapple and u2 would like a word
https://grith.ai/blog/clinejection-when-your-ai-tool-installs-another
https://grith.ai/blog/clinejection-when-your-ai-tool-installs-another
Anyone know any good mid to senior level GRC folks in the UK open to cover a maternity period?
k3ym𖺀You're paying AI companies a monthly subscription fee to be fingerprinted like a parolee.
I got bored and ran uBlock across Claude, ChatGPT, and Gemini simultaneously.
Claude:
- Six parallel telemetry pipelines.
- A tracking GIF with 40 browser fingerprint data points baked into the URL, routed through a CDN proxy alias specifically to make it harder to block.
- Intercom running a persistent WebSocket whether you use it or not.
- Honeycomb distributed tracing on a chat UI because apparently your conversation needs the same observability stack as a payments microservice.
ChatGPT:
- proxies telemetry through their own backend to hide the Datadog destination URL from blockers.
- uBlock had to deploy scriptlet injection — actual JS injected into the page to intercept fetch() at the API level — because a network rule wasn't enough.
- Also ships your usage data to Google Analytics. OpenAI. To Google. You cannot make this up.
- Also runs a proof-of-work challenge before you're allowed to type anything.
Gemini:
- play.google.com/log getting hammered with your full session behavior, authenticated with three SAPISIDHASH token variants, piped directly into the Google identity supergraph that correlates everything you've ever done across every Google product since 2004.
- Also creates a Web App Activity record in your Google account timeline. Also has "ads" in one of the telemetry endpoint subdomains.
When uBlock blocks Gemini's requests, the JS exceptions bubble up and Gemini dutifully tries to POST the error details back to Google. uBlock blocks that too. The error messages contain the internal codenames for every upsell popup that failed to load.
KETCHUP_DISCOVERY_CARD.
MUSTARD_DISCOVERY_CARD.
MAYO_DISCOVERY_CARD.
Google named their subscription upsell popups after condiments and I found out because their error handler snitched on them.
All three of these products cost money.
One of them is also running ad infrastructure.
Touch grass. Install @ublockorigin