RossMadness

28 Followers
75 Following
1.2K Posts
Infosec Analyst, former Systems Admin, Linux Enthusiast, at one time I was an aspiring English scholar.

Many readers have been asking if this or that app for their TV is bundled with residential proxy software. Many of the apps in question -- as well as publisher/component names to look for -- are detailed in links throughout the story. But for the sake of simplicity, here they are:

Qurium's report: https://www.qurium.org/forensics/finding-popa/

Synthient blog: https://synthient.com/blog/popa-from-sourcing-to-distribution

Synthient list of apps and app publishers bundling proxy SDKs: https://github.com/synthient/public-research/blob/main/2026/06/popa/Popa.md

Spur: https://spur.us/blog/how-proxy-providers-co-opt-entire-networks

Nokia Deepfield: https://github.com/deepfield/public-research/blob/main/reports/2026-06-18-robovpn-neunative.md

Include Security: https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/

Infoblox: https://www.infoblox.com/blog/threat-intelligence/residential-proxies-in-the-wild/

edit: added Sythient github link.

Finding “Popa”: When Your Smart TV Stops Being Yours – Qurium Media Foundation

Happy "Respond to malware infections because people are installing things to watch the World Cup" day to those who observe.

Google just called its new AI Search the "biggest upgrade in 25 years" but really, it's killing the open web.  😡

The open web was built by millions of people sharing knowledge freely → Now, Google who owns the monopoly on Search is ruining it. 

We wrote about what's really happening, and what you can do about it 👉 https://tuta.com/blog/why-google-ai-search-is-bad

#AI #AISearch #Google 

they’ll rue the day they ever crossed Mrs. Vendetta Newsom
Everyone, I finally go on vacation this weekend and will be out for a week. If you can all please somehow make sure nothing terrible happens until AFTER I'm gone, I'd appreciate it.

Of course Niantic used Pokemon Go for location training on autonomous weapons, but we weren't worried because it was just a fun game that got people outside.

Of course Snapchat and Instagram used filters to train facial recognition, but we weren't worried because it made our selfies look better and that puppy tongue was so cute.

Of course 23&Me was building a blood quantum database, but we weren't worried because we were curious about our background and it was just harmless fun.

We've been training a surveillance apparatus beyond the wildest dreams of any dictator this whole time.

We weren't worried because it's not like a bigoted authoritarian regime would rise and start abusing it, right?

...right?

RE: https://social.coop/@shauna/116737114240403155

This is a post about cyber security.

When your phone call finally gets through to your Democrat representative between their insider trading.

A quick note on process regarding the recent AUR story. Everything worked exactly as community-driven threat intel should.

  • A user tipped us off
  • We investigated and reported
  • Community feedback refined the intel
  • Everyone got the necessary information
  • We protected each other.

    #ThreatIntelIsMutualAid