Many readers have been asking if this or that app for their TV is bundled with residential proxy software. Many of the apps in question -- as well as publisher/component names to look for -- are detailed in links throughout the story. But for the sake of simplicity, here they are:
Qurium's report: https://www.qurium.org/forensics/finding-popa/
Synthient blog: https://synthient.com/blog/popa-from-sourcing-to-distribution
Synthient list of apps and app publishers bundling proxy SDKs: https://github.com/synthient/public-research/blob/main/2026/06/popa/Popa.md
Spur: https://spur.us/blog/how-proxy-providers-co-opt-entire-networks
Nokia Deepfield: https://github.com/deepfield/public-research/blob/main/reports/2026-06-18-robovpn-neunative.md
Include Security: https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/
Infoblox: https://www.infoblox.com/blog/threat-intelligence/residential-proxies-in-the-wild/
edit: added Sythient github link.
Google just called its new AI Search the "biggest upgrade in 25 years" but really, it's killing the open web. 😡
The open web was built by millions of people sharing knowledge freely → Now, Google who owns the monopoly on Search is ruining it.
We wrote about what's really happening, and what you can do about it 👉 https://tuta.com/blog/why-google-ai-search-is-bad
Of course Niantic used Pokemon Go for location training on autonomous weapons, but we weren't worried because it was just a fun game that got people outside.
Of course Snapchat and Instagram used filters to train facial recognition, but we weren't worried because it made our selfies look better and that puppy tongue was so cute.
Of course 23&Me was building a blood quantum database, but we weren't worried because we were curious about our background and it was just harmless fun.
We've been training a surveillance apparatus beyond the wildest dreams of any dictator this whole time.
We weren't worried because it's not like a bigoted authoritarian regime would rise and start abusing it, right?
...right?
RE: https://social.coop/@shauna/116737114240403155
This is a post about cyber security.
A quick note on process regarding the recent AUR story. Everything worked exactly as community-driven threat intel should.
We protected each other.