Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
Înapoi la articole →

Buchodi's Threat Intel

www.buchodi.com/rss/
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 11

  1. ChatGPT now knows what you do on other websites via ad collector

    (Buchodi's Threat Intel)

    OpenAI's ad collector at bzr.openai.com sets a cookie called __obi, scoped to .openai.com.

  2. Meta's smart glasses companion app ships a complete, dormant face-recognition pipeline on a stock account.

    (Buchodi's Threat Intel)

    Stella is the companion app for Meta's smart glasses.

  3. AppLovin's mediation protocol.

    (Buchodi's Threat Intel)

    I broke the cipher AppLovin wraps around its ad-mediation traffic and decrypted several thousand real requests captured.

  4. How ChatGPT serves ads. Here's the full attribution loop.

    (Buchodi's Threat Intel)

    OpenAI's ad platform has two halves.

  5. Cracking a Malvertising DGA From the Device Side

    (Buchodi's Threat Intel)

    When piracy streaming sites inject third-party JavaScript into your browser, the domains hosting that JavaScript are designed to be invisible.

  6. Apple's Spotlight Search Results Come With Engagement Metrics. No One Knew.

    (Buchodi's Threat Intel)

    How Apple's Spotlight API exposes undocumented interaction data for every search result it serves to over a billion devices When an iPhone user types a query into Spotlight, Apple's servers return ranked results spanning web pages, apps, maps, news, knowl…

  7. ChatGPT Won't Let You Type Until Cloudflare Reads Your React State. I Decrypted the Program That Does It.

    (Buchodi's Threat Intel)

    Edit April 2, 2026: I've been getting inbound interest from researchers wanting to run their own queries.

  8. BIGO Ads Deploys C2-Style Infrastructure to Survive Domain Bans. Here's the Decrypted Config.

    (Buchodi's Threat Intel)

    The BIGO Ads SDK ships with an encrypted configuration file that maps out a global network of ad-serving domains, backup hosts, and failover infrastructure.

  9. Your Duolingo Is Still Talking to ByteDance: How Pangle Fingerprints You Across Apps After You Said No

    (Buchodi's Threat Intel)

    This is Part 2 of my Pangle SDK research.

  10. Your Duolingo Is Talking to ByteDance: Cracking the Pangle SDK's Encryption

    (Buchodi's Threat Intel)

    When you open Duolingo to practice Spanish, BeReal to share a photo, or Character.AI to chat with a bot, you probably don't expect your battery level, storage capacity, and internal IP address to be sent to ByteDance, the company behind TikTok.

  11. Your Samsung Weather App Is a Fingerprint

    (Buchodi's Threat Intel)

    How a pre-installed system app turns saved locations into a persistent cross-session tracking identifier Samsung devices ship with a weather application that issues periodic HTTP requests to The Weather Company's API (api.weather.com) at fixed intervals.