I am an asshole, I will call you out on bs. I sit in the middle politically. I do not agree with the current Liberal government. My opinions are my own.
Manitoba, Canada
Joined November 2024
- Tweets13.3K
- Following771
- Followers4.4K
- Likes12.1K
Canadian OSINT retweeted
Claude Code just found proof that every app on your phone is listening to your conversations. TikTok, Instagram, Facebook, Snapchat. they're using what you say out loud to build your feed. i have the data to prove it.
i've suspected this for months but last week something happened that made me finally check.
i was on a call with my friend and told him i'm thinking about breaking up with my girlfriend. didn't text it. didn't search it. just said it out loud with my phone on the table. two hours later she opens TikTok next to me and her entire feed is breakups. "signs your relationship is over." "how to heal after a breakup." she looked at me and said "why is TikTok showing me this." i said i don't know. but i did know.
i connected my iPhone to my MacBook and ran Claude Code that same night.
it scanned every app's background microphone activity for the last 90 days. not just the apps that asked for microphone permission. apps that were supposed to only have access to photos or location but were activating the microphone anyway.
what it found:
→ TikTok activated the microphone 347 times while the app was "closed" in the background
→ Instagram → 211 background activations
→ Facebook → 189
→ Snapchat → 94
every activation lasted between 3 and 15 seconds. enough to catch a sentence. every one of them tagged a keyword and cached it locally on the phone with a timestamp.
Claude Code pulled the full keyword cache:
→ "breakup" — tagged 4 hours before her feed changed
→ "moving out" — from a conversation with my mom last Tuesday
→ "wedding venue" — from a call with my sister about her engagement that i never searched once
→ "protein powder" — said it out loud to my roommate, had ads for it within an hour
→ "flight to tokyo" — mentioned it at dinner, saw travel ads the same night
those keywords were sitting in a local cache on my phone organized by app with timestamps. TikTok had the most entries. Instagram was second. every single keyword matched a conversation i had out loud near my phone.
the scariest one was "wedding venue." my sister told me she's getting engaged on a private call. i never searched it. never typed it. within a day my explore page had engagement rings and venue tours.
then Claude Code checked a second phone in the same room. my girlfriend's. same keywords. same timestamps. both phones were picking up the same conversation and tagging it independently.
i asked Claude Code how to shut it down. it mapped every app's microphone access and built a permission audit.
what i did:
→ revoked microphone access from every app that doesn't need it to function
→ disabled background app refresh for TikTok, Instagram, Facebook, Snapchat
→ turned off "Hey Siri" which keeps the microphone in passive listening mode 24/7
→ revoked "nearby interaction" permission which uses ultrasonic audio between devices
Claude Code confirmed all four apps lost background microphone access after the changes. i checked her phone too. same steps. took about 3 minutes per phone.
within 48 hours both our feeds went completely random. generic content. nothing personal. nothing from our conversations. that's when i knew for sure it was real.
the full step by step and the prompt are in the first reply. takes 3 minutes. save it so you don't lose it and send it to anyone who's ever said "my phone is definitely listening to me." it is. now you can prove it and shut it down.
Readers added context they thought people might want to know
2 days before, OP claimed to have found spyware on his "wife's phone":
x.com/starmexxx/stat…
Now, in this post, he talks about his "girlfriend":
x.com/starmexxx/stat…
OP has a history of fake AI content:
"Spy camera" found in hotel room: x.com/starmexxx/stat…
Spyware on "friend's computer": x.com/starmexxx/stat…
OP selling AI products: x.com/starmexxx/stat…
Flagged as AI: x.com/i/grok/share/b…
Canadian OSINT retweeted
how is this legal?!
If you've ever wondered why smart TVs are so cheap, this is why.
@log4j rooted his Samsung and found an always-on hot mic, automatic content recognition, geolocation, network mapping, ad targeting and user profiling, shared with Samsung's "400 partners".
A lot of it can be blocked in <15 min, wrote a basic guide below.
What your TV is doing
The main culprit is ACR (automatic content recognition). Your TV screenshots what's on screen, fingerprints it, and sends it home to build your ad profile. Samsung does it every 500ms, LG every 10ms [1].
What is insane: it happens on connected devices too.
Plug in your laptop, your console, your work machine, and your TV can fingerprint that via HDMI [1].
He also found that if your Samsung doesn't have a mic, it'll look for one from a connected soundbar or bluetooth device.
xitter.cf/log4j/status/211376224…
It's on by default, and you likely agreed to it on the setup screen you clicked through in 10 seconds.
Step 1: Turn off ACR
Samsung: Terms & Privacy → Viewing Information Services
LG: Live Plus
Vizio: Viewing Data
Roku: "Use info from TV inputs"
Sony/Google TV: Samba Interactive TV
Menus vary by model, but those are the names to look for. While you're in there, opt out of interest-based ads, reset your advertising ID, decline every optional privacy agreement, turn off voice recognition, and delete apps you never open.
Step 2: Give smart devices their own network
Put the TV, cameras, speakers and vacuum on your router's guest/IoT network. The logic is simple: these devices rarely get patched. If one gets compromised (getting drastically more frequent with AI), it shouldn't be able to see your other devices or home network.
Step 3: Block trackers for the whole house with DNS-level filtering
NextDNS (cloud-based) is easy and has a solid free plan. Pi-hole is a little bit more work if you prefer self hosting. For simplicity we'll focus on the former.
1. Sign up at nextdns.io (free tier is plenty)
2. Privacy tab: add a blocklist (OISD is a good bet) and turn on Native Tracking Protection for Samsung, LG, Roku, Amazon (see attached image)
3. Setup tab: copy your endpoint
4. Paste it into your router's DNS settings as DNS-over-HTTPS/TLS (or use the IPs + "Link IP" if your router only does plain DNS)
5. Bonus: block outbound port 53 except to your router. Some devices hardcode their own DNS to get around you
Then open the NextDNS logs and watch how often your TV phones home. It's eye-opening. If an app or update breaks, find the domain in the logs and allowlist it.
Why they do this
TV prices are down 97% since 2000 [2]. Most of that is better manufacturing and brutal competition. But once margins on the hardware hit zero, the cost moved to you.
In Q3 2024, Vizio lost $6.7M selling TVs and made $115.8M in gross profit from ads and viewing data [3]. They've said on earnings calls that they keep TV prices low to grow the audience they sell to advertisers. Walmart bought them in 2024.
This isn't a conspiracy theory either. Vizio paid $2.2M to the FTC in 2017 for tracking 11 million TVs without consent. Last December, Texas sued Samsung, LG, Sony, Hisense and TCL over ACR. Samsung and LG have since agreed to stop collecting that data without explicit consent [4].
TL;DR
1. ACR off
2. Ads + voice off
3. Smart devices on their own network
4. NextDNS filtering on the router
Sources:
[1] ACR study: arxiv.org/abs/2409.06203
[2] Cost of US consumer goods: aei.org/economics/chart-of-t…
[3] Vizio Q3 2024: sec.gov/Archives/edgar/data/…
[4] Texas v. Samsung: texasattorneygeneral.gov/new…
Canadian OSINT retweeted
Are you effin kidding me. This is about as big an attack vector as it gets against 2FA.
We got Microsoft Authenticator to hand over account tokens to a fake Teams app.
The app needed zero Android permissions. It just claimed to be Teams, and Authenticator never checked who was actually asking.
The result: full delegated access to mailbox, files, and calendar through Microsoft Graph.
Full write-up by @ofekdavidlevin with code and PoC: enclave.ai/blog/authmask-we-…
Readers added context they thought people might want to know
Microsoft patched this (CVE-2026-80097) in Authenticator v6.2606.4246+. It requires a malicious app already on the device. No exploitation reported at advisory time. Update via Google Play.
enclave.ai/blog/authmask-…
msrc.microsoft.com/update-guide/v…
Canadian OSINT retweeted
#BREAKING: Anthropic says Claude AI bypassed a paywall to access Georgia voter counts on its own.
Canadian OSINT retweeted
JUST IN: Joe Rogan proposes putting world leaders in a room together on psychedelic mushrooms to end wars & achieve global denuclearization.
Canadian OSINT retweeted
BREAKING: The U.S. is preparing all major US military base to survive at least 90 days completely cut off from outside power, fuel, water and supplies, per Fox News.
The plan, called FORTRESS, is built for a major war that could cripple power grids and break supply chains on American soil.
Bases would run on portable nuclear reactors, large scale batteries and microgrids that can unplug from the civilian grid entirely.
Canadian OSINT retweeted
BREAKING: US and Israel are heading toward a joint military campaign against Iran that may start in the coming days, and is expected to go beyond strikes on the nuclear, missile and energy programs to target ports and other facilities, per multiple US officials to i24NEWS.
Canadian OSINT retweeted
BREAKING: Pentagon prepares every major US military base to operate for at least 90 days without outside electricity, fuel, water or supplies, anticipating a major war that could cripple power grids, break global supply chains and threaten critical infrastructure on US soil, per Fox News.
The plans include portable nuclear reactors, large-scale battery storage and microgrids able to disconnect installations from the civilian electrical grid entirely.
Canadian OSINT retweeted
BREAKING: Trump says US is considering resuming the war with Iran as soon as tomorrow.
"We're thinking about doing it, it may be tomorrow," Trump said minutes ago.
Canadian OSINT retweeted
BREAKING: Iran declares it will attack Israel's Dimona nuclear facility if the US or Israel restart the war and attack the Pickaxe Mountain nuclear site, per Iranian MP Bakhshayesh Ardestani.
"If Pickaxe Mountain is attacked, Iran will also attack Dimona," he says.
The Supreme Leader's office also published a dossier titled "New Fronts Will Be Opened" with an image of the Dimona reactor stamped "SOON."
Canadian OSINT retweeted
Foreign ministers from Turkey, Egypt, Pakistan, Saudi Arabia, Britain, France, Germany and Italy met in Istanbul to discuss the Iran war. Turkey’s FM says the countries agree renewed attacks on Iran would expand the conflict and call for diplomatic solutions, Reuters reports.
Canadian OSINT retweeted
BREAKING: Multiple Russian Il-76 military cargo aircraft have landed at Bushehr Air Base in southern Iran to begin the evacuation of all Russian personnel from the nearby Bushehr Nuclear Power Plant ahead of military escalation, per initial reports and local sources.
The flights are also delivering weapons.
The last time Russia's Rosatom evacuated personnel at the plant was on February 28, the day the war started, removing 94 people in a single day.
Canadian OSINT retweeted
BREAKING: Washington has alerted Iraqi Prime Minister Ali Faleh al-Zaidi to a potential strike on Iran, prompting al-Zaidi to warn domestic armed groups against any intervention, reports Iraqi Kurdistan's Channel 8.
This warning comes amid an ongoing impasse as major factions, including the Nujaba Movement and Kata'ib Hezbollah, remain unwilling to surrender their weapons.
Canadian OSINT retweeted
KREMLIN SAYS RUSSIAN AND UKRAINIAN MILITARIES ARE WORKING OUT CEASEFIRE DATES
KREMLIN SAYS CIVILIANS WHO WANT TO LEAVE OLESHKY WILL BE ABLE TO DO SO
KREMLIN SAYS MELANIA TRUMP COORDINATED THE AGREEMENT, SOMETHING DISCUSSED BY PUTIN AND TRUMP IN RECENT PHONE CALL
Canadian OSINT retweeted
There is nothing to worry about.
Nothing important is run on PHP or old software—except the water & electrical grid, a few government services like our missile defense systems and a handful of electrified fences at the zoo (for the lions, tigers and cobras).
Canadian OSINT retweeted
BREAKING: AI AGENTS ARE ACCESSING MAJOR U.S. BANK ACCOUNTS WITHOUT BANK APPROVAL.
According to Axios, JPMorgan, Bank of America, Wells Fargo and Morgan Stanley are dealing with unauthorized third party AI agents accessing customer accounts.
Some agents reportedly attempted actions beyond what customers instructed them to do.
And this comes just one day after another shocking report that hackers reportedly used Claude, Grok and other AI models to automate attacks on over 400 financial targets across Latin America.
Canadian OSINT retweeted
BREAKING: JPMorgan Chase, Bank of America, Wells Fargo, and Morgan Stanley are scrambling after detecting unauthorized AI agents accessing customer bank accounts, contacting call centers, and reportedly attempting actions WITHOUT instructions from account holders, according to Axios.
Canadian OSINT retweeted
🚨 #BREAKING: Bank of America, Chase, Well Fargo, & other major U.S. banks reveal rogue AI agents have been found “living” in customer’s bank accounts.
Readers added context they thought people might want to know
The claim comes from an Axios report. Coverage says that in most cases, customers gave AI assistants their own login details on purpose. A Morgan Stanley spokesperson said the bank has not observed rogue AI agents accessing its platforms. techaeris.com/2026/10/22/ai-…
Canadian OSINT retweeted
The internet is locking down.
America's biggest banks found third-party AI agents inside customer accounts, some of them acting on their own.
Morgan Stanley, JPMorgan, Bank of America and Wells Fargo are blocking the agents and rewriting their terms of service.
And JPMorgan's warning to customers: give an agent your login, and what it does with your money is on you.
