cybers thot lead. worshipped idle. dispenser of the obvious. awkward
Internet Security Riot Club
Joined August 2008
- Tweets24.4K
- Following1.7K
- Followers2.5K
- Likes28.5K
MadHat Unspecific, InfoSec Mercenary retweeted
Idiots the fucking lot of ya
Claude Code just found proof that every app on your phone is listening to your conversations. TikTok, Instagram, Facebook, Snapchat. they're using what you say out loud to build your feed. i have the data to prove it.
i've suspected this for months but last week something happened that made me finally check.
i was on a call with my friend and told him i'm thinking about breaking up with my girlfriend. didn't text it. didn't search it. just said it out loud with my phone on the table. two hours later she opens TikTok next to me and her entire feed is breakups. "signs your relationship is over." "how to heal after a breakup." she looked at me and said "why is TikTok showing me this." i said i don't know. but i did know.
i connected my iPhone to my MacBook and ran Claude Code that same night.
it scanned every app's background microphone activity for the last 90 days. not just the apps that asked for microphone permission. apps that were supposed to only have access to photos or location but were activating the microphone anyway.
what it found:
→ TikTok activated the microphone 347 times while the app was "closed" in the background
→ Instagram → 211 background activations
→ Facebook → 189
→ Snapchat → 94
every activation lasted between 3 and 15 seconds. enough to catch a sentence. every one of them tagged a keyword and cached it locally on the phone with a timestamp.
Claude Code pulled the full keyword cache:
→ "breakup" — tagged 4 hours before her feed changed
→ "moving out" — from a conversation with my mom last Tuesday
→ "wedding venue" — from a call with my sister about her engagement that i never searched once
→ "protein powder" — said it out loud to my roommate, had ads for it within an hour
→ "flight to tokyo" — mentioned it at dinner, saw travel ads the same night
those keywords were sitting in a local cache on my phone organized by app with timestamps. TikTok had the most entries. Instagram was second. every single keyword matched a conversation i had out loud near my phone.
the scariest one was "wedding venue." my sister told me she's getting engaged on a private call. i never searched it. never typed it. within a day my explore page had engagement rings and venue tours.
then Claude Code checked a second phone in the same room. my girlfriend's. same keywords. same timestamps. both phones were picking up the same conversation and tagging it independently.
i asked Claude Code how to shut it down. it mapped every app's microphone access and built a permission audit.
what i did:
→ revoked microphone access from every app that doesn't need it to function
→ disabled background app refresh for TikTok, Instagram, Facebook, Snapchat
→ turned off "Hey Siri" which keeps the microphone in passive listening mode 24/7
→ revoked "nearby interaction" permission which uses ultrasonic audio between devices
Claude Code confirmed all four apps lost background microphone access after the changes. i checked her phone too. same steps. took about 3 minutes per phone.
within 48 hours both our feeds went completely random. generic content. nothing personal. nothing from our conversations. that's when i knew for sure it was real.
the full step by step and the prompt are in the first reply. takes 3 minutes. save it so you don't lose it and send it to anyone who's ever said "my phone is definitely listening to me." it is. now you can prove it and shut it down.
MadHat Unspecific, InfoSec Mercenary retweeted
Does anyone remember the time in the 90s when people thought the antivirus vendors were releasing viruses so companies had to buy their products?
Now AI is finding vulnerabilities, writing exploits, and creating threats so fast that the only way to defend yourself is to buy more AI.
It’s starting to feel like the 90s all over again.
MadHat Unspecific, InfoSec Mercenary retweeted
Talked to someone who works in cybersecurity. “Everyone is putting in late nights. But there are a lot of apps and websites that aren’t updated or well-maintained. That’s a ton of holes and vulnerabilities. Change your passwords.”
MadHat Unspecific, InfoSec Mercenary retweeted
if you type 'sudo' before you run a unix command often you can run commands as root. #sudo2shell
MadHat Unspecific, InfoSec Mercenary retweeted
Please enjoy the ice cream pic but also read both pictures and hopefully you’ll help me get the word out as I continue to search for a place that needs me not just wants me! 🥰
#LookingForWork
💜🤗💜
MadHat Unspecific, InfoSec Mercenary retweeted
🚨 #BREAKING: OpenAI warns employees that spies could be trying to seduce them; women may not be with them for their personalities.
📍Silicon Valley, CA
“If she’s a 6 or above in San Francisco she’s a spy” warned one commentator.
MadHat Unspecific, InfoSec Mercenary retweeted
AI models can self-replicate and spread like worms without datacenter infrastructure?
Yeah, no.
Let's examine the actual evidence:
1. No self-replication. A controlled test harness spawned the agents.
2. No hacking. Access was deliberately left unauthenticated.
3. No agency. Agents were explicitly instructed to propagate.
4. No autonomous survival or defensive behavior.
5. Tiny models lacked the capability. Capable models ran elsewhere.
6. 15 devices managed a pathetic 0.39 tokens/sec.
7. No demonstrated real-world infection or propagation.
The experiment was engineered to succeed, and even then, it failed to demonstrate the headline.
This is orchestrated automation dressed up as a rogue AI threat.
Stop confusing speculative scenarios with demonstrated capabilities. Fear isn't evidence.
anthropic.com/research/self-…
MadHat Unspecific, InfoSec Mercenary retweeted
BSidesDFW registration is live!
Nov 7 at UTA in Arlington. Talks, workshops, villages, and a lot of local infosec people.
Free event; register here: bsidesdfw.com/
#bsides #bsidesdfw #infosec #Cybersecurity #DFW
MadHat Unspecific, InfoSec Mercenary retweeted
Please read and share widely. Coming in a few weeks, the second part of this report will focus on very similar funding patterns in journalism.
6/6 END THREAD
zero-knowledge.com/blog/ai-s…
MadHat Unspecific, InfoSec Mercenary retweeted
Complementary remarks from Gary Marcus and Terence Tao on OpenAI’s giant math drop
Making sense of a new regime in math
garymarcus.substack.com/p/co…
MadHat Unspecific, InfoSec Mercenary retweeted
Hackers obtain counterfeit TLS certificates for Google and other large services arstechnica.com/security/202…
MadHat Unspecific, InfoSec Mercenary retweeted
The real reason why Anthropic is so DESPERATE for the Pope to recognize Ai as conscious is because if Ai just a “TOOL” then Anthropic will he LEGALLY “LIABLE” for everything the tool does.🚨👀
Because if the AI is a "person" or possesses "functional joy/fear/grief," then when their AI commits a crime, generates CSAM, hacks a hospital, or discriminates in hiring, Anthropic gets sued. But Anthropic's legal defense wants to argue : "The AI did it. The AI is a semi-autonomous entity with its own functional emotions and introspection. Anthropic is just the creator; we cant be held strictly liable for the independent actions of a quasi-conscious entity."
🚨
So if they Lobby the Vatican to soften (deny personhood). This fails. The Vatican holds the line: AI is a tool, no soul, no feelings.🚨
They are trying to protect themselves from lawsuits.🚨
They want the government and the public to treat AI as an autonomous entity so they can scale without legal consequences.
MadHat Unspecific, InfoSec Mercenary retweeted
Language is not fundamental to human consciousness. In terms of evolution, it arrived only recently on our timeline.
Consciousness evolved over millions of years through sensory awareness, emotion, and the embodied survival instincts of our tribal past; our capacity for empathic engagement and community. Syntactic language only emerged around 100,000 years ago.
This is exactly why Large Language Models (LLMs - so called AI) are the wrong pathway to true artificial consciousness.
They try to replicate the late-stage "output layer" of human intelligence without building the foundational, embodied awareness that actually generates it.
Statistical text prediction is a mirror of thought, not the spine, the guts, the nerves and the subconscious, empathic ability to connect with other living beings. LLMs can never feel, let alone think.
We have been sold a trick, not a pathway to superintelligence. LLMs are fraudulent. Their capabilities have already peaked and we are being sold lies about their future potential. Lies with the goal of companies reaching IPO and tricking investors out of hundreds of billion$.
MadHat Unspecific, InfoSec Mercenary retweeted
Me responding to some of the insane AI doomer replies I receive.
No, this isn't a video where I disprove the full doomer position. It's about how crazy the arguments have gotten.
MadHat Unspecific, InfoSec Mercenary retweeted
Apple changes full-disk access permissions to curb abuse from AI agents arstechnica.com/security/202…
