研究有趣的东西，折腾没必要折腾的东西。AI / Tech / Cars / Maps / Travel.
Mars
Joined November 2010
- Tweets1.8K
- Following1.1K
- Followers197
- Likes3.2K
.
Se você costuma compartilhar links do X antigo Twitter deve ter reparado em uma novidade. Recentemente a plataforma passou a embutir um código de rastreamento nos links copiados que serve basicamente para identificar quem gerou o link e o momento exato da cópia.
Para quem preza pela privacidade a solução é simples basta apagar tudo o que aparece no link após a "?".
Vale o destaque para o parâmetro "s" que revela qual dispositivo você usa. O código de final 19 indica Android, o 20 aponta para iPhone e o 46 indica navegadores de computador.
Pode deletar essa sequência inteira sem medo. O link original continuará funcionando perfeitamente e você navega com muito mais privacidade.
秩序边缘 retweeted
Claude Code just found proof that every app on your phone is listening to your conversations. TikTok, Instagram, Facebook, Snapchat. they're using what you say out loud to build your feed. i have the data to prove it.
i've suspected this for months but last week something happened that made me finally check.
i was on a call with my friend and told him i'm thinking about breaking up with my girlfriend. didn't text it. didn't search it. just said it out loud with my phone on the table. two hours later she opens TikTok next to me and her entire feed is breakups. "signs your relationship is over." "how to heal after a breakup." she looked at me and said "why is TikTok showing me this." i said i don't know. but i did know.
i connected my iPhone to my MacBook and ran Claude Code that same night.
it scanned every app's background microphone activity for the last 90 days. not just the apps that asked for microphone permission. apps that were supposed to only have access to photos or location but were activating the microphone anyway.
what it found:
→ TikTok activated the microphone 347 times while the app was "closed" in the background
→ Instagram → 211 background activations
→ Facebook → 189
→ Snapchat → 94
every activation lasted between 3 and 15 seconds. enough to catch a sentence. every one of them tagged a keyword and cached it locally on the phone with a timestamp.
Claude Code pulled the full keyword cache:
→ "breakup" — tagged 4 hours before her feed changed
→ "moving out" — from a conversation with my mom last Tuesday
→ "wedding venue" — from a call with my sister about her engagement that i never searched once
→ "protein powder" — said it out loud to my roommate, had ads for it within an hour
→ "flight to tokyo" — mentioned it at dinner, saw travel ads the same night
those keywords were sitting in a local cache on my phone organized by app with timestamps. TikTok had the most entries. Instagram was second. every single keyword matched a conversation i had out loud near my phone.
the scariest one was "wedding venue." my sister told me she's getting engaged on a private call. i never searched it. never typed it. within a day my explore page had engagement rings and venue tours.
then Claude Code checked a second phone in the same room. my girlfriend's. same keywords. same timestamps. both phones were picking up the same conversation and tagging it independently.
i asked Claude Code how to shut it down. it mapped every app's microphone access and built a permission audit.
what i did:
→ revoked microphone access from every app that doesn't need it to function
→ disabled background app refresh for TikTok, Instagram, Facebook, Snapchat
→ turned off "Hey Siri" which keeps the microphone in passive listening mode 24/7
→ revoked "nearby interaction" permission which uses ultrasonic audio between devices
Claude Code confirmed all four apps lost background microphone access after the changes. i checked her phone too. same steps. took about 3 minutes per phone.
within 48 hours both our feeds went completely random. generic content. nothing personal. nothing from our conversations. that's when i knew for sure it was real.
the full step by step and the prompt are in the first reply. takes 3 minutes. save it so you don't lose it and send it to anyone who's ever said "my phone is definitely listening to me." it is. now you can prove it and shut it down.
Readers added context they thought people might want to know
2 days before, OP claimed to have found spyware on his "wife's phone":
x.com/starmexxx/stat…
Now, in this post, he talks about his "girlfriend":
x.com/starmexxx/stat…
OP has a history of fake AI content:
"Spy camera" found in hotel room: x.com/starmexxx/stat…
Spyware on "friend's computer": x.com/starmexxx/stat…
OP selling AI products: x.com/starmexxx/stat…
Flagged as AI: x.com/i/grok/share/b…
秩序边缘 retweeted
为什么你花 2 万块买的旗舰智能电视，按遥控器还是卡得像十年前的安卓机？
昨天安全研究员 @log4j 把自家 3000 刀的三星电视 Root 了，扒出来的底层代码堪称年度草台班子大赏：
1. 电视后台每 500 毫秒截一次屏（连 HDMI 投屏看电脑桌面都截），打包发给近 400 家合作商。如果电视没麦克风，后台进程甚至会顺着蓝牙和回音壁去「借」一个麦克风继续听。
2. 最搞笑的来了：为什么菜单这么卡？
另一位研究员 @mike64_t 拆包发现，三星在电视那颗羸弱的 CPU 上，塞了一个叫 alex.tflite 的模型——246 万参数，2012 年古董级的 AlexNet。
这玩意每隔 2 秒抓一张画面跑推理，猜你在玩什么游戏。结果因为颜色通道写反了，它 99% 的时间什么都认不出来，纯烧 CPU。
3. 那如果你在设置里关掉「隐私追踪」呢？
代码逻辑是：先死命跑完 CPU 推理，准备上传时再看开关——发现你关了，就把结果扔进垃圾桶，2 秒后继续跑。
4. 结局更是重量级：
当号主用 OpenAI 逆向分析「自己花 3000 刀买回家的电视固件」时，OpenAI 反手一个 Cyber Abuse 把他号封了，顺带没收了剩下的 500 刀余额。
三星负责偷窥客厅，2012 年的 AI 负责烧干电视 CPU，OpenAI 负责保护三星的屎山代码不被你发现。
卧槽……今日起进入危机纪年
🚨 今天互联网炸了 🚨
2026 年 10 月 21 日，这天得记进历史
1. eMudhra：私钥居然就是"4"。8 个密钥伪造任意网站，持续 17 个月。6000 多万张证书有风险。
2. 印度国家银行（SBI）确认了。3897 名客户的手机号、生日、地址和贷款数据，在暗网上被发现了。
3. 拉贾斯坦邦警方称遭黑客攻击。该团伙声称在卖 7 万条身份记录和 59460 个号码。未经证实。
4. php2shell【9.2 分】PHP 里的未授权远程代码执行。覆盖 70% 的网站。WordPress、Drupal、Laravel 全中。CISA 说：要么打补丁，要么下线。
5. GitLab【10.0/10】满分。未授权远程代码执行，不用登录就能打。
6. Node.js【CVE-2026-111497】Brotli 解码器远程代码执行，外加 TLS 绕过。今天一共修了 10 个 CVE。还顺手拦了 eMudhra。
7. Railway 今天被攻破。环境变量被解密。你的 API 密钥和数据库密码全暴露了。全部轮换。
8. OpenCode 被攻破。Console 用户的 OpenAI、Anthropic、Google API 密钥泄露。蒸馏攻击。账单被刷到飞起。
9. LiteLLM PyPI 的 v1.107.0 今天早上是恶意包。偷凭证，还留后门。
10. Plex2Shell 正在被实际利用。黑客当下就在装挖矿程序。已进 CISA 已知被利用漏洞清单，截止日期 10 月 23 日。
AI 找漏洞，AI 也在利用漏洞。人打补丁的速度跟不上。
阴湿的日本人就是这样子的，礼貌都是骗人的
หลังจากที่ไปจีนบ่อย ๆ แล้วไปเที่ยวญี่ปุ่นล่าสุด บอกเลยว่าหงุดหงิดกับทุกสิ่ง ตั้งแต่ถังขยะหายาก รร แพงและเล็กไม่พอ ล่าสุดพัก 1 อาทิตย์ให้น้ำคนละขวด อยากเพิ่มให้ลงมาเติมเองที่ล็อบบี้ คือให้ใช้ขวดเดิม 1 อาทิตย์ เกินไปปะวะ อยู่ในห้องเลท ถ้าเกินบ่ายโมงจะไม่มีเมดมาทำห้องให้ เช็คอินก็บ่ายสามบ่ายสี่ แต่ให้เช็คเอ้าท์ 10 โมง
ที่จีนคือไปเช็คอินตี 5 ก็ให้ชั้นเข้า บางรร.ขอเลทเช็คเอ้าท์ 5 โมงก็ยอมแบบไม่ชาร์จเพิ่ม และที่สำคัญคนจีนไม่มีเหยียดนะ เราพูดจีนไม่ได้ก็พยายามคุย ยิ้มแย้ม ไม่เหมือนญี่ปุ่นเหมือนโดนมองเหยียดตลอดเวลา ประมาณเซ็งนักท่องเที่ยวอะ
คือไม่จำเป็นก็ไม่อยากไปญี่ปุ่นแล้วอะ เที่ยวจีนดีกว่า
没有哪个国家能养活比养活它的人更多的人。
Ayer Francia vivió uno de sus días más violentos en décadas. Unas 550.000 personas salieron a la calle contra el alto coste de la vida, la policía detuvo a más de 1.200, hubo 150 agentes heridos y el ayuntamiento de Limoges, con más de 140 años de historia, quedó casi destruido por el fuego. La explicación que más se escucha es la de siempre: la culpa es de la «austeridad» y del «neoliberalismo».
Luis Garicano publicó esta semana los números que desmontan ese cuento. En Francia viven del Estado 30 millones de adultos, entre pensionistas, empleados públicos y perceptores de ayudas, frente a 21 millones que trabajan en el sector privado. El gasto público es el 57% del PIB y el país no cierra un presupuesto equilibrado desde 1974. ¿Dónde está la austeridad?
España va por el mismo camino. Según Garicano, desde 2024 cobran del Estado 18,2 millones de personas, más que los 17,9 millones que trabajan en el sector privado, y la EPA ya cuenta más empleados públicos que autónomos. Gastamos el 45% del PIB y el último superávit fue en 2007.
Me explico. Cuando más de la mitad de los votantes vive del Estado, ningún político se atreve a tocar el gasto, porque recortarlo es perder elecciones. Se paga con deuda y con impuestos al que produce, cada vez produce menos gente y la vida se encarece para todos. En las calles de Francia se pide más Estado para curar lo que causó el exceso de Estado.
Argentina eligió el camino contrario. Milei recortó el gasto primario un 27% en términos reales en su primer año y cerró 2024 con el primer superávit financiero en más de una década. Llevo toda la vida creando empresas en España y en Estados Unidos, y sé que cada empleo privado paga una parte del sueldo de alguien que cobra del Estado. Cuando los que cobran superan a los que pagan, la cuenta no sale.
Ningún Estado puede mantener a más gente de la que lo mantiene a él.
