Buchodi's Threat Intel
Cybersecurity research, writeups, and threat analysis by buchodi
- Posts
- 11 from 18 Feb 2026 to 20 Sep 2026
- Posting
- monthly (11 in the last year)
- Kind
- personal blog
- Feed
- https://www.buchodi.com/rss/
2026 11
- ChatGPT now knows what you do on other websites via ad collector
- Meta's smart glasses companion app ships a complete, dormant face-recognition pipeline on a stock account.
- AppLovin's mediation protocol.
- How ChatGPT serves ads. Here's the full attribution loop.
- Cracking a Malvertising DGA From the Device Side
- Apple's Spotlight Search Results Come With Engagement Metrics. No One Knew.
- ChatGPT Won't Let You Type Until Cloudflare Reads Your React State. I Decrypted the Program That Does It.
- BIGO Ads Deploys C2-Style Infrastructure to Survive Domain Bans. Here's the Decrypted Config.
- Your Duolingo Is Still Talking to ByteDance: How Pangle Fingerprints You Across Apps After You Said No
- Your Duolingo Is Talking to ByteDance: Cracking the Pangle SDK's Encryption
- Your Samsung Weather App Is a Fingerprint