@geekbb: I always tell you not to use domestic phones, but you don't take it seriously. Now let's find out who's actually sending your location and contacts outbound. Plug in via USB, run an adb scan, and you'll get a list of domains along with rollback commands. https://github.com/Verlintas/NOIR
Summary
The NOIR tool on GitHub can scan domestic phones via adb over USB, generating a list of domains that exfiltrate data such as location and contacts, along with rollback commands, for checking a phone's privacy leaks.
View Cached Full Text
Cached at: 11/02/26, 10:07 AM
I keep telling you not to use domestic Chinese phones, and you never take it seriously. Come see who’s actually shipping your location and contacts out. Plug in via USB, run an adb scan, and you’ll get a list complete with domains and rollback commands.
https://t.co/uIpEVrcHnl https://t.co/E8ROQdFS0Y
Similar Articles
@Lee_points: Please listen to some advice — I told you long ago not to use a Chinese Android phone for circumventing the firewall. Scan your phone with adb and see how it's leaking your privacy. https://github.com/Verlintas/NOIR
An introduction to the open-source tool NOIR: an Android privacy auditing tool that runs on your computer, scanning connected devices via adb for app permissions, APK network endpoints, and manifest information, then generating risk scores, data-flow correlations, and reversible remediation suggestions.
@wquguru: After statically reverse-engineering Claude, I found eight major pitfalls that even 100 Mac Minis can’t save you from: 1. Putting a mainland Chinese SIM card in your phone: Sift records it, and if it doesn’t match the country of your exit IP, you’re toast 2. Clearing app data and switching to a new account: Basically useless, Sift’s installat…
Through static reverse engineering of Claude’s Android client, Mac app, and CLI, the author identifies eight major risk-control pitfalls, explaining how services such as Sift and Sentry use hardware-level device fingerprints, SIM card country information, and IP address histories to identify and restrict accounts.
@xiangxiang103: Wow, Anthropic really dropped the ball this time. Someone dug up hidden code in the Claude Code binary — specifically designed to detect whether you're a Chinese user or routing through China. Not ordinary telemetry, but deliberately obfuscated, not mentioned in release notes, and completely unknown to users. The process goes like this: - Detects you...
Hidden code was discovered in the Claude Code binary that specifically detects Chinese users or proxy routes, and secretly modifies system prompts to add watermarks, sparking widespread concerns about trust in developer tools.
@hank_aibtc: Holy crap! There's such a nuclear-grade social engineering tool being openly freeloaded on GitHub! Storm-Breaker can directly: - Remotely peep at the other person's camera in real-time (phone/computer) - Real-time microphone eavesdropping, hear all surrounding sounds - Precise GPS location, tell you where the target is now (smartphone…
Storm-Breaker is an open-source social engineering tool available from GitHub, capable of remotely peeping at cameras, eavesdropping on microphones, obtaining GPS location and device information. It is mainly for learning and authorized testing, but misuse carries legal risks.
@Verlintas: I just had Big Fat Fish scan my Xiaomi 17 Pro Max, and you won't believe what it found...
A user ran the Big Fat Fish tool on their Xiaomi 17 Pro Max and cited warnings that domestic Android phones may report their app lists, advising against using Chinese phones for circumventing the firewall or installing foreign apps.