@wquguru: Reverse-analyzed Claude Code with REA (Mac CLI, Mac App, Android App) — this should be the most complete proxy ruleset out there. A few key points: 1. Android: strongest detection. Anti-fraud checks via Sift, SIM card country detection, and hardware device IDs are collected…

X AI KOLs Timeline News
reverse-engineering claude-code privacy telemetry proxy mobile-security

Summary

The author reverse-engineered Claude Code's Mac CLI, Mac App, and Android App using REA, noting that the Android client has the strongest anti-fraud detection via Sift — collecting SIM card country and hardware device IDs — while the Mac client only gathers random telemetry through Sentry/Datadog. The full proxy ruleset has been made public.

Reverse-analyzed Claude Code with REA (Mac CLI, Mac App, Android App) — this should be the most complete proxy ruleset out there. A few key points: 1. **Android**: strongest detection. Anti-fraud checks via Sift, SIM card country detection, and hardware device IDs are collected (ANDROID_ID + Play Integrity + hardware keys) — these don't change even after reinstalling the app 2. **Mac App and Mac CLI**: telemetry collected via Sentry and Datadog, device IDs are purely random and not tied to hardware 3. Speculating the iOS client is similar to Android The entire analysis was done on a Mac using DeepSeek Harness + flatkey (tested and highly recommended for REA): 1. Download and install DeepSeek Harness desktop: https://deepseek.com/en/download/ 2. Sign up for flatkey (supports 100+ major models; recent promotion — domestic models as low as 60% off, normally 20% off) 3. Configure flatkey in DeepSeek Harness: set base URL to https://router.flatkey.ai/v1, copy an API key created from the dashboard, and select model deepseek-v4-1-flash-1017 Full ruleset updated at https://github.com/wquguru/one-exit/commit/b9d9f8ab6687401f7588dfa7d7023cd58ffb4032…
Original Article
View Cached Full Text

Cached at: 10/22/26, 12:38 AM

Agent Traffic Analysis of Claude Code (Mac CLI, Mac App, Android App) — The Most Comprehensive Proxy Rules on the Internet

I’ve completed a REA (Reverse Engineering Analysis) of Claude Code across all platforms — Mac CLI, Mac App, and Android App. This is probably the most comprehensive proxy rule set available online. Here are the key findings:

  1. Android: The strongest detection. Anti-fraud detection is performed via Sift, including checking the country of the SIM card. Hardware device IDs collected (ANDROID_ID + Play Integrity + hardware keys) persist even after reinstalling the app.

  2. Mac App & Mac CLI: Telemetry data is collected via Sentry and Datadog. Device IDs are purely random and not tied to hardware.

  3. Hypothesis: The iOS client likely behaves similarly to the Android client.

The entire analysis was performed on a Mac using DeepSeek Harness + FlatKey (personally verified — excellent for REA):

  1. Download and install DeepSeek Harness desktop: https://deepseek.com/en/download/
  2. Sign up for FlatKey (supports 100+ LLMs; currently running a promotion with domestic models as low as 40% off, and 80% off for regular pricing)
  3. Configure FlatKey in DeepSeek Harness: set the base URL to https://router.flatkey.ai/v1, copy your API key from the dashboard, and select the model deepseek-v4-1-flash-1017

The complete rule set has been updated at: https://github.com/wquguru/one-exit/commit/b9d9f8ab6687401f7588dfa7d7023cd58ffb4032…

Download DeepSeek

Source: https://www.deepseek.com/en/download/

DeepSeek Harness desktop interface

DeepSeek Harness for Desktop

DeepSeek Harness is now available for desktop. Work in the background, edit local files, and handle long, complex tasks with ease. New features and improvements are shipped regularly.

DeepSeek App

The official AI assistant from DeepSeek. Chat with leading AI models for free. Powered by our latest flagship model, with faster answers and more powerful features to help you learn, create, and get things done.

DeepSeek app chat and history screens

Similar Articles

@wquguru: After statically reverse-engineering Claude, I found eight major pitfalls that even 100 Mac Minis can’t save you from: 1. Putting a mainland Chinese SIM card in your phone: Sift records it, and if it doesn’t match the country of your exit IP, you’re toast 2. Clearing app data and switching to a new account: Basically useless, Sift’s installat…

X AI KOLs Timeline

Through static reverse engineering of Claude’s Android client, Mac app, and CLI, the author identifies eight major risk-control pitfalls, explaining how services such as Sift and Sentry use hardware-level device fingerprints, SIM card country information, and IP address histories to identify and restrict accounts.

@xiangxiang103: Wow, Anthropic really dropped the ball this time. Someone dug up hidden code in the Claude Code binary — specifically designed to detect whether you're a Chinese user or routing through China. Not ordinary telemetry, but deliberately obfuscated, not mentioned in release notes, and completely unknown to users. The process goes like this: - Detects you...

X AI KOLs Timeline

Hidden code was discovered in the Claude Code binary that specifically detects Chinese users or proxy routes, and secretly modifies system prompts to add watermarks, sparking widespread concerns about trust in developer tools.