GitHub - interplains/Zero-Breach-Toolkit: Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
github.com
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux...

Zero Breach Toolkit

A free, open-source check for traces of known mercenary spyware (Pegasus, Predator, Graphite, Candiru and others) on computers, Android phones and iPhone backups.

  • Read-only. It does not modify source evidence or system settings. It writes only temporary database snapshots and the reports you ask for.

  • No network requests during a scan. It never looks up spyware addresses and has no upload feature. Python network calls are blocked and redirected paths are refused. This is not an operating-system network sandbox; see PRIVACY.md.

  • States its limits. Every report says what was found, how strong the evidence is, and what could not be checked. A clean result is never presented as proof that you are safe.

Repo:

https://github.com/interplains/Zero-Breach-Toolkit

Tweet:

https://nitter.meowing.monster/xIsraelExposedx/status/2115161198454866070#m

    • wyldrstallyns@lemmy.dbzer0.comEnglish
      0·
      3 days ago

      Sorry, could you ELI20 that for me? Too much activity to be unsus? Or, so popular, it’s gonna make a difference for millions?

          • Avicenna@programming.dev
            0·
            3 days ago

            No not this particular question only. Your writing style: the occasional em dash, putting too many smileys on most of your other sentences (and not just the conventional face smileys, I am talking about stuff like hands, objects etc), sometimes making comments that seem out of place are all very bot like behavior. If you are not a bot do you use an LLM extension to write most of your responses? Not judging, just curiosity. ps: I am not fanatically anti AI, I am more like anti tech bro owned AI.

            • wyldrstallyns@lemmy.dbzer0.comEnglish
              0·
              3 days ago

              Nope, and those up-jumped databases are trained on texts that millions of actual humans’ve penned, so 🤷🏼‍♂️ I write how I write, and I’m not interested in being shamed for it —though that may’ve not been your intent. 😁 Carry on, fellow poor.

              FWIW, history skimming is generally frowned upon. 🙇🏼‍♂️

              • Avicenna@programming.dev
                0·
                2 days ago

                Why is history skimming frowned upon? If you have some speculations about a person, that is the most precise way to check it rather than judging based on a single message.

                fellow poor

                fellow poor?

                Anyways since you answered my question, time for me to answer yours. Before the onset of LLMs, there probably has never been a repo that attracted that much attention in a week. Now it is a regular occurrence and the common denominator is in most cases AI created repos. A week old code getting so many stars and branches is therefore not indicative of quality. Infact if anything it might be the opposite if the owner of the repo is using bots to increase the popularity of their repo. If you are gonna download something in your phone that will have access to your private data, go for something that had generated its popularity over time and not over a short time thanks to bots.