Top all-time · #10250
Buchodi's Threat Intel
Personal blog · buchodi.comsecurityai
Buchodi's Threat Intel is a personal blog at buchodi.com about security and ai. Since 2026, 7 different Hacker News readers have linked it 13 times, most often “ChatGPT Won't Let You Type Until Cloudflare Reads Your React State”. It is still writing: the last post was on 2026-09-20, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN commenters link Buchodi's Threat Intel posts on device fingerprinting and ad SDK tracking, including a dissection of AppLovin's mediation, and on ChatGPT's fingerprinting of browsers, when discussing privacy.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Cybersecurity research, writeups, and threat analysis by buchodi
Most-linked posts?
- ChatGPT Won't Let You Type Until Cloudflare Reads Your React State3 people · 3 mentions · first linked 2026-03-29
- I broke AppLovin's mediation cipher protocol2 people · 2 mentions · first linked 2026-05-16
- Apple's Spotlight Search Results Come with Engagement Metrics. No One Knew2 people · 2 mentions · first linked 2026-04-04
- Duolingo Is Talking to ByteDance: Cracking the Pangle SDK's Encryption2 people · 2 mentions · first linked 2026-03-05
What Hacker News says?
>Disabling "advertising ID" on iOS makes it extremely difficult to reliably fingerprint phones. You got this flipped. The whole point of "fingerprinting" is to build a stable identifier that works even if a explicit identifier (IMEI or advertising ID) isn't available. And yes, there are shady SDKs that do this without facing repercussions. https://www.buchodi.com/i-broke-applovins-mediation-cipher-p...
Comment linking /i-broke-applovins-mediation-cipher-protocol/
on “US Military disables ad trackers on troops' phones”Submitted ChatGPT now knows what you do on other websites via ad collector as a story · 764 points
HN discussionAn aside: https://www.buchodi.com/chatgpt-wont-let-you-type-until-clou... It seems that anthropic has added something similar to their browser UI because just in the last few days chat has become almost unusable in firefox. %@$#%
Comment linking /chatgpt-wont-let-you-type-until-cloudflare-reads-your-react-state-i-decrypted-the-program-that-does-it/
on “Anthropic: Claude Code users hitting usage limits 'way faster than expected'”Submitted ChatGPT Won't Let You Type Until Cloudflare Reads Your React State as a story · 49 points
HN discussion>TABLE 2. USER AGENT METADATA FIELDS (“CLIENT HINTS”) SENT AS PART OF YOTI’S AGE ESTIMATION METHOD As far as device fingerprinting goes, this is pretty tame, compared to what something like chatgpt does: https://www.buchodi.com/chatgpt-wont-let-you-type-until-clou... The far more concerning part are your pictures/document scans getting sent to them.
Comment linking /chatgpt-wont-let-you-type-until-cloudflare-reads-your-react-state-i-decrypted-the-program-that-does-it/
on “Yoti age checks share facial photos and device fingerprints with third parties”Submitted Meta's ships facial recognition on smart glasses as a story · 4 points
HN discussionSubmitted Apple's Spotlight Search Results Come with Engagement Metrics. No One Knew as a story · 4 points
HN discussionSubmitted ChatGPT serves ads. Here's the full attribution loop as a story · 3 points
HN discussionSubmitted Apple's Spotlight Search Results Come with Engagement Metrics. No One Knew as a story · 3 points
HN discussionSubmitted Duolingo Is Talking to ByteDance: Cracking the Pangle SDK's Encryption as a story · 2 points
HN discussionSubmitted I broke AppLovin's mediation cipher protocol as a story · 1 points
HN discussionSubmitted Cracking a Malvertising DGA from the Device Side as a story · 1 points
HN discussionSubmitted Duolingo Is Talking to ByteDance: Cracking the Pangle SDK's Encryption as a story · 1 points
HN discussion