so i was looking at the source code of kaito pulse and found some interesting things:

- it fingerprints your device. it hashes how your gpu renders an invisible image, your gpu model, and how your hardware handles a test tone. that combo is unique to your laptop and it doesn't change

- it goes up with your twitter id attached, so every x account you use on that laptop points back to the same machine

- they can see what you see and replay your whole session. every post your feed served you including the ones you scrolled straight past, how many milliseconds you spent on each, every click, follow and unfollow, and a ping every 30 seconds with idle detection so they know exactly when you were on and for how long. not just your timeline either, it covers your search results and your bookmarks

- it reads your claude and chatgpt subscriptions, which plan you pay for and what percent of your rate limit you've burned (not your conversations though)

- on chatgpt it opens your settings page and clicks through to Usage by itself

- on binance it clicks the Positions tab for you, then re-sends your logged in requests to read wallet balances, futures positions, pnl, and deposit and withdrawal history

- the zktls is a fork of a project called primus

the 12 domains it runs on:

- markets: binance, okx, bybit, hyperliquid, lighter, polymarket, tradexyz, variational
- ai: chatgpt, claude
- social: X (all the telemetry is here)
- kaito (only site allowed to talk to the extension)

https://x.com/0x_ultra/status/2089807103636722039?s=46&t=hr2fbvcHJGpvp_SbDstdzg