This maybe a dumb question but i became paranoid all of a sudden and wanted some answers because i can’t find it anywhere else nor can i sleep without it. Like even if i did flash linux on a lets say amd laptop couldn’t the chip itself be spying on me ? Also i understand bootloaders are stored or rom is there a way to know what else is stored on it are roms open source ? Are cpu’s open source and companies like asus store their logos and shit on their mother boards so what else could they be storing ? Are there open source alternatives for these parts ? Are we all being privacy cautios for nothing ? I know we can use firewall but wouldn’t the chip integrated have the ability to bye pass it ?
I know there are linux laptops but having a pre installed linux and some switches isn’t gonna solve the problem do they use open source roms and motherboard ? Are there any fully open source chipsets ? I want to know the same about smartphones too ?
IMPORTANT EDIT : Please don’t suggest alternatives like dumb phone i wanna know if there is any way to know or ensure we are not spied upon while using smartphones or laptop . And i don’t care about my os spying on me or the apps apps or web spying on me all i wanna know is if the hardware i use are spying on me and if not how do you know ? . Also which is better in terms of open source and privacy intel or amd ?
ANOTHER IMPORTANT EDIT : I am also not concerned by my isp tracking me or someon hacking me as i said all i care about is the hardware doing me in .
LAST EDIT I HOPE : AS I SAID MULTIPLE TIMES AND STILL PEOPLE UNDERSTAND IS I DON’T CARE IF ANYTHING OTHER THAN THE HARDWARE IS SPYING ON ME . LIKE ARE YOU TELLING ME THAT TOP CYBERSECURITY WORKERS OR ELITE HACKERS ARE JUST HOPING THEIR HARDWARE IS NOT SPYING ON THEM AND THERE IS NO WAY FOR AN ELITE HACKER OR CYBERSECURTY WORKER TO ENSURE THEY ARE NOT BEING SPIED BY THEIR HARDWARE OR IS THERE NO OTHER FULLY OPEN SOURCE HARDWARE THEY CAN BUY ?I’M NOT INTERNET SHOUTING OR WANTING TO BE RUDE I JUST WANNA GET THE POINT ACROSS ALSO PLEASE DON’T AVOID THIS AND ANSWER SOMETHING ELSE I JUST WANNA KNOW THIS SPECIFIC THING.
EDIT: LET ME MAKE IT VERY CLEAR I’M JUST A RUN OF THE MILL GUY BYING RUN OF THE MILL LAP AND PHONE AND USING IT I AM NOT BEING TRACKED BY NSA I’M SURE OF THAT BECAUSE I AM NOT THAT INTERESTING EVEN IF I WERE ITS NOT THE QUESTION UNLESS THE CIA OR NSA IS MAKING 1000 OF LAPS TO CATCH ME . YOU HAVE NO OBLIGATION TI ANSWER ME AND I AM GRATEFULL FOR YOUR ANSWERS BUT PLEASE ANSWER WHAT I WANT TO KNOW I FEEL LIKE YOU GUYS AND GALS DON’T EVEN COME CLOSE TO THE SUBJECT.
Easy. It’s far too expensive to implement, both in money and man-hours. Especially man-hours.
The amount of people required to personally surveil the general populace is way too exorbitant, AND they have to monitor their own people to prevent leaks. The logistics explodes well before this becomes feasible.
Then there’s discoverability. Once such hardware is out there, it’s only a matter of time before it falls into the hands of someone capable of dissecting it. Given that such spying methods would be ‘sold’ to federal management on the grounds of national security, there’s an interest in not having it fall into such hands. Therefore, these methods are reserved for high-profile targets. Not the average Joe citizen.
To summarize: Too expensive (money), too expensive (logistics), and too expensive (R&D). Unless you’re on Interpol’s most wanted list or something, you don’t need to worry about this.
Throw it on pihole, you can see all traffic coming and going through your house. Also a great anti-advertise option.
In my experience, theres a lot less spying and a lot more BS/bad scripts checking in, but you do you.
One thing to note, pihole also blocks ads in you’re using wifi from your phone. If I’m playing a game or whatever that has “watch this ad for…” half the time I have to switch off wifi or else it’ll claim the ad failed and won’t give the item.
You can use Wireshark to monitor all network traffic. It’s not a simple task though. But if you take the time to set it up and learn how to use it, you can know everything that leaves your computer.
It should be clarified that using Wireshark on the hardware in question is still subject to what the operating system is allowing your security context to see - meaning a rootkit or hardware level compromise could hide its traffic in that case.
Intercepting all traffic coming from the machine using another network node is a good idea though. Wireshark or an IDS like Snort would both work for that.
Yeah, you want a switch with port mirroring. That way you can send everything that hits your router to a separate device to monitor.
Still doesn’t help with phones though. I don’t think there is any way to truly verify the cellular modem’s connections.
You have made me paranoid now, well more paranoid someone need to answer this asap.
You know that it is. Simple as that. Especially phones. Thing is, most of what you do isn’t interesting enough to spy on. Don’t bring your phone when you do illegal activity. Otherwise don’t worry about it.
Bypass*
If you filtered your data through enough servers, or even better, split your outgoing data through multiple servers, encrypting and bouncing each of the packets multiple times, maybe have a couple filters… Your shit could still be spying on you because you are attracted to the network, and you need to talk out somehow, and unless you watched the chips be manufactured put together yourself you can’t be sure they aren’t corrupted.
That said, are you a foreign dignitary? Are you someone worth investing millions into taking down? Any minute a ninja could take you down in your day to day life, there just aren’t that many ninjas, and you aren’t worth taking down.
I can’t find the article because Google is the enshittiest now, but a couple years ago a tech journalist paid 2 different hackers to infiltrate his home system (him taking slightly more precaution than he normally would), he had no chance in keeping them out, he closed the article with a quote similar to the warning above.
You don’t. It’s possible that the firmware or bootloader is doing evil things. They have access to hardware in a way your OS may not detect.
The seminal paper in this area is On Trusting Trust. That link isn’t to the original, but it has a nice overview.
The best way to prevent this kind of spying is through air gaps: ie, no network. Realistically, most of us don’t want to do that.
At some point, you need to ask yourself what your threat model is. If you’re going to have severe consequences from doing something in range of the device, maybe you wanna do it elsewhere.
This is the original: https://dl.acm.org/doi/10.1145/358198.358210
Not op but this seems false and irrelavent to what theu are asking. Their problem could be solved by making the chip ipen source .
You would also have to make the die visible. Just because “source code” is open doesn’t prove the development chain hasn’t been compromised. That’s the gist of the paper referenced above. If a bad guy swaps their design for the open source design when the chips are fabbed, you’ll never know by looking at the source.
Short answer. Do you have a computer or smartphone? If yes, it is spying on you.
V2.0: if you don’t want your hardware spying on you, get a device that has fully FOSS drivers and an open architecture (neither AMD nor Intel have that cuz they use x86_64 which is proprietary). I think Raspberry Pi and PinePhone have that. Not sure though. And if you meant microphone and camera spying on you then apps, ISP and everything else do matter. Just unplug that devices when you want to stay private and that’s it
ARM isn’t any better than x86, and can actually be more restrictive at times (secure boot keys baked onto the CPU, and not being able to disable it). RISC-V is promising, but just because the ISA is open source doesn’t necessarilly mean the implementation is, and I’m not aware of any 100% open source implementation being sold.
You can’t know. There’s no possible way to verify what any of it is doing.
Unless you’ve built your own hardware out of discrete components and know personally what every byte in the code does, you absolutely cannot know what’s actually going on in there.
And honestly, a large chunk of both consumer harware and networking certainly is spying on people.Every ISP and major datacentre has a TLA room that mere mortals aren’t allowed to go into or ask questions about, every phone or motherboard chipset is an absolute rats nest of backdoors and telemetry - and unless you sand the lid off every single chip and go over it with an electron microscope, there’s no good reason to assume any component only does what it claims to. But then the data from that will need to be stored on something likely-pwned anyway.
Various governments all have the ability to count your nose hairs if they wanted to - and if you’re sufficiently anomalous, you may as well assume they have.
to all of which I say meh. It’s evil and hideous of course, but so many things are evil and hideous that you just have to triage.
LIKE ARE YOU TELLING ME THAT TOP CYBERSECURITY WORKERS OR ELITE HACKERS ARE JUST HOPING THEIR HARDWARE IS NOT SPYING ON THEM AND THERE IS NO WAY FOR AN ELITE HACKER OR CYBERSECURTY WORKER TO ENSURE THEY ARE NOT BEING SPIED BY THEIR HARDWARE
Yes.
Professional ELITE HACKERS who work for governments need to leave their electronic devices outside secure facilities for precisely this reason.
Similarly, government networks that are air gapped have their hardware physically destroyed when it’s decommissioned because it’s impossible to be sure that it’s secure.
Well here is my take: there are only like, 35 personalities that exist in the world with slight individual variations. You posting this tells any data scraper which one you fall under. People are in general extremely predictable. So once the algo has sorted you, they dont have to actively listen to you at all. The algo already knows what choices you perceive yourself as having in your life and when you are likely to make those decisions
Heck, the utility company knows if your going through a divorce based on changes in when and how the bill is paid.
Google knows if your getting laid based off location data
If you dont want to be spied on there is only one way my friend. Only lurk the web from one place, never post, only lurk. And just leave your phone in the closet or wherever when your not using it, turned off. The algo’s et al will still draw conclusions from this, but at least they will be incorrect
You conpletely avoided my question i don’t care about algorithms i just wanna know about the hardware
Bro lost his shit in the edits section
What’s with the unhinged edits
Paranoid episode
Yea I was recently diagnosed bipolar and this is alarming.
OP has gone batty. I get it. I’m nuts too, just in a different way. Hope OP figures out what he wants to know.
You can use wireshark to see every packet that goes through your router. Any weird unauthorized packets? Probably spying.