Kaito’s new browser extension, Pulse, was released just yesterday—and it was directly called out by the encryption analyst ultra. The level of privacy collection is granular enough to send chills down your spine.
Here’s what it was pointed out to be doing:
1. It uses hash algorithms to fingerprint your GPU rendering, hardware model, and test audio, then combines it into a "unique device ID" and directly links it to your X account;
2. It fully records your browsing history, the hover duration on the feed stream, click behavior, and followed lists. Every 30 seconds, it sends a heartbeat packet with activity detection;
3. It can read your Claude and ChatGPT subscription plans and quota consumption ratios—and it will automatically click into ChatGPT’s Usage page to capture a screenshot;
4. On the Binance side, it automatically opens the Positions tab, replays previously logged-in requests, and takes everything along with it: wallet balance, futures positions, profit/loss, and deposit/withdrawal history.
In plain terms, this isn’t really a "plugin"—it’s more like a data harvester installed inside your browser: identity fingerprint + behavioral timestamps + platform account financial data, all captured together.
Two practical pieces of advice for regular users:
- Don’t install Pulse on your main browser or on the devices where you’re logged into exchange accounts or AI accounts for now;
- Before installing, go check the extensions permissions page to see what host permissions it requests. If anything involves binance.com, chatgpt.com, claude.ai, or x.com, raise an eyebrow.
The biggest lesson from the AI space this year is: many of the business models of "productivity tools" are, by nature, user data itself. They give it to you for free—not out of charity, but to build infrastructure for data collection.
#Kaito #AI #privacy
Here’s what it was pointed out to be doing:
1. It uses hash algorithms to fingerprint your GPU rendering, hardware model, and test audio, then combines it into a "unique device ID" and directly links it to your X account;
2. It fully records your browsing history, the hover duration on the feed stream, click behavior, and followed lists. Every 30 seconds, it sends a heartbeat packet with activity detection;
3. It can read your Claude and ChatGPT subscription plans and quota consumption ratios—and it will automatically click into ChatGPT’s Usage page to capture a screenshot;
4. On the Binance side, it automatically opens the Positions tab, replays previously logged-in requests, and takes everything along with it: wallet balance, futures positions, profit/loss, and deposit/withdrawal history.
In plain terms, this isn’t really a "plugin"—it’s more like a data harvester installed inside your browser: identity fingerprint + behavioral timestamps + platform account financial data, all captured together.
Two practical pieces of advice for regular users:
- Don’t install Pulse on your main browser or on the devices where you’re logged into exchange accounts or AI accounts for now;
- Before installing, go check the extensions permissions page to see what host permissions it requests. If anything involves binance.com, chatgpt.com, claude.ai, or x.com, raise an eyebrow.
The biggest lesson from the AI space this year is: many of the business models of "productivity tools" are, by nature, user data itself. They give it to you for free—not out of charity, but to build infrastructure for data collection.
#Kaito #AI #privacy