Jelte Lagendijk j3lte

Motorola Smart Feed — Affiliate Link Hijacking Investigation

TL;DR

Motorola's pre-installed Smart Feed app (com.motorola.smartfeed) contains a third-party SDK called DeviceNative that silently injects affiliate-tracked app suggestions into the Motorola launcher. When users click what appears to be a normal app icon in their launcher's suggestion area, the click is intercepted and redirected through affiliate tracking URLs (america.devicenative.com / asia.devicenative.com) before landing on the destination. 144 apps are targeted across 16 markets, including Walmart, Target, Best Buy, Temu, AliExpress, Expedia, and more.

This investigation was performed through static analysis of APK version 1.03.0095 (build 361030095) using jadx and apktool, followed by live API queries to the DeviceNative server.

ProxMox Cluster - Soup-to-Nutz

aka what i did to get from nothing to done.

note: these are designed to be primarily a re-install guide for myself (writing things down helps me memorize the knowledge), as such don't take any of this on blind faith - some areas are well tested and the docs are very robust, some items, less so). YMMV

Purpose of Proxmox cluster project

Required Outomces of cluster project

This (and related gists) captures how i created my docker swarm architecture. This is intended mostly for my own notes incase i need to re-creeate anything later! As such expect some typos and possibly even an error...

Installation Step-by-Step

Each major task has its own gist, this is to help with maitainability long term.

NSSM cheatsheat

See: NSSM - the Non-Sucking Service Manager

Create a new service
List parameters for a service
Set a parameter for a service
Parameter list

Create a new service

Scripts

Scripts I add to my dotfiles (Mac OS)

git-cleanup.sh - Used to cleanup the local mess of branches that are not on remote.
git-sync-fork.sh - When working with a fork, I want to sync my fork with the upstream. Instead of doing it on Github, just do it in the terminal

Keybase proof

I hereby claim:

I am j3lte on github.
I am j3lte (https://keybase.io/j3lte) on keybase.
I have a public key whose fingerprint is 4C4F C100 D442 BBC7 DA9F 78BE 8040 EB69 77A7 270C

To claim this, I am signing this object:

	#!/bin/bash

	# Required parameters:
	# @raycast.schemaVersion 1
	# @raycast.title Copy Torrent Trackers
	# @raycast.mode compact

	# Optional parameters:
	# @raycast.icon 🤖
	# @raycast.packageName Web

	#!/bin/bash

	# Check if force mode is enabled
	force_mode=false
	if [ "$1" == "--force" ]; then
	force_mode=true
	fi

	# Fetch latest updates from the remote and prune deleted branches
	git fetch --prune

	#!/bin/bash

	URL='https://nordvpn.com/wp-admin/admin-ajax.php?action=get_user_info_data'
	JSON=$(curl -s $URL)

	printf "\n"
	#echo $JSON \| python -m json.tool
	echo $JSON \| python -c 'import sys, json; data = json.load(sys.stdin); print "IP: %s (%s)\nStatus: %s" % (data["ip"], data["isp"], "\033[32mProtected" if data["status"] is True else "\033[31mUnprotected");'
	printf "\n"

	-- show running queries (pre 9.2)
	SELECT procpid, age(clock_timestamp(), query_start), usename, current_query
	FROM pg_stat_activity
	WHERE current_query != '<IDLE>' AND current_query NOT ILIKE '%pg_stat_activity%'
	ORDER BY query_start desc;

	-- show running queries (9.2)
	SELECT pid, age(clock_timestamp(), query_start), usename, query
	FROM pg_stat_activity
	WHERE query != '<IDLE>' AND query NOT ILIKE '%pg_stat_activity%'