When Local AI Tools Phone Home
If a tool runs inference on your device, it has no legitimate reason to touch the network. That makes outbound traffic from a "local" AI tool one of the few clean security signals left — and it's exactly the signal attackers work hardest to avoid. This episode traces keystroke capture from the permission prompt down to the SQLite file on disk, then follows the data through the exfiltration chain: commodity sideloaded APKs firing plain HTTP POSTs, and the sophisticated end where nation-state-resourced actors operate. Along the way: why Grammarly's keyboard hook is architecturally identical to…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.