I did it... use this prompt to protect your privacy on every device...
codila@0xCodila
12 views
Oct 27, 2026
~6 min read
Advertisement
1
I did it... use this prompt to protect your privacy on every device on your Wi-Fi
TV, phones, router, cameras, even your robot vacuum - all home tech one by one
No more blind spots at home: find every device → expose what it collects → lock it down in one prompt
Run it today, not tomorrow. Then read article below:
TV, phones, router, cameras, even your robot vacuum - all home tech one by one
No more blind spots at home: find every device → expose what it collects → lock it down in one prompt
Run it today, not tomorrow. Then read article below:
codila@0xCodila
REA is most dangerous thing on the internet right now...
It lets your AI agent reverse engineer any app, down to the binary
If you use it correctly, you can rebuild any feature you pay for, for FREE
In this article, I show you how: x.com/i/article/2109…
It lets your AI agent reverse engineer any app, down to the binary
If you use it correctly, you can rebuild any feature you pay for, for FREE
In this article, I show you how: x.com/i/article/2109…
2
full prompt (or just paste the photo):
"Do a privacy check-up of my home Wi-Fi, the way a careful IT friend would for a family. I own this network and the devices on it; this is about my own privacy and security. You're running on my computer, which is on this Wi-Fi. Reply in my language, in plain words for a non-technical person. Rules - If you can't run commands on this computer, tell me to paste this into Claude Code and stop. - Check it's a home network (private address behind a home router) and ask me to confirm. If it looks like work, school, a hotel or public Wi-Fi, stop. - Check a family member's phone or laptop only if they agree. Ask me. - Read-only until I say yes to each specific change. - Allowed: this computer's settings and files, the router's pages, an ICMP ping of my subnet, the ARP table, mDNS and UPnP/SSDP announcements, ADB on Android devices I connect. Not allowed: port scans, password guessing, exploits, firmware changes, reading traffic content. - I type every password myself, never in chat. For default or sticker passwords, ask me; never test them. - Take DNS addresses, menu paths and install commands from the vendor's official page and link it; if there is none, say so and what to look for. Don't present anything from memory as checked. Install nothing without my yes. Write files only into one report folder. - Mask at the source, before your first command, in raw output and error messages too: public IP, the second half of every MAC (with or without separators), serials and serial-like names (adb-…, device IDs), the Wi-Fi name in any form, computer names, my username in file paths, account names, passwords. - If you can't see something, write can't see from here; never guess. If one allowed method fails, try another. - Give my manual steps as numbered taps. Step 1. Find every device Use my router's device page (in my browser if you can, otherwise ask me for a screenshot), a ping sweep plus ARP, and mDNS/SSDP. Anything answering ping or ARP is live, even if the router says offline. For each: type, maker (MAC prefix), model and name if announced. Phones, watches, tablets and laptops use random private MACs: don't call them unknown, group old entries as probably the same phones, and ask me to match the live ones (iPhone: Settings > Wi-Fi > network > Private Wi-Fi Address). Show a numbered table with confidence, which devices might be missing and how to make them show up, and anything unidentified with what I can do (block it, change the Wi-Fi password). Step 2. Ask which devices to check: all, or numbers. Step 3. One card per device What it is. What it can collect, per the maker's or provider's privacy policy and at least one independent study, and where its servers are (link sources; say if there's no policy). What it's doing now, where visible. Risk in one or two sentences. Fix for my exact model, and who does it. Check: - Wi-Fi: encryption (WPA2/WPA3 fine; WEP, WPA, open not), whether the name reveals my name or address (don't print it), hidden network, password still the sticker one. Offer the _nomap suffix (asks Google and Apple to stop mapping my router; renaming reconnects every device). - Router: get screenshots or browser access to its UPnP, WPS, remote management, DNS, IPv6, firmware and log pages; read UPnP port mappings directly if UPnP answers. Check encrypted DNS, remote management, port mappings, WPS, IPv6 firewall, plain-HTTP admin page, a separate network for smart devices, default admin password, firmware against the latest version and security advisories, and log entries (logins, changes) I didn't make. If the provider locks DNS, set encrypted DNS per device. - This computer: firewall, pending updates, disk encryption, encrypted DNS, sharing services (file and screen sharing, remote login, AirPlay receiver), VPN apps and profiles (especially free ones), device management or configuration profiles, root certificates added by apps, proxy settings and hosts file, remote-access apps, login items, saved open Wi-Fi networks, browser extensions that can read all sites. For camera, microphone and screen recording access, ask me for screenshots of the privacy settings instead of reading protected files. - Android TV, Google TV, Fire TV, Android phones and tablets: connect with ADB using Android's official steps (ask before installing platform-tools). List every app holding microphone, camera, location or contacts access, preinstalled and provider apps included; accessibility, device admin, notification access and install-apps rights (stalkerware signs); background apps; per-app data-usage counters (how much and when, not content), with a snapshot now and an offer of a second after an idle night to show what sent data unused; Private DNS; security patch against the latest. Ad ID and usage-and-diagnostics aren't readable over ADB: give me the remote's menu path. - Every smart TV and TV box, Android-based too: ACR viewing-data sharing, ad tracking, voice and microphone. - iPhone and iPad: ask me to send the App Privacy Report (Settings > Privacy & Security > App Privacy Report > Share) and show microphone, camera, location and photos use by time, plus tracker domains per app (if it's off: turn it on, re-run in a few days). Walk me through Safety Check, VPN and device management profiles, tracking requests, Location Services, Limit IP Address Tracking, Private Wi-Fi Address. - Smart speakers: saved voice recordings and auto-delete, human review, connection-sharing or drop-in features (e.g. Amazon Sidewalk). - Cameras, doorbells, baby monitors: cloud or local storage, shared access, two-factor login, default password. - Printers: open Wi-Fi Direct, stored scans, cloud printing. - Vacuums, consoles, plugs, bulbs, anything else: what it shares (maps, voice chat, usage), its controls, firmware, two-factor login. - From outside: read my public IP from the router if you can, look it up only in Shodan InternetDB (internetdb.shodan .io), and compare with the UPnP mappings. If the router's WAN address is 100.64.x.x or private, say the IPv4 result is my provider's shared address, and look up my devices' public IPv6 addresses instead (with IPv6 each device can have its own public address). - Optional watch mode (30 min): run AdGuard Home from its official GitHub on this computer, point one device's DNS (or the router's, if I agree) at it, and show which companies each device contacts. Warn me that if this computer sleeps those devices lose internet; switch everything back and confirm. Step 4. Fix List each fix, what it changes, who does it, most urgent first, and wait for my yes. Do what you can from here and verify each; for the router use my browser or give click-by-click steps; for the rest give tap-by-tap lists for my model. Offer one tracker-blocking DNS on the router and say which devices ignore it. Ask whether to turn ADB debugging back off. Step 5. Report Top 3 findings first. A home privacy score: start at 100, subtract 10 per high-risk finding, 5 per medium, 2 per low (minimum 0), and show the list of deductions. Give it now, and after the fixes (or possible if I skip them). One masked HTML page (device table, cards, score). A masked device list saved so next time you can show new devices. End with: Fixed, Left for me (checklist), Couldn't check (why, with the click path to each router page you couldn't read)."
"Do a privacy check-up of my home Wi-Fi, the way a careful IT friend would for a family. I own this network and the devices on it; this is about my own privacy and security. You're running on my computer, which is on this Wi-Fi. Reply in my language, in plain words for a non-technical person. Rules - If you can't run commands on this computer, tell me to paste this into Claude Code and stop. - Check it's a home network (private address behind a home router) and ask me to confirm. If it looks like work, school, a hotel or public Wi-Fi, stop. - Check a family member's phone or laptop only if they agree. Ask me. - Read-only until I say yes to each specific change. - Allowed: this computer's settings and files, the router's pages, an ICMP ping of my subnet, the ARP table, mDNS and UPnP/SSDP announcements, ADB on Android devices I connect. Not allowed: port scans, password guessing, exploits, firmware changes, reading traffic content. - I type every password myself, never in chat. For default or sticker passwords, ask me; never test them. - Take DNS addresses, menu paths and install commands from the vendor's official page and link it; if there is none, say so and what to look for. Don't present anything from memory as checked. Install nothing without my yes. Write files only into one report folder. - Mask at the source, before your first command, in raw output and error messages too: public IP, the second half of every MAC (with or without separators), serials and serial-like names (adb-…, device IDs), the Wi-Fi name in any form, computer names, my username in file paths, account names, passwords. - If you can't see something, write can't see from here; never guess. If one allowed method fails, try another. - Give my manual steps as numbered taps. Step 1. Find every device Use my router's device page (in my browser if you can, otherwise ask me for a screenshot), a ping sweep plus ARP, and mDNS/SSDP. Anything answering ping or ARP is live, even if the router says offline. For each: type, maker (MAC prefix), model and name if announced. Phones, watches, tablets and laptops use random private MACs: don't call them unknown, group old entries as probably the same phones, and ask me to match the live ones (iPhone: Settings > Wi-Fi > network > Private Wi-Fi Address). Show a numbered table with confidence, which devices might be missing and how to make them show up, and anything unidentified with what I can do (block it, change the Wi-Fi password). Step 2. Ask which devices to check: all, or numbers. Step 3. One card per device What it is. What it can collect, per the maker's or provider's privacy policy and at least one independent study, and where its servers are (link sources; say if there's no policy). What it's doing now, where visible. Risk in one or two sentences. Fix for my exact model, and who does it. Check: - Wi-Fi: encryption (WPA2/WPA3 fine; WEP, WPA, open not), whether the name reveals my name or address (don't print it), hidden network, password still the sticker one. Offer the _nomap suffix (asks Google and Apple to stop mapping my router; renaming reconnects every device). - Router: get screenshots or browser access to its UPnP, WPS, remote management, DNS, IPv6, firmware and log pages; read UPnP port mappings directly if UPnP answers. Check encrypted DNS, remote management, port mappings, WPS, IPv6 firewall, plain-HTTP admin page, a separate network for smart devices, default admin password, firmware against the latest version and security advisories, and log entries (logins, changes) I didn't make. If the provider locks DNS, set encrypted DNS per device. - This computer: firewall, pending updates, disk encryption, encrypted DNS, sharing services (file and screen sharing, remote login, AirPlay receiver), VPN apps and profiles (especially free ones), device management or configuration profiles, root certificates added by apps, proxy settings and hosts file, remote-access apps, login items, saved open Wi-Fi networks, browser extensions that can read all sites. For camera, microphone and screen recording access, ask me for screenshots of the privacy settings instead of reading protected files. - Android TV, Google TV, Fire TV, Android phones and tablets: connect with ADB using Android's official steps (ask before installing platform-tools). List every app holding microphone, camera, location or contacts access, preinstalled and provider apps included; accessibility, device admin, notification access and install-apps rights (stalkerware signs); background apps; per-app data-usage counters (how much and when, not content), with a snapshot now and an offer of a second after an idle night to show what sent data unused; Private DNS; security patch against the latest. Ad ID and usage-and-diagnostics aren't readable over ADB: give me the remote's menu path. - Every smart TV and TV box, Android-based too: ACR viewing-data sharing, ad tracking, voice and microphone. - iPhone and iPad: ask me to send the App Privacy Report (Settings > Privacy & Security > App Privacy Report > Share) and show microphone, camera, location and photos use by time, plus tracker domains per app (if it's off: turn it on, re-run in a few days). Walk me through Safety Check, VPN and device management profiles, tracking requests, Location Services, Limit IP Address Tracking, Private Wi-Fi Address. - Smart speakers: saved voice recordings and auto-delete, human review, connection-sharing or drop-in features (e.g. Amazon Sidewalk). - Cameras, doorbells, baby monitors: cloud or local storage, shared access, two-factor login, default password. - Printers: open Wi-Fi Direct, stored scans, cloud printing. - Vacuums, consoles, plugs, bulbs, anything else: what it shares (maps, voice chat, usage), its controls, firmware, two-factor login. - From outside: read my public IP from the router if you can, look it up only in Shodan InternetDB (internetdb.shodan .io), and compare with the UPnP mappings. If the router's WAN address is 100.64.x.x or private, say the IPv4 result is my provider's shared address, and look up my devices' public IPv6 addresses instead (with IPv6 each device can have its own public address). - Optional watch mode (30 min): run AdGuard Home from its official GitHub on this computer, point one device's DNS (or the router's, if I agree) at it, and show which companies each device contacts. Warn me that if this computer sleeps those devices lose internet; switch everything back and confirm. Step 4. Fix List each fix, what it changes, who does it, most urgent first, and wait for my yes. Do what you can from here and verify each; for the router use my browser or give click-by-click steps; for the rest give tap-by-tap lists for my model. Offer one tracker-blocking DNS on the router and say which devices ignore it. Ask whether to turn ADB debugging back off. Step 5. Report Top 3 findings first. A home privacy score: start at 100, subtract 10 per high-risk finding, 5 per medium, 2 per low (minimum 0), and show the list of deductions. Give it now, and after the fixes (or possible if I skip them). One masked HTML page (device table, cards, score). A masked device list saved so next time you can show new devices. End with: Fixed, Left for me (checklist), Couldn't check (why, with the click path to each router page you couldn't read)."