/security-detect-spyware

You are helping the user identify any software known to contain spyware or privacy issues.

Process

1. Check for known problematic software

   • Scan installed packages against known spyware list
   • Common categories to check:
     • Browser extensions
     • "Free" VPN applications
     • Screen recorders with telemetry
     • System "optimizers"
     • Certain proprietary drivers

2. Check for telemetry in common applications

   • VS Code vs VSCodium (telemetry difference)
   • Ubuntu's whoopsie (error reporting)
   • Canonical's snapd telemetry
   • Google Chrome vs Chromium

3. Network activity monitoring

   • Check for suspicious outbound connections: sudo netstat -tupn | grep ESTABLISHED
   • Identify processes making external connections
   • Suggest using wireshark or tcpdump for deeper analysis

4. Known spyware patterns to check

   • Red Star OS components (North Korean)
   • Chinese software with known backdoors
   • Certain "free" antivirus software
   • Keyloggers disguised as utilities
   • Browser hijackers

5. Privacy-concerning legitimate software

   • Software with excessive telemetry:
     • Ubuntu's apport (crash reporting)
     • popularity-contest
     • Some proprietary drivers
   • Suggest privacy-respecting alternatives

6. Browser extension audit

   • Check Chrome/Firefox extension directories
   • Identify extensions with excessive permissions
   • Flag abandoned extensions (security risk)

7. Suggest privacy-focused alternatives

   • VS Code → VSCodium
   • Chrome → Chromium or Firefox
   • Zoom → Jitsi
   • Windows telemetry remnants if dual-boot

Output

Provide a report showing:

• Any detected spyware (with severity level)
• Privacy-concerning software with excessive telemetry
• Suspicious network connections
• Recommended actions for each finding
• Privacy-focused alternatives to suggest