The main topic of the period is Cheburnet and its impact on everyday internet use. Materials discussed both technical tools for checking website availability and regulatory initiatives that could affect every user.
One article covers the update of the open-source tool rkn-block-checker to version 0.6.0. The author explains how the tool learned to distinguish real ISP stub pages from anti-bot protection. Previously, the script could mistakenly treat a 429 (too many requests) error page as an ISP block if the text contained similar words. Now such cases are handled separately. Version 0.6.0 also introduced a local web interface that starts with a single command and allows users to view scan results, add custom domains, and export reports. This matters for XConnect users because it helps them understand more accurately where Cheburnet is actually at work and where it's just a website's regular load protection.
The second article is about the Ministry of Digital Development's initiative to make the voice assistant "Alisa AI" an undeletable system app on smartphones. It is expected to get a permanent background mode, automatic updates, and broad privileges. Industry associations have raised concerns: background updates without user consent may be technically difficult and create leak risks, while mandatory system access contradicts the user's right to revoke permissions. For XConnect users, this is a signal that control over one's own device may become more difficult, and privacy issues more acute.
The third article is about the launch of 5G in Russia. The network does not work equally everywhere: in some places speeds reach 200 Mbps, in others they exceed a gigabit. Support depends on the smartphone model and carrier, and the 5G icon on the screen does not always mean the network is actually active. This matters because the quality and type of connection affect how well Cheburnet Cheburnet tools work and the overall availability of internet services.
In the connection security section, three topics were discussed. The first is that an HTTP-to-HTTPS redirect does not protect the first request: it goes out in the open along with the path, parameters, and cookies. HSTS and preloading help, but only after the first successful HTTPS visit. For XConnect users, this is a reminder: even with a redirect, it's worth checking cookie flags and HSTS settings, especially on public networks.
The second topic is that German police use an "account cloning" method to read WhatsApp, Telegram, and Signal messages without breaking encryption. Law enforcement links its own device to the target's account via a QR code or verification code obtained through physical access to the smartphone, SMS interception, or phishing. After that, they receive messages in real time. The recommendation is simple: periodically check the list of linked devices in your messenger settings and disconnect suspicious sessions.
The third topic is the breach of Surfshark's internal test server. Attackers gained access to fragments of source code, configurations, and build credentials, but not to user IP addresses or encryption keys. The incident was detected and contained. For XConnect users, this is a reminder that even large services can make mistakes, and it's worth being careful when choosing tools.
In the privacy and leaks section, two articles were discussed. The first is an audit of 11 popular Russian Android apps, including banks, government services, and marketplaces. The researcher found 237 vulnerabilities, weak signing keys in six apps, numerous trackers, and VPN detection via WebRTC. The best result was shown by "Goskluch," which uses a modern signing key, has minimal trackers, and does not try to detect VPN. For XConnect users, this is useful information about which apps treat data more carefully.
The second article is about a Revolut error that led to customer data being handed over to fraudsters, including copies of documents, selfies, and cryptocurrency transaction history. The bank responded to a fake letter from a government agency. This is a reminder that phishing remains one of the main threats, and even financial institutions can fall victim to it.
Overall, the past 48 hours made it clear: the topic of Cheburnet and privacy remains acute. XConnect users should pay attention to availability-checking tools, keep an eye on messenger and device updates, and be critical about what data they share and with whom.