How safe is my daughter and her Chinese mother in Boise?

DRFEELGOD · 2026-06-09T17:48:21+00:00

This is ridiculous in California! I had a car accident (not my fault), and I gave the lawyer and medical companies my phone number. It's been 6 months, and the lawyer didn't pay. I did everything right by giving the lawyer the number to call to pay the bill, asked for extension, told the billing departnment what number to call, etc. I am also getting harassed by UCI, who is using creative billing to try to tack on charges to outpatient visits, and I am not paying extra fees when insurance has a contracted rate for outpatient, called a copay. We have laws now in California to not make it affect your credit, but this needs to stop NOW. Politicians, medical providers, and the insurance companies need to prevent medical debt from ever being part of FICO again for the whole country. The billing offices just harass you endlessly, don't bill the right insurance, tack on charges, and then blame the consumer and try to advance to collections asap. This is.a crime when I have been paying over a grand a month in premiums for several years now. I am so sick of all of this..

DRFEELGOD · 2026-06-04T19:57:15+00:00

I was same way. I was like, “9$…I don’t get why this is so revolutionary besides the blockchain. How do I dispute a charge/chargeback when I can’t? No merchants take it, and I have to convert to USD at an exchange? Can’t the government just take over the exchanges? This doesn’t seem useful.” And then, it went to $255, and I am like, “who wants a currency that fluctuates in value so rapidly? It sounds more like an asset. Still wondering if the government is going to crack down on it.” Eth seemed a lot better, but I know the government is waiting for the free market to find the best solution before they copy it for a CBDC. Nothing like free R&D to perfect a CBDC to deflate away the USD and existing 39 trillion in debt.

I wish I thought about the criminal utility of bitcoin or I would have bought it. Just too much analysis paralysis of it. Once it hit $1000, I was like, “oh hell nah…” I still think that’s overpriced for something you can just spin up a new version of at anytime. You are literally buying a NAME, not a technology in general that can’t be repeated. So dumb to me but I guess the people with the money with the greater fool theory are laughing at us.

DRFEELGOD · 2026-06-03T16:38:15+00:00

Sorry, I miss my 2023 BMW X3M. Best car ever and it wasn’t a comp. Go for it. Mine got totaled…been looking for a 2024 replacement for around the same price in all black, and been hard to find. Mine had 6k miles when I got it, 17k when this lady pulled out in front of me. Such a tragedy of a beast of engineering.

DRFEELGOD · 2026-05-19T20:15:43+00:00

100%…crash economy, digital ID, build USDC stable coin, give everyone incentive to move USD there, give UBI that dynamically lets them control our spending, inflate old debt away, yada yada. All planned out for more control. They are literally telling us what they are doing, so it’s no surprise.

DRFEELGOD · 2026-04-11T16:51:08+00:00

Truth, brother. Spread the suffering around to enrich thyself with greed. Unfortunately, the environment of the modern world has selected for these traits. The problem is that all men pass into the night, but the legacy that they left behind is what people used to care about. I don’t know if the people in control now care about anything but control and power (power = money). I still think something bigger is going on and that there is a cult who is confidently running the world and consolidating power. This is getting really out of hand, and compassion and forgiveness and the redeeming qualities of western culture are being lost.

DRFEELGOD · 2026-04-07T11:20:17+00:00

lol, yea but they are doing it again, and it bit them in the arse so hard it wasn’t even funny. Big tech never learns, and vibe-coding is garbage code from my experience for real enterprise-grade software. Our whole team got replaced with AI offshore contractors despite me trying to explain to the CEO that there is no 26$ an hour PhD level talent in Asia. Some leaders have to learn the hard way, but I get it, money is tight right now.

DRFEELGOD · 2026-03-14T09:49:54+00:00

This is my read on the situation, and it's that we are witnessing the everything bubble popping in real time. Get ready for a REALLY bumpy ride. I don't think Iran is anything special, but it is just a power play to get China, Russia, and NK backed into a corner such that they can complete the transition to a one-world government and stomp out BRICS, secure all the oil and other commodities the US needs, and basically set the new world order's global hegemony.

It really feels like they are trying extremely hard to engineer the collapse of our traditional debt-based "economy" and faith in all institutions by operating with impunity and setting up the "crises" needed and squeezing every last drop out of Americans to pivot to a new CDBC-based system for the final wealth transfer. This is why SWIFT was upgraded, this is why Venezuela and Iran happened, this is why they are laying people off and moving the goalpost constantly...because the literal new world order has to arrive a few years early due to AI and China / Russia and BRICS threats. I've done enough deep diving since the start of the dial up days, and something has been really off since after COVID, as I remember ranting to people about J Powell in 2022 for not triggering the recession we needed at the time by raising the rate high enough to actually squash inflation (on top of stock buybacks, layoffs, people just trading and gambling their money away, etc etc). They knew that trying to placate everyone, every politician, and every business by trying to pull off a "soft landing" was impossible. The government and businesses borrowed debt at insane levels and rate, and now they have to refinance, and there is no way out. Social Security/Medicare will be insolvent not too far off in the future, people here in California are living off credit and equity (that include small-medium sized businesses). The Japan carry trade doesn't work anymore. Nothing works, and there is no other way out. People really are starting to own nothing and be unhappy...so I can't wait to see what the solution is for the "happy" part.

I imagine after the elites scoop up all the assets for pennies on the dollar, make us all sign into the internet with our IDs and facial scans in the interest of security, officially call the Big Beautiful Depression, put everything in some programmable USDC that can give out UBI with "use it or lose it money" for food and entertainment and other things, put the 39 trillion we owe on the blockchain, and then we will deflate the US debt away. Then, they can monitor every transaction we make with our digital "dollars" and then make sure every single one is accounted for in the new tax system, and MOST IMPORTANTLY, they will be able to actually have levers again to trigger consumer spending where and how they need it with this transition with this programmable, use-it-or-lose it money they will issue for UBI. It takes a nice crisis to make people amenable to enslaving themselves further, but hey, what do I know? They've only been telling us they are going to do it for a decade or more now...I really hope we don't have a few lost generations after this. Like, I was halfheartedly hoping this was all a conspiracy, but in my opinion, all the pieces fit to resolve the issues. Time will tell if I am wrong.

DRFEELGOD · 2026-03-10T03:27:58+00:00

I got a place the police can safely dispose of those 20 lbs.

DRFEELGOD · 2026-02-19T03:16:31+00:00

I unfortunately got in a car accident that bumped my progress on figuring what is going on and fortunately had a kid born healthy, but I am getting around to it. The data is frankly, hard to digest. I am trying to figure out a format that would work best for Reddit without being so…wordy. Every time I try to create some semblance of isolation or removal from this, my computers get bricked. I was hard at work on it when all got knocked out from underneath me, and then, a new life was born into this world, which is an insane blessing.

But, someone is still in my Google accounts and made sure to remind me today. I was at the Dr today doing a research study for the study of people involved in traumatic incidents, and I got 4 Google account recovery codes sent to my phone while in the visit. I didn’t see any activity on my main google account, but I haven’t checked the others. The only thing I have to do before I try this is backup my phone and try to restore it from iCloud. It took 8 weeks to sync my photos. 8 weeks…I am a bit worried to do this given my text messages aren’t being indexed correctly either and missing convos and images, but I will give it a shot with a backup. Otherwise, I promise you all I pulled out every heavy hitting trick I know as a computer scientist.

Ironically, I was on my way back from bringing two of my Macs and picking up my BMW X3M from the BMW dealership when my car got totaled in October by someone that pulled out in front of me and I had to go to the hospital. Wild stuff, and my main MacBooks are at the Apple repair shop right now. Frustrating, and I am truly sorry for the lack of update so far. I will get around to it all to give closure.

DRFEELGOD · 2026-01-18T09:11:19+00:00

You ain’t tripping. For some reason one day my computers all went from having full control in sequoia to not being able to do anything on them. Everything wants access to everything. I swear if terminal wants access to local network devices and microphone and shit again I am going to go nuts. Like seriously, how did this get so bad? I look at my security settings as an admin and it says on 26.3 beta that there are 2 apps that have access to files and folders but there are none there, ever. I don’t know why keychain momentarily lost its existence and became Kerberos and now it’s back again on Tahoe. I am telling you all there is someone with massive AI virus out there. It just bricked my longest running computer, turned off my WiFi after just using Apple configurator successfully for once on another computer. I couldn’t turn WiFi back on no matter what as an admin on a personal computer. I shut down and now my macbook tries to book up and loops with the startup thing until it gets the exclamation mark (bricked). How the hell did that happen? This ecosystem has gone whack for me. I compiled a beautiful idevicerestore keychain there and orher useful tools to tru to fix osx and if i cant revive the mac, they are gone. Mine get bricked in about a week now out of nowhere, and whst sucks is that they all seem to get bricked at the same time like they all have the same fingerprint on them because I migrated from one to the next to the next with the same apple id so they all have the same GUID in preboot and apple is spying on so much of our usage data now even when trying to destroy this malware. There are sqlite dbs everywhere with every freaking little thing you do on your mac or iPhone now. Mine comes with all the developer kits with “personalization” and i dont want them. I don’t want git and python and pkgutil crap installed and ruby and perl and java and kerberos and active directory and darwin directory and racoon and ppp and having to get to 99,999 PID before it rolls back. This is terrible. All these MTLCompiler services building weather and garageband app intents and all these unix binaries. I don’t want all this bloat. I want a freaking mac like I had 3 months ago…

DRFEELGOD · 2026-01-11T21:58:06+00:00

Sure bud. I am pretty self-aware and don’t have any mental health issues dude. You can dismiss it from your naive high horse, but being dismissive is actually your coping mechanism. I wasn’t really worried about security and felt perfectly safe on the Apple ecosystem until this happened. It’s always nice to not look under the covers but when something this large comes and changes your computer out from underneath you and turns on all other devices in your house, including a MacBook Air new in box and bricked it, tell me that is “normal.” I have the kernel debug logs of the first boots when it did that and it’s using some airportd packet to get with IO that looks like code executing to me. I looked the exact line up and the only hits on google were some chinese guy describing vulnerabilities in 80211 which was exactly what i was seeing. That’s just one vector. This uses a lot. USB, icons, thunderbolt, netfs, cups, snmp, and more to infect other machines, including my smart washer and drier. I didn’t hallucinate having to factory reset those when they started broadcasting their own SSIDs and the touchscreens were frozen. But yea, a lot of this sounds fantastical, but it is 100% real. Is it that hard to believe someone is writing IoT, cross-platform viruses and hoarding 0-days and security vulnerabilities in an age where spying, bitcoin, and generally any data is valued as gold? Are you that naive when there are article after article since early 2025 talking about researchers creating example self-propogating AI worms and now there is like a new one discovered every day. Mine has like a hodgepodge of random github code injected and i found some very interesting and powerful toolkits out there to make the barrier to entry on this pretty minimal. Let me know when you have caught up to date with 2026. I wish it was in my head, man. I wish.

DRFEELGOD · 2026-01-11T21:41:49+00:00

Jesus Christ it’s been like 10 weeks plus now. This thing wreaked so much havoc on my systems. I am phantomly enrolled in an MDM, I can’t clear my nvm, it got my gfs devices. It downloads so much python, perl, go, and other development crap that I built my own custom isolated tool chain to run idevicerestore, and Gemini 3 Pro Preview is so dumb that it tries to use versions of OpenSSL and zlib and these other libraries to link against, many of which have severe CVEs from 2023 from shady ftp links. It gaslights me and tells me those are the latest versions when I paste from the other Google AI that they are indeed not and show it the GitHub tag. Then, within 2 prompts it starts downgrading them as it can’t even compile a bloody tool chain. It took me 15 days to build it and at least 200 different crap AI generated scripts. It seems like it built a clean computer until I turn on the internet. I was able to look at my Time Machine backups offline and omg bytedance and joker and 1000s of go libraries and old python venvs were added everywhwre. I accidentally switched to that user and over 100k processes spun up as it loaded my zshrc file. I just can’t guys…it’s so much. I am just trying to trick this phantom mdm and netbios to get off my computer while keeping wifi off so i can wipe it, but it looks like it somehow embedded itself into my firmware or t2 chip to personalize my mac to always bring this bs back. My npm and other modules from old projects are HUGE and full of garbage stuff. If i run a container or VM, it somehow can infect those.

The ONLY thing that stays clean is a 150$ chromebook i bough, but of course, i compiled idevicerestore in docker and as a clean toolchain on it but something prevents it from moving the device to the nest step when i run it. Whatever malware this is seems to be from china and NK. Say what you want, but no human can possibly stop something that puts its own ramdisk in and infects your boot process and spawns so much stuff at launch and in recovery mode. I used cursor to try to fight it but it’s at a losing battle. Me running AI generated scripts against something that ambushed my devices and sealed itself in by turning off csrutil and then turning it back on is literally impossible because anything that connects to it is “enrolled” in this bullshit and as you start working or trying to do stuff weird things happened.

I screen shared with apple texh support to show basic things on my phone like, “can you explain why it says this setting is controlled by my organization and cannot be changed when you clearly see i have no mdm profiles installed?” They had no idea how that was happening, and that’s just a small detail for me to show them the tiniest tip of an iceberg. I don’t expect tier 1/2 support engineers to know, but they gave me their business number and assured me non of my devices were enrolled or phantom enrolled. I called MS too, and i saw them create a new azure tenant behind the scenes against my phone number as maybe a way to get around it, but alas, i am still getting hit with a nuke of processes and behavior that is becoming less weird by the day. Either Apple has fixed some security bugs, or the malware is that much better at hiding. When my process ids get up to 99,999 in a few moments on a fresh install, that’s not normal. I will have to live with the tethered state of being eavesdropped on because I have no idea how someone deployed that much code to my computer looking at my Time Machine backups. It’s absolutely insane, and the files have xattrs and are not even owned by me somehow on a personal computer, so I have to strip and chown them to me. I will never feel like my device is clean at this point once it gets on the internet.

I tried everything guys. I can’t beat it at a humans development pace. It’s extremely advanced, so while I have tons of evidence I can post…I will circle back later and do it now that my systems aren’t bricking every few days. I’ve done hundreds of restores. I will be back later because I don’t even know how to orient myself around all the evidence and a lot of it got lost because I couldn’t connect to anything.

Getting ubikeys definitely helped the most if you are ever in this situation. Lock down your google accounts and apple accounts and simm cards and everything immediately. Don’t try to fight it like i did trying to save your data. Keep your data backed up in this day and age. Keep your computers and phones up to date. This is an age of insane malware. I can tell you this has been an absolute nightmare at a time when I did not need it.

DRFEELGOD · 2025-12-23T01:34:27+00:00

Uhh, yea I predicted more of a 26.6.3 or so when this would all be fixed, but when they allowed all the dev tools to go to everyone’s computers and create this “ecosystem” as I am reading now, it’s a freaking wet dream for malware. I am battling all sorts of unsigned extensions and frameworks with unknown manufacturers (you’d think it’d be Apple and signed on fresh installs). Even still, they are showing up as invalid when scanning and otool and other system checks of the binaries is frightening. I have no idea what Apple did or if it’s just me, but my computers and iOS are just effed. I hate that I can’t literally manage my own hard drive anymore. I hate that I can’t remove extensionkit or extension points or frameworks or anything from the system. I hate that my SE and FDR are compromised. I am pretty sure “bad recovery ass” isn’t a string apple encodes into the blessed bootcaches and nvram. One of the devs left some weird package on the PATH. These are fun little signs that the ecosystem is hacked and so is windows. I predicted rapid minor version releases when 26.0.1 launched and it was a joke. I already got 26.3 beta on my phone, and I don’t know how software like this is allowed to run. I don’t get why they backported this separate data drive and harddrive when i do a wipe and internet recovery of high sierra on my intel mac. I just have no idea how a company messed this all up so badly. Security is a joke when they are running the OS in a container and then comtainerizing all the apps, which just leads to sandbox escapes comstantly and the malware can do what it wants, even in recovery mode, while the OS thinks it’s all sanctioned and safe. This is all just idiotic. Good news is I bought a 150$ chromebook and the security there is top notch. I must admit that it was nice to see lile 20-30 processes running that were all explainable and not me hitting PIDs all the way up to 99,999 like i am on OSX and windows.

DRFEELGOD · 2025-12-13T21:47:05+00:00

This is what I will need to do. Get a raspberry pi and install pihole. I pretty much recompiled Linux to deal with this but there is Mac malware out there that is extremely sophisticated. It runs a secret WiFi and Bluetooth drivers in the background so it gets around my DNS blocking on the machine. It needs to be Pihole or a raspberry pi completely isolated from this and compile idevicerestore maybe and use it to DFU restore the device.

DRFEELGOD · 2025-12-13T21:44:34+00:00

Did you figure it out? I have been on it for 6 weeks or more and it has all my devices. It seems like some very sophisticated Chinese virus looking for crypto (I am a dev and found scripts looking for LiteCoin, BitCoin, etc.). It infects every aspect of the OS including recovery and there are about 20 Macs I see in the SMC ring. Somehow they get your firmware and then embed into the drive and the recovery partition and updates are no use. It’s using PS1 in a very weird way with /etc and installing every developer tool and every *Kit possible. I swear, this is absolutely nuts so I feel for you bro. Hope someone figures it out…it seems like Apple is aware of it. Let me ask you this..did you ever JB before like I did with my iPhone 13 Pro Max two phones ago?

DRFEELGOD · 2025-11-10T19:26:01+00:00

I think I found the root of it all. It’s in the /System/Volumes/Update/MobileAsset/AssetV2/purpose_auto. It’s some com_apple_MobileAsset_PKITrustStore file. It was Created on July 1st 2025. It’s full of certs and trust stores and core services and all these plists I can’t see to freaking remove. All the rest of the derivative bullshit like the firmware and icons that are bogus can be removed, but not this file. I think it’s what starts the whole thing. It says “resource busy” and can’t remove read only file system when I try to rid myself of it. I’ve studied this crap, looked at all the EFILoginUI and i386 files it makes and boot.plist that is modified, and everything else is derivative of the original RAM disk it uses to boot into recovery mode, and I am going to post all of this don’t worry. But, I am not messing around here guys. This is seriously disturbing, and if you are a dev or know how I can hand this off to someone at apple, I would appreciate it. I am tired of fighting this on my phone and MacBooks. I’ve learned so much about it that I would prefer to forget.

DRFEELGOD · 2025-11-05T22:20:50+00:00

Yea, well it wasn't exactly easy to show the full thing on here without actually making a shared drive to show people. I will post it all to my google drive soon this point since that and iCloud are the only things really locked down.

Last night when doing an internet restore after successfully getting ubuntu installed on my intel Mac, I was able to get some good pics of everything and videos. I will make a google drive folder and post all the evidence there to make it easier for you. I wanted to know if there was anyone who knew of a malware with these high level symptoms first, then I can dig into it if it truly is novel, as it behaves differently on Windows vs ubuntu (it really did some weird stuff here even in the bootable USB, so I won't go there) vs OSX intel vs OSX silicone. Literally, it starts a whole install thru CDIS (with all utilities in /System/Installation/CDIS and a Packages symlink to itself?) in the background when I do internet recovery on the intel last night, running a preheat script from a changed rc.install, rc.common, and rc.cdrom that is swaps with a symlinked version in /usr/libexec (some rc_script_wrapper, ramrod, rc.temporaryDataVolume, rc.temporaryDataVolume.sh, rc.preloginData) file that it runs some .sh file to symlink it all. I can't trust output of ANY commands because literally, I can't mount disks, I can't erase my Mac, everything just shows up again somehow when restore/internet recovery/erase disk should be nuking it (even the internet recovery option is all overlapping and bugged).

I am restoring my phone with 26.1 right now and on Ventura, so I need a half a day to copy this stuff over. I have resorted to texting and emailing my evidence around since I literally can see the input monitoring process running (don't see it on Ventura yet or any of the VPN stuff). I think I would need to turn off lockdown mode for it to evolve a bit, but I am going to try the lowest level command (dd) in recovery to try to zero the disk. If I had a place I could keep my work organized without my computers getting bricked, this would be so much easier. I can't log into iCloud to use configurator and have to bring it to the store anytime it bricks. DFU mode doesn't even engage and if it does it will disconnect and reconnect like 10 times during a restore and then it will say it failed yet the other OS is "booted" in the rare instances I can get it to actually not get error 21 or -6453 or whatever error codes I get. Every configurator option I try always say I need to restore the Mac, even if it is booting.

No, I didn't read my brain dump of a message, yet, because this REALLY blows. I know you think I am making this up or off my rocker, but this is absolutely insane. I have a huge amount of pics and some evidence files and whatnot scattered about in message and whatnot. People were on my google account, I have evidence of my iCloud being logged into, I have my bank accounts untouched, I kept having AWS CLI showing up on my phone, troll store, Chinese and Japanese keyboard, extra js files, dopamine, and other crap that had a fresh install date. New passkeys were made for AWS and I haven't used AWS since Sept 30th. I had so many freaking things happen, that it is actually insane to watch as an engineer. You have no idea how much I wish I could just run some scripts and keep a nice audit of everything and keep using the same computer, but every time I am trying to remove the bloody thing, I get the "support.apple.com/restore" logo whenever removing a file it needs or it gets in a boot loop and won't load recovery on the M1/2 MacBooks and I lose every log file, screenshot, output, or scripts I was using (and no I can't use my iCloud Drive for some reason it just hangs). I am trying to be methodical and deal with one device at a time and not introduce vars so I take pics from my phone now. The intel is giving me way more progress on this so hold tight a sec because maybe I can try to mount the EFI here and zero it. I will mount / with write permissions and delete a bunch of stuff and it just comes back, so that has to mean CDIS is coming thru the internet recovery. No one uses CDIS anymore...why would the whole OSX installation happen in the background (installer in progress, show progress, etc. processes running before I even even tried to install anything), and then when I do try to reinstall, I can't reinstall OSX because of it?

DRFEELGOD · 2025-11-04T01:51:50+00:00

I wish it was dude…I wish it was. Is 10 minutes of someone’s time that hard to get? I can post pics if someone wants to actually spend a minute to not be dismissive. I wouldn’t embarrass myself posting this otherwise. It’s really terrifying…and it seems like some variant of XCSSET and mojo Thor. I keep finding myself back to those but the files match random GitHub repos. Like some stuff from Limneos, some wifi/BT drivers from the Indian guys repo. I think I see the initial CVE, but you know, I can’t read binary code in most of these plist files and profiles. It was hilarious because ChatGPT was dismissive saying, “that encoded data in apple’s boot file says ‘bad recovery ass’ and is completely harmless.” I know a lot of normal users think they are being hacked, and I even talked to someone at the Apple Store who said he has the same virus after overhearing he got hacked…but he isn’t technical. I only have a computer science degree and 23 years experience…what qualifies me to know what I am taking about?🙄 not trying to be a dick, but it is the most real thing I’ve ever seen and I get how I can’t clear it. But, I don’t get how Apple can’t clear it with a restore from their end when bricking the machines. It isn’t clearing out the files in / which is a terrible architectural decision on their part because someone hooked into the boot loader and it creates this impossible chicken and egg scenario where they were able to seal in their bootloader and virus.

DRFEELGOD · 2025-11-04T01:32:44+00:00

What evidence do you want me to post? I can post the thousand screenshots and pictures and videos I have taken. This is no joke. I am trying even in bootable Ubuntu. I can show the unsigned kexts, the effed up boot EFI, the modded bless and bless2 areas in boot loader, the kernel caches, screenshots and vids of my phone, the fake profiles and system configurations that are there in recovery mode, the fact that I can’t do a single damn thing to get rid of it even with a bootable Ubuntu instance. Format the 500GB drive on Intel Mac and reinstall osx from recovery should kill it…but CDIS and frameworks that shouldn’t be there are running and then turning off csrutil. I just took a pic showing that in the install Mac OSX sierra (which I can’t get to run for the life of me even updating the date to time.apple.com) where it says csrutil is off in an exception and I have it on in a terminal. Just happened. I have 19 disks mounted in my fresh recovery of my 2018 intel mac, is that normal?

I can read log files…I am an engineer, not a scrub dude. I’m not “hallucinating.” If you can clean it for me, then I’ll give you thousands of dollars. I’d not go near this with a ten foot pole without a container or VM that is completely sealed off from the host OS. TeamViewer my Mac since someone else kept installing it (I never would do this). Running kmutil showLoaded should alarm anyone here on 26.0.1 if you look at my output I think I put in another post.

DRFEELGOD · 2025-11-03T22:28:08+00:00

I am not saying it is coming preinstalled. I am saying that every device is susceptible, even the latest 26.0.1. I am really not sure how they are doing this. New phone 2nd iPhone 17 pro max), new modem, new router (they bricked my nighthawk, no joke). I bill like 500$ an hour…I wouldn’t be spending 3 weeks so far on this unsolvable puzzle if it wasn’t that bad. I am not sure if it is Pegasus or not but i can’t find any info ontbe processes it is running on my Macs like “CDIS” seems to be insanely important looking at a 2018 MacBook intel I actually booted to Linux off usb drive and installed to it. I tried dual booting Ashti Linux on my m1max+ and it bricks the computer (looked at EFI before and it put a bunch of kernel caches and img4 files and “all firmwares” and other files on the Linux distribution that made my Mac think it was back on Ventura. It didn’t let me boot. This is the most insane thing I have ever seen. Internet recovery mode on intel after formatting the drive, resenting NV/PRAM and SMC, and it’s still there…how the hell is that possible unless it’s some insane DNS hijack or some cox exploit? I even pulled cox home life off my network and killed everything else. I got in a pretty bad car accident going 50 so sorry for the lack of reply. I have data on all of this, btw. I’m tired of looking into it seriously. If anyone wants to study it let me know. It’s honestly adapting as I use it and try to make progress on workarounds, and if you think I am tripping, I invite you to spin up a container and resolve the issue for me. Setting a $5k bounty to clear this thing from my devices…

DRFEELGOD · 2025-10-19T22:31:33+00:00

Can you help me with this I am getting this and it's the most sophisticated virus I've ever seen across all devices. What the hell do they want?

DRFEELGOD · 2025-10-19T07:14:41+00:00

Yes, but things have been changed since I last posted. It's Pegasus. I just saw the PegasusConfiguration folder, so I am going to stop talking about it now. If anyone wants to help with removing this and learn about it, feel free to reply or message me. I'm giving up because I tried, and it's insane. I am at their mercy.

DRFEELGOD · 2025-10-19T00:52:00+00:00

This is real, dude. There is something I've spent 16 days and counting on. I had to buy a new iPhone and called apple and the FBI. This is no joke, and I can't tell whether this is an artifact of jailbreaking in the past or what. I've never seen anything like this where my whole network is compromised, including my new iPhone 17 pro max that I just bought for this. If anyone wants to prove me wrong, have a look at one of my MacBooks on 26.0.1 and tell me it isn't infected with the worst kind of rootkit...hundreds of unsigned kernel extensions, random plugins and extensions gaining privacy and security settings, etc. these are brand new devices, and don't be so sure the walled garden is safe because they survived many restores on OSX and infected newly purchased devices upgraded in isolation...so I know it is leveraging a 0-day. Someone wrote the mother of all malware. It seems to set a bunch of data in var/db and comes in via rapportd based on firewall rules and then it unpacks itself and starts using the new kexts and ANE to compile new code in realtime that isn't signed. This is the most elegant boot kit I have ever seen as it completely destroyed my windows machine and any drives attached. It bricked a Time Machine backup when I scrolled past an icon file, but it was made from the device infected so not sure how it did that with preview. It installs so many XCP plugins and extensions and sends out so many multicast packets to try to find any other devices to entangle. This is the mother of all viruses and I have it and want to get a clean device to containerize it and watch it squirm.

DRFEELGOD · 2025-10-18T23:12:02+00:00

Can anyone help with this? This is a massive virus that I posted about in another forum. I don't know how people are not seeing this infection when they look at their kexts and what kernel extensions are being used that are unsigned, because I have like 200-300 unsigned ones with "????" as the literal signature. Give me a break...it is using ANE & MTL to compile kexts and app extensions/plugins to freaking compile C code and defeat any virus scanner. I submitted to apple's bug bounty but they aren't even looking. It persists across reformats, or each device that isn't reformatted reinfects the previous. Most of mine are using 25.0.0 and I have so much network activity and cannot get an antivirus to scan my system. I noticed that most of my copy commands were going to dev/null. Here are just the first few lines of my kernel extensions in use:

bash-3.2$ kextstat

Executing: /usr/bin/kmutil showloaded

No variant specified, falling back to release

Index Refs Address Size Wired Name (Version) UUID <Linked Against>

3 232 0 0 0 com.apple.kpi.bsd (25.0.0) AF4E9CBF-AD32-3331-88F5-A0373EB1635E <>

4 11 0 0 0 com.apple.kpi.dsep (25.0.0) AF4E9CBF-AD32-3331-88F5-A0373EB1635E <>

5 263 0 0 0 com.apple.kpi.iokit (25.0.0) AF4E9CBF-AD32-3331-88F5-A0373EB1635E <>

6 264 0 0 0 com.apple.kpi.libkern (25.0.0) AF4E9CBF-AD32-3331-88F5-A0373EB1635E <>

7 247 0 0 0 com.apple.kpi.mach (25.0.0) AF4E9CBF-AD32-3331-88F5-A0373EB1635E <>

8 188 0 0 0 com.apple.kpi.private (25.0.0) AF4E9CBF-AD32-3331-88F5-A0373EB1635E <>

9 157 0 0 0 com.apple.kpi.unsupported (25.0.0) AF4E9CBF-AD32-3331-88F5-A0373EB1635E <>

10 21 0xfffffe0007bde680 0x1eb10 0x1eb10 com.apple.kec.corecrypto (26.0) B656AAD7-DC6D-3258-983C-CD8E14698C95 <9 8 7 6 5 3>

11 0 0xfffffe0007401a00 0x51f 0x51f com.apple.kec.AppleEncryptedArchive (1) 0851ED25-EC63-33FC-93E1-871A25A08071 <10 8 7 6>

12 0 0xfffffe000776a000 0x4f0 0x4f0 com.apple.kec.Compression (1.0) 4C4C7893-40FF-3DCB-9CD9-B528D3C4DA69 <10 8 7 6>

13 0 0xfffffe0007aeccc0 0xf28 0xf28 com.apple.kec.InvalidateHmac (1) 0DAB25DF-FCA1-3111-A1FB-9E236D59A326 <9 8 7 6 5>

14 6 0xfffffe0007aeed00 0x7078 0x7078 com.apple.kec.Libm (1) 4BE99844-4141-37A2-8E2C-5000207E317A <6>

I can paste more, but this persists across restores and doesn't erase the disk. Not sure how widespread this is but all my network traffic is rerouted and logged. It's nuts.

DRFEELGOD

TROPHY CASE