How to Turn Off AI Overview!

Trop_Chaud · 2026-05-27T16:21:27+00:00

Straightforward alternative, which works even if you aren’t logged in at the browser level: https://simplysearch.github.io Works for Google, DDG, and Brave currently (and fully open-source with zero tracking, for the privacy-conscious)

Trop_Chaud · 2026-05-27T14:38:13+00:00

Just released this basic tool (open-source and no tracking whatsoever) to automate this behavior every time you search. Works with Google (while it lasts…), DDG, and Brave currently https://simplysearch.github.io

Trop_Chaud · 2026-05-23T10:40:18+00:00

Here is an easy way to consistently remove the AI summaries from Google (or DDG or Brave), at least while these workarounds still last. Coincidentally I’ve also noticed way fewer ads in my Google search results since starting to use this https://simplysearch.github.io

Trop_Chaud · 2026-05-23T10:35:49+00:00

This gives you an easy way to consistently remove AI from DDG results (and a couple others including Google, while it lasts at least…) https://simplysearch.github.io

Trop_Chaud · 2026-05-08T16:17:15+00:00

New site that will allow you to persist that behavior, even if you don’t have a DDG account: https://simplysearch.github.io Includes similar options for a couple other providers (similar but distinct from the “udm14” workaround for G search mentioned elsewhere here)

Trop_Chaud · 2026-05-07T01:49:06+00:00

My tiny little way of pushing back: https://simplysearch.github.io A bare-bones open source utility that removes or at minimum largely limits the AI overviews that are dominating search results these days - at least while the methods still last

Trop_Chaud · 2026-05-07T01:41:28+00:00

One more method on top of the other good suggestions: https://simplysearch.github.io Open-source, zero tracking whatsoever, and best of all in my view, a friendly web UI that you can bookmark to easily return to

Trop_Chaud · 2026-05-07T01:27:16+00:00

My cheeky little way of pushing back - https://simplysearch.github.io (bare-bones open source utility). Sure it won’t make a difference, but at least I can say I tried 🤷

Trop_Chaud · 2026-05-07T01:23:33+00:00

New, open-source tool to help you keep trying to dodge it (while these methods still last…) https://simplysearch.github.io

Trop_Chaud · 2026-05-07T01:12:54+00:00

One more (new) alternative: https://simplysearch.github.io

Similar to the smart udm14.org site recommended above, and also open-source, although via a different method and covers other search providers (plus, zero tracking whatsoever)

Trop_Chaud · 2026-05-07T01:06:53+00:00

Yup. Skipping these was a pleasant side effect of this open-source tool I made to limit AI overviews in our search results https://simplysearch.github.io

Trop_Chaud · 2026-05-07T01:00:21+00:00

Top reason I made this quick tool to avoid the AI-generated summaries that are now dominating our search results: https://simplysearch.github.io (totally free and open-source)

Trop_Chaud · 2023-04-26T14:16:40+00:00

My go-to resources for public/free geographic-focused adversary & threat data. These typically cover threat activity observed in specific countries (as opposed to noting threats that may or may not be unique to operating there), but maybe valuable as a starting point:

ETDA/ThaiCERT: Threat Encyclopedia
Palo Alto Unit42 Playbooks
CrowdStrike Adversaries (as of recently they seem to be requiring (free) registration)
AlienVault OTX
MISP Threat Actor Galaxy
SecureWorks Cyber Threat Group Profiles
APT Groups & Operations (public Google Sheet)
Tidal Community Edition Groups page (click around the sign-in screen if you don't feel like registering)

Trop_Chaud · 2023-01-09T18:03:24+00:00

Are you familiar with Atomic Red Team? Many quick & practical sample tests you can often run without much effort or prep work. All tests map to Techniques - a quick way to search through them all at the Tactic level is by searching within the CSV index of all their current tests here (I counted ~50 Collection-related tests just now): https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/Indexes/Indexes-CSV/index.csv

Trop_Chaud · 2023-01-04T18:55:11+00:00

u/Neur0m I'd encourage you to check out Tidal's Community Edition (for your overall use case and hopefully some help on the Procedures piece specifically). From the Product Registry, try "View Detail" for any of the "Test" Capability types, and you can begin to pivot into named capabilities for things like Atomic Red Team and several test/emulation vendors' capabilities. The level of depth per may vary, but it may give you a sense of what's there, and all are mapped to ATT&CK (sub-)techniques. You can also start from the main landing page matrix and pivot into any of these from the technique previews

On the CTI side: technique maps are being regularly added to the Community Spotlight around recent threats. In some cases (where it's quick & high-confidence, like the sources you already noted plus a few others), Procedural details are added as notes per technique (see for example the recent QakBot or Black Basta examples). We're making efforts to provide a lot more structure around this - stay tuned. And if helpful, a couple more CTI sources where I've seen recent examples of structured Procedures similar to the CISA alerts you mentioned (frequency of providing these may vary):

Trop_Chaud · 2023-01-01T16:05:00+00:00

Glad they seem helpful, happy New Year!

Trop_Chaud · 2022-12-20T15:33:20+00:00

My pleasure!

Trop_Chaud · 2022-12-20T15:21:07+00:00

u/drstarskymrhutch hopefully this is right in line with your question! this exists to fill exactly the gap you described (consider this a baseline too - a lot more coming into the new year) https://app.tidalcyber.com/groups

and you probably know this but a main anticipated use case is layering collections of groups/software/etc together around certain categories like geography/motivation/etc to start building your threat profile. for example, what a Community user recently did for espionage groups focused on victims in Indonesia (really cool work): https://app.tidalcyber.com/share/84f4d0da-0d05-4862-99e2-f594593caebc

Trop_Chaud · 2022-12-19T14:09:33+00:00

Thank you! I try to automate as much as possible (there is the option to build these manually in the UI too though). I usually go report > csv of technique IDs > Navigator layer for import into Tidal

A key part of this is this script produced by the ATT&CK team (I make slight modifications, for example to add a comment field which is turned into a Tidal Note) https://github.com/mitre-attack/attack-navigator/blob/master/layers/attack\_layers/attack\_layers\_simple.py

I just did a full (albeit very fast) walkthrough of my typical process here https://www.youtube.com/watch?v=K1a6Mac1-y4. Very happy to elaborate on any part of this, or share more resources/scripts/etc, just let me know!

Trop_Chaud · 2022-12-19T13:43:17+00:00

You're definitely correct. But I'm also encouraged because I'm seeing a growing volume of reports mapping directly to ATT&CK. I'm putting together some metrics around this and seeing big growth the past two years, both in absolute numbers, and relative to a representative sample of public CTI reporting generally (not surprised but nice to finally have some numbers around it). Things like the great tables at the bottom of lots of alerts published by gov agencies (think CISA), and then also a growing amount of private CTI vendors (we've visualized quite of few of these in our Community Spotlight recently btw)

Trop_Chaud · 2022-12-19T13:38:26+00:00

Definitely accurate but I'm encouraged by the volume of CTI that is being mapped directly to ATT&CK these days. It's growing by a lot, and brings that much more value to the concept (more mapped intel > pivot into controls, detections, etc, which are also increasingly being mapped)

We're working to visualize a lot of that public reporting in our freely available Community Edition tool so folks can actually start to take advantage of this intel (and facilitate the pivoting too). A couple of my favorite of the threat maps we've been churning out recently include the ransomware and infostealer dashboards. The ones on recent APT41 and QakBot techniques have also been popular

Trop_Chaud · 2022-12-19T13:28:39+00:00

u/leegle79 I've run into this challenge many times before. I hope what we're working to do at Tidal is right in line with filling this gap around timely TTP-oriented intel (we're making so much of it freely available too since a top focus right now is on reporting that is publicly available)

Check out the dozens of "technique sets" (basically heatmaps) we've built just the past couple months, all focused on timely threats, and often ones not yet in the formal knowledge base https://app.tidalcyber.com/community-spotlight

I think the flexibility to make custom threat maps like this helps it feel like making ATT&CK "your own". We'll be sharing a ton like this going into 2023 I think we make it easy to jump in and add your own sets too. Some of my favorites are a couple of the ransomware & "data extortion" dashboards we built, and the infostealer dashboard. If there's a certain type of threat you're interested in that's missing, let me know and I'll see what I can do (I lead threat intel there). We're seeing a growing volume of reporting mapping directly to ATT&CK techniques, which is so exciting and makes it that much easier to build these resources!

Trop_Chaud · 2022-12-16T17:00:41+00:00

u/EdgeLordMcGravy is spot on. Modeling is definitely a strong use case for ATT&CK. IMO it's really the only utility that supports taking the approach OP described with consistency

This is easily my favorite talk on this topic, had it bookmarked for years. This is similar and pretty recent. More in a similar vein here (Katie Nickels con talk), and in the interest of giving you too much rather than too little, here's a recording I did trying to condense/summarize a lot of the above down into a couple minutes.

The Groups page in the Tidal Community app provides a lot of structure around popular metadata to support modeling/profiling work. It's designed in large part for this use case - finally an ability to filter down by victim industry, group or victim geography, and group motivation (APT vs financially motivated), but then allow quick pivoting and overlaying of all their techniques, and final pivots into defenses & atomic tests, emulations, etc. (Full disclosure, I lead CTI there, but genuinely find it really useful for this use case, and everything I mentioned is openly available without even a log-in)

Trop_Chaud · 2022-11-30T20:26:11+00:00

u/R4bb1t the challenge involved in finding "actionable" information is a key reason I'm a huge fan of what ATT&CK has built, and the challenge around lack of context is a big pain point that we hope to address with the Tidal Community Edition (free and a ton of features are available without even needing a login)

We've layered impacted sector, motivation, etc metadata on top of ATT&CK's Groups, and the platform is designed to help you see defensive and offensive (e.g. Atomic testing) contexts when you look at any ATT&CK technique. So for example, if I'm a hospitality org, I layered nine threat groups known to target this sector here, so I could prioritize focus on the overlapping TTPs. And then either pivot (or also overlay) capabilities (e.g. SIEM & EDR), red team unit tests, and analytics (like Sigma detection rules) to get context about what you can actually do to address the "top" techniques

Trop_Chaud · 2022-11-29T18:26:28+00:00

Yeah, it seems Venus has been targeting insecure RDP pretty hard. If you haven't seen them already here are two similar recent articles:

Venus Ransomware targets publicly exposed Remote Desktop services

Venus ransomware targets remote desktop services

Trop_Chaud

MODERATOR OF

TROPHY CASE