The analysis, conducted by an independent researcher known as Ultra, claims that Pulse moves beyond standard browser functionality by generating a unique device identifier. This fingerprint is reportedly constructed by hashing GPU rendering patterns and hardware-specific audio test responses, effectively linking multiple X accounts to a single machine. Beyond device identification, the extension allegedly logs extensive telemetry from the X interface, including session duration, search history, bookmarks, and even posts that users scroll past without interaction.
While the report initially sparked alarm regarding potential access to third-party accounts like Binance, ChatGPT, and Claude, the analyst later clarified that such functions are triggered only during user-initiated verification. In these instances, the extension generates zero-knowledge proofs to verify trading data or subscription levels, rather than maintaining persistent background access. Kaito, which launched Pulse on August 18 alongside a new attention-based metric called Aura, has yet to issue a formal response to the specific technical allegations. The extension is currently marketed as a social layer designed to integrate verifiable trading activity directly into the X timeline.

Comments (0)
No comments yet. Be the first!