yeah, i've got an idea to use a minimalistic lattice FPGA to run a monitor that gathers the data, and then get an offline machine running a reasonable (eg 32gb) LLM to analyse the logs. all low bandwidth packet protocols ie dns, icmp, igmp, and log all ip addresses and compare them against a traffic logger capturing the data that the OS on my pc can see, the differential and the patterns would likely help discover anything creepy going on. most likely these things are not often used but i'd rather not be unaware if i could find out. i'm planning to do work with FPGAs anyway in the future for developing custom processor logic so it'd just be one set aside for this task. it probably would be fairly simple to whitelist address ranges from a known clean OS without any telemetry crap allowed through to act as a filter use on a machine specifically dedicated to secure communication. super creepy stuff, and super lame that so little is mentioned about it. even the way this video doesn't talk very loudly about what it does in the name or info section. the presenter seems more concerned about the license on minix than the blatantly obvious privacy implications.