TECHNICAL ARCHITECTURE & PROTOCOL SPECS · ALLINONESIE v0.3.33

Here’s Everything We Protect — Look Under the Hood.

Built for security engineers, CISOs, IT administrators, and the curious who want to “see up its dress.” Inspect every local DNS sinkhole rule, URL parameter stripper, passive ARP neighbor table parser, volatile-RAM voice prosody check, and enterprise firewall compatibility guarantee inside AllinOnesie.

← Back to Main Page (Simple Overview)

I agree to the Terms of Service, EULA, Arbitration & Privacy Notice (100% local rollback snapshots)

✓ Local Loopback Sinkhole (127.0.0.1:53530) · ✓ 100% Passive OS ARP Discovery (Zero TCP/SSDP Storms) · ✓ Zero Kernel Drivers / Zero Hosts-File Tampering · ✓ Split-Horizon RFC1918 & .local DNS

Full Telemetry & Protocol Specification

The 10 Local Defense Engines Inside AllinOnesie

Every engine runs 100% locally on your endpoint. We block exact surveillance, ACR, and data-broker telemetry hostnames (`0.0.0.0` sinkhole) while explicitly whitelisting streaming video CDNs, P2P camera relays, and connected-car digital keys.

ENGINE 01 // OS & AI ANTI-SPYWARE Registry + HTTP Header + Sinkhole

“Big Brother” OS Screen-Recording (Windows Recall) & AI Scraper Lock

Disables Windows Copilot+ AI Recall background screen-snapshotting (`DisableAIDataAnalysis = 1`), zeroes the Windows Advertising ID (`AdvertisingInfo\Enabled = 0`), injects legally binding W3C Global Privacy Control (`Sec-GPC: 1` & `navigator.globalPrivacyControl = true`) under CCPA/CPRA/GDPR, and blocks 18+ AI training crawlers.

                BLOCKED (0.0.0.0 + Policy): vortex.data.microsoft.com, settings-win.data.microsoft.com, telemetry.microsoft.com, watson.telemetry.microsoft.com, Recall Snapshot Indexer, GPTBot, CCBot, ClaudeBot, Bytespider, Google-Extended, img2dataset
              
                WHITELISTED (100% Intact): windowsupdate.microsoft.com, login.microsoftonline.com, office.com, OneDrive user sync, Windows Defender Security Intelligence updates

ENGINE 02 // PHYSICAL & RF SWEEP OUI + BLE RSSI + Optical IR + EMF

4-in-1 Hidden Spy Camera, Stalker AirTag & Gas-Pump/ATM Skimmer Radar

Audits hotel/Airbnb Wi-Fi subnets against 62 IP-camera MAC OUI prefixes and RTSP/ONVIF streaming ports (`554`, `8000`, `8080`, `8800`), tracks unknown BLE tags moving with your phone (AirTag, SmartTag, Tile, Chipolo), runs an optical IR pinhole lens glint filter + 3-axis Magnetometer EMF probe, and flags unencrypted Bluetooth skimmers at gas pumps and ATMs.

                FLAGGED SIGNATURES: Hidden RTSP/ONVIF responders, unknown Apple FindMy / BLE rolling MACs with persistent RSSI > -65 dBm, unencrypted HC-05 / HC-06 / RNBT-XXXX serial UART skimmers
              
                SAFE / IGNORED: Your paired family AirTags, Apple Watch, Bluetooth headphones, and vehicle hands-free Bluetooth

ENGINE 03 // ROAD & TELEMATICS SHIELD DeFlock GIS + Wi-Fi Probe Lock + DNS

Flock License-Plate Camera Radar & Car-Insurance Data Broker Blocker

Alerts you before entering high-density Flock Safety / Vigilant ALPR camera corridors using an offline local vector database, suppresses your phone’s background Wi-Fi SSID probe requests & rotates BLE UUIDs when leaving home Wi-Fi, and blocks automaker telematics uploads to insurance rate-hike brokers.

                BLOCKED BROKERS (0.0.0.0): telematics.lexisnexisrisk.com, risk.lexisnexis.com, verisk.com, telematics.verisk.com, arity.com, api.arity.com, cmtelematics.com, zendrive.com, cccis.com, onstar-data-broker.gm.com
              
                WHITELISTED VEHICLE CONTROLS: owner-api.teslamotors.com, auth.tesla.com, Phone-Key BLE unlock, remote cabin pre-conditioning, Supercharger routing, Apple CarPlay & Android Auto

ENGINE 04 // ANTI-SHOPPING-STALKING Sub-1ms URL Regex + Graph Sinkhole

Cross-Device Shopping Stalking & Dynamic Price-Jacking Engine

Strips 25+ hidden click-tracking and attribution tokens from clipboard, email, and browser links in under 1ms, blocks cross-device household ad-graph brokers that link your phone searches to your living-room TV ads, and neutralizes canvas/audio device-fingerprinting used by travel & retail sites for dynamic price discrimination.

                STRIPPED & SINKHOLED: ?fbclid, ?gclid, ?dclid, ?gbraid, ?wbraid, ?msclkid, ?ttclid, ?twclid, ?igshid, ?mc_cid, ?_ga, ?utm_* + criteo.com, rlcdn.com (LiveRamp), taboola.com, outbrain.com, bkrtx.com
              
                WHITELISTED COMMERCE: Merchant checkout carts, Stripe/PayPal/Apple Pay flows, airline booking sessions, and banking OAuth cookies

ENGINE 05 // SMART TV ACR BLINDFOLD 100% Passive ARP + DNS Sinkhole

Smart TV Automatic Content Recognition (ACR) Spyware Sinkhole

Discovers Smart TVs 100% passively via the OS kernel ARP neighbor table (`Get-NetNeighbor` — zero active TCP port 8001 scans or SSDP multicast storms that could cause a Samsung Tizen TV network hiccup). Sinkholes ACR frame-fingerprinting endpoints while distinguishing SmartThings kitchen appliances (`C0-97-27` Oven/Range with TCP 8001/8002 closed) from TVs.

                BLOCKED ACR SPYWARE (0.0.0.0): inscape.tv, samsungacr.com, acr0.samsungcloudsolution.com, samsungads.com, ads.samsung.com, lgad.cjpowercast.com, ngfts.lge.com, scribe.logs.roku.com, amoeba.roku.com, insights.vizio.com, flingo.tv, fls-na.amazon.com
              
                WHITELISTED STREAMING CDNs: netflix.com, nflxvideo.net, youtube.com, googlevideo.com, disneyplus.com, bamgrid.com, aiv-cdn.net (Prime Video), hulu.com, max.com, peacocktv.com

ENGINE 06 // HOME CAMERA & IOT VAULT Default-Untrusted + ToS Audit + DNS

4K Home Security Camera Verification & Smart Switch Occupancy Filter

All discovered home cameras (e.g., TP-Link Tapo 4K on `192.168.1.96:8800`) default to Unverified (Not Trusted) until you confirm ownership in 1 click, followed by an instant plain-English Terms-of-Service privacy audit. Blocks cloud usage analytics, smart-switch room-occupancy profiling, and Aireal AI facial/voice training uploads.

                BLOCKED IOT TELEMETRY (0.0.0.0): analytics.tplinkcloud.com, ueip.tplinkcloud.com, diag.tplinkcloud.com, usage-stats.tplinkcloud.com, occupancy-telemetry.tapo.com, aireal-biometrics.tplinkcloud.com
              
                WHITELISTED P2P VIDEO & STORAGE: aps1-wap.tplinkcloud.com, use1-relay.tplinknbu.com, encrypted P2P 4K live view, motion push alerts, and 256GB local microSD/SSD recording

ENGINE 07 // VOLATILE-RAM VOICE GUARD 40–8,000 Hz Spectral + Coercion NLP

Live Call AI Voice-Clone & “Grandparent Emergency” Coercion Guard

Analyzes incoming call audio 100% in volatile RAM (discarded in <50ms, never written to disk or uploaded) for neural vocoder phase-smoothing artifacts (ElevenLabs/XTTS/RVC signatures) and 42 high-urgency financial coercion scripts (bail money, wire transfers, gift cards, crypto ATMs, remote-desktop requests).

                DETECTED THREATS: Sub-band harmonic phase smoothing (40–8,000 Hz), missing natural glottal micro-jitter, secrecy demands (“don’t tell Mom/the bank”), and gift-card/wire urgency
              
                OFFLINE VERIFICATION: Instant on-screen Family Safe-Word prompt + 1-tap trusted family backchannel verification

ENGINE 08 // ISP BLINDFOLD & WIFI LOCK DoH 1.1.1.2 + TLS 1.3 ECH + ARP Lock

ISP CPNI Blindfold, Encrypted DNS & Evil-Twin Wi-Fi Watchdog

Encrypts outbound DNS lookups via Cloudflare `1.1.1.2` (Malware & Tracker Filtering over HTTPS/TLS 1.3 ECH) so Frontier, Comcast/Xfinity, AT&T, and Spectrum cannot log or sell household browsing history (CPNI) or hijack NXDOMAIN typos, while locking your router’s Gateway MAC address against hotel/airport Evil-Twin MITM attacks.

                BLOCKED ISP COLLECTORS: dns-hijack-search.frontier.com, cpni-ads.frontier.com, metrics.xfinity.com, ad-telemetry.spectrum.net, att-advertising.com, unencrypted Port 53 snooping
              
                WHITELISTED CAPTIVE PORTALS: Automatic 60-second captive-portal grace detection for hotel & airline Wi-Fi sign-in pages

ENGINE 09 // EXIF & SYSTEM HYGIENE Binary EXIF Stripper + Safe Cleanup

Photo EXIF GPS Stripper & Non-Destructive 1-Click PC/Phone Tune-Up

Strips embedded GPS latitude/longitude coordinates, altitude, home address metadata, and camera serial numbers from JPEG/HEIC/PNG photos before sharing. Cleans temp caches, crash dumps, and startup bloatware while creating a timestamped JSON rollback checkpoint (`↩ Undo`) before every action.

                REMOVED METADATA & JUNK: EXIF GPSInfo (Tags 0x0001–0x001F), MakerNote serials, orphaned installer caches, adware launch agents, and browser tracking cookies
              
                PROTECTED USER DATA: Active browser logins, saved passwords, tax/financial documents, photos, and local development environments

ENGINE 10 // SCORE, MESH & TRAVEL MFA Disk State JSON + <12s Mesh + Per-Device MFA

Unified Master Health Score (`63 → 100`), Family Mesh & Travel-Safe 2FA

Persists verified shield state to `%APPDATA%\AllinOnesie\privacy-shield-state.json` so the Home tab and Anti-Spy Shield tab synchronize deterministically (`100 / 100`). Elects a single Lead Guardian device on shared home Wi-Fi (`<12s` automatic failover, 0% battery drain on other phones) and enforces Travel-Safe Per-Device 6-Digit SMS/Email MFA.

                ISOLATED ON ANOMALY: Only the specific traveling laptop or phone entering a new country/IP requires a 6-digit SMS or email verification code
              
                NEVER INTERRUPTED AT HOME: Spouse’s phone, kids’ tablets, Smart TVs, and home security cameras back home stay 100% active and connected

Interactive Technical Sandbox

Test Every Engine Live in Your Browser

Click through all six pillars below to test our live URL tracker stripper, Smart TV & 4K camera verification matrix, 4-in-1 room/skimmer sweep, Flock departure stealth, volatile-RAM voice clone analyzer, and Unified Score math.

CISO & IT Administrator Specification

Zero-Conflict Office Firewall, VPN & EDR Harmony

Designed so executives and remote workers can run AllinOnesie on home-office and corporate networks alongside SonicWall, Fortinet, Cisco Meraki, ESET, and CrowdStrike without a single false positive or DNS collision.

Security Layer / Stack	Legacy VPNs / Consumer Cleaners	AllinOnesie v0.3.33 Zero-Conflict Architecture
LAN Discovery & Smart TVs Samsung Tizen, LG webOS, Tapo 4K	Active TCP port scans (`8001`/`8002`) & UDP SSDP floods cause Smart TV Wi-Fi drops and trip IDS/IPS port-scan alerts.	100% Passive OS Kernel ARP Read (`Get-NetNeighbor`): Zero active TCP/UDP probes on your LAN. Never causes a Samsung Tizen TV hiccup or firewall alert.
Endpoint EDR & Antivirus ESET, CrowdStrike, Bitdefender, Defender	Modifies `C:\Windows\System32\drivers\etc\hosts` or installs unsigned kernel drivers (`WinDivert`), triggering EDR tamper alarms.	Zero Hosts-File Edits & Zero Kernel Drivers: Runs in standard user-space (`127.0.0.1:53530` loopback listener) with clean SHA-256 code integrity.
Enterprise Firewalls & Split-DNS SonicWall TZ670, FortiGate, Meraki MX	Forces all DNS through an external VPN tunnel, breaking Active Directory `.local`/`.corp` domains, SQL servers, and office printers.	Automatic Split-Horizon RFC1918 Bypass: Routes `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`, `.local`, `.corp`, and `.internal` directly to your local office DNS gateway.
4K Home Camera Privacy TP-Link Tapo, Ring, Eufy, Reolink	Either ignores IoT cameras completely or blocks their relay domains, breaking live video feeds.	Surgical Telemetry Sinkhole: Defaults unknown cameras to Unverified, blocks `analytics.tplinkcloud.com` & `ueip.tplinkcloud.com`, and keeps P2P 4K video + 256GB SD storage 100% intact.

Live Security Endpoint Verification

Interactive Travel-Safe 6-Digit SMS & Email 2FA Simulator

Test how AllinOnesie handles a device logging in from a new country or travel IP: only the traveling device steps up for a 6-digit code, while devices back home stay 100% active.

✓ Home Devices Untouched (3/3 Active)

GET /api/mfa/send & /api/mfa/verify

Ready: Click "Send 6-Digit SMS Code" or "Send 6-Digit Email Code" to issue a live per-device travel challenge. Home devices remain 100% protected.

Corporate Governance & Legal Terms

Full End-User License Agreement (EULA), ToS & Privacy Notice

Publisher: G&G Series Holdings LLC (A State of Florida Series LLC) Effective Date: October 25, 2026 Exclusive Venue & Governing Law: Pinellas & Hillsborough County, FL (State of Florida)

1. End-User License Agreement (EULA), Rollback Snapshots & Scope of License ▾

1.1 License Grant & Household Seats

G&G Series Holdings LLC (a State of Florida Series LLC) grants you a revocable, non-exclusive, non-transferable license to install and use AllinOnesie on the number of household devices covered by your subscription tier (3 devices on Solo; 5 devices on Family + $9.99/yr per additional device).

1.2 Mandatory Pre-Action Rollback Checkpoints

Before applying any registry privacy lock, DNS resolver change, or disk cleanup, AllinOnesie writes a reversible state snapshot to `%APPDATA%\AllinOnesie\rollback-snapshots.json` so you can restore prior settings in one click.

2. Advisory Disclaimers, $10.00 Liability Cap & Binding Florida AAA Arbitration ▾

2.1 Probabilistic Detection Limitation

Hidden camera/skimmer sweeps, AI voice-clone spectral analysis, and DeFlock ALPR corridor alerts are probabilistic defensive aids. No software can guarantee detection of 100% of hardwired/disconnected recording devices, novel synthetic voice models, or unmapped cameras. Always verify urgent financial requests via an independent call and physically inspect private spaces.

2.2 Limitation of Liability ($10.00 Free/Trial Cap)

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SOFTWARE IS PROVIDED “AS IS” AND TOTAL CUMULATIVE LIABILITY OF G&G SERIES HOLDINGS LLC SHALL NOT EXCEED THE GREATER OF TWELVE (12) MONTHS OF SUBSCRIPTION FEES ACTUALLY PAID BY YOU OR $10.00 USD FOR FREE/TRIAL USERS.

2.3 Binding Individual AAA Arbitration, Class-Action Waiver & Florida Venue

Any dispute, claim, or controversy arising out of or relating to AllinOnesie shall be governed by the laws of the State of Florida and resolved exclusively by Binding Individual Arbitration administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules. YOU AND G&G SERIES HOLDINGS LLC WAIVE ANY RIGHT TO A JURY TRIAL OR TO PARTICIPATE IN A CLASS, COLLECTIVE, OR REPRESENTATIVE ACTION. Exclusive venue for any permitted court proceeding shall lie solely in the state or federal courts located in Pinellas County or Hillsborough County, Florida.

3. Zero-Knowledge Privacy Architecture, All-Party Call-Recording Consent & `Sec-GPC: 1` ▾

3.1 100% Local Processing & All-Party Call-Monitoring Consent

All DNS sinkholing, URL tracking-token stripping, photo EXIF scrubbing, and volatile-RAM call audio prosody checks execute locally on your device (0 bytes of call audio are ever recorded to disk or uploaded). Users in all-party/two-party telecommunications consent states (including Florida, California, Pennsylvania, Illinois, Massachusetts, and Washington) are solely responsible for complying with applicable call-monitoring consent laws.

← Back to Main Page (Simple Overview)