Replies to message #12,914

🔎 If you see an alert for analytics.usips.org, this is a self-hosted system I am running as a test. It is GDPR compliant and collects no invasive information.

Sounds like you've got a Trannyware package updater going on like packagekitd or something. Nothing should ever write to /usr, save for package...

lsof shows you all the files opened by processes, including read-only and file descriptors. It's likely that anything in /usr/lib/ is just the...