Forwarded from Tech & Leaks Zone
Interestingly:
As we know, the exploit has been patched on newer devices. From what I could confirm, devices released after in 2024 and after are patched against Carbonara, but some are still vulnerable anyway (most likely, OEMs not pulling mediatek patches in time).
Some devices I could confirm being vulnerable are:
- Moto G23/G13
- Moto G24
- Honor 200 Lite
https://github.com/bkerler/mtkclient/pull/1558#issue-3426045597
As we know, the exploit has been patched on newer devices. From what I could confirm, devices released after in 2024 and after are patched against Carbonara, but some are still vulnerable anyway (most likely, OEMs not pulling mediatek patches in time).
Some devices I could confirm being vulnerable are:
- Moto G23/G13
- Moto G24
- Honor 200 Lite
https://github.com/bkerler/mtkclient/pull/1558#issue-3426045597
GitHub
Serve Carbonara by shomykohai · Pull Request #1558 · bkerler/mtkclient
Hi @bkerler!
I recently rediscovered Carbonara exploit, and used the opportunity to make my own mtk tool: penumbra.
I used mtkclient and logs to study how the protocol works, as well as taking some...
I recently rediscovered Carbonara exploit, and used the opportunity to make my own mtk tool: penumbra.
I used mtkclient and logs to study how the protocol works, as well as taking some...
Forwarded from GSMArena (IFTTT)
The iQOO 15 will have a color-changing back - see it in action in this short video
https://ift.tt/dqXMS2b
https://ift.tt/dqXMS2b
GSMArena.com
The iQOO 15 will have a color-changing back - see it in action in this short video
The new iQOO flagship is coming later this month - it should be unveiled just after Qualcomm unveils its new Elite chipset.
Forwarded from /e/OS & Murena announcements
🧡 You loved the Privacy Switch on Murena 2.
You’ve been asking us for its return... but what if we offer you something more premium?
👉 Stay tuned. Tomorrow. September 18, at 3 pm CEST. 🙌
You’ve been asking us for its return... but what if we offer you something more premium?
👉 Stay tuned. Tomorrow. September 18, at 3 pm CEST. 🙌
Forwarded from #TBOT: Take Back Our Tech
#TBOT 14: China’s AI+ Plan Goes All In, MIT’s AlterEgo Reads Your Lips Without Speaking, 1,500 Engineers Have Access To WhatsApp Data, StackWallet - Private and Easy Multi-coin Wallet
Watch on Substack
Here are this week’s stories:
China’s AI+ Plan Goes All In: China outlined its 10-year plan to integrate the entire country with AI across all sectors. I read their report to find out what’s planned for the second most populous country in the world.
MIT AlterEgo Reads Your Lips: New MIT Media Lab startup attempts to let you communicate without speaking with their Silent Sense tech. How does it work? Find out.
Insider Look at WhatsApp’s Security: WhatsApp’s head of security sues Meta for alleged retaliation after he called out WhatsApp for not knowing how much data it collected and who had access to it.
StackWallet—Private and Easy Multi-coin Wallet: I recently talked with the founder of StackWallet, and now I’m convinced it’s the best wallet out there. Find out why.
🪄 We aim for our show to be well-researched, well-informed and focused on the most impactful stories while being concise
Full articles soon.
Join the Digital ID Report Waitlist
StackWallet
Share this post with your crew. 🚢
Watch on Substack
Here are this week’s stories:
China’s AI+ Plan Goes All In: China outlined its 10-year plan to integrate the entire country with AI across all sectors. I read their report to find out what’s planned for the second most populous country in the world.
MIT AlterEgo Reads Your Lips: New MIT Media Lab startup attempts to let you communicate without speaking with their Silent Sense tech. How does it work? Find out.
Insider Look at WhatsApp’s Security: WhatsApp’s head of security sues Meta for alleged retaliation after he called out WhatsApp for not knowing how much data it collected and who had access to it.
StackWallet—Private and Easy Multi-coin Wallet: I recently talked with the founder of StackWallet, and now I’m convinced it’s the best wallet out there. Find out why.
🪄 We aim for our show to be well-researched, well-informed and focused on the most impactful stories while being concise
Full articles soon.
Join the Digital ID Report Waitlist
StackWallet
Share this post with your crew. 🚢
Substack
#TBOT 14: China’s AI+ Plan Goes All In, MIT’s AlterEgo Reads Your Lips Without Speaking, 1,500 Engineers Have Access To WhatsApp…
Your weekly tech update!
Forwarded from Mishaal's Android News Feed
📱Android 16's latest QPR2 beta finally lets you customize icon shapes
Google is rolling out the second beta of Android 16 QPR2 to supported Pixel devices ahead of a stable rollout in December
Here's what Google says is new👇
🔗 https://www.androidauthority.com/android-16-qpr2-beta-2-release-3598233/
Google is rolling out the second beta of Android 16 QPR2 to supported Pixel devices ahead of a stable rollout in December
Here's what Google says is new👇
🔗 https://www.androidauthority.com/android-16-qpr2-beta-2-release-3598233/
Forwarded from Mishaal's Android News Feed
🔁 Here's every new feature for Pixels in Android 16 QPR2 Beta 2
The second beta of Android 16 QPR2 shows us what’s coming in the December 2025 Pixel Drop.
Here's everything we've found so far👇
(Article will be updated continuously - check back!)
🔗 https://www.androidauthority.com/android-16-qpr2-beta-2-features-3598245/
The second beta of Android 16 QPR2 shows us what’s coming in the December 2025 Pixel Drop.
Here's everything we've found so far👇
(Article will be updated continuously - check back!)
🔗 https://www.androidauthority.com/android-16-qpr2-beta-2-features-3598245/
Forwarded from Mishaal's Android News Feed
🚶Health Connect can now track your steps using your Android phone
Google says this simplifies step tracking for devs and makes it more power efficient, but it could also be the start of something bigger.
More details👇
🔗https://www.androidauthority.com/health-connect-step-tracking-3598654/
Google says this simplifies step tracking for devs and makes it more power efficient, but it could also be the start of something bigger.
More details👇
🔗https://www.androidauthority.com/health-connect-step-tracking-3598654/
Forwarded from #TBOT: Take Back Our Tech
Media is too big
VIEW IN TELEGRAM
⚡️MIT Media Lab Lets You Talk Without Speaking with AlterEgo
MIT Media Lab unveiled a new demo of AlterEgo, a wearable device that lets you communicate without opening your mouth.
It doesn’t read your mind—AlterEgo detects subtle electrical signals in your jaw triggered by your “inner voice.” With 7 skin electrodes and AI models, it can turn silent speech into words, numbers, or even commands for apps.
The device is aimed at people with speech impairments, but it also pushes us closer to transhumanist territory—where even face-to-face communication may run through machines.
Is this assistive tech… or a step toward merging with AI?
🪧 Read the full article on Substack
—
🫶 @takebackourtech
📩 WEBSITE & NEWSLETTER | 🎥 VIDEOS| XMPP | SUBSTACK
MIT Media Lab unveiled a new demo of AlterEgo, a wearable device that lets you communicate without opening your mouth.
It doesn’t read your mind—AlterEgo detects subtle electrical signals in your jaw triggered by your “inner voice.” With 7 skin electrodes and AI models, it can turn silent speech into words, numbers, or even commands for apps.
The device is aimed at people with speech impairments, but it also pushes us closer to transhumanist territory—where even face-to-face communication may run through machines.
Is this assistive tech… or a step toward merging with AI?
🪧 Read the full article on Substack
—
🫶 @takebackourtech
📩 WEBSITE & NEWSLETTER | 🎥 VIDEOS| XMPP | SUBSTACK
Forwarded from /e/OS & Murena announcements
This media is not supported in your browser
VIEW IN TELEGRAM
👋 Meet your everyday privacy HIROH
🥳 We are thrilled to introduce the new HIROH phone powered by Murena with a Hardware Kill Switch!
Simply enable its handy button to physically disconnect the microphone and all cameras. This severs the electronic connection, ensuring hackers have no chance to access your data.
With the HIROH phone powered by Murena you get:
🔸 Built-in privacy with /e/OS
🔸 Hardware Kill Switch created by its inventor
🔸 Premium quality hardware with a fantastic 1.5k AMOLED display, 108MP rear camera and a 32MP selfie camera, 16GB memory and more...
🔸 Special numbered Platinum edition of the device for 500 first Murena customers
Ready to use from day one! Because your everyday phone should be your private phone.
👉 Pre-order now exclusively at murena.com and save 200€/$.
🥳 We are thrilled to introduce the new HIROH phone powered by Murena with a Hardware Kill Switch!
Simply enable its handy button to physically disconnect the microphone and all cameras. This severs the electronic connection, ensuring hackers have no chance to access your data.
With the HIROH phone powered by Murena you get:
🔸 Built-in privacy with /e/OS
🔸 Hardware Kill Switch created by its inventor
🔸 Premium quality hardware with a fantastic 1.5k AMOLED display, 108MP rear camera and a 32MP selfie camera, 16GB memory and more...
🔸 Special numbered Platinum edition of the device for 500 first Murena customers
Ready to use from day one! Because your everyday phone should be your private phone.
👉 Pre-order now exclusively at murena.com and save 200€/$.
Forwarded from TrackerControl News
some research from the TrackerControl team: https://c3.unu.edu/blog/the-silent-surveillance-how-websites-track-your-every-keystroke
Summary of TrackerControl team research (post above)
---
The TrackerControl team has researched website tracking. Below is a summary of their findings:
### Silent Surveillance: How Websites Track Your Every Keystroke
Key Points:
- Keystroke logging is more common than you think: Research shows that 91% of websites use technology that enables keystroke tracking. 38.5% of sites can intercept keystrokes in real time, and 3.2% of sites send the recorded data to third parties—even if the form is never submitted.
- Sensitive data at risk: Email addresses, phone numbers, health information, and financial details can end up in the hands of third parties, even if you don’t submit the form.
- Legal concerns: This practice may be illegal in some jurisdictions, such as California, where it could be considered unauthorized wiretapping without user consent.
---
### Why Is This a Problem?
- User intent is ignored: Keystroke logging violates basic trust—especially if you delete or cancel text entry.
- Data brokers exploit information: Collected data, such as email addresses, is often used for targeted advertising or profiling without your consent.
- Most vulnerable situations: On health, financial, and legal service websites, keystrokes can reveal sensitive information you never intended to share.
---
### What Can You Do?
1. Switch to a privacy-focused browser (e.g., Brave or Firefox with strict tracking protection).
2. Install a script-blocking tool (e.g., uBlock Origin or NoScript).
3. Write sensitive information offline and paste it into forms only when you’re ready to submit.
---
Conclusion: Keystroke tracking is part of modern surveillance capitalism. Everyone should have the right to decide who they share their data with—and when. Protect yourself and demand transparency from online services.
Sources:
- [https://t.me/TrackerControl/21246](https://t.me/TrackerControl/21246)
- [https://c3.unu.edu/blog/the-silent-surveillance-how-websites-track-your-every-keystroke](httphttps://c3.unu.edu/blog/the-silent-surveillance-how-websites-track-your-every-keystrokes://c3.unu.edu/blog/the-silent-surveillance-how-websites-track-your-every-keystroke)
---
The TrackerControl team has researched website tracking. Below is a summary of their findings:
### Silent Surveillance: How Websites Track Your Every Keystroke
Key Points:
- Keystroke logging is more common than you think: Research shows that 91% of websites use technology that enables keystroke tracking. 38.5% of sites can intercept keystrokes in real time, and 3.2% of sites send the recorded data to third parties—even if the form is never submitted.
- Sensitive data at risk: Email addresses, phone numbers, health information, and financial details can end up in the hands of third parties, even if you don’t submit the form.
- Legal concerns: This practice may be illegal in some jurisdictions, such as California, where it could be considered unauthorized wiretapping without user consent.
---
### Why Is This a Problem?
- User intent is ignored: Keystroke logging violates basic trust—especially if you delete or cancel text entry.
- Data brokers exploit information: Collected data, such as email addresses, is often used for targeted advertising or profiling without your consent.
- Most vulnerable situations: On health, financial, and legal service websites, keystrokes can reveal sensitive information you never intended to share.
---
### What Can You Do?
1. Switch to a privacy-focused browser (e.g., Brave or Firefox with strict tracking protection).
2. Install a script-blocking tool (e.g., uBlock Origin or NoScript).
3. Write sensitive information offline and paste it into forms only when you’re ready to submit.
---
Conclusion: Keystroke tracking is part of modern surveillance capitalism. Everyone should have the right to decide who they share their data with—and when. Protect yourself and demand transparency from online services.
Sources:
- [https://t.me/TrackerControl/21246](https://t.me/TrackerControl/21246)
- [https://c3.unu.edu/blog/the-silent-surveillance-how-websites-track-your-every-keystroke](httphttps://c3.unu.edu/blog/the-silent-surveillance-how-websites-track-your-every-keystrokes://c3.unu.edu/blog/the-silent-surveillance-how-websites-track-your-every-keystroke)
Telegram
TrackerControl News in TrackerControl Discussion
some research from the TrackerControl team: https://c3.unu.edu/blog/the-silent-surveillance-how-websites-track-your-every-keystroke
Lidl Plus lawsuit in Germany
The Stuttgart Higher Regional Court dismissed a lawsuit by the German Consumer Federation (vzbv) against Lidl regarding its "Lidl Plus" loyalty app. The consumer advocates argued that the app should not be advertised as "free" since users "pay" with their personal data. However, the court ruled that the term "free" only means no monetary payment is required, and data does not constitute a "price" that needs to be disclosed. The court allowed an appeal to the Federal Court of Justice. As a result, Lidl can continue to label the app as "free," even though users must share their data. The ruling underscores the ongoing debate about the value of personal data in digital services and consumer protection.
The case may still be appealed to the Federal Court of Justice.
*(Sources:*
https://www.tagesschau.de/wirtschaft/verbraucher/lidl-app-urteil-100.html
https://www.lto.de/recht/nachrichten/n/6ukl225-olg-stuttgart-lidl-plus-app-verbraucherschutz
The Stuttgart Higher Regional Court dismissed a lawsuit by the German Consumer Federation (vzbv) against Lidl regarding its "Lidl Plus" loyalty app. The consumer advocates argued that the app should not be advertised as "free" since users "pay" with their personal data. However, the court ruled that the term "free" only means no monetary payment is required, and data does not constitute a "price" that needs to be disclosed. The court allowed an appeal to the Federal Court of Justice. As a result, Lidl can continue to label the app as "free," even though users must share their data. The ruling underscores the ongoing debate about the value of personal data in digital services and consumer protection.
The case may still be appealed to the Federal Court of Justice.
*(Sources:*
https://www.tagesschau.de/wirtschaft/verbraucher/lidl-app-urteil-100.html
https://www.lto.de/recht/nachrichten/n/6ukl225-olg-stuttgart-lidl-plus-app-verbraucherschutz
tagesschau
Klage gegen Lidl-App abgewiesen
Der Discounter Lidl darf seine Treue-App als "kostenlos" bezeichnen, auch wenn die Nutzer dafür Daten preisgeben. Das Oberlandesgericht Stuttgart wies eine Klage von Verbraucherschützern ab.
No deleted account found from
85 scanned users from this group 🚫👻How To Install WinBoat - Windows Apps Running Wild On Linux
https://www.youtube.com/watch?v=PaRatIqlqM8
https://www.youtube.com/watch?v=PaRatIqlqM8
YouTube
How To Install WinBoat - Windows Apps Running Wild On Linux
Yes, you can run Photoshop on Linux. This video will teach you how to install the amazing WinBoat software so you can run any Windows app natively on Linux like a boss!
___
LINKS FROM VIDEO:
https://winboat.app - Download WinBoat
___
CHAPTERS:
00:00-00:13…
___
LINKS FROM VIDEO:
https://winboat.app - Download WinBoat
___
CHAPTERS:
00:00-00:13…
No deleted account found from
87 scanned users from this group 🚫👻#A16 #Unofficial #TD #GSI #VoltageOS #AOSP
BD: 2025 09 29
SPL: September
VoltageOS 5.1 | A16 QPR0 | TREBLE GSI UNOFFICIAL-signed
Changelog:
Note
Maintainer: Doze-off
Download: LINK
SCREENSHOTS - LINK
SUPPORT GROUP - LINK
@TrebleGsis_PrivacySecure_Chat
@TrebleGsis_PrivacySecure_Channel
BD: 2025 09 29
SPL: September
VoltageOS 5.1 | A16 QPR0 | TREBLE GSI UNOFFICIAL-signed
Changelog:
Sync latest source of Voltage
added 2 new options in treble app to reduce lags in animations and lmk ( in case you face problems with apps closing quickly )
added overlay for Cubot kingkong x pro
added overlat for tecno Pova 7 Ultra 5G
Voltage-style Blur and option to customize it's shade.
Added option to show daily/weekly data usage in QS footer.
option to enable/disable bottom sheet in Launcher.
Re-added flashlight intensity control for supported devices.
Fixed multiple bugs in Launcher.
Fixed missing shade background bug.
Fixed backuptool.
Updated recent pixel spoof to Pixel 10 Pro XL.
Reduced QS tile text size.
Changed notification transparency to translucency...
Note
Use AppStore for GMS, PlayStore.. - LINK
Maintainer: Doze-off
Download: LINK
SCREENSHOTS - LINK
SUPPORT GROUP - LINK
@TrebleGsis_PrivacySecure_Chat
@TrebleGsis_PrivacySecure_Channel
#A16 #Official #TD #GSI #DerpFest #LineageOS
BD: 2025 09 28
SPL: September
DerpFest 16.0 | A16 QPR0 | TREBLE GSI OFFICIAL-signed
Changelog:
SCREENSHOTS - LINK
SUPPORT GROUP - LINK
Maintainer: Doze-off
Download: LINK
@TrebleGsis_PrivacySecure_Chat
@TrebleGsis_PrivacySecure_Channel
BD: 2025 09 28
SPL: September
DerpFest 16.0 | A16 QPR0 | TREBLE GSI OFFICIAL-signed
Changelog:
Sync latest source of DerpFest
added 2 new options in treble app to reduce lags in animations and lmk ( in case you face problems with apps closing quickly )
added overlay for Cubot kingkong x pro
added overlat for tecno Pova 7 Ultra 5G
SCREENSHOTS - LINK
SUPPORT GROUP - LINK
Maintainer: Doze-off
Download: LINK
@TrebleGsis_PrivacySecure_Chat
@TrebleGsis_PrivacySecure_Channel
#A16 #Unofficial #TD #GSI #LunarisAOSP #LineageOS
BD: 2025 09 28
SPL: September
Lunaris-AOSP 3.3 | A16 QPR0 | TREBLE GSI UNOFFICIAL-signed
Changelog:
SCREENSHOTS - LINK
SUPPORT GROUP - LINK
Maintainer: Doze-off
Download: LINK
@TrebleGsis_PrivacySecure_Chat
@TrebleGsis_PrivacySecure_Channel
BD: 2025 09 28
SPL: September
Lunaris-AOSP 3.3 | A16 QPR0 | TREBLE GSI UNOFFICIAL-signed
Changelog:
Sync latest source of LunarisAOSP
added 2 new options in treble app to reduce lags in animations and lmk ( in case you face problems with apps closing quickly )
added overlay for Cubot kingkong x pro
added overlat for tecno Pova 7 Ultra 5G
SCREENSHOTS - LINK
SUPPORT GROUP - LINK
Maintainer: Doze-off
Download: LINK
@TrebleGsis_PrivacySecure_Chat
@TrebleGsis_PrivacySecure_Channel
Forwarded from CoMaps (Oleg)
Celebrating 15 Years of F‑Droid!
September 29th marks the anniversary of the open‑source app repository we all love.
Why it matters: F‑Droid’s mission aligns well with CoMaps—both champion Free/Libre Open‑Source Software (FLOSS) and community‑driven innovation.
https://f-droid.org/en/2025/09/04/twif.html
Post from 2010: https://f-droid.org/en//2010/09/29/f-droid-is-here.html
Let’s keep building a freer tech ecosystem together!
September 29th marks the anniversary of the open‑source app repository we all love.
Why it matters: F‑Droid’s mission aligns well with CoMaps—both champion Free/Libre Open‑Source Software (FLOSS) and community‑driven innovation.
https://f-droid.org/en/2025/09/04/twif.html
Post from 2010: https://f-droid.org/en//2010/09/29/f-droid-is-here.html
Let’s keep building a freer tech ecosystem together!