Update on the UFS Extension Situation in Xiaomi Flagships

After having more discussions & getting more insights especially from developers like @arter97, it turns out that it's not that bad and our assumptions was a bit wrong. There's nothing to worry about the UFS "unless" the storage nears full, here's why.

Our assumption over ZRAM and the performance being affected under high-loads leading to system instability is not true because under high-loads, TW will help with system performance. ZRAM also performs writeback only when idle, thus there will be no impact on write caused by ZRAM either under the load.

Now for the GPT backup existing in the Over-provisioned space , this space would be at the end of the UFS, meaning that everything at the beginning should be fine. Depending on where Xiaomi really put things, if the GPT backup and bootloader are on the SLC then it'll still boot even when the rest of the cells are dead.

However, one thing which still stands true is that the Xiaomi flagship device lifespan would be decreased and the storage efficiency would be affected. But that will only happen when the device storage nears full

Also, on weibo, Xiaomi have explained about this UFS extension and they have called it as "Ultraspace". This is turned on by default and the engineers achieved this by forcibly reducing the Over-provision space (OP in short)

Follow @TechLeaksZone

🛡️ Critical OpenWrt #vulnerability (CVE-2024-54143) discovered — With just a 12-character hash collision, attackers can replace legitimate firmware with a malicious alternative, all without authentication.

Discover the technical details: https://thehackernews.com/2024/12/critical-openwrt-vulnerability-exposes.html

Flare

The ultimate next generation open-sourced AI powered decentralized social network client.

🔗 Links:
- Download
- Screenshots
- Features
- Support group
- Source code
Developer: Dimension Dev

🏷️ Tags: #Android #iOS #Social

Three Mistakes from Dart/Flutter's Weak PRNG
Article, Comments

No Login

This extension let's you to access social media websites without logging in, by removing login popups, bypassing other banners, etc.

🔗 Links:
- Add it to your Firefox
- Demo video
- Supported websites
- Source code
Developer: Martin Braquet

🏷️ Tags: #Extension #Productivity

MarkItDown: Python tool for converting files and office documents to Markdown
Article, Comments

Elon Musk wanted an OpenAI for-profit
Article, Comments

OpenAI whistleblower found dead in San Francisco apartment
Article, Comments

0x01 – Killing Windows Kernel Mitigations
Article, Comments

vincent: and here it is: https://gitlab.iode.tech/ota/betas/-/blob/master/iode-5.8-20241214-arm64_ab.img.xz

No Login

This extension let's you to access social media websites without logging in, by removing login popups, bypassing other banners, etc.

🔗 Links:
- Add it to your Firefox
- Demo video
- Supported websites
- Source code
Developer: Martin Braquet

🏷️ Tags: #Extension #Productivity

Unf*ck Google

This extension forces 'Verbatim' search on Google - removing all bs personalization and localization and letting you find results for what you type, not what Google thinks is in your head. It also forces "Sort by Date" on Google News search.

🔗 Link:
- Add it to your Firefox

🏷️ Tags: #Extension #Productivity

"United States Department of Justice.pdf" – Legit? Think Again!

New Backdoor Targeting Thai Officials. Hackers are deploying a stealthy backdoor, Yokai, by disguising malware as trusted documents.

🎯 What happened? DLL side-loading enables attackers to bypass defenses.

💡 Backdoor connects to attacker-controlled servers for total system control. Without proactive measures, businesses risk breaches that cost millions.

Here’s what you can do NOW:
1️⃣ Train teams on spotting spear-phishing lures.
2️⃣ Audit systems for DLL side-loading vulnerabilities.
3️⃣ Strengthen your endpoint defenses.

Find details here: https://thehackernews.com/2024/12/thai-officials-targeted-in-yokai.html

🚨 Could Your Device Be a Secret Cybercriminal Tool?

The Federal Office of Information Security (BSI) just disrupted BADBOX, a malware preloaded on common devices like picture frames and cheap android phones.

💡 What’s the risk?
⇢ Devices turned into ad fraud machines, routing hackers' internet traffic.
⇢ Stolen authentication codes, fake Gmail & WhatsApp accounts created.

⚠️ Why it matters:
This isn’t just a malware problem—it's a supply chain crisis. If a device seems "too cheap," it might come with hidden costs.

🔗 Learn more: https://thehackernews.com/2024/12/germany-disrupts-badbox-malware-on.html

POCO X7 Series Gears Up for India Launch – Detailed Renders Appear Online
https://www.gizchina.com/2024/12/13/poco-x7-series-gears-up-for-india-launch-detailed-renders-appear-online/

Linkind ET6 Smart TV Backlights from AiDot: Perfect Sync for Movies, Games, and Music
https://www.gizchina.com/2024/12/14/linkind-et6-smart-tv-backlights-from-aidot-perfect-sync-for-movies-games-and-music/

Xiaomi’s affordable phone : POCO F7 Pro Details Revealed
https://www.gizchina.com/2024/12/14/xiaomis-affordable-phone-poco-f7-pro-details-revealed/

Nintendo Switch 2 Design Details Revealed: What We Know So Far
https://www.gizchina.com/2024/12/14/nintendo-switch-2-design-details-revealed-what-we-know-so-far/