No Login

This extension let's you to access social media websites without logging in, by removing login popups, bypassing other banners, etc.

🔗 Links:
- Add it to your Firefox
- Demo video
- Supported websites
- Source code
Developer: Martin Braquet

🏷️ Tags: #Extension #Productivity

Unf*ck Google

This extension forces 'Verbatim' search on Google - removing all bs personalization and localization and letting you find results for what you type, not what Google thinks is in your head. It also forces "Sort by Date" on Google News search.

🔗 Link:
- Add it to your Firefox

🏷️ Tags: #Extension #Productivity

"United States Department of Justice.pdf" – Legit? Think Again!

New Backdoor Targeting Thai Officials. Hackers are deploying a stealthy backdoor, Yokai, by disguising malware as trusted documents.

🎯 What happened? DLL side-loading enables attackers to bypass defenses.

💡 Backdoor connects to attacker-controlled servers for total system control. Without proactive measures, businesses risk breaches that cost millions.

Here’s what you can do NOW:
1️⃣ Train teams on spotting spear-phishing lures.
2️⃣ Audit systems for DLL side-loading vulnerabilities.
3️⃣ Strengthen your endpoint defenses.

Find details here: https://thehackernews.com/2024/12/thai-officials-targeted-in-yokai.html

🚨 Could Your Device Be a Secret Cybercriminal Tool?

The Federal Office of Information Security (BSI) just disrupted BADBOX, a malware preloaded on common devices like picture frames and cheap android phones.

💡 What’s the risk?
⇢ Devices turned into ad fraud machines, routing hackers' internet traffic.
⇢ Stolen authentication codes, fake Gmail & WhatsApp accounts created.

⚠️ Why it matters:
This isn’t just a malware problem—it's a supply chain crisis. If a device seems "too cheap," it might come with hidden costs.

🔗 Learn more: https://thehackernews.com/2024/12/germany-disrupts-badbox-malware-on.html

POCO X7 Series Gears Up for India Launch – Detailed Renders Appear Online
https://www.gizchina.com/2024/12/13/poco-x7-series-gears-up-for-india-launch-detailed-renders-appear-online/

Linkind ET6 Smart TV Backlights from AiDot: Perfect Sync for Movies, Games, and Music
https://www.gizchina.com/2024/12/14/linkind-et6-smart-tv-backlights-from-aidot-perfect-sync-for-movies-games-and-music/

Xiaomi’s affordable phone : POCO F7 Pro Details Revealed
https://www.gizchina.com/2024/12/14/xiaomis-affordable-phone-poco-f7-pro-details-revealed/

Nintendo Switch 2 Design Details Revealed: What We Know So Far
https://www.gizchina.com/2024/12/14/nintendo-switch-2-design-details-revealed-what-we-know-so-far/

YouTube quietly made some of its web embeds worse, including ours
Article, Comments

Intel built best budget GPU for 1440p gaming
Article, Comments

Analysis of supply-chain attack on Ultralytics
Article, Comments

Show HN: Open-sourcing my failed startup) Buzee – A file search application
Article, Comments

Chuwi Hi10 X1 Review: Small Tablet, Big Potential!
https://www.gizchina.com/2024/12/14/chuwi-hi10-x1-review-small-tablet-big-potential/

■■■■□ New stealthy Pumakit Linux rootkit malware spotted in the wild.

https://www.bleepingcomputer.com/news/security/new-stealthy-pumakit-linux-rootkit-malware-spotted-in-the-wild/

FetchIt

FetchIt is an Android application for easy downloading of media files from popular platforms like YouTube, Facebook, Instagram, TikTok, and more. It provides a user-friendly interface with URL input and file location selection, making media saving a seamless experience across devices.

🔗 Links:
- Download
- Screenshots
- Supported platforms
- Source code
Developer: Tharun Birla

🏷️ Tags: #Android #Media #Tools

Signature Permission Allowlist:
Android 15 introduces an explicit allowlist for platform signature permissions that are requested by nonsystem apps or newly requested by updates to system apps.

What It Is:
- Platform Signed Apps: These are apps that have the same signing certificate as the Android system. They can be system apps (built into the device) or non-system apps (installed later).

- Signature Permissions: These are special permissions defined by the Android system that can only be granted to apps with the right signing certificate.

Key Points:
1. Manufacturers' Control: Since Android 15, device manufacturers can control which permissions platform signed non-system apps can use by adding them to a specific list (allowlist).

2. Allowlist Function: If a non-system app is not on the allowlist, it can't use certain permissions on standard (non-debuggable) builds. This means the app will act like it’s not platform signed and won't get those special permissions.

3. Debuggable Builds: In builds meant for testing (debuggable), the system doesn't enforce the allowlist. This makes it easier for developers to test their apps.

4. System Apps: The permissions of system apps aren’t affected by this change, but any new permissions that a system app wants after an update must still be added to the allowlist.

Adding and Customizing an Allowlist:
- Allowlists can be stored in one or more XML files in a specific directory on the device. Manufacturers can organize these files however they want.


Overall, The signature permission allowlist is a way for device manufacturers to control app permissions based on their signing certificates, ensuring only approved apps can access certain features while making testing easier during development.

For more information, see Signature permission allowlist.

#Android #Android15 #A15

- @AbhiTheM0dder

Astroluma ⭐️

A feature-rich, user-friendly dashboard designed to help you manage multiple aspects of your daily tasks and services. Built with flexibility in mind, it allows you to control various features like task management, device monitoring, app integration, and real-time weather updates, all from a single platform. With its responsive design and dynamic configuration options.

🔗 Links
- Build & Install
- Screenshots
- Website
- Source code
Developer: Sanjeet990

🏷 Tags: #Linux #Productivity