It's common with LOS to release userdebug but not universal.
It would be better for security if they did not release debug builds but they do it to make it easier to get things like log data from users and esp in the past old binary blobs necessary to get devices to work did not support secure SElinux mode and such.
But for an example of the problem with this: a couple of years ago microG released a buggy build that was leaking Google credentials into the system log in cleartext, but those were only visible to the regular user on debug builds, not user builds.
https://www.reddit.com/r/LineageOS/comments/kpjuor/why_are_debug_builds_released/?rdt=63881
It would be better for security if they did not release debug builds but they do it to make it easier to get things like log data from users and esp in the past old binary blobs necessary to get devices to work did not support secure SElinux mode and such.
But for an example of the problem with this: a couple of years ago microG released a buggy build that was leaking Google credentials into the system log in cleartext, but those were only visible to the regular user on debug builds, not user builds.
https://www.reddit.com/r/LineageOS/comments/kpjuor/why_are_debug_builds_released/?rdt=63881
Reddit
From the LineageOS community on Reddit
Explore this post and more from the LineageOS community
And here's another problem that userdebug builds can cause:
https://gitlab.e.foundation/e/backlog/-/issues/1402
https://gitlab.e.foundation/e/backlog/-/issues/1402
GitLab
Is it possible to provide `user` builds instead of `userdebug`? (#1402) · Issues · e / Backlog · GitLab
/e/ version: Any Device model: All (probably) Reproducible with the last /e/ version: yes Reproducible with LineageOS: yes
Forwarded from Hacker News
the Guardian
‘I received a first but it felt tainted and undeserved’: inside the university AI cheating crisis
More than half of students are now using generative AI, casting a shadow over campuses as tutors and students turn on each other and hardworking learners are caught in the flak. Will Coldwell reports on a broken system
Forwarded from Hacker News
Forwarded from Hacker News
IncludeOS
IncludeOS - Run your application with zero overhead
IncludeOS allows you to run your application in the cloud without an operating system. IncludeOS adds operating system functionality to your application allowing you to create performant, secure and resource efficient virtual machines.
Forwarded from Hacker News
OpenAuth
Universal, standards-based auth provider.
Forwarded from Hacker News
Forwarded from The Hacker News
🔥 A critical Apache Struts vulnerability (CVE-2024-53677) with a 9.5/10 CVSS score is actively being exploited, putting corporate IT stacks at risk.
» Hackers are uploading malicious files, enabling remote code execution.
» Systems running Struts versions 2.0.0 to 6.3.0.2 are vulnerable.
👉 Don’t be tomorrow’s headline. Upgrade to Struts 6.4.0+ and adopt the Action File Upload mechanism NOW to stay secure.
Find details here: https://thehackernews.com/2024/12/patch-alert-critical-apache-struts-flaw.html
» Hackers are uploading malicious files, enabling remote code execution.
» Systems running Struts versions 2.0.0 to 6.3.0.2 are vulnerable.
👉 Don’t be tomorrow’s headline. Upgrade to Struts 6.4.0+ and adopt the Action File Upload mechanism NOW to stay secure.
Find details here: https://thehackernews.com/2024/12/patch-alert-critical-apache-struts-flaw.html
Forwarded from The Hacker News
🔒 Meta under fire (again): The 2018 Facebook breach has just cost the company €251 million—and exposed 29 million accounts worldwide, including sensitive data such as emails, phone numbers, and even children’s information.
A flaw in the 👀 “View As” feature allowed attackers to steal access tokens and compromise user accounts.
👉 Learn more about the case: https://thehackernews.com/2024/12/meta-fined-251-million-for-2018-data.html
A flaw in the 👀 “View As” feature allowed attackers to steal access tokens and compromise user accounts.
👉 Learn more about the case: https://thehackernews.com/2024/12/meta-fined-251-million-for-2018-data.html
Forwarded from The Hacker News
🔒 “Words matter,” says INTERPOL.
Shifting from "pig butchering" to "romance baiting" shifts the narrative to support victims, not shame them.
Victims are not just losing money—they're trapped in emotional manipulation by transnational organized crime groups.
Read to know how these scams operate and how to defend against them 👉 https://thehackernews.com/2024/12/interpol-pushes-for-romance-baiting-to.html
Shifting from "pig butchering" to "romance baiting" shifts the narrative to support victims, not shame them.
Victims are not just losing money—they're trapped in emotional manipulation by transnational organized crime groups.
Read to know how these scams operate and how to defend against them 👉 https://thehackernews.com/2024/12/interpol-pushes-for-romance-baiting-to.html
Forwarded from 𝗽𝗼𝗽𝗠𝗢𝗗𝗦 | 𝗙𝗢𝗦𝗦, 𝗟𝗶𝗳𝗲, 𝗠𝗲𝗺𝗲𝘀 (Ömer)
FilmSimulator
FilmSimulator is a cross-platform mobile app built with Kotlin Multiplatform and Compose UI Multiplatform, designed for Android and iOS. It lets users apply film-like LUTs (Look-Up Tables) to images, creating a classic film-style aesthetic.
🔗 Links:
- Download
- Screenshots
- Features
- Source code
Developer: YahiaAngelo
🏷️ Tags: #Android #iOS #Media
FilmSimulator is a cross-platform mobile app built with Kotlin Multiplatform and Compose UI Multiplatform, designed for Android and iOS. It lets users apply film-like LUTs (Look-Up Tables) to images, creating a classic film-style aesthetic.
🔗 Links:
- Download
- Screenshots
- Features
- Source code
Developer: YahiaAngelo
🏷️ Tags: #Android #iOS #Media
Forwarded from Gizchina.com
Xiaomi HyperOS 3 rumored to bring a new feature for the first time
https://www.gizchina.com/2024/12/18/xiaomi-hyperos-3-rumored-to-bring-a-new-feature-for-the-first-time/
https://www.gizchina.com/2024/12/18/xiaomi-hyperos-3-rumored-to-bring-a-new-feature-for-the-first-time/
Forwarded from Gizchina.com
Google Brings Advanced Lock Screen Customizations to Pixel Devices
https://www.gizchina.com/2024/12/18/google-brings-advanced-lock-screen-customizations-to-pixel-devices/
https://www.gizchina.com/2024/12/18/google-brings-advanced-lock-screen-customizations-to-pixel-devices/
Forwarded from Gizchina.com
Redmi Turbo 4 to arrive with a 1.5K display and 12GB of RAM!
https://www.gizchina.com/2024/12/18/redmi-turbo-4-to-arrive-with-a-1-5k-display-and-12gb-of-ram/
https://www.gizchina.com/2024/12/18/redmi-turbo-4-to-arrive-with-a-1-5k-display-and-12gb-of-ram/