Forwarded from Device Prototypes by XiaomiTime
๐30๐9โค2๐1๐ฅฑ1
Forwarded from Device Prototypes by XiaomiTime
This media is not supported in your browser
VIEW IN TELEGRAM
๐ฅด43๐12๐9โค7๐3๐คก2
I'm officially an iPhone user now ๐
Redmi Note 7S -> Nokia 6.1 -> Google Pixel 2 XL -> OnePlus 7 -> Google Pixel 6 Pro -> iPhone 17
Share your journey in the comments
Redmi Note 7S -> Nokia 6.1 -> Google Pixel 2 XL -> OnePlus 7 -> Google Pixel 6 Pro -> iPhone 17
Share your journey in the comments
๐คก168๐คฃ27โค24๐9๐8๐ญ6๐
6๐5๐ฅด5๐ฅ2โคโ๐ฅ1
Forwarded from Telegram Info English (Sominemo)
Dangerous vulnerability in Telegram Desktop: any file can be stolen with one click
What you MUST NOT do and how to protect yourself:
โข Do not keep using versions earlier than 7.2.9 โ update the client immediately. If you use an unofficial client, temporarily switch to the official one until an update is released.
Download:
โข Windows / macOS / Linux: official website or GitHub.
โข Windows: Microsoft Store.
โข macOS: App Store.
โข Linux: Flathub, Snapcraft.
Advice for users of older clients:
โข Links can be dangerous: whenever you click a link, read the pop-up window carefully โ if Telegram shows an unusual structure in the link (for example, one starting with tg://), do not open it.
โข Do not use the client without a local passcode: enabling one encrypts the session files in the tdata directory, preventing immediate account hijacking even if those files are leaked.
What is the issue?
A vulnerability has been discovered in Telegram Desktop clients earlier than version 7.2.9 (CVE-2026-107181). Because the ; delimiter was not escaped, parameters in tg:// links were interpreted as separate IPC commands. Using the interpret: handler, an attacker could cause files from the system to be sent covertly to their channel, without the userโs confirmation, when the user clicked a specially crafted link.
The main risk
The danger is not limited to stealing tdata session files and hijacking accounts. Exploiting the vulnerability makes it possible to covertly steal absolutely any files on the computer that the user can access: documents, saved browser sessions, SSH keys, system configurations, or cryptocurrency wallets.
#security #desktop #vulnerabilities
What you MUST NOT do and how to protect yourself:
โข Do not keep using versions earlier than 7.2.9 โ update the client immediately. If you use an unofficial client, temporarily switch to the official one until an update is released.
Download:
โข Windows / macOS / Linux: official website or GitHub.
โข Windows: Microsoft Store.
โข macOS: App Store.
โข Linux: Flathub, Snapcraft.
Advice for users of older clients:
โข Links can be dangerous: whenever you click a link, read the pop-up window carefully โ if Telegram shows an unusual structure in the link (for example, one starting with tg://), do not open it.
โข Do not use the client without a local passcode: enabling one encrypts the session files in the tdata directory, preventing immediate account hijacking even if those files are leaked.
What is the issue?
A vulnerability has been discovered in Telegram Desktop clients earlier than version 7.2.9 (CVE-2026-107181). Because the ; delimiter was not escaped, parameters in tg:// links were interpreted as separate IPC commands. Using the interpret: handler, an attacker could cause files from the system to be sent covertly to their channel, without the userโs confirmation, when the user clicked a specially crafted link.
The main risk
The danger is not limited to stealing tdata session files and hijacking accounts. Exploiting the vulnerability makes it possible to covertly steal absolutely any files on the computer that the user can access: documents, saved browser sessions, SSH keys, system configurations, or cryptocurrency wallets.
#security #desktop #vulnerabilities
๐ฑ35๐คก28โค1๐คฏ1
Forwarded from Yash Oswal
Their changelog ๐
https://telegramdesktop.github.io/tdesktop/changelog/
https://telegramdesktop.github.io/tdesktop/changelog/
๐47๐คก15๐ญ8๐3โ2๐2โค1โก1๐1๐ป1
Forwarded from thegwchr.
I thought vivo wasn't as bad as I was talking about it.
I was right. It's worse. Fuck you mean you're literally putting false specs?
Also: X200 Pro has a 3.2 Gen 2 (10Gbit/s) Type-C port, as opposed to official 3.2 Gen 1 (5Gbit/s) specs
I was right. It's worse. Fuck you mean you're literally putting false specs?
๐คก46โค7
Forwarded from Device Prototypes by XiaomiTime
This media is not supported in your browser
VIEW IN TELEGRAM
LG Rollable
๐ฅด42๐ฅฐ28โค9๐ฟ8๐3๐ข2๐คก2
Connect Apple Watch to Android, Linux and Windows through native Bluetooth/IDS protocols and a shared Flutter Companion. macOS uses the same interface with a limited Bluetooth backend.
https://github.com/LordixDemon/apple_watch_connector
https://github.com/LordixDemon/apple_watch_connector
GitHub
GitHub - LordixDemon/apple_watch_connector
Contribute to LordixDemon/apple_watch_connector development by creating an account on GitHub.
โคโ๐ฅ37๐4โค3๐1
Forwarded from LiveLeak
This media is not supported in your browser
VIEW IN TELEGRAM
๐ฎ๐ณ A power bank caught fire in an overhead luggage compartment aboard an IndiGo flight Sunday, prompting the aircraft to divert to Hyderabad, where it landed safely. These will likely be banned from flights soon.
Follow main channel -> LiveLeak
Follow private channel -> LiveLeak Private
Follow main channel -> LiveLeak
Follow private channel -> LiveLeak Private
๐คฃ75๐ญ20๐จ3๐1
Someone ported Gboard with Rambler AI dictation from Pixel 11 to all devices, no root required.
Note: This is an alternative to using morphe Gboard
https://github.com/Akshayykadam/PixelBoard
Note: This is an alternative to using morphe Gboard
https://github.com/Akshayykadam/PixelBoard
GitHub
GitHub - Akshayykadam/PixelBoard: Unlock Google 11's Gemini "Rambler" Natural Voice Dictation & AI Writing Tools on ANY Androidโฆ
Unlock Google 11's Gemini "Rambler" Natural Voice Dictation & AI Writing Tools on ANY Android phone. No root required. - Akshayykadam/PixelBoard
โค63๐7๐2โคโ๐ฅ1โก1๐1๐1
X (formerly Twitter)
Sam Austen (@booktycoon) on X
Bruh I am so done with SF
๐ฟ52๐16๐คก5๐ซก2โค1