I'm officially an iPhone user now ๐
Redmi Note 7S -> Nokia 6.1 -> Google Pixel 2 XL -> OnePlus 7 -> Google Pixel 6 Pro -> iPhone 17
Share your journey in the comments
Redmi Note 7S -> Nokia 6.1 -> Google Pixel 2 XL -> OnePlus 7 -> Google Pixel 6 Pro -> iPhone 17
Share your journey in the comments
๐คก168๐คฃ27โค24๐9๐8๐ญ6๐
6๐5๐ฅด5๐ฅ2โคโ๐ฅ1
Forwarded from Telegram Info English (Sominemo)
Dangerous vulnerability in Telegram Desktop: any file can be stolen with one click
What you MUST NOT do and how to protect yourself:
โข Do not keep using versions earlier than 7.2.9 โ update the client immediately. If you use an unofficial client, temporarily switch to the official one until an update is released.
Download:
โข Windows / macOS / Linux: official website or GitHub.
โข Windows: Microsoft Store.
โข macOS: App Store.
โข Linux: Flathub, Snapcraft.
Advice for users of older clients:
โข Links can be dangerous: whenever you click a link, read the pop-up window carefully โ if Telegram shows an unusual structure in the link (for example, one starting with tg://), do not open it.
โข Do not use the client without a local passcode: enabling one encrypts the session files in the tdata directory, preventing immediate account hijacking even if those files are leaked.
What is the issue?
A vulnerability has been discovered in Telegram Desktop clients earlier than version 7.2.9 (CVE-2026-107181). Because the ; delimiter was not escaped, parameters in tg:// links were interpreted as separate IPC commands. Using the interpret: handler, an attacker could cause files from the system to be sent covertly to their channel, without the userโs confirmation, when the user clicked a specially crafted link.
The main risk
The danger is not limited to stealing tdata session files and hijacking accounts. Exploiting the vulnerability makes it possible to covertly steal absolutely any files on the computer that the user can access: documents, saved browser sessions, SSH keys, system configurations, or cryptocurrency wallets.
#security #desktop #vulnerabilities
What you MUST NOT do and how to protect yourself:
โข Do not keep using versions earlier than 7.2.9 โ update the client immediately. If you use an unofficial client, temporarily switch to the official one until an update is released.
Download:
โข Windows / macOS / Linux: official website or GitHub.
โข Windows: Microsoft Store.
โข macOS: App Store.
โข Linux: Flathub, Snapcraft.
Advice for users of older clients:
โข Links can be dangerous: whenever you click a link, read the pop-up window carefully โ if Telegram shows an unusual structure in the link (for example, one starting with tg://), do not open it.
โข Do not use the client without a local passcode: enabling one encrypts the session files in the tdata directory, preventing immediate account hijacking even if those files are leaked.
What is the issue?
A vulnerability has been discovered in Telegram Desktop clients earlier than version 7.2.9 (CVE-2026-107181). Because the ; delimiter was not escaped, parameters in tg:// links were interpreted as separate IPC commands. Using the interpret: handler, an attacker could cause files from the system to be sent covertly to their channel, without the userโs confirmation, when the user clicked a specially crafted link.
The main risk
The danger is not limited to stealing tdata session files and hijacking accounts. Exploiting the vulnerability makes it possible to covertly steal absolutely any files on the computer that the user can access: documents, saved browser sessions, SSH keys, system configurations, or cryptocurrency wallets.
#security #desktop #vulnerabilities
๐ฑ35๐คก28โค1๐คฏ1
Forwarded from Yash Oswal
Their changelog ๐
https://telegramdesktop.github.io/tdesktop/changelog/
https://telegramdesktop.github.io/tdesktop/changelog/
๐47๐คก15๐ญ8๐3โ2๐2โค1โก1๐1๐ป1
Forwarded from thegwchr.
I thought vivo wasn't as bad as I was talking about it.
I was right. It's worse. Fuck you mean you're literally putting false specs?
Also: X200 Pro has a 3.2 Gen 2 (10Gbit/s) Type-C port, as opposed to official 3.2 Gen 1 (5Gbit/s) specs
I was right. It's worse. Fuck you mean you're literally putting false specs?
๐คก46โค7
Forwarded from Device Prototypes by XiaomiTime
This media is not supported in your browser
VIEW IN TELEGRAM
LG Rollable
๐ฅด42๐ฅฐ28โค9๐ฟ8๐3๐ข2๐คก2
Connect Apple Watch to Android, Linux and Windows through native Bluetooth/IDS protocols and a shared Flutter Companion. macOS uses the same interface with a limited Bluetooth backend.
https://github.com/LordixDemon/apple_watch_connector
https://github.com/LordixDemon/apple_watch_connector
GitHub
GitHub - LordixDemon/apple_watch_connector
Contribute to LordixDemon/apple_watch_connector development by creating an account on GitHub.
โคโ๐ฅ37๐4โค3๐1
Forwarded from LiveLeak
This media is not supported in your browser
VIEW IN TELEGRAM
๐ฎ๐ณ A power bank caught fire in an overhead luggage compartment aboard an IndiGo flight Sunday, prompting the aircraft to divert to Hyderabad, where it landed safely. These will likely be banned from flights soon.
Follow main channel -> LiveLeak
Follow private channel -> LiveLeak Private
Follow main channel -> LiveLeak
Follow private channel -> LiveLeak Private
๐คฃ75๐ญ20๐จ3๐1
Someone ported Gboard with Rambler AI dictation from Pixel 11 to all devices, no root required.
Note: This is an alternative to using morphe Gboard
https://github.com/Akshayykadam/PixelBoard
Note: This is an alternative to using morphe Gboard
https://github.com/Akshayykadam/PixelBoard
GitHub
GitHub - Akshayykadam/PixelBoard: Unlock Google 11's Gemini "Rambler" Natural Voice Dictation & AI Writing Tools on ANY Androidโฆ
Unlock Google 11's Gemini "Rambler" Natural Voice Dictation & AI Writing Tools on ANY Android phone. No root required. - Akshayykadam/PixelBoard
โค63๐7๐2โคโ๐ฅ1โก1๐1๐1
X (formerly Twitter)
Sam Austen (@booktycoon) on X
Bruh I am so done with SF
๐ฟ52๐16๐คก5๐ซก2โค1
Forwarded from Vivo Fuckups
OriginOS 7 is currently the most loved & preferred UI in China
๐คฃ131๐คก10โค5๐ฅด3๐2๐ฅ1๐1
Forwarded from Android - Reddit
AOSP Source Releases Are So Delayed That Developers Have to Disassemble Libraries Just to Report Bugs
https://github.com/android/ndk/issues/2260
https://redd.it/1x4r9kp
@reddit_android
https://github.com/android/ndk/issues/2260
https://redd.it/1x4r9kp
@reddit_android
GitHub
[BUG] bionic: wcscspn()/wcspbrk() treat every wchar_t >= 0x100 as a match (Android 17, CP3A.260905.009) ยท Issue #2260 ยท android/ndk
Description On Android 17 builds from September 2026, wcscspn() and wcspbrk() stop at the first character of the string that is >= U+0100 whenever the reject set has two or more characters that ...
๐คฃ56๐ญ36โ2
Control, inspect and debug an Android phone from your browser, decompile its apps, and analyze them for security weaknesses in the same tab. Over USB it needs no drivers, no desktop adb server and no agent app on the device. Over Wi-Fi it uses the adb tools already on your computer.
https://github.com/capt-meelo/loupe
https://github.com/capt-meelo/loupe
GitHub
GitHub - capt-meelo/loupe: Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadxโฆ
Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadx, and static and dynamic analysis, with no drivers or adb server. - capt-meelo/loupe
โก27๐ฅ11
Although, ESR Case Maker has ceased selling cases online in India on their website, they will continue selling it officially via Amazon
Additionally, ESR also offers a free 1yr extra warranty, making it 24months warranty. The case will also be replaced for free if it becomes yellowish under 2yrs of purchase
Additionally, ESR also offers a free 1yr extra warranty, making it 24months warranty. The case will also be replaced for free if it becomes yellowish under 2yrs of purchase
๐18