Dangerous vulnerability in Telegram Desktop: any file can be stolen with one click

What you MUST NOT do and how to protect yourself:
• Do not keep using versions earlier than 7.2.9 — update the client immediately. If you use an unofficial client, temporarily switch to the official one until an update is released.

Download:
• Windows / macOS / Linux: official website or GitHub.
• Windows: Microsoft Store.
• macOS: App Store.
• Linux: Flathub, Snapcraft.

Advice for users of older clients:

• Links can be dangerous: whenever you click a link, read the pop-up window carefully — if Telegram shows an unusual structure in the link (for example, one starting with tg://), do not open it.

• Do not use the client without a local passcode: enabling one encrypts the session files in the tdata directory, preventing immediate account hijacking even if those files are leaked.

What is the issue?

A vulnerability has been discovered in Telegram Desktop clients earlier than version 7.2.9 (CVE-2026-107181). Because the ; delimiter was not escaped, parameters in tg:// links were interpreted as separate IPC commands. Using the interpret: handler, an attacker could cause files from the system to be sent covertly to their channel, without the user’s confirmation, when the user clicked a specially crafted link.

The main risk

The danger is not limited to stealing tdata session files and hijacking accounts. Exploiting the vulnerability makes it possible to covertly steal absolutely any files on the computer that the user can access: documents, saved browser sessions, SSH keys, system configurations, or cryptocurrency wallets.

#security #desktop #vulnerabilities

Their changelog 😂
https://telegramdesktop.github.io/tdesktop/changelog/

Google fitbit edge will launch on 12th October, just 1 day earlier than apple's smart home products event on 13th October

I thought vivo wasn't as bad as I was talking about it.


I was right. It's worse. Fuck you mean you're literally putting false specs?

Also: X200 Pro has a 3.2 Gen 2 (10Gbit/s) Type-C port, as opposed to official 3.2 Gen 1 (5Gbit/s) specs

OriginOS 7 rollout schedule for iQOO devices globally

LG Rollable

Connect Apple Watch to Android, Linux and Windows through native Bluetooth/IDS protocols and a shared Flutter Companion. macOS uses the same interface with a limited Bluetooth backend.

https://github.com/LordixDemon/apple_watch_connector

The inevitable has happened with Oppo takeover of OnePlus 🥀

🇮🇳 A power bank caught fire in an overhead luggage compartment aboard an IndiGo flight Sunday, prompting the aircraft to divert to Hyderabad, where it landed safely. These will likely be banned from flights soon.

Follow main channel -> LiveLeak
Follow private channel -> LiveLeak Private

Someone ported Gboard with Rambler AI dictation from Pixel 11 to all devices, no root required.

Note: This is an alternative to using morphe Gboard

https://github.com/Akshayykadam/PixelBoard

Why aren't AI companies being charged for hacking?
Article, Comments

OriginOS 7 is currently the most loved & preferred UI in China

AOSP Source Releases Are So Delayed That Developers Have to Disassemble Libraries Just to Report Bugs
https://github.com/android/ndk/issues/2260

https://redd.it/1x4r9kp
@reddit_android

ColorOS 17 Global Rollout Schedule for Oppo Devices

ColorOS 17 Rollout Schedule for OnePlus, Realme and Oppo devices

Control, inspect and debug an Android phone from your browser, decompile its apps, and analyze them for security weaknesses in the same tab. Over USB it needs no drivers, no desktop adb server and no agent app on the device. Over Wi-Fi it uses the adb tools already on your computer.

https://github.com/capt-meelo/loupe

Although, ESR Case Maker has ceased selling cases online in India on their website, they will continue selling it officially via Amazon

Additionally, ESR also offers a free 1yr extra warranty, making it 24months warranty. The case will also be replaced for free if it becomes yellowish under 2yrs of purchase