rabbit data breach: all r1 responses ever given can be downloaded
On May 16, 2024, the Rabbitude team discovered critical hardcoded API keys in Rabbit Inc's codebase, affecting services like ElevenLabs, Azure, Yelp, and Google Maps.
These keys allow:
• Unauthorized access to sensitive data.
• Altering responses or bricking R1 devices.
• Changing TTS settings.
The ElevenLabs key allows to:
• Get a history of all past text-to-speech messages
• Change voices
• Add custom text replacements
• Delete voices, crashing the rabbitOS backend.
Despite being aware of the breach for over a month, Rabbit Inc has not rotated the keys. The api keys continue to be valid.
🔗 rabbitude
🧑💻 @agamtechtricks
On May 16, 2024, the Rabbitude team discovered critical hardcoded API keys in Rabbit Inc's codebase, affecting services like ElevenLabs, Azure, Yelp, and Google Maps.
These keys allow:
• Unauthorized access to sensitive data.
• Altering responses or bricking R1 devices.
• Changing TTS settings.
The ElevenLabs key allows to:
• Get a history of all past text-to-speech messages
• Change voices
• Add custom text replacements
• Delete voices, crashing the rabbitOS backend.
Despite being aware of the breach for over a month, Rabbit Inc has not rotated the keys. The api keys continue to be valid.
Please open Telegram to view this post
VIEW IN TELEGRAM
🤣52👍7
Flipkart launches payments app, Super.money
Flipkart has launched Super.money, a payments app available in beta on the Play Store, as it expands its fintech ventures after separating from PhonePe in late 2022.
The app supports UPI transactions. Super.money is promising “real cashback” and not “useless rewards” for paying, sending or receiving money via the app
Super.money also plans to introduce secured cards and lending, with partners including DMI Finance, Axis Bank and Credit Saison India.
📱 Install now!
🖼 Screenshots
🔗 TechCrunch
🧑💻 @agamtechtricks
Flipkart has launched Super.money, a payments app available in beta on the Play Store, as it expands its fintech ventures after separating from PhonePe in late 2022.
The app supports UPI transactions. Super.money is promising “real cashback” and not “useless rewards” for paying, sending or receiving money via the app
Super.money also plans to introduce secured cards and lending, with partners including DMI Finance, Axis Bank and Credit Saison India.
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥13🤡8❤1👍1
This media is not supported in your browser
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM
Figma Config 2024
Figma AI: Figma AI includes features like:
• Visual Search to locate components
• Efficiency updates for automating tedious tasks
• Make Designs to generate UI layouts from text prompts
• Making Prototypes
• Automatic Layer Renaming, etc.
These AI tools will be free during the 2024 beta period. Sharing your customer content with Figma for AI training is optional.
UI3: The third redesign of Figma, UI3, offers an immersive canvas, a component-centered UI, and a new icon set. It focuses on user feedback and aims to create more space for future features.
Figma Slides: Figma Slides is a new tool for creating, collaborating on, and presenting slides. Available in free beta, it will offer plans starting at $3 per user/month in early 2025, which simplifies and enhances slide creation process.
Dev Mode Updates: New updates in Dev Mode include Ready for Dev View, Focus View, and Code Connect. These features improve collaboration, streamline workflows, and ensure consistent adoption of design systems across frameworks.
Quality-of-life Improvements: Usability updates include:
• More intuitive Auto Layout
• Readily accessible UI Kits like Apple iOS and Google Material Design 3
• A responsive prototype viewer
🧑💻 @agamtechtricks
Figma AI: Figma AI includes features like:
• Visual Search to locate components
• Efficiency updates for automating tedious tasks
• Make Designs to generate UI layouts from text prompts
• Making Prototypes
• Automatic Layer Renaming, etc.
These AI tools will be free during the 2024 beta period. Sharing your customer content with Figma for AI training is optional.
UI3: The third redesign of Figma, UI3, offers an immersive canvas, a component-centered UI, and a new icon set. It focuses on user feedback and aims to create more space for future features.
Figma Slides: Figma Slides is a new tool for creating, collaborating on, and presenting slides. Available in free beta, it will offer plans starting at $3 per user/month in early 2025, which simplifies and enhances slide creation process.
Dev Mode Updates: New updates in Dev Mode include Ready for Dev View, Focus View, and Code Connect. These features improve collaboration, streamline workflows, and ensure consistent adoption of design systems across frameworks.
Quality-of-life Improvements: Usability updates include:
• More intuitive Auto Layout
• Readily accessible UI Kits like Apple iOS and Google Material Design 3
• A responsive prototype viewer
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
👍16🔥3❤2🥰1
Character.AI now allows users to talk with AI avatars over calls
Character.AI now allows users to interact with AI avatars via phone calls, supporting multiple languages including English, Spanish, and Chinese. The feature, tested by over 3 million users making 20 million calls, aims to aid language practice, mock interviews, and enhance role-playing games.
Users can switch between calling and texting seamlessly and interrupt the AI with a tap. This follows the earlier launch of Character Voices, which enables characters to speak during chats.
🔗 TechCrunch
🧑💻 @agamtechtricks
Character.AI now allows users to interact with AI avatars via phone calls, supporting multiple languages including English, Spanish, and Chinese. The feature, tested by over 3 million users making 20 million calls, aims to aid language practice, mock interviews, and enhance role-playing games.
Users can switch between calling and texting seamlessly and interrupt the AI with a tap. This follows the earlier launch of Character Voices, which enables characters to speak during chats.
Please open Telegram to view this post
VIEW IN TELEGRAM
😐14🤡6👍5🤣1
Xiaomi takes measures to prohibit Chinese devices from running international versions of the HyperOS
Recently, Kacper Skrzypek, a tester of the well-known official ROM Xiaomi.EU, posted on X/Twitter that Xiaomi has added a region detection mechanism in the boot wizard.
If the device hardware is a Chinese version but is running an international system, the boot wizard will not be able to complete and will prompt "Unsupported software".
🔗 X/Twitter
👨💻 @agamtechtricks
Recently, Kacper Skrzypek, a tester of the well-known official ROM Xiaomi.EU, posted on X/Twitter that Xiaomi has added a region detection mechanism in the boot wizard.
If the device hardware is a Chinese version but is running an international system, the boot wizard will not be able to complete and will prompt "Unsupported software".
🔗 X/Twitter
👨💻 @agamtechtricks
🤡54💔3👌2
Forwarded from Tech & Leaks Zone
Major Windows BSOD issue takes banks, airlines, and supermarkets down
Thousands of Windows machines are experiencing a Blue Screen of Death (BSOD) issue at boot today, impacting banks, airlines, TV broadcasters, supermarkets, and many more businesses worldwide
There is also Microsoft Azure outage today
Machines of Australian airline, banks have gone offline. UK broadcaster Sky News is currently unable to broadcast.
Berlin Airport, Ryanair, one of the biggest airlines in Europe is experiencing flight departures.
The US Federal Aviation Administration says all flights from Delta, United, and American Airlines are grounded due to a “communication issue.”
says one Reddit poster, while another says 70% of their laptops are down and stuck in a boot loop.
A faulty update from cybersecurity provider CrowdStrike is knocking affected PCs and servers offline, forcing them into a recovery boot loop so machines can’t start properly.
Follow @TechLeaksZone
Thousands of Windows machines are experiencing a Blue Screen of Death (BSOD) issue at boot today, impacting banks, airlines, TV broadcasters, supermarkets, and many more businesses worldwide
There is also Microsoft Azure outage today
Machines of Australian airline, banks have gone offline. UK broadcaster Sky News is currently unable to broadcast.
Berlin Airport, Ryanair, one of the biggest airlines in Europe is experiencing flight departures.
The US Federal Aviation Administration says all flights from Delta, United, and American Airlines are grounded due to a “communication issue.”
Our entire company is offline
says one Reddit poster, while another says 70% of their laptops are down and stuck in a boot loop.
A faulty update from cybersecurity provider CrowdStrike is knocking affected PCs and servers offline, forcing them into a recovery boot loop so machines can’t start properly.
Follow @TechLeaksZone
🔥29🥴5👍1😭1
We're in need of volunteers to help manage our Telegram channel, Agam's Tech Tricks.
You'll be posting tech news, formatting it according to our regular format. Sometimes, you will be provided with the source, and sometimes you have to find news yourself.
Some experience with managing a channel or a blog related to technology would be great. And of course, you won't be paid.
And please, don't stop posting after some days, be regular for at least a while. We'll guide you with the format and the sources.
Pm
Thank you everyone, we got two admins.
Please open Telegram to view this post
VIEW IN TELEGRAM
🥰16👍3🔥2
Proton Mail Introduces Open-Source AI Writing Assistant
Proton Mail has unveiled "Proton Scribe," an AI-powered writing assistant designed with privacy in mind. This new feature helps users compose emails, proofread content, and adjust language tone. Unlike other AI tools, Proton Scribe processes data locally by default, ensuring user privacy through zero-access encryption.
The tool uses open-source AI models without third-party involvement, setting a new standard for secure email services.
While initially focused on business users, Proton Scribe aims to provide a privacy-conscious alternative to data-hungry email platforms.
🔗 It's FOSS | Proton
🧑💻 @agamtechtricks
Proton Mail has unveiled "Proton Scribe," an AI-powered writing assistant designed with privacy in mind. This new feature helps users compose emails, proofread content, and adjust language tone. Unlike other AI tools, Proton Scribe processes data locally by default, ensuring user privacy through zero-access encryption.
The tool uses open-source AI models without third-party involvement, setting a new standard for secure email services.
While initially focused on business users, Proton Scribe aims to provide a privacy-conscious alternative to data-hungry email platforms.
🔗 It's FOSS | Proton
🧑💻 @agamtechtricks
❤21🤯4👍3🔥1
Microsoft Addresses CrowdStrike Outage Impact
Microsoft has responded to the recent CrowdStrike software update that affected IT systems globally. Despite not being a Microsoft incident, the company has taken steps to support affected customers.
These include collaborating with CrowdStrike to develop solutions, deploying engineers to assist customers, and working with other cloud providers like Google and Amazon.
Microsoft estimates that 8.5 million Windows devices were impacted, to put it into perspective that is 3 times the entire Linux userbase.
Microsoft has also released a new tool which would assist with ease of recovery by avoiding the hassle of safe mode or admin rights.
🔗 Microsoft | The Verge
🧑💻 @agamtechtricks
Microsoft has responded to the recent CrowdStrike software update that affected IT systems globally. Despite not being a Microsoft incident, the company has taken steps to support affected customers.
These include collaborating with CrowdStrike to develop solutions, deploying engineers to assist customers, and working with other cloud providers like Google and Amazon.
Microsoft estimates that 8.5 million Windows devices were impacted, to put it into perspective that is 3 times the entire Linux userbase.
Microsoft has also released a new tool which would assist with ease of recovery by avoiding the hassle of safe mode or admin rights.
🔗 Microsoft | The Verge
🧑💻 @agamtechtricks
👍21👌2❤1
Chromium browsers found sending user data to Google, raising privacy & regulatory concerns
Chromium-based browsers like Chrome, Edge, Opera, and Brave have been found sending user data to Google through a preinstalled extension called "hangout_services." which shares information such as CPU and GPU usage, memory usage, processor details, and logs of visits to Google domains. These APIs are exclusive to Google's sites, possibly giving their services a performance edge.
Non-Chromium browsers like Firefox don't have this extension, which may affect their performance on Google sites. Google claims the extension enhances user experience and security. The European Commission, already investigating Google under the Digital Markets Act, may scrutinize this further due to privacy concerns and potential violations.
Notably, Brave has announced the extension is currently disabled by default and will be removed in a future update.
🔗 Alternativeto
🧑💻 @agamtechtricks
Chromium-based browsers like Chrome, Edge, Opera, and Brave have been found sending user data to Google through a preinstalled extension called "hangout_services." which shares information such as CPU and GPU usage, memory usage, processor details, and logs of visits to Google domains. These APIs are exclusive to Google's sites, possibly giving their services a performance edge.
Non-Chromium browsers like Firefox don't have this extension, which may affect their performance on Google sites. Google claims the extension enhances user experience and security. The European Commission, already investigating Google under the Digital Markets Act, may scrutinize this further due to privacy concerns and potential violations.
Notably, Brave has announced the extension is currently disabled by default and will be removed in a future update.
🔗 Alternativeto
🧑💻 @agamtechtricks
😁26🎉7👍4🌚2❤1🤬1
Google’s shortened links will stop working next year
Google's goo.gl URL shortener is set to be fully shut down by August 25, 2025. From August 23, 2024, users will start seeing warning interstitial pages on goo.gl links. Developers are advised to update their links promptly to prevent any issues.
Initially announced in 2018, the service has been deprecated in favor of Firebase Dynamic Links (FDL), which is also now deprecated.
🔗 The Verge
🧑💻 @agamtechtricks
Google's goo.gl URL shortener is set to be fully shut down by August 25, 2025. From August 23, 2024, users will start seeing warning interstitial pages on goo.gl links. Developers are advised to update their links promptly to prevent any issues.
Initially announced in 2018, the service has been deprecated in favor of Firebase Dynamic Links (FDL), which is also now deprecated.
🔗 The Verge
🧑💻 @agamtechtricks
👎18🤡10🍾4❤2🗿2👍1😁1😐1
Samsung Messages no longer comes pre-installed on Galaxy phones in USA
Samsung has stopped pre-installing its Samsung Messages app on its phones in the USA, starting with the Galaxy Z Flip 6 and the Galaxy Z Fold 6. These devices run One UI 6.1.1 out of the box and use Google Messages as the default messaging app.
In other markets, including Canada and Europe, the company still ships its phones with Samsung Messages.
🔗 SamMobile
🧑💻 @agamtechtricks
Samsung has stopped pre-installing its Samsung Messages app on its phones in the USA, starting with the Galaxy Z Flip 6 and the Galaxy Z Fold 6. These devices run One UI 6.1.1 out of the box and use Google Messages as the default messaging app.
In other markets, including Canada and Europe, the company still ships its phones with Samsung Messages.
🔗 SamMobile
🧑💻 @agamtechtricks
🔥20👍5💩5🤔2❤1
CrowdStrike's Falcon Sensor also linked to Linux kernel panics and crashes
Red Hat warned in June about kernel panics in Red Hat Enterprise Linux 9.4 due to the Falcon Sensor on kernel version
Another issue, related to the
Here's what JackC said on Hacker News:
🔗 The Register
🧑💻 @agamtechtricks
Red Hat warned in June about kernel panics in Red Hat Enterprise Linux 9.4 due to the Falcon Sensor on kernel version
5.14.0-427.13.1.el9_4.x86_64. Another issue, related to the
falcon_lsm_serviceable kernel module provided from CrowdStrike Falcon Sensor/Agent security software suite, suggested disabling the module. Problems also occured in Debian and Rocky Linux.Here's what JackC said on Hacker News:
Crowdstrike took a day to respond, and then asked for a bunch more proof (beyond the above) that it was their fault. They acknowledged the bug a day later, and weeks later had a root cause analysis that they didn't cover our scenario (Debian stable running version n-1, I think, which is a supported configuration) in their test matrix. In our own post mortem there was no real ability to prevent the same thing from happening again -- "we push software to your machines any time we want, whether or not it's urgent, without testing it" seems to be core to the model, particularly if you're a small IT part of a large enterprise. What they're selling to the enterprise is exactly that they'll do that.
Please open Telegram to view this post
VIEW IN TELEGRAM
🤡25👍5🥰2👏2❤1🔥1
Swiggy turns Minis into a link-in-bio platform
Swiggy is turning its Swiggy Minis, initially a no-code Shopify alternative for small businesses, into a link-in-bio service. It will act as a landing page that sellers can point their target customers to from their social media pages.
Swiggy will add integrations with Google Calendar for booking and Google Reviews for ratings. The discovery layer is being removed, focusing on repeat purchases.
The company plans to raise $1.25 billion through an IPO in India.
🔗 Minis | TechCrunch
🧑💻 @agamtechtricks
Swiggy is turning its Swiggy Minis, initially a no-code Shopify alternative for small businesses, into a link-in-bio service. It will act as a landing page that sellers can point their target customers to from their social media pages.
Swiggy will add integrations with Google Calendar for booking and Google Reviews for ratings. The discovery layer is being removed, focusing on repeat purchases.
The company plans to raise $1.25 billion through an IPO in India.
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
🤔12👍4😨2🤡1