Winamp source code released online but with a catch

The iconic Winamp media player, launched in 1997 by Nullsoft, gained massive popularity while coinciding with the rise of MP3s music files. After Nullsoft's acquisition by AOL, its development slowed & in 2013, Winamp was discontinued. In 2014, new owner Radionomy took over the project intending to resume development. However, it failed to bring Winamp to its former glory & now after three decades, its source-code along with build tools, and associated libraries for the Windows app has been released on GitHub.

The kicker is that executables and changes to the code cannot be published. So the promise of “open source” has vanished. They have created their own license, the “Winamp Collaborative License (WCL) Version 1.0” :-

• No Distribution of Modified Versions whether in source or binary form.
• Cannot distribute a forked version.
• Only the maintainers of the official repo are allowed to distribute.

Follow @TechLeaksZone

Some controversy today as YouTube tech reviewer Marques Brownlee 'Panels' app is getting pretty substantial backlash.

tl;dr Marques Brownlee app, 'Panels', offers high-definition wallpapers from Digital Artists for $49.99/year. People criticized the app for an array of reasons, beside the idea of paying $49.99/year for wallpapers on your cell phone, the app requests tracking information, and contains ads.

Unsurprisingly, and as is tradition, internet nerds quickly began inspecting the app under the metaphorical microscope. Security researcher @I_Am_Jakoby discovered the apps API is wildly insecure. He wrote a simple script which programmatically scrapes every high-definition wallpaper.

Attached image is the script he shared. If you want to experiment with it, just OCR it or something.

RIP Snapdragon 8 Gen 4, Welcome Snapdragon 8 Elite

Qualcomm changed its naming scheme, from using numbers like Snapdragon 870, 888 and now to using Generations like Snapdragon 8 Gen 1

Just after 3yrs, Qualcomm again has again changed its naming scheme. Snapdragon 8 Gen 4 will be known as Snapdragon 8 Elite and Xiaomi 15 series will be the first smartphone to be powered by the same.

Follow @TechLeaksZone

For those who are thinking that enabling Circle to Search on Xiaomi 14T series just by changing the date could be Google skill issues are wrong because Xiaomi hardcoded it inside their system launcher

Given below is the code for the proof.

    public static boolean invokeOmni(Context context, int i, int i2) {
        if (!hasCtsFeature(context) || !isSettingsLongPressHomeAssistantEnabled(context)) {
            Log.d("CircleToSearchHelper", "circle to search is not available");
            return false;
        } else if (LocalDate.now().isBefore(LocalDate.of(2024, 10, 6))) {
            Log.d("CircleToSearchHelper", "Current Date is before 2024.10.6");
            return false;
        } else if (isSceneForbid(context, i)) {
            return false;
        } else {
            return OmniHelper.notifyToStartCtS(i2);
        }
    }

Credits: @kacskrz

Follow @TechLeaksZone

IT’S OVER

CVSS 9.9 Rated Linux Vulnerability Affects CUPS

The hyped Linux 9.9 rated CVE doesn't affect the Linux kernel but rather CUPS — The print server commonly used on Linux systems. Simone Margaritelli discovered this vulnerability & has shared a write-up which is summed up as:

"A remote unauthenticated attacker can silently replace existing printers’ (or install new ones) IPP urls with a malicious one, resulting in arbitrary command execution (on the computer) when a print job is started (from that computer)."

CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177 have been assigned to these CUPS issues. There are also "several other bugs that are more or less exploitable."

This remote code execution issue can be exploited in public Internet via a UDP packet to port 631 without needing any authentication, assuming the CUPS port is open through your router/firewall.

LAN attacks are also possible via spoofing. It also affects some BSDs, Oracle Solaris, Google Chrome OS etc.

Follow @TechLeaksZone

Telegram's reporting options have been extended with new categories, including "I don't like it”, “Terrorism”, “Copyright” & “It's not illegal, but it must be taken down”, offering more detailed reporting choices.

#Telegram #Beta

@RelevantUpdates •• @NewsAndTipsNT

You probably heard about Epic's latest lawsuit against Google, which alleges they were involved in the decision to make Samsung's Auto Blocker feature be enabled by default in the latest version of One UI.

(Auto Blocker, if you aren't aware, is a feature that, when enabled, blocks sideloading apps from outside the Google Play Store or Samsung Galaxy Store.)

Google is now coming out to say that Epic's lawsuit is a "meritless and dangerous move" and that they did not request Samsung create their Auto Blocker feature. Google goes on to state that "Android device makers are free to innovate and design additional safety features for their devices."

I find the use of the word "create" in Google's statement to be interesting. Epic didn't allege that Google made Samsung create the Auto Blocker feature but rather made them turn it on by default. However, Epic admitted that they don't yet have any proof that there was any collusion. We'll have to see how things go in court.

KB5043145, the most recent optional update for Windows 11 to date, causes multiple issues for many users. The most serious one is a blue screen of death that makes the PC unbootable. Microsoft has confirmed the bug and is working on a solution.

After upgrading the device to Windows 11 OS Build 22621.4249, a number of users faced the inability to start the computer. The only solution that was of help for them is to uninstall the update from the recovery environment.

Sometimes, the bug makes Windows 11 to start into the BitLocker recover environment, especially after several failed recovery attempts.

Among the mentioned BSOD issues, users also report that the same update may prevent USB ports from working. As most modern peripheral devices connect via USB, this breaks them. Keyboards, mouses, and webcam stop working. The latter issue mainly affects N6005 and N5105 Intel NUCs, and Asus TUF / ROG laptops, and other gaming products from the same vendor.

If you are affected - then uninstall the buggy update: wusa.exe /uninstall /kb:5043145. Run the command from WinRE.

Phew !
Guess I'm lucky as it didn't auto install