MishaalRahman

7 ms·

31.
by MishaalRahman 3y ago
OP, the title is incorrect: Samsung is offering real, not emulated, devices through Remote Test Lab.
32.
by MishaalRahman 3y ago
You can install the Samsung Internet browser on non-Samsung devices through Google Play, if that helps.
33.
by MishaalRahman 3y ago
No, Google is not A/B testing the emergency dialer. What the previous commenter is referring to is a change in Android 12 where, by default, long-pressing the power button no longer brings up the power menu but rather the default Assis
34.
by MishaalRahman 3y ago
Google made including the "emergency SOS" gesture a GMS requirement for Android 12 but left it up to OEMs to decide whether or not to enable it by default. I suspect this spike in emergency calls stems from a few factors: 1) Due t
35.
by MishaalRahman 3y ago
You can just drag and drop APK files onto the scrcpy window to initiate an install (it just does 'adb install' basically).
36.
by MishaalRahman 4y ago
>I wonder if CarPlay/Auto could be implemented on top of Automotive with relative ease. It can, and already has. Google offers an official Android Auto Receiver app for Android Automotive that allows for wired/wireless Android
37.
by MishaalRahman 4y ago
Turn it into a dedicated device to do X or Y task. You'll be surprised by how many more issues you can work around when you can build your own OS or attain root. eg., I turned an old tablet into a dedicated smart display, and another i
38.
by MishaalRahman 4y ago
It only gets a passing mention in the article, but this same method of compromise also exists on Android phones with GMS. Your Google Account's password can be reset with nothing but your phone's passcode. The only way to prevent
39.
by MishaalRahman 4y ago
The APK for the apps you 'uninstalled' via the 'pm uninstall' command still exist in the system/product/system_ext/etc partitions, that's why they still take up space.
40.
by MishaalRahman 4y ago
>* All of the images contained within the dm-linear `super` partition are formatted with the new erofs filesystem. I didn't know any devices shipped with that yet. Even the Pixel 7 series is still using ext4 for read-only partitions
41.
by MishaalRahman 4y ago
Not automatically. It requires the use of a (new in Android 12) API. But you're otherwise right.
42.
Android is adding support for updatable root certificates amidst TrustCor scare(blog.esper.io)
29 points by MishaalRahman 4y ago|2 comments
43.
by MishaalRahman 4y ago
>As I mentioned earlier in the thread, it's not about positioning of words, it's about the legalities of trademark usage; we cannot lead a product name with a term trademarked by someone else Source: https://twitter.
44.
by MishaalRahman 4y ago
The reason it's named that way is because of Google's trademark on Android. Per Rich Turner @ Microsoft: "As I mentioned earlier in the thread, it's not about positioning of words, it's about the legalities of trade
45.
by MishaalRahman 4y ago
Is it hard? Check out Waydroid if you haven't already. https://waydro.id/
46.
by MishaalRahman 4y ago
Links to androiddev.social are banned on Twitter as well right now.
47.
by MishaalRahman 4y ago
Good catch!
48.
by MishaalRahman 4y ago
Yeah that's the minimum since Android 11 for system apps targeting API level 30+.
49.
by MishaalRahman 4y ago
Good to know!
50.
by MishaalRahman 4y ago
Oh yeah, that's true. Here's who I was citing then: https://twitter.com/maldr0id/status/1598467755887529990
51.
by MishaalRahman 4y ago
Yeah, I'd be surprised if Google Play wasn't already on the lookout to flag newly uploaded apps signed with these keys.
52.
by MishaalRahman 4y ago
Yeah that's my understanding as well
53.
by MishaalRahman 4y ago
According to the OP of the report, the key used to sign an OTA image and the key used to sign system apps are different.
54.
by MishaalRahman 4y ago
If you're speaking from the perspective of an enterprise making recommendations, yes that'd be an option. As a user, though, you could just avoid sideloading.
55.
by MishaalRahman 4y ago
It's not hard to figure out which vendors are affected. Just search for the SHA256 hash of each malware sample on VirusTotal. eg. https://www.virustotal.com/gui/file/b1f191b1ee463679c7c2fa7d...
56.
by MishaalRahman 4y ago
Google isn't at fault, their certs weren't leaked (as far as we know).
57.
by MishaalRahman 4y ago
It's isolated to devices from the specific brands whose platform certs were leaked and are still being used to sign apps.
58.
by MishaalRahman 4y ago
No, you should be safe so long as you only accept updates to system apps through official app stores, like Google Play or the Galaxy Store. Do not sideload updates to system apps through third-party websites.
59.
by MishaalRahman 4y ago
It just happens to be where vulnerabilities are disclosed under the Android Partner Vulnerability Initiative: https://security.googleblog.com/2020/10/announcing-launch-of...
60.
by MishaalRahman 4y ago
1. We don't know what mitigation steps have been applied. However, it seems that at least some affected vendors are still signing their apps with compromised platform certs: https://www.apkmirror.com/?post_type=app_rele

More ›