MishaalRahman

9 ms·

61.
by MishaalRahman 4y ago
>My understanding is that these certs are vendor-specific (and potentially more finely grained than that - I think it'd be fine to have a separate cert per model, for instance) and are rooted in the firmware, not the hardware - that
62.
by MishaalRahman 4y ago
These platform certificates are all from different vendors, but the problem is that one of the leaked certs appears to be from the biggest Android vendor...Samsung. And that cert is seemingly still being used by them to sign apps.
63.
by MishaalRahman 4y ago
>Leaves little time for Android devices to get the new key no? It's not so simple, also rotating the keys could affect how devices get app updates, depending on whether or not an app has a V3 signature or not. V3 signature scheme su
64.
by MishaalRahman 4y ago
The existence of leaked platform signing certificates breaks a core Android security feature: the application sandbox. Theoretically, a malicious actor with the leaked cert can sign an app and declare the shared user ID Manifest element to
65.
by MishaalRahman 4y ago
There seems to be some confusion about this, so I'll just copy/paste what I wrote on Twitter: >Folks, this is bad. Very, very bad. Hackers and/or malicious insiders have leaked the platform certificates of several vendors.
66.
Platform certificates used to sign malware(bugs.chromium.org)
23 points by MishaalRahman 4y ago|1 comments
67.
by MishaalRahman 4y ago
Some OEM camera apps have built-in QR code detection (using Google Lens or something else) but not all do. Starting in Android 13, a QR code scanner is accessible from Quick Settings on all GMS devices. This QR code scanner is built into Go
68.
by MishaalRahman 4y ago
Definitely the first thing I thought of when I saw the title
69.
by MishaalRahman 4y ago
This document might help: https://source.android.com/docs/core/power/platform_mgmt
70.
by MishaalRahman 4y ago
That's exactly what they're doing: https://twitter.com/MishaalRahman/status/1518675920994848769
71.
by MishaalRahman 4y ago
>Probably better, but still not sufficient. It will probably take years before Android users get this builtin, and not everybody has a smartphone anyway. I don't currently use one. Not if Google integrates BLE tracker detection into
72.
by MishaalRahman 4y ago
>Wait, so basically no more filesystem access? So it's the end for third party file managers? Wow... Third-party file managers never had full filesystem access. Without superuser, they've only ever had access to external storag
73.
by MishaalRahman 4y ago
You just reminded me of this article I wrote about that last year: https://www.xda-developers.com/android-12-better-game-contro... Unfortunately, it looks like the patches were never merged: https://android-revie
74.
by MishaalRahman 4y ago
Project Mainline was introduced in Android 10 actually.
75.
by MishaalRahman 4y ago
I don't know specifically what Samsung does, but a lot of OEMs who offer similar features licensed tech from a company called Tempow. Tempow offered its own BT stack and profile called Tempow Audio Profile (TAP) that enabled streaming
76.
by MishaalRahman 4y ago
Agreed, it's not very constructive feedback. Google does respond to feedback on the Issue Tracker, but I've found posts that sound like rants tend to get ignored (unless there's some critical issue at play).
77.
by MishaalRahman 4y ago
Google's official blog posts on new Android releases usually leave out a ton of info. If you're curious about what many of the other features introduced in Android 13 are, I wrote a summary over on Reddit: https://www
78.
by MishaalRahman 4y ago
What Photo Picker does was (mostly) already available since Android 4.4 KitKat with the documents picker (Files app) and the ACTION_GET_CONTENT or ACTION_OPEN_DOCUMENT intents. What Photo Picker adds is a much nicer, more intuitive UI and t
79.
by MishaalRahman 4y ago
According to the Bluetooth SIG cert for the new Galaxy Buds2 Pro, they support LC3 and many of the relevant LE Audio profiles. https://launchstudio.bluetooth.com/ListingDetails/154534 There's also this Bluetooth t
80.
by MishaalRahman 4y ago
Hi HN, Google just announced that they're releasing Android 13's source code to AOSP and they're rolling out the stable update to supported Pixel devices. https://android-developers.googleblog.com/2022/08
81.
Android 13 changelog: A deep dive(blog.esper.io)
3 points by MishaalRahman 4y ago|1 comments
82.
by MishaalRahman 4y ago
You're welcome, and glad to hear you've kept up with the project!
83.
by MishaalRahman 4y ago
Nice find on the Unplugged <--> Liberty Phone connection. As I suspected, this is yet another example of a company looking to make a quick buck from people who want to "stick it to big tech" while hilariously trying to hide
84.
by MishaalRahman 4y ago
Nicely done! Definitely one of the more unique apps out there.
85.
by MishaalRahman 4y ago
Great job! This may come in handy for me later.
86.
Google Play is reinstating the app permissions section(twitter.com)
101 points by MishaalRahman 4y ago|30 comments
87.
by MishaalRahman 4y ago
For context: https://news.ycombinator.com/item?id=31698148
88.
by MishaalRahman 4y ago
DNSResolver was made a modular system component in Android 10 technically, which is why DNS-over-HTTP/3 will also be supported on "some Android 10 devices which adopted Google Play system updates early." Although DNS Resolver
89.
by MishaalRahman 4y ago
>Some Android 10 devices which adopted Google Play system updates early will also receive this feature. DNSResolver was made a modular system component in Android 10, but as for why DNS-over-HTTP/3 will only be supported on "so
90.
by MishaalRahman 4y ago
You can have multiple eSIM profiles downloaded , but very few phones support having multiple eSIM profiles active at the same time. That would require having two eSIM chips either internally or externally. Google's working on Multip

More ›