The 7 most dangerous vulnerabilities in Android applications 202

The 7 most dangerous vulnerabilities in Android applications 2021 Android application vulnerabilities have become a problem because of Google Play’s open format, and also because users can sideload apps, removing any oversight regarding the safety of apps. There are also updates and patches to the Android operating system. You can’t count on Android to update itself in a timely manner, because wireless carries control update schedules on all but Google’s Pixel devices. Expert testing of Android mobile applications shows that in most cases, insecure data storage is the most common security flaw in android apps. According to a report, Vulnerabilities and Threats are slightly more common in Android applications, compared to iOS counterparts(43% vs 38%). But the experts categorize this difference as minimal: the security level of apps is roughly equivalent between the two platforms. Comprehensive security checks of a mobile application include a search for vulnerabilities in the client and server, as well as data transmission between them. #android #apk #vulnerabilities

相关推荐

封面图片

Sony might be one of the few OEMs that'll actually implement Goo

Sony might be one of the few OEMs that'll actually implement Google's Private Space feature in Android 15. Most other OEMs will just stick with their current takes on this feature, like Samsung Secure Folder, Xiaomi Second Space, OnePlus Hide Apps, etc. It's a shame because these other implementations can't be integrated into third-party launchers and also a lot of apps treat them like a work profile is installed.-电报频道- #娟姐新闻:@juanjienews

封面图片

7个「百度地图」#语音包

7个「百度地图」#语音包 下载解压为 baiduvoicedata 文件夹,使用方式如下: Android 通过数据线连接电脑,依次点击文件夹 /Android/data/com.baidu.BaiduMap/BaiduMap/baiduvoicedata 复制替换即可 鸿蒙 替换到 /BaiduMap/baiduvoicedata iOS 需要越狱,用巨魔安装 Filza 或 爱思,替换到 private/var/mobile/Containers/Data/Application/百度地图/Documents/baiduvoicedata/ 提取码: x68d

封面图片

Wow: the DoJ's antitrust enforcers are "set to propose that Goog

Wow: the DoJ's antitrust enforcers are "set to propose that Google uncouple its Android smartphone operating system from its other products, including search and its Google Play mobile app store," according to Bloomberg. The DoJ has reportedly also "pulled back from a more severe option that would have forced Google to sell off Android," but forcing the company to stop bundling GMS would still be huge. Details are sparse on what exactly this would mean. Notably, device makers can technically already ship Android without GMS (it's just AOSP in that case). However, if they want the Play Store and Play Services (which they do because that's where all the apps/useful APIs are), then they currently have to bundle Chrome, Google Search, and other Google apps as well. The EU already put an end to the forced bundling of Google Search and Chrome, which is why there's a separate GMS license for EEA launches. But that hasn't happened in the U.S. yet, which is possibly what the DoJ wants to see happen.-电报频道- #娟姐新闻:@juanjienews

封面图片

IP Addresses

IP Addresses We've gotten multiple DMs asking why Telegram says Safeguard can access your IP - Safeguard uses Telegram web apps to verify, since you're connecting to an external server Telegram gives this warning, however Safeguard does not collect this information. Captcha We use Cloudflare's turnstile captcha which is the most private option for users when it comes to captchas. You can read more info about this on their official website here V2.02 has also just launched, featuring a few QOL Changes and bug fixes V2.1 has launched Turnstile overhaul - We got multiple reports of Turnstile captcha not working for some users and the error isn't documented by Cloudflare. Because of this we temporarily overhauled the captcha until issue is resolved QOL Changes - Service messages are now auto deleted to not clog your chat - Even better antirai Safeguard V2.2 has launched Whats new? - Welcome messages revamped + You are now able to completely customize your welcome messages. Check the post above this to learn how. + Old welcome messages are now automatically deleted once a new user joins to not clog your chat - Multiple antiraid improvements + We've improved our AI in the antiraid to be even better at detecting certain types of attacks + Antiraid hard mode has new additional security features when users join - Too many small bug fixes and QOL Changes to count - Safeguard Advertisements + Are you a project owner and want to work with Safeguard? We offer the most efficient and targetted ads you can get for your project! Contact @ETHSOLTRENDING to discuss more details. + All projects will be vetted beforehand, we do not tolerate scams ~ V2.22 has launched Bug Fixes - Users with "&" in their names wouldnt be able to verify due to how we parsed the data. This is fixed - If a user spammed many times before antiraid picks it up Safeguard would spam chat saying they were muted. It now only says once and deletes other messages1

封面图片

Many users have asked me: What are the pros and cons of using An

Many users have asked me: What are the pros and cons of using Android's upcoming Terminal app to run Linux apps versus something like Termux? Here are the differences, as explained by a developer of Termux: "Advantages: 1. The VM will have standard Linux Distributions, so all the packages of the distro should be downloaded from its packages repositories. Termux only provides ~2000 most popular packages in its repositories, other distros can have 10,000-1,00,000 packages. If running under proot-distro in Termux, then one can have similar amount of packages, but everything runs under proot, which is slow, and not all packages may work and proot is not stable on old devices. Disadvantages: 1. The VM will have performance loss due to KVM usage compared to Termux running natively. 2. The VM will be isolated from the Android system, this is where most of the problems lie. I doubt external storage (/sdcard) will be allowed to be accessible directly from inside the VM, so use cases of users processing files on their storage, like downloading music/video/image files, etc with Termux and accessing them in other apps, would not be possible. The Android APIs won't be accessible inside the VM either, like ones which apps like Termux:API or Tasker uses, lot of users rely on them to automate things, a way to fix that would be to run a sshd server in Termux and then connect to it from the terminal in the Linux app with ssh and then run the commands, but that will cause some latency issues. Termux also supports on-boot tasks for its own commands, there may be some way to boot the VM at startup, depending on if there is external access, otherwise users would have to manually start the app. 3. The VM will be isolated, so any root access will be only for inside the VM itself, and not for root access to Android system, like Termux can get with su/sudo if rooted with Magisk, etc. 4. Terminal will be inside a WebView connected over the server, so should have slower performance than a native Terminal in Termux using native Android views. WebViews are generally slow for large amounts of text, especially for scrolling, like try opening the Android docs/source site on even a recent phone with ~8GB RAM, older phones often just crash the browser. One could run a sshd server in the VM and then connect to it from Termux with ssh and that should likely be faster, and should support multiple terminals at the same time. I don't think currently the VM app supports multiple terminals, that's another difference, although terminal multiplexers like tmux could probably be used inside the one terminal that's available. 5. Not all devices will support AVF, at least not for Android < 16 or higher, so Termux will still be needed on such devices. Additionally, running a whole Linux distro in a VM will require CPU, storage and memory in addition the one already being used by Android OS itself, so low end devices will likely have issues with performance or multi-tasking. Termux runs on Android host itself, and uses only < 100MB RAM, and 150MB (arch-specific)/230MB (universal) storage space by default, so runs great on even Android 5." Thanks to agnosticapollo for taking the time to write this out!-电报频道- #娟姐新闻:@juanjienews

封面图片

Thanks everyone for your support and love!

Thanks everyone for your support and love! Last month I got interviewed by police for 4 days after arriving in Paris. I was told I may be personally responsible for other people’s illegal use of Telegram, because the French authorities didn’t receive responses from Telegram. This was surprising for several reasons:  1. Telegram has an official representative in the EU that accepts and replies to EU requests. Its email address has been publicly available for anyone in the EU who googles “Telegram EU address for law enforcement”.  2. The French authorities had numerous ways to reach me to request assistance. As a French citizen, I was a frequent guest at the French consulate in Dubai. A while ago, when asked, I personally helped them establish a hotline with Telegram to deal with the threat of terrorism in France. 3. If a country is unhappy with an internet service, the established practice is to start a legal action against the service itself. Using laws from the pre-smartphone era to charge a CEO with crimes committed by third parties on the platform he manages is a misguided approach. Building technology is hard enough as it is. No innovator will ever build new tools if they know they can be personally held responsible for potential abuse of those tools.  Establishing the right balance between privacy and security is not easy. You have to reconcile privacy laws with law enforcement requirements, and local laws with EU laws. You have to take into account technological limitations. As a platform, you want your processes to be consistent globally, while also ensuring they are not abused in countries with weak rule of law. We’ve been committed to engaging with regulators to find the right balance. Yes, we stand by our principles: our experience is shaped by our mission to protect our users in authoritarian regimes. But we’ve always been open to dialogue. Sometimes we can’t agree with a country’s regulator on the right balance between privacy and security. In those cases, we are ready to leave that country. We've done it many times. When Russia demanded we hand over “encryption keys” to enable surveillance, we refused and Telegram got banned in Russia. When Iran demanded we block channels of peaceful protesters, we refused and Telegram got banned in Iran. We are prepared to leave markets that aren’t compatible with our principles, because we are not doing this for money. We are driven by the intention to bring good and defend the basic rights of people, particularly in places where these rights are violated. All of that does not mean Telegram is perfect. Even the fact that authorities could be confused by where to send requests is something that we should improve. But the claims in some media that Telegram is some sort of anarchic paradise are absolutely untrue. We take down millions of harmful posts and channels every day. We publish daily transparency reports (likeor). We have direct hotlines with NGOs to process urgent moderation requests faster. However, we hear voices saying that it’s not enough. Telegram’s abrupt increase in user count to 950M caused growing pains that made it easier for criminals to abuse our platform. That’s why I made it my personal goal to ensure we significantly improve things in this regard. We’ve already started that process internally, and I will share more details on our progress with you very soon.  I hope that the events of August will result in making Telegram and the social networking industry as a whole safer and stronger. Thanks again for your love and memes

🔍 发送关键词来寻找群组、频道或视频。

启动SOSO机器人