Heya, here are some more articles I recently published about Android 14. Check them out!
- Android 14 may bring better support for keyboards with touchpad gestures and modifier key remapping
- Android 14’s regional preferences feature could tell apps to use your preferred calendar and number system
- Android 14 adds new features to make third-party app stores work even better
- Android 14 may bring better support for keyboards with touchpad gestures and modifier key remapping
- Android 14’s regional preferences feature could tell apps to use your preferred calendar and number system
- Android 14 adds new features to make third-party app stores work even better
👍28🔥9❤1🍓1
The first Beta for the Privacy Sandbox on Android begins rolling out today to eligible devices.
"Eligible" devices likely means devices running Android 13 with extension SDK level 4 or later or devices on Android 14 DP1. It's an A/B test, though, so you may not get it.
You'll see a notification if your device has been selected to participate in the Beta.
"Eligible" devices likely means devices running Android 13 with extension SDK level 4 or later or devices on Android 14 DP1. It's an A/B test, though, so you may not get it.
You'll see a notification if your device has been selected to participate in the Beta.
👍23❤4
Google Play's data safety section might be integrated directly into Android 14. The permission dialog as well as Settings now supports showing data safety information, starting with location.
More screenshots/full details at xda-developers.com.
More screenshots/full details at xda-developers.com.
👍33❤12
This media is not supported in your browser
VIEW IN TELEGRAM
Interesting: Google is introducing Partial Custom Tabs, so apps can open links in a tab that only takes up part of the screen. You can customize the tab height in pixels. This works with a handful of browsers, including Chrome, with additional support coming soon.
Apparently this has been supported since Chrome 107 and version 1.5.0-alpha01 of androidx.browser. Stable version 1.5.0 of androidx.browser was just released a few days ago, though.
Apparently this has been supported since Chrome 107 and version 1.5.0-alpha01 of androidx.browser. Stable version 1.5.0 of androidx.browser was just released a few days ago, though.
👍26🔥12🤔2
Google says it is working with its ecosystem partners to harden the security of firmware (software that runs on processors excluding the AP, like the baseband), as they are a critical part of the attack surface of Android devices.
In particular, they are exploring and enabling compiler-based sanitizers (BoundSan, IntSan) and other exploit mitigations (CFI, kCFI, Shadow Call Stack, Stack Canaries) as well as enabling further memory safety features in firmware.
Because bare metal targets are severely resource-constrained compared to the AP, Google is choosing to harden the most exposed attack surface while minimizing any performance/stability impact.
In addition, Google has also scaled its fuzzing activities to allow fuzzers to run in perpetuity (continuous fuzzing), in the hopes of finding and patching more bugs in firmware.
Google continues to accept reports from third-party contributors. With the launch of Android 13, Google updated its Vulnerability Rewards Program to "further highlight remotely exploitable bugs in connectivity firmware."
More details in Google's blog post.
In particular, they are exploring and enabling compiler-based sanitizers (BoundSan, IntSan) and other exploit mitigations (CFI, kCFI, Shadow Call Stack, Stack Canaries) as well as enabling further memory safety features in firmware.
Because bare metal targets are severely resource-constrained compared to the AP, Google is choosing to harden the most exposed attack surface while minimizing any performance/stability impact.
In addition, Google has also scaled its fuzzing activities to allow fuzzers to run in perpetuity (continuous fuzzing), in the hopes of finding and patching more bugs in firmware.
Google continues to accept reports from third-party contributors. With the launch of Android 13, Google updated its Vulnerability Rewards Program to "further highlight remotely exploitable bugs in connectivity firmware."
More details in Google's blog post.
Google Online Security Blog
Hardening Firmware Across the Android Ecosystem
Posted by Roger Piqueras Jover, Ivan Lozano, Sudhi Herle, and Stephan Somogyi, Android Team A modern Android powered smartphone is a comp...
👍25👏7❤4
Google Play Protect is now using a new "Protected Download" API to verify the integrity of models and heuristics downloaded onto devices, ensuring malware authors haven't tampered with them. Protected Download "enables downloading of resources to the device with support for a binary transparency log based verification", ensuring that the resources are officially from Google.
Protected Download is a new API offered by "Private Compute Services", the open source app that Android System Intelligence (part of Android's "Private Compute Core") uses to retrieve model updates from external servers. "The mechanism of download is open-sourced to show that through the connection to the server personal user data is not sent to Google, but rather receiving the model or heuristics in an encrypted and verified manner."
I haven't seen a public announcement of this yet, but it was released last week.
Protected Download is a new API offered by "Private Compute Services", the open source app that Android System Intelligence (part of Android's "Private Compute Core") uses to retrieve model updates from external servers. "The mechanism of download is open-sourced to show that through the connection to the server personal user data is not sent to Google, but rather receiving the model or heuristics in an encrypted and verified manner."
I haven't seen a public announcement of this yet, but it was released last week.
GitHub
release Protected Download · google/private-compute-services@1f7cf2c
PiperOrigin-RevId: 509476510
👍11👏2
Google paid out >$12m in bounties for >2900 issues submitted through their Vulnerability Reward Program (VRP) in 2022.
The Android VRP paid out ~$4.8m in rewards, including the highest payout in Google VRP history at $605k. The Android Chipset Security Reward Program (ACSRP), an invite-only reward program offered by Google in collaboration with SoC vendors, rewarded $486k in 2022 for >700 reports.
Google has expanded the scope of its VRP to include more Google devices, incentivizing research into "the latest versions of Google Nest and Fitbit".
More details on Google's VRP in 2022 can be found in this blog post.
The Android VRP paid out ~$4.8m in rewards, including the highest payout in Google VRP history at $605k. The Android Chipset Security Reward Program (ACSRP), an invite-only reward program offered by Google in collaboration with SoC vendors, rewarded $486k in 2022 for >700 reports.
Google has expanded the scope of its VRP to include more Google devices, incentivizing research into "the latest versions of Google Nest and Fitbit".
More details on Google's VRP in 2022 can be found in this blog post.
👏20👍5
Magic Eraser is no longer exclusive to Pixel phones! Google One members on iOS and Android can use Magic Eraser in Google Photos starting today. It'll also be available on all Pixels now (no Google One membership needed), not just the Pixel 6 and later.
Google One members are also getting free shipping on print orders (US, CA, EU, and UK), HDR effect now works on videos too, and the collage editor now lets you apply Styles to a single photo and try a range of new Styles.
Source
Google One members are also getting free shipping on print orders (US, CA, EU, and UK), HDR effect now works on videos too, and the collage editor now lets you apply Styles to a single photo and try a range of new Styles.
Source
Google
Magic Eraser plus more Google Photos features coming to Google One
Magic Eraser and more enhanced editing features in Google Photos coming to Google One members and all Pixel users.
🔥31👍9😱5👏4
This media is not supported in your browser
VIEW IN TELEGRAM
Want to check if your Android device passes the Play Integrity API check? You can use Google Play's new built-in Play Integrity checker available in version 34.6.11 or later.
Here's how:
1) Open Google Play and go to Settings
2) Expand "About" and tap on "Play Store version" until you see "You are now a developer!"
3) Expand "General" and tap on "Developer options"
4) Tap on "check integrity"
H/T @nailsad_eleos
Here's how:
1) Open Google Play and go to Settings
2) Expand "About" and tap on "Play Store version" until you see "You are now a developer!"
3) Expand "General" and tap on "Developer options"
4) Tap on "check integrity"
H/T @nailsad_eleos
❤30👍13❤🔥1👏1
Android 14 has a new system app called "Credential Manager", enabling platform support for passkeys within 3rd-party password managers. In DP1, CredMan displays test data, but Dashlane shared a demo of what it'll look it to create and input a passkey.
Attached are some screenshots showing off Credential Manager (with test data) in Android 14 DP1. It's clearly still a WIP. You'll be able to have up to 5 autofill/password manager services enabled simultaneously.
A backward compatible version of Credential Manager is available through a Jetpack library. Devices supporting the framework version in Android 14 will declare 'android.software.credentials'.
More details in Dashlane's blog post. H/T @9to5google for spotting the blog post.
Attached are some screenshots showing off Credential Manager (with test data) in Android 14 DP1. It's clearly still a WIP. You'll be able to have up to 5 autofill/password manager services enabled simultaneously.
A backward compatible version of Credential Manager is available through a Jetpack library. Devices supporting the framework version in Android 14 will declare 'android.software.credentials'.
More details in Dashlane's blog post. H/T @9to5google for spotting the blog post.
👍35❤6🔥2🤯1
In the latest Android Auto beta (9.0), you can now change the default layout to put navigation or media closer to the driver. Before this, you'd have to start AA and then tap on the media card to switch its position, but this changes the default startup split-screen layout.
You can also change this setting from within Android Auto's headunit UI.
H/T to Redditor Gianfcal for spotting this.
You can also change this setting from within Android Auto's headunit UI.
H/T to Redditor Gianfcal for spotting this.
👍20💊1
Some users are reporting that Google Play is telling them that "recent data from similar devices show that this app may stop working on your device."
This seems like a neat feature of Google Play. If an app is having a bunch of crashes and ANRs on particular device models, it would be useful to let other users of that same device model know ahead of time to perhaps wait for an update.
I haven't seen this before, so I think it could be relatively new. Correct me if this has been around for a long time and I just missed it. All the mentions of it I've found are recent, with the earliest being in October.
Screenshot credits: @Felixlix45
—-
UPDATE: It looks like this was announced in October 2022.
This seems like a neat feature of Google Play. If an app is having a bunch of crashes and ANRs on particular device models, it would be useful to let other users of that same device model know ahead of time to perhaps wait for an update.
I haven't seen this before, so I think it could be relatively new. Correct me if this has been around for a long time and I just missed it. All the mentions of it I've found are recent, with the earliest being in October.
Screenshot credits: @Felixlix45
—-
UPDATE: It looks like this was announced in October 2022.
👍21👀7🔥4
This media is not supported in your browser
VIEW IN TELEGRAM
If you're an app developer and want to test Android 14's improved predictive back gesture animation (w/ support for cross-task & in-app transition previews) as shown in the below video, here's how 👇
You'll need a device running Android 14 DP1, of course. You'll also need root access, though, so if you don't/can't root your Pixel, then the Android Emulator will suffice as it allows for adb root.
All you have to do is run these commands in an elevated shell:
1) Enable new predictive back animations:
2) Restart system_server:
And voila! You should see the new animations. That's provided you also have "predictive back animations" enabled in Developer Options, as otherwise even the back-to-home animation is disabled. If your app targets API 33, you'll also need to opt in.
In future Android 14 previews, you probably won't have to enable this new predictive back animation using root, but I don't know if that'll happen in DP2, Beta 1, or later.
For the full details on the predictive back gesture improvements coming to Android 14, check out this article I wrote for XDA-Developers a few weeks back.
You'll need a device running Android 14 DP1, of course. You'll also need root access, though, so if you don't/can't root your Pixel, then the Android Emulator will suffice as it allows for adb root.
All you have to do is run these commands in an elevated shell:
1) Enable new predictive back animations:
setprop persist.wm.debug.predictive_back_anim 12) Restart system_server:
stop && startAnd voila! You should see the new animations. That's provided you also have "predictive back animations" enabled in Developer Options, as otherwise even the back-to-home animation is disabled. If your app targets API 33, you'll also need to opt in.
In future Android 14 previews, you probably won't have to enable this new predictive back animation using root, but I don't know if that'll happen in DP2, Beta 1, or later.
For the full details on the predictive back gesture improvements coming to Android 14, check out this article I wrote for XDA-Developers a few weeks back.
👍12🤩4❤2
Google Keep's new single note widget is rolling out starting today on Android devices. This widget lets you pin a note or list to your home screen and toggle checkboxes directly without opening the app (!)
Google announced this new widget a few days back at MWC, but according to the Google Workspace blog, the rollout begins today and will take up to 15 days to complete.
Google announced this new widget a few days back at MWC, but according to the Google Workspace blog, the rollout begins today and will take up to 15 days to complete.
👍31