Tadi Channel – Telegram
Tadi Channel
796 subscribers
357 photos
12 videos
6 files
219 links
Random stuff I consider worthy of sharing. Mostly tech.
Download Telegram
A phone stopped being usable because server said no :(
https://fixupx.com/developeruwu/status/1945021367939666004

(yes, I'm aware that you can probably bypass that in plentitude of ways, I just hope that activation mechanisms will be abandoned through an OTA whenever the servers stop handling them, but one could dream)
😐8
Pura 70 Ultra knockoff with curved display, metal frame and supposedly Helio G81.
😁12😐4🤯2
So Google already acknowledges the feasibility of proxying PIA results to/from (a good linguistic question...) vulnerable devices
😐9🤯3
Tadi Channel
FYI to any Android app dev: This toggle in Play console doesn't effectively secure your app against tampering. Instead, it'll prevent sideloading the app even while it's a completely untouched original binary. This means that if Google Play is the sole distributor…
To run an untouched (just kidding, the toggle in question and GP signing cause your app to be far from "untouched") original app enrolled into this unnecessary restriction, use:
pm disable com.your.app/com.pairip.licensecheck.LicenseContentProvider
😁12🥰3😐1
https://github.com/pperez39/google-keys/

This repo is either a very high quality fake or Google's own leak of keyboxes they managed to obtain (not from themselves), divided into ones they decided to revoke and ones which they didn't. The details you can see in csv tables don't look like anything a third party would bother to catalogue.
🔥12😁5🤯3😐2
Tadi Channel
https://github.com/pperez39/google-keys/ This repo is either a very high quality fake or Google's own leak of keyboxes they managed to obtain (not from themselves), divided into ones they decided to revoke and ones which they didn't. The details you can see…
Essentially, could say it's a mix of current state of revocations and a roadmap of future revocations.
It'd be exceptionally odd for any third party to mark the source of compromise in the level of details you can see in the csv, since it wouldn't really matter as long as you have a bunch of valid keyboxes around that would be obtained directly by you with no means of guessing how likely your gray market competitor would be to possess them.
😐3
Except using them to pass PIA, what can you do?
Simple: observe for their revocations and see how much longer the major OEM keys will stay unrevoked compared to B brands. What kind of conclusions or actions you'll take later is up to you.
😐3
Deutsche Telekom released schizo ads targeted at gen Z that likely won't make them any money. I guess that's good.

https://youtube.com/watch?v=75nQs45HP50

(No, I'm not paid, I saw this ad on Reddit and it felt good to see an ad expected to be net negative for the business)
🔥2😁2😐2
Fold 7 can't be bootloader unlocked, while running stable OneUI 8. Either they rushed it for the marketing points, making it equivalent to a beta (as other devices are still on beta, where they indeed aren't unlockable at this point in time) or Samsung is about to lose money on the people (including businesses) who'll move to Pixels, Nothing and OnePlus (not an exhaustive list).
😐9😁1
The watchful people who had internet in 2000s and early 2010s know that most of internet safety comes from not oversharing your personal details, and that presence of invasive know-your-customer practices by commercial entities is a major source of personal information leaks. But the topic of what we can do about it in technical aspect is rare.

One of the few things that remain alive in the current internet against all of the legal odds are torrents. And plenty of them thrive on DHT (distributed hash table), which is independent to trackers (predefined centralized servers that come and go).

A chat infra can be as sustainable. But people want reliability and low battery drain, okay, that can be done too. The biggest issue with distributed chat apps is narrow vision, a bet on a certain point in the decentralization spectrum. How many servers you need? What must motivate people to setup servers? What are the obligations of a server owner? What a server owner will have to accept? What's the impact of servers on their users?

Those are very serious questions with pretty long answers beyond the scope of this post. What I really want to say is that "zombies" are good. Chat app designs so invulnerable to politics and design flaws that a build from 2013 will still keep working for the few remaining users decade later. Yes, you can bet there's a known unpatched security flaw present at that point. But that is fine! Why? Because you can resurrect the project or the idea any day, but now do it better, because you'll be equipped with the answer to why it kept working for an unmaintained decade.

So what I propose? Design for both a tragic and thriving internet. If you can save battery on a mobile device, take advantage of it. If you can lessen the ping, take advantage of it. If you can enroll a user more easily into being a seed, if you can optimize for very large groups, please do. Just have a fallback for everything. The most obvious part (because it's stored offline) is self-sovereign identity. You're a public key and private key, not a username and password on a specific server. A lot can be done.

What I think we're missing the most? Actually, the attention. You can consider this post as a teaser for completely-no-ETA post that evaluates the UX and as much of what I can technically understand in various distributed chat projects. Some of them are exceptional at a thing or two and deserve a standing ovation for that. The recognition of individual qualities and number of users motivate developers and give them a better chance for funding.
19👍4😐1
Tadi Channel
Fold 7 can't be bootloader unlocked, while running stable OneUI 8. Either they rushed it for the marketing points, making it equivalent to a beta (as other devices are still on beta, where they indeed aren't unlockable at this point in time) or Samsung is…
A sign of potential unintentionality is that people actually report the devices locked themselves after the update to beta. Even in case of OEMs that offer no official means to unlock, taking an action against already unlocked units isn't something you hear about often. You don't want to mess with devices of people who followed a widely known documented behavior, that's a legal risk.
👏4😐2
Ayaneo plans to release a slider gaming phone, hopefully secure boot off for the freedoms we desire.
🤯3😐1
Most OEMs at some point
😁15😐1
‘iPhone 17 Pro’ reappears in regulatory listings alongside Pro Max, Air


Smh, now the high-end everywhere will consist of a basic model, same size pro model, a big specifically thin model and a big pro max/ultra? Apple effect is scary. But thanks for smaller Pros, I guess.
😐6
Tadi Channel
This clause obviously won't come to global (skipping the illegality), as Xiaomi seemingly thinks that their limited permission system works well enough to keep people consooooming their products in belief that they're "normally unlockable", so it'll take time…
Everyone already heard of Chinese people coming into Xiaomi service centers to ask for a rollback and snatch their device while it's bootloader unlocked for the procedure.
It looks realistic and if it were fake, Chinese nerd friends would likely tell me. But that creates two interesting conclusions:
1. Either EDL rollback is broken or these service centers often have a hardware/software/skill issue regarding it. A friend of mine had a personal experience where this happened and he needed to help them.
2. Instant bootloader unlock capability is still given to Chinese service centers like candy. The only reason of why it costs 100$+ now on the gray market is either the gray market's incapability of finding enough service centers to bribe or lack of skill to generate and capture the unlock keys covertly. Telemetry on service center PCs may log and report the situations where an unlock isn't followed by a lock and especially log any kind of USB redirection software.
Other possibility is that the unlock state of individual devices is tracked directly whenever these users keep running HOS. Especially if their data says they're clearly abroad or running a global stock, it can be near-impossible to expect gray market's end users to protect the origin of service they're relying on through countless middlemen.

So, you want your Chinese Xiaomi unlocked for free? Befriend a Xiaomi service center guy in China, give them your device, let them unlock, figure out something to backup the unlock key or spoof the bootloader screen and add a fake fastboot so that the lock is never executed. Then right afterwards flash AOSP. Your Xiaomi friend will be safe.

Oooor alternatively, if you overpaid for a global unit and live in EU, just try the snatching technique, it's probably legal. You're not stealing any license, you're just taking back your property. This time you'll save 40-80€, still good.
🤯10😁64🔥3👍1😐1