Google made something terrible:

If you ever coded an android app, then in .idea/deploymenttargetselector.xml there will be your serial number of your phone connected to your android studio.

Now comes the best part: It's not included in .gitignore.

We have seen people's location getting leaked for using OEM android systems that comes with location tracker. And all you need to track the phone is the serial number.

Now look at github and you will be amazed at how much serial numbers are there on the internet.

PSA: update WinRar (or switch to 7zip)

https://www.tomshardware.com/tech-industry/cyber-security/newly-discovered-winrar-exploit-linked-to-russian-hacking-group-can-plant-backdoor-malware-zero-day-hack-requires-manual-update-to-fix