The technical write-up for CVE-2023-45779 has been published by Tom Hebb of Meta's Red Team X, revealing that several Android OEMs such as ASUS, Fairphone, Lenovo, Microsoft, Nokia, Nothing, and Vivo, were signing some of their APEX modules with the test keys publicly available in AOSP.

This would have allowed a user or attacker (with shell privileges) to forge an APEX update to "gain near-total control over [the device]."

This issue was fixed by most affected OEMs with the December 2023 security patch, though, and it's quite hard to exploit by actual attackers - still, the issue reveals deficiencies in the Compatibility Test Suite (CTS) and AOSP documentation that are being resolved in response.

Google says they've added a test to their Build Test Suite (BTS) to warn of vulnerable APEXes and that changes to CTS are coming (but the latter won't be public until Android 15's release).

The Xiaomi 14 Pro versus Samsung S24+ CPU Throttle test post has been deleted because of the wrong comparison

One user pointed out that the on-surface temperature of Xiaomi 14 Pro was measured from the back while with S24+, it was measured from on-screen leading to an unfair comparison

Secondly, it was my fault for not taking both the comparison pics from the same user which I didn't notice it previously

Now with Exynos 2400, there is a little BAD News!

One of the sources close to Geekerwan has claimed that Geekerwan will NOT make any video on the Samsung Exynos 2400 efficiency and performance :(
Geekerwan tests are one of the most trustable and reliable when it comes to comparing Smartphone CPUs

However, Geekerwan will publish the efficiency curve of Exynos 2400 while comparing it with other SoCs

Expect a post on that whenever Geekerwan publishes it, to check how much Samsung has improved now

Follow @TechLeaksZone

Budget Galaxy Z Fold is coming

Samsung calls the Flip/Fold series B1/2/3/4/5 or Q1/2/3/4/5 internally.

Galaxy Z Flip 6 codenamed B6 comes with model number SM-F741
Galaxy Z Fold 6 codenamed Q6 has model number SM-F956

Since the leaker also spotted "Q6A", this indicates that a "budget" Galaxy Z Fold smartphone likely to be called Galaxy Z Fold FE will launch as well

It will be powered by Exynos 2490 which will be manufactured on Samsung's 3nm node with GAA architecture

Exynos 2490 will be underclocked and will be slower than the Exynos 2400
However, it will be MORE efficient than Exynos 2400

Follow @TechLeaksZone

Samsung Galaxy Fit 3 Leaked

Samsung's existing Galaxy Fit 2 smart band was launched back in 2020.
Now Samsung Galaxy fit 3 details were leaked by Samsung themselves on their website

Specifications:
• 1.61-inch AMOLED display
• 16MB storage
• 256MB RAM
• Runs on RTOS (custom OS)
• Aluminium Frame

Over 100 exercises
Heart Rate Monitoring, Blood oxygen Tracking, Sleep tracking, etc

• 21 days battery life
• 5ATM & IP68 certified
Colors: Dark Gray, Prism Crush White & Pink Gold

Follow @TechLeaksZone

Indian Government slashes import duty on mobile spare parts from 15% to 10%

India has cut import duty for components used in the manufacture of mobile phones to 10% from 15% previously.

These components include battery enclosures, primary lenses, rear covers, sealing gaskets/cases, SIM sockets, screw, and various mechanical components made from a combination of plastic and metal including GSM Antenna

Follow @TechLeaksZone

Apple Vision Pro does not come with physical controllers thus allowing users to control it using hand gestures

However, when you're using the Vision Pro, the headset will pick up the hand gestures of "anyone" within the FOV (Field of View) of the sensors....enabling brand new ways to mess up with your workflow
Good job 👍🏻👍🏻👍🏻

Follow @TechLeaksZone

Tab auto grouping in Edge leaks your open sites to Microsoft. This AI-powered feature sends the full browsing session to company's servers to build the groups. But this is not mentioned anywhere.

Anything AI-* is not a local or offline feature. Copilots and other AI capabilities are integrated in Microsoft Edge, but they perform data processing on the server side. It is easy to check this by going offline for a moment. You will quickly find that Edge will not be able to group tabs automatically, as it can't reach Microsoft's servers for that.

So Microsoft should clearly notify the user that his data will be sent and processed online. The feature itself is very convenient and time saving option. But users who care about their privacy may prefer to avoid it, and create tab groups manually. Or even switch to a different browser.

real

👨‍💻 @agamtechtricks

so Xiaomi announced HyperOS Global bootloader unlocking guide (only applied for devices comes with HyperOS or any MIUI devices updated to HyperOS):
_________________________________________________________________
+ Your Xiaomi Community app needs to be at version 5.3.31
+ Your Xiaomi Community account has to be at least 30 days active (no need to be Level 5 like CN)
+ You need to set your Xiaomi community region at Global to register (after you set Global region, there will be an "Unlock bootloader" section inside "Me"). After you had successfully registered, you will have to wait for 72hrs (3 days) to get verified for unlocking bootloader
+ Your unlocking license valid for only 1 year
+ Maximum 3 Xiaomi devices can be unlocked in 1 year with the unlocking license
+ Just like CN, if you were on MIUI you cannot receive HyperOS update, but if you already got HyperOS u can still receiving OTA
+ Only 2000 unlocking licenses get registered per day (GMT+8), if u can't register, come back tomorrow to get an early slot asap
__________________________________________________________________

Anyway FUCK YOU XIAOMI, I hope all of your revenue GOING DOWN TO THE DEEPEST PLACE OF HELL, TO THE MINUS, TO THE FUCKING BACKRUPTCY & NOBODY BUYING YOUR FUCKING PHONES ANYMORE.
YOU JUST DESTROYED YOUR FUCKING OWN GLORY THAT OVER 50% BUILT BY YOUR COMMUNITY, BITCH!