The GitHub CSS Injection Vulnerability
Today, a CSS injection vulnerability was discovered which allowed the GitHub profile to have some discord profile-like customization
Apart from profile CSS injection, a CSS injection on the issues tab was also discovered which resulted in the issues being hijacked.
When the link is clicked, it quickly flashes in black & white a Discord invitation link.
Next, a security researcher discovered ReadMe. MD files can force following/liking/logging people out of their GitHub profiles.
Oh, and you can make IP grabbers!
Working of the CSS Injection:
LaTeX is a CSS library that makes a website look like a LaTeX document. But it was discovered that using some special code on the Readme.MD page can tell the GitHub profile to load CSS.
Now when GitHub sees the payload, it tries to understand the latex, but instead, it ends up loading the CSS, changing the profile in ways it wasn't supposed by filling it with the gifs or images that are linked in the code
Follow @TechLeaksZone
Today, a CSS injection vulnerability was discovered which allowed the GitHub profile to have some discord profile-like customization
Apart from profile CSS injection, a CSS injection on the issues tab was also discovered which resulted in the issues being hijacked.
When the link is clicked, it quickly flashes in black & white a Discord invitation link.
Next, a security researcher discovered ReadMe. MD files can force following/liking/logging people out of their GitHub profiles.
Oh, and you can make IP grabbers!
Working of the CSS Injection:
LaTeX is a CSS library that makes a website look like a LaTeX document. But it was discovered that using some special code on the Readme.MD page can tell the GitHub profile to load CSS.
Now when GitHub sees the payload, it tries to understand the latex, but instead, it ends up loading the CSS, changing the profile in ways it wasn't supposed by filling it with the gifs or images that are linked in the code
Follow @TechLeaksZone
🤣56👍5🤯5❤3🆒3
Microsoft Discovers Dirty Stream Vulnerability in Android Apps
Microsoft has discovered a critical security loophole dubbed "Dirty Stream," which could allow malicious Android apps to overwrite files in another application's home directory, potentially leading to arbitrary code execution and stealing valuable user information.
The flaw arises from the improper use of Android's content provider system, typically designed to facilitate secure data exchange between different applications on a device. It includes safeguards such as strict isolation of data, URIs (Uniform Resource Identifiers), and thorough validation of file paths to ward off unauthorized access.
When implemented incorrectly, custom intents, which are messaging objects that facilitate communication between components across Android apps, could bypass these security measures.
For example, vulnerable apps may fail to adequately check file names or paths, allowing a malicious app to sneak in harmful code camouflaged as legitimate files.
Microsoft’s investigation revealed that this vulnerability is NOT an isolated issue, as the research found incorrect implementations of the content provider system prevalent across many popular Android apps.
Affected apps include Xiaomi’s File Manager (1B+ downloads) and WPS Office (500M+ installs)
Follow @TechLeaksZone
Microsoft has discovered a critical security loophole dubbed "Dirty Stream," which could allow malicious Android apps to overwrite files in another application's home directory, potentially leading to arbitrary code execution and stealing valuable user information.
The flaw arises from the improper use of Android's content provider system, typically designed to facilitate secure data exchange between different applications on a device. It includes safeguards such as strict isolation of data, URIs (Uniform Resource Identifiers), and thorough validation of file paths to ward off unauthorized access.
When implemented incorrectly, custom intents, which are messaging objects that facilitate communication between components across Android apps, could bypass these security measures.
For example, vulnerable apps may fail to adequately check file names or paths, allowing a malicious app to sneak in harmful code camouflaged as legitimate files.
Microsoft’s investigation revealed that this vulnerability is NOT an isolated issue, as the research found incorrect implementations of the content provider system prevalent across many popular Android apps.
Affected apps include Xiaomi’s File Manager (1B+ downloads) and WPS Office (500M+ installs)
Follow @TechLeaksZone
👍31😱15👏3
Google Pixel Watch 3 Renders
Source
The Google Pixel watch 3 will launch alongside Google Pixel 9 series and Pixel 9 Fold in October.
This time, the Pixel watch would be available in two sizes unlike the Pixel watch 2 which was available only in 41mm size.
It will also sport a slightly larger battery with 307mAh capacity and thus would be a bit thicker as well compared to the Pixel Watch 2
The Pixel Watch 3 is also tipped to feature a 1.2-inch display, the same as its predecessor.
In terms of dimensions, the Pixel Watch 3 measures 40.79 x 40.73 x 14mm compared to the Pixel Watch 2 which measures 1.2-inch and 41 x 41 x 12.3mm.
Follow @TechLeaksZone
Source
The Google Pixel watch 3 will launch alongside Google Pixel 9 series and Pixel 9 Fold in October.
This time, the Pixel watch would be available in two sizes unlike the Pixel watch 2 which was available only in 41mm size.
It will also sport a slightly larger battery with 307mAh capacity and thus would be a bit thicker as well compared to the Pixel Watch 2
The Pixel Watch 3 is also tipped to feature a 1.2-inch display, the same as its predecessor.
In terms of dimensions, the Pixel Watch 3 measures 40.79 x 40.73 x 14mm compared to the Pixel Watch 2 which measures 1.2-inch and 41 x 41 x 12.3mm.
Follow @TechLeaksZone
👍18❤🔥4❤1🔥1
World's First Audio and Video Call Made Using Spatial Audio
Nokia has made the World's FIRST audio and video call using 3D spatial audio on a Google Pixel 7 Pro smartphone.
Nokia placed the call over a cellular network using the 3GPP Immersive Video and Audio Services (IVAS) codec, allowing callers to hear “sound spatially in real-time.”
The IVAS codec is part of 5G Advanced, an upcoming upgrade to 5G networks that could offer faster speeds, more accurate cellular-based positioning, etc.
Currently, all phone calls made over a cellular network are monophonic, meaning audio is compressed into a single channel. Spatial audio, on the other hand, makes it seem like sounds are coming from different directions as they’re delivered through multiple channels.
The IVAS codec could enable spatial audio in a “vast majority” of smartphones with at least 2 microphones. However, it will still take few more years to be available in the market.
Follow @TechLeaksZone
Nokia has made the World's FIRST audio and video call using 3D spatial audio on a Google Pixel 7 Pro smartphone.
Nokia placed the call over a cellular network using the 3GPP Immersive Video and Audio Services (IVAS) codec, allowing callers to hear “sound spatially in real-time.”
The IVAS codec is part of 5G Advanced, an upcoming upgrade to 5G networks that could offer faster speeds, more accurate cellular-based positioning, etc.
Currently, all phone calls made over a cellular network are monophonic, meaning audio is compressed into a single channel. Spatial audio, on the other hand, makes it seem like sounds are coming from different directions as they’re delivered through multiple channels.
The IVAS codec could enable spatial audio in a “vast majority” of smartphones with at least 2 microphones. However, it will still take few more years to be available in the market.
Follow @TechLeaksZone
🔥57👍15❤2🆒1
Apple really made a more Cursed Monet than Google 💀
Anyways, 3rd party app theming is supported on iOS 18 unlike in Android. However, it seems like it is mostly just a filter on top to theme them
Follow @TechLeaksZone
Anyways, 3rd party app theming is supported on iOS 18 unlike in Android. However, it seems like it is mostly just a filter on top to theme them
Follow @TechLeaksZone
🤡161🤣52👎5👍3😐3❤🔥1😁1🌚1👀1
This media is not supported in your browser
VIEW IN TELEGRAM
New Control Center in iOS 18
With the iOS 18, Apple has redesigned the Control Center.
This is also your first look at an upcoming new QS tiles in HyperOS since Xiaomi will kang it sooner or later
The Control Center can now be continuously swipe to get to more control center screens.
There's a new controls gallery that lets you customize the controls & change the size of buttons to emphasize priority.
Additionally, developers can include controls from their own apps, enabling quick access to controls
The new Controls API from Apple also allows you to switch up the controls on your iPhone's lock screen, so you can replace the traditional flashlight and camera buttons with something more convenient to you. The Control Center buttons can also be assigned to the physical Action button.
Follow @TechLeaksZone
With the iOS 18, Apple has redesigned the Control Center.
This is also your first look at an upcoming new QS tiles in HyperOS since Xiaomi will kang it sooner or later
The Control Center can now be continuously swipe to get to more control center screens.
There's a new controls gallery that lets you customize the controls & change the size of buttons to emphasize priority.
Additionally, developers can include controls from their own apps, enabling quick access to controls
The new Controls API from Apple also allows you to switch up the controls on your iPhone's lock screen, so you can replace the traditional flashlight and camera buttons with something more convenient to you. The Control Center buttons can also be assigned to the physical Action button.
Follow @TechLeaksZone
🤡56👍18🤣11👎3😁1🌚1
iPhone Users can finally place apps anywhere on their homescreen after 18 years
Apple announced iOS 18 today with two notable changes for the Home Screen: the ability to place app icons anywhere, and a dark tint option for app icons.
iPhone users can now place app icons anywhere on the Home Screen as Apple now allows blank spaces, rows, and columns between app icons, which can reveal more of the wallpaper.
App icons can now have a dark or tinted appearance, with many color options available. Icons can be manually set to appear in dark or light mode, or they can automatically switch based on whether Dark Mode is turned on or off on the iPhone.
Follow @TechLeaksZone
Apple announced iOS 18 today with two notable changes for the Home Screen: the ability to place app icons anywhere, and a dark tint option for app icons.
iPhone users can now place app icons anywhere on the Home Screen as Apple now allows blank spaces, rows, and columns between app icons, which can reveal more of the wallpaper.
App icons can now have a dark or tinted appearance, with many color options available. Icons can be manually set to appear in dark or light mode, or they can automatically switch based on whether Dark Mode is turned on or off on the iPhone.
Follow @TechLeaksZone
🤣130🤡18👍7👎2🌚2🔥1😁1🤨1
iOS 18 will let users lock and hide apps
iOS 18 will let users lock system Apple apps and 3rd-party apps. Authentication would be needed using FaceID or TouchID to access these apps even if the phone is unlocked
Android’s version locks the phone to the current running app, allowing the user to access only that app unless biometrics or a PIN is used to exit.
In contrast, Apple’s app lock secures specific apps that you have previously selected.
Additionally, users can hide apps they wish to keep discreet, which will not be visible in the app drawer and will only be accessible through authentication.
Furthermore, iOS 18 will ensure that while the app lock feature is active, information from within these locked apps does not appear in search results or notifications
This feature is somewhat similar to Android 15’s new Private Space and Samsung’s Secure Folder
Follow @TechLeaksZone
iOS 18 will let users lock system Apple apps and 3rd-party apps. Authentication would be needed using FaceID or TouchID to access these apps even if the phone is unlocked
Android’s version locks the phone to the current running app, allowing the user to access only that app unless biometrics or a PIN is used to exit.
In contrast, Apple’s app lock secures specific apps that you have previously selected.
Additionally, users can hide apps they wish to keep discreet, which will not be visible in the app drawer and will only be accessible through authentication.
Furthermore, iOS 18 will ensure that while the app lock feature is active, information from within these locked apps does not appear in search results or notifications
This feature is somewhat similar to Android 15’s new Private Space and Samsung’s Secure Folder
Follow @TechLeaksZone
🤡61👍16🔥2👎1
This media is not supported in your browser
VIEW IN TELEGRAM
Apple Announced Tap to Cash with iOS 18
One of the more interesting additions in iOS 18 and WatchOS 11 is Tap to Cash letting users pay for things by tapping together a pair of iPhones.
"Continuing on our journey to replace your physical wallet, we're introducing Tap to Cash, a quick and private way to exchange Apple Cash without sharing phone numbers or email addresses,"
"With Tap to Cash, you can pay someone back for dinner just by holding your phones together."
However, Apple Cash services are provided by Green Dot Bank, Member FDIC, and are ONLY available in the U.S. on eligible devices
The Apple animations with dynamic island are always so cool 😍
Follow @TechLeaksZobe
One of the more interesting additions in iOS 18 and WatchOS 11 is Tap to Cash letting users pay for things by tapping together a pair of iPhones.
"Continuing on our journey to replace your physical wallet, we're introducing Tap to Cash, a quick and private way to exchange Apple Cash without sharing phone numbers or email addresses,"
"With Tap to Cash, you can pay someone back for dinner just by holding your phones together."
However, Apple Cash services are provided by Green Dot Bank, Member FDIC, and are ONLY available in the U.S. on eligible devices
The Apple animations with dynamic island are always so cool 😍
Follow @TechLeaksZobe
🆒40🤡13👍2
This media is not supported in your browser
VIEW IN TELEGRAM
iOS 18 will expand the display bezels to indicate when a button has been pressed
This feature is likely added for iPhone 16 series since they will feature capacitive touch buttons wherein volume buttons would be pressure-sensitive
Follow @TechLeaksZone
This feature is likely added for iPhone 16 series since they will feature capacitive touch buttons wherein volume buttons would be pressure-sensitive
Follow @TechLeaksZone
🆒98🤡20❤🔥6👍3🔥1
14 years later, iPads finally have a Calculator app
Apple announced a new Calculator app for iPads after 14 years of long wait for users with the iPadOS 18
This calculator app supports Apple Pencil and an interesting 'Math Notes' feature that allows users to type or write out mathematical expressions and see them instantly solved in their own handwriting. It's also possible to assign values to variables when learning new concepts in class, calculating a budget, and more.
With a new graphing feature, users can write or type an equation, insert a graph with just one tap, and add multiple equations on the same graph to see how they relate. Math Notes are also automatically accessible in the Notes app in a new Math Notes folder.
However, do NOT use the calculator app with two equations as it fails to solve them correctly as shown in the image above 🫠
Follow @TechLeaksZone
Apple announced a new Calculator app for iPads after 14 years of long wait for users with the iPadOS 18
This calculator app supports Apple Pencil and an interesting 'Math Notes' feature that allows users to type or write out mathematical expressions and see them instantly solved in their own handwriting. It's also possible to assign values to variables when learning new concepts in class, calculating a budget, and more.
With a new graphing feature, users can write or type an equation, insert a graph with just one tap, and add multiple equations on the same graph to see how they relate. Math Notes are also automatically accessible in the Notes app in a new Math Notes folder.
However, do NOT use the calculator app with two equations as it fails to solve them correctly as shown in the image above 🫠
Follow @TechLeaksZone
🤡56🤣21🆒7😁5👍2👎2🥴2⚡1🐳1
Media is too big
VIEW IN TELEGRAM
The New Redesigned Photos App
The Photos app is completely redesigned in iOS 18.
The app has been unified into a single view, with a photo grid at the top that views the entire library and collections organized by theme below. Users can use Months and Years views at the bottom, and there's a filter button that allows you to hide screenshots and sort in other ways.
The space below the grid includes Collections with the ability to browse by topics like Time, People, Memories, Trips, and more.
Recent Days show photos from the past few days, with things like photos of receipts filtered out automatically. People and Pets now gather photos of groups of people and collections can be reordered or pinned.
Swipe right from the grid and you'll see a new carousel with Featured Photos and other favorite collections. It automatically refreshes to surface new images.
Follow @TechLeaksZone
The Photos app is completely redesigned in iOS 18.
The app has been unified into a single view, with a photo grid at the top that views the entire library and collections organized by theme below. Users can use Months and Years views at the bottom, and there's a filter button that allows you to hide screenshots and sort in other ways.
The space below the grid includes Collections with the ability to browse by topics like Time, People, Memories, Trips, and more.
Recent Days show photos from the past few days, with things like photos of receipts filtered out automatically. People and Pets now gather photos of groups of people and collections can be reordered or pinned.
Swipe right from the grid and you'll see a new carousel with Featured Photos and other favorite collections. It automatically refreshes to surface new images.
Follow @TechLeaksZone
🤡34👍9❤1
This media is not supported in your browser
VIEW IN TELEGRAM
Apple brings iPhone mirroring to macOS, complete with notification syncing
Apple at WWDC announced MacOS 15 Sequoia, the next version of MacOS featuring Apple Intelligence, a new Password app, a major Safari update & new Continuity feature called iPhone Mirroring.
iPhone Mirroring allows you to view and control your iPhone right from your Mac. According to Apple, "a user's custom wallpaper and icons appear just like on their iPhone, and they can swipe between pages on their Home Screen, or launch & browse any of their favorite apps." Not only that, but also the keyboard, trackpad, & mouse on Mac let you interact with your iPhone, and audio even comes through."
Any app can be opened, and all the while, your iPhone can stay locked, so nobody else can access it. You can even drag and drop items and files from your Mac to your iPhone seamlessly. macOS 15 also brings iPhone notifications to Mac, where they appear alongside Mac notifications & can be responded to as well
Follow @TechLeaksZone
Apple at WWDC announced MacOS 15 Sequoia, the next version of MacOS featuring Apple Intelligence, a new Password app, a major Safari update & new Continuity feature called iPhone Mirroring.
iPhone Mirroring allows you to view and control your iPhone right from your Mac. According to Apple, "a user's custom wallpaper and icons appear just like on their iPhone, and they can swipe between pages on their Home Screen, or launch & browse any of their favorite apps." Not only that, but also the keyboard, trackpad, & mouse on Mac let you interact with your iPhone, and audio even comes through."
Any app can be opened, and all the while, your iPhone can stay locked, so nobody else can access it. You can even drag and drop items and files from your Mac to your iPhone seamlessly. macOS 15 also brings iPhone notifications to Mac, where they appear alongside Mac notifications & can be responded to as well
Follow @TechLeaksZone
👍30🤡8❤1❤🔥1
Apple Unveils Passwords app that syncs across iOS, iPad, Mac, and Windows
At WWDC 2024, Apple revealed a new standalone Passwords app to manage app and website passwords, verification codes, passkeys, and more & syncs your passwords across more devices including Macs, iPhones, iPads, and the Vision Pro headset. It also syncs with PCs via the iCloud for Windows app.
You can also view your Wi-Fi passwords in one place, and share passwords in groups with people you want to have them.
One big advantage could be that it will integrate even more deeply with your Apple logins and family-sharing setups than other options like 1Password or Bitwarden. MacOS will autofill to populate passwords in the Passwords app
Follow @TechLeaksZone
At WWDC 2024, Apple revealed a new standalone Passwords app to manage app and website passwords, verification codes, passkeys, and more & syncs your passwords across more devices including Macs, iPhones, iPads, and the Vision Pro headset. It also syncs with PCs via the iCloud for Windows app.
You can also view your Wi-Fi passwords in one place, and share passwords in groups with people you want to have them.
One big advantage could be that it will integrate even more deeply with your Apple logins and family-sharing setups than other options like 1Password or Bitwarden. MacOS will autofill to populate passwords in the Passwords app
Follow @TechLeaksZone
👍26🤡7❤🔥2👌1🆒1
This media is not supported in your browser
VIEW IN TELEGRAM
Apple's AI will let you create images and emoji of your own
Apple’s new “Apple Intelligence” AI features will let you make silly emojis of your own and images.
The custom emoji are called “Genmoji”
Apple showed how the prompt “smiley relaxing wearing cucumbers” generates a yellow smiley face emoji with cucumbers over its eyes. There are many options to choose from if you don't like that one
Apple has also unveiled a new 'Image Playground' feature that allows users to create generative images on the fly using a range of concepts like themes, costumes, accessories, places, and more.
With Image Playground, users can quickly create playful images, choosing from 3 styles: Animation, Illustration, or Sketch.
Previews are created on-device, and your generative images are accessible in Messages, Pages, Freeform, and even a dedicated Image Playground app
Apple Intelligence will ONLY support iPhone 15 Pro/ Pro Max and above
Follow @TechLeaksZone
Apple’s new “Apple Intelligence” AI features will let you make silly emojis of your own and images.
The custom emoji are called “Genmoji”
Apple showed how the prompt “smiley relaxing wearing cucumbers” generates a yellow smiley face emoji with cucumbers over its eyes. There are many options to choose from if you don't like that one
Apple has also unveiled a new 'Image Playground' feature that allows users to create generative images on the fly using a range of concepts like themes, costumes, accessories, places, and more.
With Image Playground, users can quickly create playful images, choosing from 3 styles: Animation, Illustration, or Sketch.
Previews are created on-device, and your generative images are accessible in Messages, Pages, Freeform, and even a dedicated Image Playground app
Apple Intelligence will ONLY support iPhone 15 Pro/ Pro Max and above
Follow @TechLeaksZone
👍22🤡3🆒2