Huawei gave up to European Market
Source

"The company is not competing in the mobile phone market. Huawei just wants to survive."
~ Huawei CEO

Join @TechLeaksZone for latest tech related leaks and news!

Google has announced that Android 13 is the first Android release where the majority of new code is written in a memory safe language. About 21% of all new native code added to Android 13 is written in Rust.

The drop in memory safety vulnerabilities (223 in 2019 to 85 in 2022) and the severity of vulnerabilities overall have been credited to Google's shift away from memory unsafe languages.
2022 is the first year where memory safety vulnerabilities aren't a majority of Android vulneraility

Join @TechLeaksZone for latest tech related leaks and news!

The new date for Xiaomi Event is 8th December, 2022

Many products will be launching in this event:
Xiaomi 13 series, MIUI 14, Xiaomi Mix 2 foldable smartphone, Sound Pro, Xiaomi router, Xiaomi Buds 4 and more

The event was postponed due to death of China's Ex Prime Minister

Join @TechLeaksZone for latest tech related leaks and news!

Android security keys from OEM's have been leaked, making phones vulnerable to malicious attacks
Source

Multiple Android OEMs had their platform signing keys leaked outside of their companies.
It's used to ensure that the version of Android that’s running on your device is legitimate and to sign system apps on Android builds, including the "android" app itself.

A malicious attacker with those app signing keys would be able to use Android's “shared user ID” system to give malware full, system-level permissions on an affected device, which makes all data on an affected device available to an attacker.

This malware sample seems to be signed by Samsung, when in reality is a malicious app which could fool people in thinking that it's legitimate.

An attacker can add malware to system apps like Bixby and use these keys to sign them for Android to trust it as an update to the app, regardless if it's sideloaded or installed from the Play Store.

Google’s didn't announce which OEMs were affected, but the VirusTotal scans revealed the OEM's that had their keys leaked: Samsung, LG, Mediatek, Revoview and szroco (Walmart’s Onn tablets)

Click here to know how dangerous it is

Join @TechLeaksZone for latest tech related leaks and news!

How dangerous is this issue?

Besides the Play Store, you can use sites that host APK files to sideload an app. A hacker could upload malicious files to these sites, which would be hosted there since the security key matches the original key.

Modded apps are also affected by that as they're signed by keys which could be used by attackers.

We recommend you to:
• Don't sideload apps outside of the Google Play Store or OEM app store like Galaxy Store
• Update your phone to latest security patch, and if updates have ended consider getting a new phone or flashing a Custom ROM for it to be up to date

Since the issue was reported in May 2022, Samsung and other affected companies have already “taken remediation measures to minimize the user impact” of these major security leaks

Google clarified that people’s devices are protected against this particular vulnerability in a handful of ways: including Google Play Protect, mitigations from device makers and more.

This exploit did not get into apps distributed through the Google Play Store.

Join @TechLeaksZone for latest tech related leaks and news!

SMS' 30th birthday & RCS getting end-to-end encryption support
Google Blog

Happy Birthday & RIP SMS.
Today, 30 years ago a software engineer sent the world’s first SMS message. 
But now it's time for RCS.

RCS stands for Rich Communication Services and Google is testing end-to-end encryption for group chats in the Messages app on it.

RCS is a hypercharged version of SMS with features like typing indicators, delivery, and read receipts and many more features.

Google said that "Today, all of the major mobile carriers and manufacturers have adopted RCS as the standard – except for Apple. Apple refuses to adopt RCS and continues to rely on SMS when people with iPhones message people with Android phones, which means their texting is stuck in the 1990s"

Join @TechLeaksZone for latest tech related leaks and news!

Creators can now earn money with Discord server subnoscriptions

Discord is expanding the availability of Server Subnoscriptions, allowing creators to earn money directly within their server.

Server owners can now enable subnoscriptions if met these criteria:
• Based in the US and be 18 years or older
• Account in good standing
• Agreed to the Monetization Terms and Server Subnoscriptions Policy
• Email and phone number verified with 2FA enabled

Creators can set the tier costs with each one giving members unique perks, roles and benefits.

Discord is taking 10% of the cut, giving the 90% to the server owners to keep (for comparison Patreon takes 5-12%).

Join @TechLeaksZone for latest tech related leaks and news!