Custom AOSP Project Treble GSI gets updated with June 2020 security patches, Netflix HD support for the Xiaomi Mi 9 and Redmi Note 9S, and more

Thanks to Project Treble, Android users can easily boot an AOSP Generic System Image (GSI) onto any supported device. Be it Xiaomi’s MIUI or Samsung’s One UI, those heavily customized OEM skins can even be replaced with community developed GSIs in favor of a close-to-stock Android experience. While you should be able to boot Google’s AOSP GSI onto any Project Treble-supported device, you’ll be missing out on many features that lend to a proper day-to-day experience. That’s where XDA Recognized Developer phhusson‘s custom GSI comes in. He incorporates many bug fixes and feature additions that aren’t available in Google’s GSI in order to make them actually usable on a day-to-day basis. The developer has now refreshed his custom Project Treble GSI project with the latest June 2020 security patches and a number of new device-specific patches.

Quack Phh-Treble — XDA Thread

Since our last article, phhusson has published an intermediate test build (v217) before today’s release (v218). The optical under-display fingerprint scanner on various Samsung devices such as the Galaxy A51 should work properly from now on. Moreover, there is a new option to correctly expose the auxiliary camera sensors on Samsung smartphones. Users can now remove the telephony service on Wi-Fi only devices. Owners of the Xiaomi Mi 9 and the Redmi Note 9S/Note 9 Pro should be happy to know that the updated GSIs no longer break Netflix HD streaming.

The cumulative changelog can be found below:

• June security patch
• Treble Settings’ securize option now works on Magisk
• Add “disable A2DP offload” workaround in Treble Settings
• Add double-tap-to-wake for Vsmart devices
• Enable Netflix HD on Xiaomi Mi 9 and Redmi Note 9S (probably requires Securize)
• Fix missing navigation gestures in gapps variant
• Include talkback in gapps variant
• Fix exfat on some Q vendors
• Enable Xiaomi options on Redmi devices (Redmi Note 9S)
• Fix Bluetooth on Redmi Note 9S, fingerprint-as-enter, and broken audio
• Re-enable Gapps on 32bits targets
• Enable Android Go gapps on all targets
• Fix optical under-display fingerprint on Samsung devices (Galaxy A51, Galaxy A50, …)
• Add an option to expose all cameras on Samsung devices
• Improve under-display fingerprint for Xiaomi devices running MIUI 12 vendor
• Add an option to remove telephony service for WiFi-only devices
• Add a workaround in Treble Settings for a bug on some devices where video recording is broken after some uptime

Download Quack Phh-Treble v218

In case you need help choosing the correct package for your device, install the Treble Info app linked below. Users are suggested to take a complete off-device backup before installing the custom AOSP GSI as the flashing process will require you to factory reset your device.

Treble Info (Free⁺, Google Play) →

The post Custom AOSP Project Treble GSI gets updated with June 2020 security patches, Netflix HD support for the Xiaomi Mi 9 and Redmi Note 9S, and more appeared first on xda-developers.

from xda-developers https://ift.tt/2z54Doc
via IFTTT

Google is being sued for tracking users in Incognito Mode

Incognito Mode is a feature most of us take for granted by now. All current browsers have at least some iteration of it: a mode where browsing history and cookies are not saved. Many people wrongly assume that Incognito Mode makes you completely anonymous online. That is, in fact, not true, and Chrome even warns you of that when starting a session. However, some argue that Google is still collecting some data, and now the company is facing a $5 billion lawsuit for this.

The initial report by Reuters describes that a complaint has been filed at a federal court in San Jose, California. The reason? Google still picks up some of your personal information, such as shopping habits and other sensitive data, even when you’re in incognito mode. How do they do it? Through services such as Google Ad Manager, Google Analytics, etc. This collected information is not directly tied to the user, but it could potentially be used to identify a user if the information matches previous habits.

Google does note that your activity might still be visible to websites and your Internet provider, but this seems to not fit that description, hence the lawsuit. The claimant is looking for at least $5,000 of damages per user for charges of federal wiretapping and violations of California privacy laws: the full $5 billion lawsuit would then cover “millions” of users who have browsed the web since June 1st, 2016. Google might then be facing down a pretty grim path if the lawsuit actually goes through. This is not the first time Google goes under fire for their privacy antics, and it will also probably not be the last one.

---

Source: Reuters | Via: 9to5Google

The post Google is being sued for tracking users in Incognito Mode appeared first on xda-developers.

from xda-developers https://ift.tt/2U7zV51
via IFTTT

Zoom end-to-end encryption won’t be available to free users

It’s no secret that Zoom is having a moment. While the pandemic has been hard on countless companies, video calling apps have seen an influx of users. In a few short months, Zoom has become nearly synonymous with video calling. All of this attention has not come without its problems, though. Zoom has been heavily criticized for its security issues and now the company has confirmed free users won’t get end-to-end encryption.

Last week, it was reported that Zoom would be adding stronger encryption to video calls for paid customers only. Today, Zoom CEO Eric Yuan confirmed this report, and security consultant Alex Stamos is explaining the company’s position. In short, Zoom wants to be able to stop abuse and prevent harm from people who “use Zoom for bad purpose.”

Yaun said Zoom wants to be able to “work it together with FBI and local law enforcement,” which was a controversial statement. Stamos, however, says Yaun’s statement was not clear and he went on to further explain the company’s decision. He says Zoom is facing a “difficult balancing act” of trying to improve privacy while also “reducing the human impact of the abuse of its product.”

The other safety issue is related to hosts creating meetings that are meant to facilitate really horrible abuse. These hosts mostly come in from VPNs, using throwaway email addresses, create self-service orgs and host a handful of meetings before creating a new identity.

— Alex Stamos (@alexstamos) June 3, 2020

Currently, Zoom’s Trust and Safety team can enter a meeting visibly and report it if it’s abusive. End-to-end encryption would prevent Zoom employee’s from being able to do that. There would not be a backdoor to allow it, either. Stamos also talks about how a large portion of meetings use features that are incompatible with end-to-end encryption.

The current system is to offer end-to-end encryption to business and enterprise users, but there is one important distinction. Organizations that are on business plans but aren’t paying, such as schools, will also get end-to-end encryption. Stamos adds that this stance won’t eliminate abuse, but it will reduce harm. Zoom has not given a release date for the new encryption features.

Some facts on Zoom’s current plans for E2E encryption, which are complicated by the product requirements for an enterprise conferencing product and some legitimate safety issues.

The E2E design is available here:https://t.co/beLdeAwMSM

— Alex Stamos (@alexstamos) June 3, 2020

---

Via: Engadget

The post Zoom end-to-end encryption won’t be available to free users appeared first on xda-developers.

from xda-developers https://ift.tt/2U2MqPe
via IFTTT

[Update: Galaxy S9, Note 9, Z Flip] Samsung Camera Controller lets you take photos from the Galaxy S20 using your Galaxy Watch

Update (6/3/20 @ 11:15 AM ET): Samsung’s Camera Controller smartwatch app now supports the Galaxy S9, Galaxy Note 9, and Galaxy Z Flip.

A number of major OEMs maintain their own app store besides Google Play Store for the sake of offering device-specific exclusive content, or for setting up an alternative app distribution platform without relying on the Mountain View giant. Samsung’s Galaxy Apps, later rebranded as Galaxy Store, is a perfect example of this tradition. The Korean OEM offers plenty of interesting tools via the substitute app store, such as the immensely popular Good Lock suite or the Camera Controller app for wearables. The latter is now updated to support the recently released Galaxy S20 lineup.

XDA Forums for Samsung Galaxy: S20 || S20+ || S20 Ultra

Buy from Amazon.in — Samsung Galaxy: S20 || S20+ || S20 Ultra

For those not familiar with Camera Controller, the idea of this app is to give the users the freedom to capture photos and videos on a connected phone via their smartwatch. Samsung teased about this handy utility during the launch of the Galaxy Watch Active2, albeit the owners of the original Galaxy Watch Active and the Galaxy Watch can use this app as well. Even after the latest update, which bumps the software version number to 1.0.79 (2020.04.02), the list of supported smartphones is surprisingly small. Apart from the Galaxy S20 series, the Galaxy S10, Galaxy Note 10, and the Galaxy Fold are whitelisted by Samsung to utilize the capabilities of the Camera Controller app.

Upon launching the Camera Controller app, it prompts you to open the Camera app on your smartphone. Afterward, it’s just a matter of tapping on the capture button on your watch to take a photo. You can even make use of the Instagram mode, Night mode, Pro mode and the Live Focus mode of the stock camera by the controller app.

Download Camera Controller from Galaxy Store

Samsung’s take on the wearable ecosystem is quite commanding so far. The company is still working on enabling the ECG support on the Galaxy Watch Active2 while they have backported several features to the legacy models. Now that the watches can act as a mini viewfinder for the fan-favorite Galaxy S20 series, it would certainly boost their usability and help consumers not feel left out amidst the arrival of new models.

Thanks to Reddit user zingzongzang48 for the screenshot!

---

Update: Galaxy S9, Note 9, Z Flip

After launching with support for devices, Samsung has updated the Camera Controller smartwatch app with support for more devices. The devices added include the Galaxy S9/S9+, Galaxy Note 9, and Galaxy Z Flip. Those devices join the Galaxy S20 series, S10 series, Note 10 series, and Galaxy Fold.

Download Camera Controller from Galaxy Store

The post [Update: Galaxy S9, Note 9, Z Flip] Samsung Camera Controller lets you take photos from the Galaxy S20 using your Galaxy Watch appeared first on xda-developers.

from xda-developers https://ift.tt/2UX1VYB
via IFTTT

Sensory’s new biometric tech aims to make face unlock work with face masks

The use of face masks is certainly not new, but as a result of the COVID-19 pandemic, many more people around the world are using them for the first time. This has created some interesting issues in the technology world. People covering half their faces with masks comes at a time when many phones are switching to facial recognition for security. Sensory is one company working on a solution to this problem.

Sensory is a Silicon Valley-based company that creates AI products, some of which are used by Android smartphone OEMs. We’ve talked about Sensory’s TrulySecure facial recognition in the past and the company also works on hotword detection and natural language processing. Sensory announced that its TrulySecure face and voice platform has been adapted to meet the demands of the “new normal.”

TrulySecure facial recognition can now recognize users while wearing masks and it can also detect coughs and sneezes. It does this by utilizing biometric fusion and multiple enrollments to avoid the limitations of typical facial recognition. Biometric Fusions combines both face and voice into one SDK, so when faces are partially obstructed, the voice biometric can provide added confidence and vice versa.

Multiple Enrollments allow users to enroll alternate appearances. Users can enroll their typical mask-free face and then add a second enrollment with a face mask on. Many software solutions don’t allow users to enroll their face if it’s partially blocked. Allowing users to enroll both mask on and off allows the software to apply the appropriate template.

Sensory is not the only company working on a solution to this problem. We previously wrote about Huami and its development of N95 face masks that don’t interfere with face unlock. Wearing face maks is likely to be common practice even after the COVID-19 pandemic peters out, so this is something we’ll likely continue to see tech companies work on.

The post Sensory’s new biometric tech aims to make face unlock work with face masks appeared first on xda-developers.

from xda-developers https://ift.tt/3eLtIU7
via IFTTT

Build a New Career in Cybersecurity With This 10-Course Training Bundle

Even when whole cities are in lockdown, cybercrime never stops. As a result, top companies are always on the lookout for help with cybersecurity — experts estimate there will be 3.5 million unfilled jobs by next year. The Ultimate 2020 White Hat Hacker Certification Bundle helps you break into this lucrative world, with 10 courses teaching you practical skills and working towards acing top exams. You can get the bundle now for just $39.90 at the XDA Developers Depot.

White hat hackers are specialists in finding the flaws that malicious hackers try to exploit. Certified professionals can make $100k a year, and those who concentrate on bug bounty programs can earn significantly more. 

This bundle helps you launch your own white hat hacking career, with 98 hours of essential training. Through concise video tutorials, you learn about the darknet, common forms of malware, zero-day vulnerabilities, and operating systems security. You also discover how to hack servers, websites, and apps using a variety of key tools — including custom Python scripts and automated tests.

The courses are delivered by several top tutors, including Joe Parys, who has helped over 500,000 students on Udemy. Along with the practical training, you get full prep for the all-important CompTIA CySA+ and PenTest+ exams.

Worth $1,345, the bundle is now only $39.90 with lifetime access included.

 

The Ultimate 2020 White Hat Hacker Certification Bundle – $39.90

See Deal

Prices subject to change 

The post Build a New Career in Cybersecurity With This 10-Course Training Bundle appeared first on xda-developers.

from xda-developers https://ift.tt/3cuhSfJ
via IFTTT

AutoResponder for Telegram is a bot that lets you automate replies

After the great success of AutoResponder for WhatsApp and Instagram, XDA Senior Member TK Studio is back again with a similar app for Telegram called, unsurprisingly, AutoResponder for Telegram.

AutoResponder for Telegram is a powerful bot that lets you automatically reply to your friends and contacts when you’re away from your device. When someone sends you a message on Telegram, and you’re not around to respond, the bot will send a predefined reply on your behalf. You can create different rules and replies for different scenarios and even specify which contacts or groups should receive the automated reply. Furthermore, you can choose to react to only specific messages, meaning auto-reply will only trigger when the recipient’s message matches the template response that you have set. There are tons of parameters and granular controls to fine-tune the bot precisely as you want. The app also offers a Tasker plugin to let you automatically pause/unpause the bot, update/enable/disable and add/remove specific rules.

Here is a rundown of what you can do with AutoResponder for Telegram:

• Auto Reply to Telegram
• Send automatic replies to your friends
• Individually customizable
• Send replies to all messages
• React to specific messages
• Live answer replacements
• Reply with the current location
• Works with groups
• Set contacts
• Set delay
• Specific times and days
• Perfect for business
• Dialogflow.com integration (formerly api.ai)
• Working as a Tasker plugin

AutoResponder for Telegram — XDA Thread

The app is free to download on Google Play Store with an in-app purchase option. The Pro version unlocks the additional features such as the ability to send multiple automated replies, delaying replies, connecting the bot to your web server, and more.

AutoResponder for Telegram - Auto Reply Bot (Free⁺, Google Play) →

The post AutoResponder for Telegram is a bot that lets you automate replies appeared first on xda-developers.

from xda-developers https://ift.tt/2U8ItbX
via IFTTT