Friday, July 28, 2017

WiFi Chipset Info Checks if Your Device is Vulnerable to BroadPwn

Android's monthly security update for July included patches for 138 issues with 18 of them being tagged with Remote Code Execution. These are the vulnerabilities that enable an attacker to execute some code remotely and is considered quite dangerous. One of these RCE vulnerabilities is actually a flaw in Broadcom's Wi-Fi code, which is used in a lot of Android devices. This vulnerability is come to be known as BroadPwn and a new application called WiFi Chipset Info will check to see if you're vulnerable to the attack.

The attack is quite complex but it's also very dangerous since it can remotely execute code on your device. For a full explanation, you can find the original article for it here. Essentially though, the vulnerability allows for an attacker to initiate malicious network packets to a device that is in WiFi range. With so many people using public hotspots at stores and restaurants, you can see why this is such a big deal. The malicious network packets target your WiFi hardware to trigger the bug without you even knowing.

Once the bug has been triggered, the attacker has the same programmatic powers as the Android operating system. Thankfully the bug is patched, but we all know how security updates are on Android devices these days. Thankfully, the exploit is so new that few people even know about it, and because it's so complex it is unlikely to become widespread anytime soon. However, the researcher who discovered has already presented their findings at the Black Hat 2017 conference in Las Vegas.

So this exploit is only able to take advantage of certain Broadcom wireless chips and you're likely wondering if your device is vulnerable. XDA Senior Member vndnguyen was kind enough to put together an application called WiFi Chipset Info that not only checks to see what WiFi chipset manufacturer your device uses, but also checks to see if you're vulnerable to the BroadPwn attack.


Check out WiFi Chipset Info in our Apps and Games forum



from xda-developers http://ift.tt/2vQqJnS
via IFTTT

Google Hires Essential’s Liron Damir as Head of UX on Google Home Products

Google has been getting more serious each passing year when it comes to its newly formed hardware division. The company has had huge success with its Chromecast device, and has since started expanding into smartphones, and most recently a couple of connected home products. Granted, they did lose the head of the Pixel division back in April, but this week it has been announced that Liron Damir has been hired to lead the user experience team of those connected home products.

Right now, this includes the Chromecast, Google Home connected speaker, and the Google WiFi mesh network devices. Chromecast and Google WiFi are both very user friendly devices but many feel Google Home could use some improvements when it comes to what the device can and cannot do (and how to get it to do certain things). Mr. Damir will be working on all of these products (and any new ones as well) though, so we should see some interesting changes in the future.

For those who aren't aware, Liron Damir has worked at a number of high profile jobs in the past. The man was the former lead designer at HP and worked on webOS before it was acquired by LG. He then continued his work at LG for a little bit and then got hired as the lead designer at Pebble as well. He was then picked up by Andy Rubin's own Essential and worked as the head of user experience for the entire company.

So now he has been hired at Google and will be in charge of the company's user experience team for all of their Google home products. This will allow him to work on a wide variety of different devices and each of them have their own ways to interact with them. Google Home is controlled by voice, Chromecast devices have their controls handled via a phone and Google WiFi has a companion application but is supposed to automate everything so there's little to no reason to even use the application.


Source: Variety



from xda-developers http://ift.tt/2u4wSLa
via IFTTT

Answer this Survey for Honor, Win an Honor 6X

Honor is giving away an Honor 6X, and all you have to do to enter is fill out this short survey which will help Honor learn more about your phone usage and preferences. All countries can participate, and the winner will be chosen in one week, on 4 August.

Loading…



from xda-developers http://ift.tt/2u4w88H
via IFTTT

Thursday, July 27, 2017

HTC 10 and HTC One A9 Android 7.0 Nougat Kernel Source Code Released

HTC just announced that they have published the Android 7.0 kernel source code for the HTC 10 and the HTC One A9. These newly published sets of kernel source code will go a long way towards helping with the development of Android 7.0, AOSP-based custom ROMs for these devices.

Although it is always nice to see kernel source code published, it is a bit concerning that the kernel source code for the unlocked HTC One A9 is being published 6 months late. The Android 7.0 update for the HTC One A9 initially rolled out on January 17th 2017, which was also the point in time at which the matching kernel source code should have been released. This delay is relatively strange, as HTC is usually very quick to update their kernel source code, especially for their unlocked models.

It is important to keep in mind that while this isn't the fastest case of publishing kernel sources, HTC had already published the Android 7.0 kernel source code for the unlocked model of the HTC 10 back in early December, just a couple weeks after initially launching Android 7.0 on the HTC 10. While it is not yet clear what caused the delay for the other HTC 10 and HTC One A9 models, it is still a relief to finally see their Android 7.0 kernel source code published in accordance with the GPL 2.0 license.

With this release, HTC has bumped the source code version for the unlocked HTC 10 from 2.28.617.8 to 2.50.617.2. The full list of newly published Android 7.0 Kernel Source code can be found in the following chart:

Device Software Version
HTC 10 T-Mobile 2.41.531.44
HTC 10 Verizon 2.41.605.20
HTC 10 Telstra 2.48.841.3
HTC 10 Unlocked 2.50.617.2
HTC One A9 China CHS 2 2.17.1405.3
HTC One A9 EE 2.17.91.1
HTC One A9 EU 2.17.401.2
HTC One A9 India 2.18.707.1
HTC One A9 Unlocked 2.18.617.21
HTC One A9 Telstra 2.17.841.1
HTC One A9 Asia HK CHT 2.17.708.2
HTC One A9 Unlocked 2.18.617.30

You can find the Kernel Source code for download at the HTC Dev Center.



from xda-developers http://ift.tt/2v4DKfz
via IFTTT

Latest Windows 10 Insider Preview Build Lets you Link your Android Phone to your Windows PC

Microsoft has announced the newest iteration of Insider Previews for Windows 10. Insider Preview Build 16251 for PC is rolling out to Windows 10 Insiders in the Fast ring, and will also be available for Insiders who opted in to 'Skip Ahead'. The highlight of Preview Build 16251 is the ability to link your Android device to your Windows PC as Microsoft is introducing the first set of features that enable this linking functionality. The current use case in this build focuses on cross-device web-browsing, and this build invites Windows Insiders to help test the experience on Android before the functionality makes it way onto the Windows 10 Fall Creators Update (Redstone 3).

To get started with linking, install the newest Preview Build on your PC and link your phone by navigating through Settings –> Phone on your PC. Microsoft will send you an SMS with a link to a test application for Android called "Microsoft Apps" that is needed to complete the link between your phone and PC. Linking the devices in this manner ensures that your sessions are continued only on PCs which you have explicitly linked to, and not across all PCs where your Microsoft Account is present.

The test application on your Android device will add a share context "Continue on PC" in the share menu. So when the linking is complete, you can start browsing the web on your phone and share websites through this option. On the first invocation, the user will be asked to sign in with their Microsoft Account, and this account should be the same account that is used on the PC. Once the website has been shared from your Android device, it will show up on your linked PC. You can also defer the opening by selecting the "Continue Later" option, which will save the notification under the Microsoft Action Center panel for accessing later on.

If you would like to try out this feature, you would need to be enrolled into the Fast ring of the Windows Insider program. Jen Gentleman from Microsoft's Shell team wrote up a quick info tutorial on the same over at Reddit:

First you'd need to register your MSA {Microsoft Account} or AAD {Azure Active Directory} for WIP {Windows Insider Program}, and then on your PC go to Settings > Update > Windows Insider Program and select which ring you'd like to be in.

Personally I'm a big fan of Fast and have that or even faster internal-only rings on most of my devices, but I will note I have a relatively high tolerance for potential issues and am pretty savvy when it comes to workarounds. Slow is more stable, but also (by nature) gets builds less frequently (once they've gone through Fast and are assured to meet a certain quality bar). Those are the two ring options out of our dev branch. We also have the Release Preview ring out of our current branch (aka the one in prod), where you'll get app updates and sometimes cumulative updates before they go to prod, which can be quite nice and way less risky.

Currently, the link functionality appears to be limited to tab pushing from your phone to your PC. This comes in handy for those of us who want to revisit articles on a bigger display and a proper setup. We wish to see PC->Phone tab pushing as well, as some URLs are better shared through our phones to other less tech-savvy users.

A popular use case for linking phone to PC is to send texts from your desktop and see your phone notifications. While this functionality is not currently included in the Insider update (nor any mention has been made of it coming in the future), Mr. Jen Gentlemen pointed out that similar functionality can be achieved using Cortana on both your PC and Android. You would need Cortana and the same Microsoft account on both phone and PC, and you will have to make sure your PC is using the Anniversary Update or a later release.


All linking functionality that we have seen so far, through Cortana or through this update, involves the use of a Microsoft Account. The success and popularity of these functionality will be affected by the existence of a Microsoft Account in the first place. While it may be trivial to create one, many users do not intend to bind themselves up with yet another company and migrate away to a different set of apps just to achieve functionality that could have been achieved by using WiFi and Bluetooth connections. That's something for Microsoft to consider.

What are your thoughts on the linking functionality introduced in the new Windows 10 Insider Preview Build? Have you tried it out yet? What features would you like to see possible in the future? Let us know in the comments below!


Source: Windows Blog



from xda-developers http://ift.tt/2uHfZb9
via IFTTT

HTC U11 Custom Kernel Brings Energy Aware Scheduling (EAS)

There's been a lot of talk about Energy Aware Scheduling (EAS) lately and now a new custom kernel brings this to the latest HTC flagship smartphone as well. This HTC U11 custom kernel is available thanks to XDA Senior Member Freak07 and can be flashed via TWRP. The developer does make note about having to move so far away from HTC's codebase (due to having conflicts with the prebuilt WLAN and texfat modules). You'll want to have a backup of the wlan module and pnpmgr files or you can dirty flash your original ROM if you want to revert the changes.


Check out this EAS kernel in our HTC U11 forum



from xda-developers http://ift.tt/2v3jECi
via IFTTT

Google Photos No Longer Limits Shared Albums at 2,000 Pictures

Google made millions of people sigh in relieve when they launched their Google Photos service back at Google I/O 2015. Until then, it was near impossible to find a image hosting service that would store all of your photos indefinitely, for free. Those who didn't have many photos saved could find plenty of solutions out there, but most always had some sort of storage capacity limit when it came to the free tier account. Thankfully this changed with Google Photos.

Sure, Google won't sure every image at full resolution without compression (unless you're uploading it from a Pixel phone), but so far the compression they're using is so minimal that it is hard to distinguish the difference in quality. Not only did Google Photos offer image hosting for all of your photographs, but they have also integrated a number of popular features with album sharing sitting close to the top as a favorite among the community.

The company even expanded upon its sharing features this year at Google I/O with what they call smarter sharing. These sharing features are great for average use cases, but big events such as a vacation can push them to their limits. This is what many people noticed with album sharing in Google Photos as it was limited to 2,000 photos. So while this was fine for most, it was definitely a limitation for some anytime they wanted to share a ton of photos.

This seems to have changed over the last couple of weeks though. /u/Chaosblast in the /r/Android subreddit noticed that they were allowed to add more than 2,000 photos to a shared album, and XDA Portal Editor Steven Zimmerman was able to confirm for us as well. At this time, it's unclear if the limit has just been increased (to something like 5,000), or if the limit has been removed entirely. For this to work though, you have to go inside the album and then add the images from there. If you try to do it outside the album then it looks like you'll still be hitting that 2,000 limit.


Source: /r/Android



from xda-developers http://ift.tt/2eRuDbU
via IFTTT