fxomt

cross-posted from: https://lemm.ee/post/59836504

A massive thanks to @LuanRT for providing the fix regarding to the extraction of the deciphering functions. Also, big thanks to @PikachuEXE for coming up with a potential alternative solution!

https://github.com/FreeTubeApp/FreeTube/releases

Although this is a talk an ATProto-related conference, this has direct applicability to Mastodon and Lemmy instances.

I'm going to probably request access for it, but if you want to mod it too, feel free to comment.

[email protected]

Yesterday, reports emerged in the Vietnamese infosec community that two popular banking apps – BIDV SmartBanking and Agribank – were using hidden / private iOS API to detect other apps installed on users’ iPhones.

This behavior was initially highlighted by @opa334, developer of TrollStore, on infosec.exchange two days ago and later in a Facebook post on Vietnamse J2TEAM forum. The controversy quickly gained traction because such behavior suggests a violation of Apple’s policies and an invasion of user privacy.

Therefore, we conducted a thorough technical analysis of the mentioned bank apps BIDV SmartBanking (v5.2.62, updated on Mar 14, 2025) and Agribank Plus (v5.1.8, updated on Mar 25, 2025), detailed in this write-up, which also examines implications for users and the banking apps.

انا موافق معه, أيش بيضر لو طولنا رمضان؟؟

Since 2022, with Android 11, Google removed this access from app developers. Under their new package visibility policy, apps should only see other installed apps if it’s essential to their core functionality. Developers must also explicitly declare these apps in the AndroidManifest.xml file - a required configuration file for all Android apps.

For extremely specific use cases such as file managers, browsers or antivirus apps, Google grants an exception by allowing QUERY_ALL_PACKAGES permission, which provides full visibility into installed apps.

I don’t use Android as my primary phone, but I have a spare one and I was really curious to find out which apps from Indian companies had checks to see what other apps I had installed.

So I downloaded a few dozen Indian apps I could think of on top of my head and started reading their manifest files. Surely they will be respectful of my privacy and will only query apps essential to their app's core functionality? 🙃

I remember watching this a couple of years back, it was amazing. I highly recommend you watch it too :)

Interstellar ([email protected]) has added Piefed support!

How do i try?

Install interstellar from the play store/F-droid, and create an account on https://preferred.social/ (only instance with the API enabled, get join code from invite). Then, login from interstellar and you're done!

What's next?

Well, andrew is working on porting thunder to piefed (the main dev of it is interested in it) Admiral patrick said he might port tesseract to piefed, once the API is stable, and ae_harding said he may add it after lemmy 1.0.

Thank you @andrew_[email protected], @[email protected] and @[email protected] for working tirelessly to implement this :D

Kurds in Iraq and Syria this week marked the Newroz festival, a traditional celebration of spring and renewal, at a time when many are hoping that a new political beginning is on the horizon.

Newroz, the Farsi-language word for “new year,” is an ancient Persian festival that is celebrated in countries including Iraq, Syria, Turkey and Iran. It is characterized by colorful street festivals and torch-bearing processions winding their way into the mountains.

For many, Thursday and Friday’s Newroz festivities symbolized not only the arrival of spring but also the spirit and aspirations of the Kurdish people, who are now facing a moment of transformation in the region.

Late by two days 😎