Android has fixed an issue that made it possible to downgrade system apps beyond the factory installed version, which has been abused to exploit vulnerabilities in older versions of system apps.
Notably, this closes the loophole that power users have been using to achieve system shell privileges on Samsung devices.
Full details here.
Notably, this closes the loophole that power users have been using to achieve system shell privileges on Samsung devices.
Full details here.
www.esper.io
Android update fixes vulnerability that let system apps be downgraded beyond factory version
Google has fixed a security vulnerability in Android that made it possible to downgrade system apps below the factory installed version.
👍29🤔6👎5👏2
Google and Apple lead initiative for an industry specification to address unwanted tracking - Google Security Blog
Google Online Security Blog
Google and Apple lead initiative for an industry specification to address unwanted tracking
Companies welcome input from industry participants and advocacy groups on a draft specification to alert users in the event of suspected un...
👍11🤡9😁3🐳3
With Chrome 117 for desktop & Android, the browser will replace the "lock" icon in the address bar with a "tune" icon. This is to make it clearer what the icon actually represents: A button to show important security info and controls, not an indicator of site trustworthiness.
Chrome 117 will release in early September 2023 and will also bring a "general design refresh" on desktop.
More info here.
Chrome 117 will release in early September 2023 and will also bring a "general design refresh" on desktop.
More info here.
👍41🥱10👏3👎2❤1
Today I learned that a lot of Chromebooks only support the SBC codec for Bluetooth audio. Fortunately, Google may be bringing AAC, aptX, aptX HD, and LDAC support to select Chromebooks in a future update.
The Bluetooth stack in Chrome OS is the standard Linux BlueZ, but since 2021, Google has been experimenting with building Android's Fluoride stack for Linux (Floss). This is disabled by default but can be enabled on compatible Chromebooks through a flag.
When building Floss, "nonstandard" A2DP codecs (aptX, aptX HD, LDAC, and AAC) aren't included by default but can be built with the bt_nonstandard_codecs flag. Floss stopped building these "nonstandard" A2DP codecs by default pending a "license and patent review." But now it looks like AAC, aptX, aptX HD, LDAC, AAC, and a bonus Opus, may be enabled by default in the Floss stack.
2532643: Floss: enable AAC and remove it from nonstandard codecs
2574491: TEST: enable Aptx, AptxHD, LDAC
I don't know if/when this will ever land - Floss itself is still not enabled by default on most Chromebooks IIRC - but it's good to see Google potentially address Bluetooth audio shortcomings in Chrome OS.
Qualcomm recently submitted aptX and aptX HD encoders to AOSP's BT stack, so I was wondering if/when that would make its way to Chrome OS/Floss.
The Bluetooth stack in Chrome OS is the standard Linux BlueZ, but since 2021, Google has been experimenting with building Android's Fluoride stack for Linux (Floss). This is disabled by default but can be enabled on compatible Chromebooks through a flag.
When building Floss, "nonstandard" A2DP codecs (aptX, aptX HD, LDAC, and AAC) aren't included by default but can be built with the bt_nonstandard_codecs flag. Floss stopped building these "nonstandard" A2DP codecs by default pending a "license and patent review." But now it looks like AAC, aptX, aptX HD, LDAC, AAC, and a bonus Opus, may be enabled by default in the Floss stack.
2532643: Floss: enable AAC and remove it from nonstandard codecs
2574491: TEST: enable Aptx, AptxHD, LDAC
I don't know if/when this will ever land - Floss itself is still not enabled by default on most Chromebooks IIRC - but it's good to see Google potentially address Bluetooth audio shortcomings in Chrome OS.
Qualcomm recently submitted aptX and aptX HD encoders to AOSP's BT stack, so I was wondering if/when that would make its way to Chrome OS/Floss.
❤18👍9
Linux's DisplayPort Alternate Mode driver (which on compatible devices allows for display output over USB-C) has been enabled by default in android14-5.15 & android14-6.1 GKI branches.
It may be copium, but I'm hoping Google finally releases a Pixel with display output!
Current wired and wireless display output options on Pixels are very limited.
tl;dr:
Wired: Requires DisplayLink adapter. Expensive. Laggy. Needs 3P app.
Wireless: Google Cast. Very laggy.
With the general large screen enhancements and features like an improved desktop mode, it would be great if you could hook up a Pixel to a monitor/TV and get some work done.
Pixel 8 will likely launch with Android 14 on top of either android14-5.15 or android14-6.1 (Pixel doesn't do GRF), but there's no guarantee the USB hardware will be set up to allow for DP Alt Mode. I think right now the pins they could use for that are instead set up for UART?
Having the DisplayPort Alt. Mode driver enabled in GKI has benefits for OEMs too as many actually ship products that use this feature (Samsung most notably for wired DeX), so there's no proof that this inclusion is aimed at Pixel.
—-
Somewhat related, but USB Gadget HAL 2.0 in Android 14 adds support for reporting whether a connected USB-C cable supports DP Alt Mode.
It may be copium, but I'm hoping Google finally releases a Pixel with display output!
Current wired and wireless display output options on Pixels are very limited.
tl;dr:
Wired: Requires DisplayLink adapter. Expensive. Laggy. Needs 3P app.
Wireless: Google Cast. Very laggy.
With the general large screen enhancements and features like an improved desktop mode, it would be great if you could hook up a Pixel to a monitor/TV and get some work done.
Pixel 8 will likely launch with Android 14 on top of either android14-5.15 or android14-6.1 (Pixel doesn't do GRF), but there's no guarantee the USB hardware will be set up to allow for DP Alt Mode. I think right now the pins they could use for that are instead set up for UART?
Having the DisplayPort Alt. Mode driver enabled in GKI has benefits for OEMs too as many actually ship products that use this feature (Samsung most notably for wired DeX), so there's no proof that this inclusion is aimed at Pixel.
—-
Somewhat related, but USB Gadget HAL 2.0 in Android 14 adds support for reporting whether a connected USB-C cable supports DP Alt Mode.
👍19🙏7🔥3
Google TV is rolling out some pretty big storage and performance improvements!
Here's a summary:
* Storage: App Hibernation automatically hibernates apps not used in >30 days. Hibernation is an AOSP Android 12 feature that revokes permissions, stops notifications, and cleans up temp files.
In addition, hibernated apps also take up less space (up to 25% less), as Google TV will install an "archived APK" that strips the installed app down while retaining app data. This only works with TV apps that use Android App Bundles, which starting this month, is now a requirement.
* Performance: Reduced the time it takes to wake up, the response time of your TV responding to button clicks on your remote, and the amount of time you see the loading animation when rebooting.
Here's a summary:
* Storage: App Hibernation automatically hibernates apps not used in >30 days. Hibernation is an AOSP Android 12 feature that revokes permissions, stops notifications, and cleans up temp files.
In addition, hibernated apps also take up less space (up to 25% less), as Google TV will install an "archived APK" that strips the installed app down while retaining app data. This only works with TV apps that use Android App Bundles, which starting this month, is now a requirement.
* Performance: Reduced the time it takes to wake up, the response time of your TV responding to button clicks on your remote, and the amount of time you see the loading animation when rebooting.
🔥29👍14
Google's working to bring Material Design to Android Automotive OS, but unlike on phones, colors will be chosen by the OEM instead of derived by an algorithm.
According to new documentation published by Google, OEMs will be able to designate "design tokens" that represent the "small, repeated design decisions that make up a design system's visual style and replace static values with self-explanatory names."
These graphics show how Material Design on Android Automotive will work. Apps compile a static library that loads customized token values from a shared library. OEMs can optionally create Runtime Resource Overlays (RROs) targeting this shared library.
OEMs can create RROs targeting the shared library that are enabled in different scenarios, such as for different models in a line or to differentiate drive modes. That way, the UI of any apps that retrieve token values from the shared library can be updated dynamically.
Full documentation on OEM Design Tokens, ie. Material Design for Android Automotive OS, can be found in this page.
According to new documentation published by Google, OEMs will be able to designate "design tokens" that represent the "small, repeated design decisions that make up a design system's visual style and replace static values with self-explanatory names."
These graphics show how Material Design on Android Automotive will work. Apps compile a static library that loads customized token values from a shared library. OEMs can optionally create Runtime Resource Overlays (RROs) targeting this shared library.
OEMs can create RROs targeting the shared library that are enabled in different scenarios, such as for different models in a line or to differentiate drive modes. That way, the UI of any apps that retrieve token values from the shared library can be updated dynamically.
Full documentation on OEM Design Tokens, ie. Material Design for Android Automotive OS, can be found in this page.
👍23🔥6🤮4❤2
Mishaal's Android News Feed
The May 2023 Android Security Bulletin is now live, detailing the vulnerabilities addressed by the 2023-05-01 and 2023-05-05 security patch levels! The public ASB doesn't go into much detail, but once the AOSP tags go live, we can see what's been patched.…
AOSP tag | Build ID
android-13.0.0_r43 | TQ2A.230505.002
android-13.0.0_r44 | TQ2A.230505.002.A1
Changelogs
(Sorry for the delay in posting this, I was out of town until last night!)
android-13.0.0_r43 | TQ2A.230505.002
android-13.0.0_r44 | TQ2A.230505.002.A1
Changelogs
(Sorry for the delay in posting this, I was out of town until last night!)
👍14
There's nothing really interesting to point out in the April 2023 Google Play System Update, but in case you're wondering, here are the modules that have been updated:
ADB: 331314020 --> 331610002
AdServices: 331418100 --> 331611190
AppSearch: 331112000 --> 331311000
ART: 331413030 --> 331612010
Captive Portal Login: 331412000 --> 331610000
Cell Broadcast: 331510000 --> 331610010
DocumentsUI: 331120000 --> 330543000
Media: 331511000 --> 331612000
Media Codecs: 331511000 --> 331612000
Media Provider: 331512020 --> 331613010
Network Stack: 331412000 --> 331610000
Statsd: 331511000 --> 331610000
Permission Controller: 331512020 --> 331611010
DNS Resolver: 331512000 --> 331611010
Tethering: 331511000 --> 331511160
Time Zone Data: 331314020 --> 331314030
UWB: 331410010 --> 331611010
WiFi: 331511020 --> 331613000
And here's the changelog I made.
ADB: 331314020 --> 331610002
AdServices: 331418100 --> 331611190
AppSearch: 331112000 --> 331311000
ART: 331413030 --> 331612010
Captive Portal Login: 331412000 --> 331610000
Cell Broadcast: 331510000 --> 331610010
DocumentsUI: 331120000 --> 330543000
Media: 331511000 --> 331612000
Media Codecs: 331511000 --> 331612000
Media Provider: 331512020 --> 331613010
Network Stack: 331412000 --> 331610000
Statsd: 331511000 --> 331610000
Permission Controller: 331512020 --> 331611010
DNS Resolver: 331512000 --> 331611010
Tethering: 331511000 --> 331511160
Time Zone Data: 331314020 --> 331314030
UWB: 331410010 --> 331611010
WiFi: 331511020 --> 331613000
And here's the changelog I made.
👍21❤2
"Google is collaborating with Android hardware manufacturers to help ensure APIs for background work are supported predictably and consistently across the ecosystem.
We are excited to announce that Samsung, representing one of Android’s longest partnerships, is our first partner on this journey...
'Since One UI 6.0, foreground services of apps targeting Android 14 will be guaranteed to work as intended so long as they are developed according to Android's new foreground service API policy.' - Samsung"
Read more: https://android-developers.googleblog.com/2023/05/improving-consistency-of-background-work-on-android.html
We are excited to announce that Samsung, representing one of Android’s longest partnerships, is our first partner on this journey...
'Since One UI 6.0, foreground services of apps targeting Android 14 will be guaranteed to work as intended so long as they are developed according to Android's new foreground service API policy.' - Samsung"
Read more: https://android-developers.googleblog.com/2023/05/improving-consistency-of-background-work-on-android.html
Android Developers Blog
Improving Consistency of Background Work on Android
In Android 14, we are adding new functionality to the existing foreground services and JobScheduler APIs. Learn more.
❤48👍18🔥8
Following the Bluetooth, WiFi, and UWB stacks, Google will next turn Android's NFC stack into a modular system component, ie. a Project Mainline module!
It's too early for this to happen in Android 14, but the NFC stack could become a Mainline module as early as Android 15.
(H/T luca020400 on Twitter)
It's too early for this to happen in Android 14, but the NFC stack could become a Mainline module as early as Android 15.
(H/T luca020400 on Twitter)
❤31👍13❤🔥6
One of the most annoying parts about using most Android tablets or foldables is being forced to flip the device over because an app doesn't support landscape mode.
This is a big issue on the OPPO Find N2 and OnePlus Pad, for example. Fortunately, there's a fix.
Tutorial: How to stop apps like Authy, Venmo etc. from being locked to portrait mode on Android tablets/foldables
This is a big issue on the OPPO Find N2 and OnePlus Pad, for example. Fortunately, there's a fix.
Tutorial: How to stop apps like Authy, Venmo etc. from being locked to portrait mode on Android tablets/foldables
👍25❤6🤯3
My tweet thread summarizing the Android-related things Google announced at I/O 2023 during their main keynote event, including new features in Google mobile apps, Android 14 changes, Pixel features, and new Pixel hardware.
👍30👌3❤1
This media is not supported in your browser
VIEW IN TELEGRAM
Android 14 is extending the data safety section to permission dialogs, as I previously reported. Every time an app asks for permission to use location data, you can see if the app declares it shares location data with third parties, for example.
And if an app ever changes its declared data sharing practices for location data, Android will notify you once a month through a notification. Google says they're starting with location data but will be expanding this to other permission types in future releases.
Source
And if an app ever changes its declared data sharing practices for location data, Android will notify you once a month through a notification. Google says they're starting with location data but will be expanding this to other permission types in future releases.
Source
❤38👏6👍1🤡1
Here’s what’s new with Android for Cars (Android Auto and Android Automotive OS), as announced at Google I/O 2023. The biggest announcement IMO is Android Automotive OS 14 based on Android 14 and the new multi-screen feature it’ll bring 👀
(Click the hyperlink for my tweet thread summary!)
(Click the hyperlink for my tweet thread summary!)
❤17👍5
Google is showing some love for Wear OS at Google I/O 2023. Here’s a summary of what they announced, including the new Wear OS 4 Developer Preview based on Android 13 👀!
(Click the hyperlink for my tweet thread summary!)
(Click the hyperlink for my tweet thread summary!)
❤23👍1
What’s new in Android Studio? A lot of things, some of which make use of generative AI to improve your workflow. Here’s what got announced at Google I/O 🧵
(Click the hyperlink for my tweet thread summary!)
(Click the hyperlink for my tweet thread summary!)
❤15👍1
At this year’s Google I/O, Google is announcing a bevy of new features for Google Play, including many that leverage generative AI to make it easier to market your app. Here’s a summary of what they announced 🧵:
(Click the hyperlink for my tweet thread summary!)
(Click the hyperlink for my tweet thread summary!)
❤21👍1