Tag
A user ran the Big Fat Fish tool on their Xiaomi 17 Pro Max and cited warnings that domestic Android phones may report their app lists, advising against using Chinese phones for circumventing the firewall or installing foreign apps.
The author reverse-engineered Claude Code's Mac CLI, Mac App, and Android App using REA, noting that the Android client has the strongest anti-fraud detection via Sift — collecting SIM card country and hardware device IDs — while the Mac client only gathers random telemetry through Sentry/Datadog. The full proxy ruleset has been made public.
安全研究员披露 Android 拨号器应用中的漏洞，利用 CALL_PHONE 权限可在几乎无需用户交互的情况下静默执行 USSD/MMI 代码，例如设置呼叫转移等运营商级操作，且执行过程不写入通话记录。
GrapheneOS has resolved the significant kernel performance regression introduced in the Android 17 QPR1 update, restoring expected performance for users of the privacy-focused custom ROM.
WeWorm is a zero-click worm exploit that spreads through WeChat calls across iOS and Android, potentially compromising over a billion accounts. Developed with AI assistance, it highlights the growing risk of advanced attacks becoming accessible to less skilled actors.
Android now enables users to securely migrate login credentials between different password managers directly on their devices, eliminating the need for manual entry. The feature currently supports Google Password Manager, 1Password, Bitwarden, and Dashlane.
GrapheneOS announces that the Google Pixel 11 supports Memory Tagging Extension (MTE), a hardware feature enhancing memory safety.
Mobile Verification Toolkit (MVT) is an open-source forensic tool developed by Amnesty International to help identify potential compromises on Android and iOS devices by analyzing traces and indicators of compromise.