#AndroidDevices

Kevin Karhan :verified:kkarhan@infosec.space
2025-05-30

@sodiboo @tauon @puppygirlhornypost2 @silly I don't think it's much of a "#freedom" on #iOS but rather that the few devices and OS versions in circulation, alongside everyone from #jailbreaker to #malware (espechally #govware #developers) want to crack it open result in way more personnel and money behind it.

  • OFC the fact that the #Android experience is worse from that POV is the lack of #regulation re: #repairability and #openness that would make shit work. Most cheap #phones are done with even cheaper #SoC's by manufacturers who can't be assed (or frankly don't give a shit at all!) when it comes to #Linux #mainline support. (I mean, you've seen the video where @SexyCyborg demanded a vendor to give her the sourcecode as per #GPLv2 for her device?)

Granted @GrapheneOS does limit their support to devices that can comply with their #security standards.

  • The issues are mostly caused by hostile app developers that specifically decided to knee-jerk their users / customers for no good reason.

I do wish for both vendors like #Fairphone to up their game and regulators like @EUCommission to actually push for more #transparency, #openness and #LongTermSupport of #Smartphones, because #ManufacturedEwaste like #SOYES, #WiKo, #Unihertz and others that ship #outdated #AndroidDevices and never even a single update are a major problem!

  • I don't blame projects like @LineageOS that they can't cover every device & SoC even tho they propably have the widest compatibility, I just think that there needs to be pressure that manufacturers don't just vomit stuff on the market and let customers frustratingly figure out the rest.

I do have to give #Apple credit where it is due, and that is that #iOS does have consistency and accessibility nailed down very well. Something that they obviously are able being the "#BenevolentDictator" of a #SingleVendor & #SingleProvider - platform.

  • Obviously since they are the #vendor for #hardware and the sole ["legitimate" / official] #distributor for any #Apps they do OFC cross-finance their relatively long #support with their 15-30% cut from #App #sales & #InAppPurchase|s they charge, which is why #AndroidPhones suffer the "#3DO syndrome": Needing to charge more since they only get to make money once with hardware sales and not after that, so there's no incentive for them to give a shit beyond "brand value" to care. #Google, #Samsing, #Fairphone and very few others do, but most don't as they close the books on the product once launched and sold out (angrily stares at Unihertz)...

Maybe one day the folks at @frameworkcomputer acquire Fairphone and decide to bring the same modularity to #Smartphones and get something done that makes it easy to maintain long-term and that even #GrapheneOS are willing to support.

2024-07-11

A year ago today, @justsoup and I created the lowendlibre project with the goal of lowering the bar for getting started with mobile linux, more specifically postmarketOS.

While it didn't quite go as we had initially hoped, it has been a net positive.

🛡 H3lium@infosec.exchange/:~# :blinking_cursor:​H3liumb0y@infosec.exchange
2024-06-11

Active Exploitation of Mali GPU Kernel Driver Flaw

Date: June 10, 2024
CVE: CVE-2024-4610
Vulnerability Type: [[Use-After-Free]] (UAF)
CWE: [[CWE-416]], [[CWE-119]]
Sources: Bleeping Computer, The Register, HotHardware

Synopsis

Arm has issued a security bulletin concerning a critical memory-related vulnerability in its Mali GPU kernel drivers, which is currently being exploited in the wild. This vulnerability affects Bifrost and Valhall GPU kernel drivers across multiple versions.

Issue Summary

The vulnerability, identified as [[CVE-2024-4610]], is a [[use-after-free]] flaw in the Mali GPU kernel drivers. This flaw allows a local non-privileged user to perform improper GPU memory operations, gaining access to already freed memory. The flaw impacts all versions of the Bifrost and Valhall drivers from r34p0 through r40p0.

Technical Key Findings

Use-after-free vulnerabilities occur when a program continues to use a pointer to a memory location after it has been freed. This can lead to serious issues such as information disclosure and arbitrary code execution. In the case of CVE-2024-4610, a local attacker could exploit this flaw to execute arbitrary code on the affected system, potentially leading to a full system compromise.

Vulnerable Products

  • Bifrost GPUs: Versions r34p0 to r40p0
  • Valhall GPUs: Versions r34p0 to r40p0
  • Devices: Including but not limited to Samsung Galaxy S20, Xiaomi Redmi K30, Motorola Edge 40, OnePlus Nord 2, Chromebooks, and various embedded systems.

Impact Assessment

Exploitation of this vulnerability can lead to severe consequences, including unauthorized access to sensitive information, system compromise, and potential deployment of malware. The vulnerability's exploitation in the wild indicates a significant risk, especially for high-value targets such as activists and journalists.

Patches or Workaround

Arm has released a patch for this vulnerability in version r41p0 of the Bifrost and Valhall GPU Kernel Driver, available since November 24, 2022. Users are advised to update their drivers to the latest version to mitigate this risk. Due to the complexity of the supply chain, some users may experience delays in receiving the updates.

Tags

#CVE-2024-4610 #MaliGPU #Arm #UseAfterFree #Vulnerability #Patch #CyberSecurity #AndroidDevices #SystemCompromise #HighRisk

Tanya McGee Wheatley 💜🥰BlindQuilter@tweesecake.social
2024-04-18

Another question for those who are #Blind and/or #VisuallyImpaired and who use #ScreenReaders on #AndroidDevices, which tablet would you recommend for a relatively new android user? I’ve seen where particular devices aren't that great with #Talkback. I have an inexpensive Onn tablet we got during the big Black Friday rush at Christmas and I've been able to get a taste of using an android and talkback but it's not been the best. I want something that works well with talkback or another screen reader without a huge lag and that will allow me to stay updated with the latest version of android for a couple years at least. This Onn tablet will not allow me to go any higher than android 12. Thanks loads!

BollyinsideBollyinside
2024-01-18

How to Unlock Developer Options on Android Devices: The Guide dlvr.it/T1YnKb

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst