Thinking out loud, considering building a #android app and maybe later #ios app for https://www.valtersit.com - Hmm Just #thinking and planing future roadmap. Maybe add CVE alert notifications for vendors or something like that. And still all For FREEEEE #cybersecurity #devops #devsecops

Apache PDFBox to otwarto-źródłowa biblioteka Java, której można używać do tworzenia, renderowania, drukowania, dzielenia, scalania, modyfikowania, weryfikowania i wyodrębniania tekstu oraz... https://biznes.linuxiarze.pl/pdfbox/ #pdf #linux #windows #osx #bsd #android

Apache PDFBox to otwarto-źródłowa biblioteka Java, której można używać do tworzenia, renderowania, drukowania, dzielenia, scalania, modyfikowania, weryfikowania i wyodrębniania tekstu oraz... https://biznes.linuxiarze.pl/pdfbox/ #pdf #linux #windows #osx #bsd #android

Mój mobilny model zero trust w 2026 roku. Przesiadka na Google Pixel 8 z GrapheneOS to nie ucieczka w cyfrowy niebyt, a odzyskanie pełnej kontroli nad danymi.

Pełna analiza mojego codziennego zestawu aplikacji i wdrożenia architektury zero trust: https://eteryu.space/moj-zero-trust-setup-w-2026-roku-google-pixel-8-grapheneos/

#GrapheneOS #Pixel8 #ZeroTrust #Privacy #Degoogle #FOSS #Security #Cybersecurity #UnifiedPush #Android #DeBigTech #Mullvad #WireGuard

Lekcja prywatności z Poznania. Czego uczy nas "afera" wokół Pyrkonu?

W sieci zawrzało po wycinku z posiedzenia poznańskich urzędników. Zamiast jednak robić wir w szklance wody, warto spojrzeć na chłodne fakty.

Prawdziwym źródłem danych dla brokerów informacji nie są urzędy miast, ale smartfony, które codziennie nosimy w kieszeniach, a dokładniej oprogramowanie, które sami na nich instalujemy.

Zamiast liczyć na to, że obroni nas RODO, musimy wziąć sprawy we własne ręce. W artykule opisuję jak działają mechanizmy śledzenia, dlaczego oddajemy prywatność za zniżki u operatorów i jak za pomocą narzędzi takich jak @exodus odzyskać kontrolę nad telefonem.

Cały artykuł: 👇
https://eteryu.space/lekcja-prywatnosci-z-poznania-czego-uczy-nas-afera-woko-pyrkonu/

#Pyrkon #Poznań #Prywatność #Privacy #Cybersecurity #Bezpieczeństwo #HigienaCyfrowa #ExodusPrivacy #Android #iOS #FOSS #Inwigilacja #MastodonPL

Alt...

Screen z video udostępnionego przez Autorów.

LibrePods brings AirPods features to Android & Linux — no iPhone or Mac required.

Change noise control modes, view accurate battery status, use ear detection, head gestures, conversational awareness, and more by implementing the AirPods protocol in an open-source app.

https://digitalescapetools.com/tools/tool.html?id=librepods

#OpenSource #Linux #Android #AirPods #Privacy

Alt...

Screenshot of the LibrePods project page in dark mode. The top section shows the LibrePods logo and the tagline “AirPods liberated from Apple’s ecosystem,” with Android and Linux logos indicating platform support. Several status badges display downloads, build status, and community information. Below, a section titled “What is LibrePods?” explains that the project brings Apple-exclusive AirPods features to Android and Linux by implementing the proprietary communication protocol used between AirPods and Apple devices. Features mentioned include noise control modes, ear detection, battery monitoring, head gestures, and conversational awareness.

GrapheneOS notes Android 17 “sort of” support, reflecting early compatibility work rather than a fully stable rollout across devices. 📱
It tracks Android 17 privacy upgrades like stronger permissions and encryption while maintaining its hardened AOSP-based security model. 🔐

@privacyguides
@GrapheneOS

🔗 https://www.privacyguides.org/news/2026/06/17/android-17-launched-what-new-privacy-security-features-does-it-bring/

#TechNews #GrapheneOS #Android #Privacy #Security #OpenSource #FOSS #Mobile #MobileSecurity #Encryption #AOSP #CyberSecurity #DataProtection #Linux #UserPrivacy

#Android -Verifizierung: #Google bestätigt Zeitplan und nennt App-Stores | heise online https://www.heise.de/news/Android-Google-nennt-Zeitplan-fuer-Entwickler-Verifizierung-und-erste-App-Stores-11338038.html #Datenschutz #privacy

#Android verification is coming: #Google confirms timeline and supported app stores

https://arstechnica.com/gadgets/2026/06/google-shares-updated-timeline-for-rolling-out-android-developer-verification/

#sideloading #privacy #FOSS #cybersecurity

Google poinformowało o wydaniu nowej wersji Wear OS 7 dla Pixel Watch. Wear OS (poprzednio: Android Wear) to wersja systemu Android na smartwatch-e (inteligentne zegarki) i inne wearables (urządzenia ubieralne, komputery ubierany). https://linuxiarze.pl/wear-os-7/ #android #smartphone #smartwatch #linux

Google poinformowało o wydaniu nowej wersji Wear OS 7 dla Pixel Watch. Wear OS (poprzednio: Android Wear) to wersja systemu Android na smartwatch-e (inteligentne zegarki) i inne wearables (urządzenia ubieralne, komputery ubierany). https://linuxiarze.pl/wear-os-7/ #android #smartphone #smartwatch #linux

Google: 2,041 CVEs tracked. 20 CISA KEV exploited in wild. 92% unpatched. Trust Score: C. ADB & Android risks climbing. #Google #Android #cybersecurity

https://www.valtersit.com/vendors/google/

Popa: From Sourcing to Distribution

An Android proxyware SDK named Popa enrolls consumer devices including phones, tablets, and streaming boxes into a commercial residential proxy network. Operating since at least 2020, Popa and its variants (Loopop, Neupop, and Moneytiser) are distributed inside consumer streaming, IPTV, and utility applications. The SDK begins relaying third-party traffic at host-app launch without displaying informed-consent prompts in analyzed samples. Multiple variants communicate directly with NetNut SDK endpoints, sharing operational infrastructure and telemetry. Controlled testing showed traffic from Popa-enrolled devices egressing through NetNut's commercial gateway. The SDK uses encrypted Google Drive files to resolve relay servers in later versions. Analysis of over 20 publishers revealed significant links to piracy-related applications, with none observed requesting user consent despite later builds including this capability.

Pulse ID: 6a3447ad5cdebd92116d1c01
Pulse Link: https://otx.alienvault.com/pulse/6a3447ad5cdebd92116d1c01
Pulse Author: AlienVault
Created: 2026-06-18 19:31:57

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #Endpoint #Google #InfoSec #OTX #OpenThreatExchange #Proxy #RAT #Troll #bot #AlienVault

#Commodore's New Flip Phone Skips #Android for #Linux-Based #Sailfish OS

https://itsfoss.com/news/commodore-callback-8020-launch/

Zerion 2.0.3 is now live on F-Droid, Play Store and GitHub. This is our most stable release yet.

What’s in it: reliable voice calls in both directions, video calls as opt-in beta, faster startup, and lower battery use during sync.

F-Droid: https://f-droid.org/packages/com.professor.zerion
GitHub: https://github.com/zerionproject/Zerion/releases/latest
Play Store: https://play.google.com/store/apps/details?id=com.professor.zerion

#fdroid #foss #privacy #tor #android #encryption #p2p #opensource #infosec #grapheneos

FairScan 2.0 released

https://lwn.net/Articles/1078242/ #LWN #Linux #Android

Dzieci poniżej 16 roku życia w Wielkiej Brytanii mają zakaz korzystania z TikToka i mediów społecznościowych. TikTok został zakazany w Wielkiej Brytanii dla osób poniżej 16. roku życia z uwagi na... https://linuxiarze.pl/dzieci-ponizej-16-roku-zycia-w-wielkiej-brytanii-maja-zakaz-korzystania-z-tiktoka-i-mediow-spolecznosciowych/ #linux #android #smartphone

Android Banker with Complete Device Takeover Capabilities

Pulse ID: 6a3225b7b5b6d7de935a164e
Pulse Link: https://otx.alienvault.com/pulse/6a3225b7b5b6d7de935a164e
Pulse Author: Tr1sa111
Created: 2026-06-17 04:42:31

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #Bank #CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #Tr1sa111

Termux’s proot-distro now uses Docker to install Linux distributions

Earlier versions of

proot-distro

on Termux used a hard-coded list of Linux distributions and their versions, which prevented flexibility and choice, especially if you wanted to install an older version of a Linux distribution. A new version of proot-distro was developed to solve this problem by using Docker containers as a way to download the base proot distribution.

With the help of Docker containers, you can now select a containerized Linux distribution, and you can specify the version you wish to use. The base image that gets downloaded usually contains the base files only, but you can use your distribution however you want, such as installing extra packages. You can get a list of operating systems whose Docker containers you can install here.

Explore operating systems

For example, let’s install two Docker containers: Debian 13, and Busybox (MUSL).

The Docker container for Debian 13 Trixie is

debian:13

, which means that the Debian container image will be downloaded with version 13 as the tag. Assuming that you have installed all updates to both Termux, its plugins, and all packages (using

pkg upgrade

), you can use the below command to install the Debian 13 proot distribution:

[Tue 26/06/16 21:07 +03][pts/0][aarch64/linux-android/5.10.236-android12-9-32140295-abX700XXSBEZE1][5.9.1]
<u0_a360@localhost:~>
zsh 7756 % proot-distro install debian:13
[*] Installing 'debian:13' as 'debian'...
[*] Authenticating with registry (anonymous)...
[*] Fetching manifest for 'debian:13'...
[*] Fetching aarch64 manifest...
[*] ed660e1af0f5: Downloading layer 1/1 (47.4 MiB)...
[*] ed660e1af0f5: Applying layer 1/1...
[*] Updating '/etc/resolv.conf'...
[*] Updating '/etc/hosts'...
[*] Registering Android-specific UIDs and GIDs...
[*] Finished installation.
Start shell: proot-distro login debian

After that, you can log in to the Debian proot distribution and verify that everything works there.

[Tue 26/06/16 21:08 +03][pts/0][aarch64/linux-android/5.10.236-android12-9-32140295-abX700XXSBEZE1][5.9.1]
<u0_a360@localhost:~>
zsh 7757 % proot-distro login debian
root@localhost:~# apt update
Get:1 http://deb.debian.org/debian trixie InRelease [140 kB]
Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
Get:4 http://deb.debian.org/debian trixie/main arm64 Packages [9608 kB]
Get:5 http://deb.debian.org/debian trixie-updates/main arm64 Packages [5404 B]
Get:6 http://deb.debian.org/debian-security trixie-security/main arm64 Packages [217 kB]
Fetched 10.1 MB in 4min 50s (34.7 kB/s)
All packages are up to date.
root@localhost:~# uname -a
Linux localhost 6.17.0-PRoot-Distro #1 SMP PREEMPT_DYNAMIC Fri, 10 Oct 2025 00:00:00 +0000 aarch64 GNU/Linux
root@localhost:~# cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 13 (trixie)"
NAME="Debian GNU/Linux"
VERSION_ID="13"
VERSION="13 (trixie)"
VERSION_CODENAME=trixie
DEBIAN_VERSION_FULL=13.5
ID=debian
HOME_URL="https://www.debian.org/&quot;
SUPPORT_URL="https://www.debian.org/support&quot;
BUG_REPORT_URL="https://bugs.debian.org/&quot;
root@localhost:~#

As you can see in the

/etc/os-release

file, this is a Debian 13 Docker containers running through proot on our Samsung Galaxy Tab S8 running One UI 8.0.

Now, let’s try out the most minimal option, which is the BusyBox (MUSL) Docker container we can identify as

busybox:musl

.

[Tue 26/06/16 22:00 +03][pts/0][aarch64/linux-android/5.10.236-android12-9-32140295-abX700XXSBEZE1][5.9.1]
<u0_a360@localhost:~>
zsh 7759 % proot-distro install busybox:musl
[*] Installing 'busybox:musl' as 'busybox'...
[*] Authenticating with registry (anonymous)...
[*] Fetching manifest for 'busybox:musl'...
[*] Fetching aarch64 manifest...
[*] 7187f1aa5c1c: Downloading layer 1/1 (894.1 KiB)...
[*] 7187f1aa5c1c: Applying layer 1/1...
[*] Updating '/etc/resolv.conf'...
[*] Updating '/etc/hosts'...
[*] Registering Android-specific UIDs and GIDs...
[*] Finished installation.
Start shell: proot-distro login busybox

Now, let’s verify that BusyBox works and that we have a complete set of built-in BusyBox commands:

[Tue 26/06/16 22:01 +03][pts/0][aarch64/linux-android/5.10.236-android12-9-32140295-abX700XXSBEZE1][5.9.1]
<u0_a360@localhost:~>
zsh 7760 % proot-distro login busybox
~ # uname -a
Linux localhost 6.17.0-PRoot-Distro #1 SMP PREEMPT_DYNAMIC Fri, 10 Oct 2025 00:00:00 +0000 aarch64 GNU/Linux
~ # help
Built-in commands:
------------------
        . : [ [[ alias bg break cd command continue echo eval exec exit
        export false fg getopts hash help history jobs kill let local
        printf pwd read readonly return set shift source test times trap
        true type ulimit umask unalias unset wait
~ # exit

Termux's proot-distro now uses Docker containers to manage Linux distributions!

#Termux #proot #Docker #Android #TechNews #TechUpdates #Linux

https://officialaptivi.wordpress.com/2026/06/16/termuxs-proot-distro-now-uses-docker-to-install-linux-distributions/

Aubagne: Atelier Répare café et logiciels libres, Le samedi 20 juin 2026 de 14h00 à 18h00. https://www.agendadulibre.org/events/34153 #ekimia #android #linux #logicielsLibres #atelier #garlatek #adieuWindows

Android Banker with Complete Device Takeover Capabilities

A newly identified Android banking trojan named Rokarolla has been discovered, distributed through malicious websites masquerading as popular applications like TikTok or Google Chrome. The malware targets 217 distinct cryptocurrency and banking applications using 137 sophisticated commands for device control. Capabilities include harvesting lock screen credentials, exfiltrating contact lists and SMS data, deploying keyloggers, blocking calls, creating fraudulent screen overlays, and disabling Google Play Protect. The infection begins with a dropper impersonating Google Play Protect that installs a secondary payload. Rokarolla communicates with C2 infrastructure via HTTPS, uses overlays to steal banking credentials and device unlock patterns, silently monitors WhatsApp contacts, hijacks SMS and calls, manipulates clipboard content for cryptocurrency theft, and employs snapshot-based screen surveillance. It maintains persistence by hiding its icon, muting device audio, and keeping screens active indefinitely.

Pulse ID: 6a315d684f0c09972ddea652
Pulse Link: https://otx.alienvault.com/pulse/6a315d684f0c09972ddea652
Pulse Author: AlienVault
Created: 2026-06-16 14:27:52

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #Bank #BankingTrojan #Chrome #Clipboard #CyberSecurity #Google #GooglePlay #HTTP #HTTPS #InfoSec #KeyLogger #Malware #OTX #OpenThreatExchange #RAT #SMS #Trojan #WhatsApp #bot #cryptocurrency #AlienVault

Rynek narzędzi do weryfikacji sygnatur APK dynamicznie się rozwija. Tradycyjny AppVerifier zyskał konkurenta w postaci Verified Apps od @privacyguides a społeczność już rozwija hybrydowe alternatywy pokroju AppVerifierBG.

Jeśli pobieracie paczki bezpośrednio z GitHubów przez Obtainium i chcecie zachować rygorystyczny model zero trust, podrzucam krótką analizę tych rozwiązań: https://eteryu.space/weryfikacja-sygnatur-apk-poznaj-verified-apps/

A jak wygląda to w Waszym codziennym setupie? Czego do sprawdzania sygnatur używacie najczęściej?

#GrapheneOS #Android #PrivacyGuides #Obtainium #Security #Privacy #OpenSource #FOSS

📤 PairDrop — Open-Source Cross-Platform File Sharing (AirDrop alternative)

PairDrop lets you send files, photos, folders, and text directly between devices using peer-to-peer connections. No account required.

Works on Android, iPhone, Windows, Linux, and macOS right from your browser.

More details:
https://digitalescapetools.com/tools/tool.html?id=pairdrop

#OpenSource #Privacy #FileSharing #SelfHosted #AirDropAlternative #Android #Linux #Windows #iPhone

Alt...

PairDrop logo and homepage screenshot showing the slogan “Send it, with PairDrop.” The page describes PairDrop as a browser-based local file sharing tool inspired by AirDrop, allowing direct file transfers between devices without installing an app.

Hejo, widzieliście już Verified Apps?

Projekt od @privacyguides to oficjalny fork dobrze znanego AppVerifiera. Ktoś z Was już używa? Co myślicie, ma szansę na stałe zastąpić oryginał?

Zaletą jest na pewno znacznie większa, rozwijana przez społeczność baza danych, która automatycznie agreguje skróty certyfikatów. Zostajecie przy rygorystycznym, ręcznym sprawdzaniu hashy w AppVerifierze czy wolicie automatyzację, w której aplikacja sama potwierdza kryptograficzną autentyczność pochodzenia pliku?

Link do repo: https://github.com/privacyguides/verified-apps-android

#GrapheneOS #PrivacyGuides #AppVerifier #VerifiedApps #Android #DeGoogle #Privacy #Cybersecurity