321–330 of 475 posts
Earlier quoted context omitted.
They ended up rewarding him with $70,000 tho
yeah because he made a fuzz about it. Guess how many bugs are reported in and they just tell you it was already submitted and never talk to you again.
Every once in a blue moon when I pick up my locked iPhone (which auto-locks in just 30 seconds) and engage the home button just as the screen comes alive from the gyro sensing movement, it unlocks on its own. It just flashes the PIN dialog and slides right onto the home screen. I don't use Touch ID, and never stored my print with it even once to test the feature/hardware. It's been happening ever since iOS 11, with b…
This sounds like a UI race condition and actually gives me more confidence in the iPhone (unlike the Pixel, the unlock state isn’t tied to UI elements). Unless of course you can do this long after it locks…
Earlier quoted context omitted.
Am I reading this right? This reads like the presence of a UI element holds the unlock state of the phone?
No, not exactly, but Android is old and gnarly enough that a lot of components don't have a clear Model/View separation you'd expect in modern codebases.
Earlier quoted context omitted.
Quoted post unavailable.
They ended up rewarding him with $70,000 tho
> "Due to this, they decided to make an exception"
(To be fair: my hat's off to Google for even having one, and it's still shocking to me that AWS doesn't have one at all.)
Wait, this bug affects unsupported pixels now right? A Pixel 4 won't have this fixed ?
I will try to exploit before and after downloading.
The discussion on race conditions at the end is an important one, and IMO the bugfix is a bandage at best: the notion of anything accessing the “current” object after any kind of delay, especially in an event handler, when there is any chance the thing is not a singleton, is a recipe for disaster. In this case, dismissing the “current” security code screen was a supported API surface and that should set off all the r…
Google invests a great amount of money in their project zero team but does anyone know if they have a specific red team that is dedicated for Android ?
Wait, this bug affects unsupported pixels now right? A Pixel 4 won't have this fixed ?
On my pixel 4a there's a "critical security" update available for download. (Current patch level is one month old) I will try to exploit before and after downloading.
I went to buy a phone maybe two months ago. Before I had my current Google Pixel 6, I used a OnePlus 3T for six years, and even then I only stopped because I sat in a hot tub with it on. At the T-Mobile store, I announced to the salesman that I would be back to buy a Pixel 6 when they had it in stock, and a man pulled me aside and privately asked me why I wanted to buy a Pixel. He explained to me that he was actually…
What don't you like about the Pixels? I just switched to an iPhone this year and really regret it (the UX is horrible) and miss my Pixel.
(I actually do have both and definitely prefer the Pixel -- especially the cameras on the Pixel are amazing in low light, but it's a bit annoying how the official Gcam app seems to expect that Google photos is installed.)
How funny is it that the best way to de-Google is to buy a Google device, and that Apple is incredibly prescriptive about knowing exactly who you are, connecting to wifi, and getting your purchasing on file before you can even get through the initial setup on an iPhone.
The one thing I like about iPhone over Android is that the animations are a bit nicer and more polished, and the stock color scheme is pretty bright (but awful at night), and everything else about Android seems to be better.