Eternal Dogfooders: How is the child of Aha turns furry

The researchers discovered a way to exploit Google's Android "checkin" endpoint.

How it worked: By capturing valid device identifiers (Build Numbers, Serial Numbers, and fingerprints) from public trackers like Chromium Buganizer, they constructed custom protocol buffer requests.

The Result: The server accepted these forged checkins and responded with valid Over-The-Air (OTA) update URLs and authorization tokens meant exclusively for internal Google dogfood builds.

Google’s Fix? Android Canary.

Ultimately, Google addressed the reporting chaotic bureaucracy and the root endpoint issues by structurally changing how public testing is handled. In July 2025, they introduced the public Android Canary channel (using a ZP11 build prefix). By moving early-stage builds to a distinct public hierarchy, they lowered the incentive and impact of researchers targeting internal testing endpoints.

🧑‍💻 @agamtechtricks

🧑‍💻 @agamtechtricks x @attmemes

Which folder would transfer faster?
Folder A of size 50 GB with large files, or
Folder B of size 50 GB with a lot of small files

🧑‍💻 @agamtechtricks

Meta pulls Instagram tool that let AI use public photos

Last week, Meta rolled out Muse Image, which is integrated into its Meta AI chatbot. A feature was introduced which let users @-mention Instagram accounts in the Meta AI app to bring specific Instagram profiles right into your images. All public accounts were opted in by default.

After backlash over privacy violations and unauthorized use of public Instagram photos, Meta has removed this feature.

Our intent was to provide a useful creative tool and to give people control over whether their public content could be referenced in this way. We've heard the feedback that this feature missed the mark, so it's no longer available.

🧑‍💻 @agamtechtricks

🔗 X
🧑‍💻 @agamtechtricks x @attmemes

The .me registry has blocked the t.me domain

Telegram users worldwide have encountered an outage: short t.me links have stopped opening in regular browsers. The problem affects users in the entire world.

At the same time, within the mobile and desktop Telegram clients themselves, clicks on links are processed correctly, and redirects work without any problems. As a temporary alternative for posting on external resources, you can use telegram.me links.

Technical details

At the moment, the exact causes of the incident remain unknown.

According to WHOIS data, the t.me domain has been completely removed from the DNS zone by the administration of the .me domain registry.

This status is set not by the registrar (GoDaddy), but directly by the main operator of the domain zone — the Montenegrin company doMEn d.o.o., which manages the entire .me zone. This organization is a joint venture of Identity Digital, GoDaddy, and ME-net.

#outages #bans

We got Xiaomi dakimakura before GTA VI

🧑‍💻 @agamtechtricks x @attmemes

The t.me Domain Has Been Restored by the .me Registry

Checks by the @tginfo editors show that the .me zone's main server has returned the DNS records for the t.me domain.

Since DNS records are cached at the level of various DNS services and providers, it may take up to 24 hours for service to be restored on users' devices.

#outages #bans

> be United States
> sanction VPN
> used for ransomware
> ransomware VPN uses Telegram
> Advertisement and customer support
> US Treasury publishes sanction thingie
> list VPNs Telegram channel
> Domain people see it
> See t.me/ransomwarethingie
> "OMG BLOCK T.ME!!!"
> Put global block on t.me
> Breaks Telegram URLs
> Telegram owner mad af
> Complains, says they can't read
> "hehe oops, me no think good"
> Resolved like, 24 hours later

testing this new community thing. you need to be on the latest version of Telegram for this.

for now, I'm enabling the option to let all the members add their groups in the community. I don't know how that works. Great.