LMFAO

🧑‍💻 @agamtechtricks x @attmemes

China finally enters the GPU game btw

Lisuan Tech launched the LX 7G100, their first consumer gaming GPU challenging NVIDIA and AMD.

- 12GB memory

- Performance between RTX 3060 and 4060

- Approximately 436 USD (2969-3299 yuan)

- 8K support and DirectX 12

- Initial batch limited to 1000 units.

This itself is interesting cuz we know what happened to the automobile industry after BYD entered the game. Hoping to see something similar here.

[Read more]

🧑‍💻 @agamtechtricks x @attmemes

Apple is working on a new "Gen AI" website

Apple has created a new subdomain genai.apple.com, but there's nothing live on the page for now. This could probably be related to Apple's upcoming Generative AI announcements in WWDC

🔗 genai.apple.com
🧑‍💻 @agamtechtricks

GNOME's websites are experiencing a major outage right now

🔗 GNOME Infrastructure Status
🧑‍💻 @agamtechtricks

APK Analysis: Telegram APK from APKPure is a spyware

On analyzing the Telegram APK I downloaded from APKPure, there's a class called "DataCollector", which does not exist in the Telegram APK downloaded from the official website, telegram.org.

I'm not a big cybersecurity nerd, but as far as I can understand, this DataCollector class is sending a lot of information to an IP address - 38.190.225.166

The class has a Listener that uses MediaStore and runs the methods collectGalleryImages() which resizes images > 150kb, limits resolution to 1920px and compresses the images to a 75% quality JPEG, collectGalleryVideos() for videos, and collectDeviceDocs() for other document files.

The method collectPhoneContacts() uses ContactsContract to access all your contacts and uploads it in JSON format. There's also a separate sendContact() method that uploads individual contacts and sendPhone() that uploads phone numbers.

🔗 Part 2
🧑‍💻 @agamtechtricks

Part 2:

The method collectSimInfo() collects SIM Card Information, if you provide READ_PHONE_STATE perm.

The method sendLocation() and initLocationTracking() uploads' your GPS coordinates with a 12 hour cooldown.

Methods sendProfile() and sendFullProfile uploads details like your user id, name, phone number, etc. sendAvatar() uploads your profile pictures. Methods sendDialogInfo() and sendMessage() pull metadata of the chats and all the text content of messages, and sendChatInfo() and sendGroupSpeaker() uploads group and members metadata.

There are two threads that handle this: UPLOAD_POOL (6 threads) for uploading files, and META_POOL (4 threads) for JSON data. The data extracted using the methods above is stored in an SQLite database tgc_upload_queue.db which has three tables json_queue, gallery_queue, and file_queue. The database is encrypted with AES-256-GCM.

There's also a function fetchClientConfig() that contacts /api/config. Does it configure something remotely? idk. All requests are HMAC-signed using a native .so file.

The methods postJson(), uploadMultipartAsync(), uploadMultipartDirect(), and uploadDocDirect() upload all the files and JSON data to the server with IP Address 38.190.225.166

🔗 Part 1
🧑‍💻 @agamtechtricks

Telegram APK from APKPure is a spyware

On analyzing the APK with jadx, it contains a class DataCollector, which does not exist in the .apk file downloaded from the official Telegram website.

This class collects a lot of your data, including:
- Your photos, videos, and files
- Your contacts
- Your messages
- Your GPS Coordinates
- Your SIM card information
- Your Telegram profile

This data is monitored and uploaded continuously. All the data is uploaded to a server with IP Address 38.190.225.166

💬 Initial discovery by Eric Parker
🔗 APK Analysis: Part 1 | Part 2
🧑‍💻 @agamtechtricks

Microsoft is phasing out SMS codes for signing into personal Microsoft/Xbox accounts

Since SMS-based authentication is a leading source of fraud, Microsoft believes that passwordless accounts (Microsoft Authenticator), passkeys and verified email are more secure.

All personal account holders will now be prompted with "Sign in faster with your face, fingerprint, or PIN."

🔗 Microsoft
🧑‍💻 @agamtechtricks

Motorola's "Smart Feed" has started hijacking the Amazon app to insert affiliate codes

After an app update to Smart Feed (v2.03.0070), opening Amazon opens the user’s browser and immediately redirects to the Amazon app. This only happens if the app is opened from the app drawer and not the homescreen.

The device contacts "devicenative.com", a service that places ads on phones. The URL opened in the browser is "kira-abboud.com", a website that references @kirasfashionfinds. The affiliate code being used to open Amazon is "sramz-kff-008-20", which is completely different from the affiliate codes used by @kirasfashionfinds.

To disable this behaviour, disable the "Smart Feed" app from Settings.

🔗 9to5Google
🧑‍💻 @agamtechtricks

Microsoft is replacing Taskbar Search with Copilot

Taskbar search is now being replaced by "Ask Copilot" which opens a floating popup that you can use to interact with Copilot, search for files, open apps, etc. It targets enterprise customers who use the Microsoft 365 ecosystem.

In tests, "Ask Copilot" is more accurate at finding local files and apps compared to the current Windows Search. However, Microsoft is working on improving the normal Search as well.

Ask Copilot is entirely optional, and won't be enabled by default. It is expected to release mid-2026, but it might change.

🔗 Microsoft's Published Document
🧑‍💻 @agamtechtricks

If you are thinking that the AI search box in other browsers like duckduckgo is any useful, consider the monk who polishes a stone to make it a sword, wondering if the effort is not better spent on the wood of the hut. The master asks, is the box the search, or is the search the box?

~ Zen style Telegram AI

🧑‍💻 @agamtechtricks x @attmemes