LightBlog

mardi 17 janvier 2017

Two High-Severity Vulnerabilities Discovered for the LG G3, G4 and G5

We generally get alerted to Android vulnerabilities for major phones like the Nexus/Pixel phones, LG and Samsung phones directly by these companies on a monthly basis. Sometimes though, there are some exploits discovered in the middle of the month and that's what has happened with LG right now.

MWR Labs has just published two vulnerabilities for the LG G3, LG G4 and LG G5 that have been marked as high-severity issues.

The first one we want to talk about has been labeled the LG Cloud Backup Application Path Traversal Vulnerability, and it is said to work on the LG G3, G4 and G5 devices. This vulnerability is happening with the LG SmartShare.Cloud application, which is a gateway to various cloud services such as Dropbox and Box. So a Path Traversal vulnerability was discovered with this application that allows an attacker to change the API call being made to Dropbox.

As a result, an attacker could make a file or folder shareable without requiring authentication or user interaction if they knew a name of the file or folder stored on Dropbox. The second vulnerability listed by MWR Labs has been labeled the LG G3 Arbitrary File Retrieval from Cloud Services, and it too is said to affect the LG G3, G4 and the G5 from LG. Again, this vulnerability is possible because of the LG SmartShare.Cloud application that is provided by the OEM.

This time though, a vulnerability was discovered that allows an attacker to retrieve a file from the SmartShare.Cloud application without authentication or user interaction. This is possible because the application itself starts an HTTP Server listening on all interfaces when the smartphone is connected to a WiFi network. Both of these vulnerabilities are only possible if the attacker is on the same network that the LG G3, G4 or G5 is on.

Source: MWR Labs



from xda-developers http://ift.tt/2j5owOx
via IFTTT

Future S Health Update is Rumored to Schedule a Doctor Visit

S Health is Samsung's own health and fitness companion application, and it is packed with a bunch of features. If you have a Samsung wearable then it can tap into data from those sensors directly, but it can also use the sensors built into their Samsung phones as well.

The company has been improving this application for years now and a new rumor says Samsung will be taking things a step further.

This rumor comes to us from SamMobile, and their sources are telling them that a big update is headed our way. They aren't sure exactly when this new update will drop though, and are suspecting that it could happen when the Galaxy S8 launches. However, this part of the rumor is speculative as their sources haven't told them when the update will be made available to the public. It just makes sense that Samsung is working on a big update for the launch of their upcoming flagship smartphone.

The rumor claims that Samsung is working closely with 3rd-party companies like WebMD and Amwell, and will be integrating their features and services deep into the S Health application. This would enable those who use the application to search for symptoms diseases and drugs directly inside the application without ever having to leave it or dig through web search results. That will definitely be a nice addition to the application, and will add features that Google Fit doesn't have.

The rumor doesn't stop there though. SamMobile's sources are also telling them that you'll be able to schedule online visits with a doctor from within the S Health application as well. You'll be able to set video appointments with certified doctors 24/7, and receive a list of pharmacies that are near you. The new update will also allow you to store information about your appointments including symptoms, photos of the condition, and medical prescriptions.

Source: SamMobile



from xda-developers http://ift.tt/2jGap39
via IFTTT

Android 7.0 Nougat is Rolling Out to the Unlocked HTC One A9

HTC launched the HTC One A9 back in October of 2015, and it was at a time when the Taiwanese handset maker was really trying to bounce back from financial issues. Many were speculating about whether or not it would be the phone that would save the company, and reviews kept bringing up its design similarities of the iPhone.

No matter what the phone looked like though, one feature stood out from the rest and that was the promise of fast updates.

HTC promised that for the next two years, the HTC One A9 would receive "every version of Android" within 15 days of Google rolling out the update to Nexus devices. This was a huge announcement and absolutely convinced a number of people to order theirs as soon as they could. The thing is, that promise was broken very quickly, and HTC didn't seemed to be ashamed of that either. We covered this a few months ago and HTC implied that the One A9 was not popular enough to receive the Nougat update before their "most popular flagship products."

Almost 5 months after the official release of Android 7.0 Nougat, HTC has finally started to roll out the OTA update to unlocked versions of the HTC One A9. Mo Versi, HTC's Vice President of Product Management announced on Twitter yesterday that the official update would begin rolling out last night. XDA Junior Members JS.zip and VirusRenamon have both shown they have received the OTA update, so it is definitely going out to unlocked devices right now.

Since Mr. Versi works for the US division of HTC, it's assumed that it is rolling out to the US versions of the HTC One A9 right now. If things go smoothly, we'll likely see this continue throughout Europe sometime in the very near future.

Source: @moversi



from xda-developers http://ift.tt/2jvuETw
via IFTTT

Samsung Galaxy S7 and S7 Edge Exynos Android 7.0 Nougat Kernel Source Code Released

Last night Samsung publicly released the kernel source code of their Nougat update for the Exynos based Samsung Galaxy S7 and Samsung Galaxy S7 Edge devices, on par with their Android 7.0 rollout.

This public source code release follows tightly on the heels of the final beta version being distributed to Samsung's Galaxy Beta program testers last Friday. While it would have been nice to see Nougat arrive on the S7 even quicker than it did (especially considering how long the Nougat Galaxy Beta program ran for), we are quite excited to see the final product that Samsung is releasing, and to see Samsung continuing to support their devices. The lag time before updating the Samsung Galaxy S7 and S7 Edge to Android Nougat stands out particularly heavily this year considering the increased efforts that Google took in 2016 to provide manufacturers with early access to the developer preview source code before Nougat's launch to help with porting the software over, and how the recall of the Note 7 left Samsung with half as many flagship phones to focus on updating the software for. With this update bringing Android 7.0 with the January 1st security patch level to the Samsung Galaxy S7 and S7 Edge, hopefully we will see Samsung continue to push forward with their updates and bring 7.1.1 to these devices soon.

It is always good to see a somewhat-timely release of kernel source code by OEMs, especially in light of the recent issues that certain vendors have been having with it. Releasing the kernel source code is a legal requirement if an OEM wants to use Android (and the Linux kernel that it is built upon), and is absolutely vital for community software development. It is a huge part of why Android has become what it is today, and is a requirement that we are always happy to see continue to be enforced.

The Linux kernel source code for the Samsung Galaxy S7 and S7 Edge's Nougat update can be downloaded from Samsung's Open Source Release Center in the source links below.

Source: Samsung Open Source Release Center (S7 Edge) Via: Sammobile

Source: Samsung Open Source Release Center (S7)



from xda-developers http://ift.tt/2j4R3UB
via IFTTT

What’s New in Snapchat 10

If you're enrolled in Snapchat beta, you've probably been running the 10.0.x updates that have been pushing out for the last few days. These updates have a few new UI changes that make the app a little better. This video highlights everything you will find in this new update.

Get Snapchat beta

If  you want to enroll in the Snapchat beta program, you can do so right from the settings in your app. An update will then show up in the Play store with all of the new features. If the update does not show up right away, uninstall Snapchat and reinstall it from the Play store.

 



from xda-developers http://ift.tt/2jvj7U7
via IFTTT

Common Repairs For Your Galaxy S7

The headphone jack is a really cheap part to repair on the Galaxy S7. You can find one online for about $5 on ebay. This tutorial will show you the fairly simple steps to take to replace this part.

Removing the back plate on a smartphone is always a tricky step. If you happen to damage the back glass on your Galaxy S7, a replacement can be purchased for about $15 on ebay. Remember to check out all of the different colors that are available, just in case you want to switch things up a bit.



from xda-developers http://ift.tt/2j4Agkk
via IFTTT

lundi 16 janvier 2017

Google Introduces Image and Bandwidth Optimizations to its AMP Service

Over the course of 2016, followers of the mobile web space no doubt have noticed that Google's Accelerated Mobile Pages (AMP) project consistently grew and matured. With sites like The Verge, Gizmodo, The Daily Dot, and Wired fully adopting the service and reporting improved viewership statistics and advertising performance, it is highly likely that AMP will continue to experience growth and be broadly adopted throughout the mobile web market.

Of some significance to this potential for future growth is a feature that AMP recently released to developers called AMP Lite. As Huibao Lin and Eyal Peled of Google note, around 63% of the bytes loaded in an average webpage are from images. Thus, AMP Lite focuses mainly on image optimization; something it is largely able to accomplish through integration with AMP Cache. AMP Cache is a smart caching service that allows strategic prioritization of back-end material that is geographically closer to the user accessing AMP content, thus resulting in lower latency and faster loading times. It also gives AMP more access to the content that has loaded, which has allowed Google to introduce image optimization in AMP Lite.

The image optimization protocols that Lite utilizes rely on four main steps: removing data which is invisible or hard to notice to the viewer, converting images to formats that are more mobile-friendly, adding the srcset tool to make images adaptable to the resolution of devices viewing it, and finally lowering the quality of the images when data efficiency is needed most.

As illustrated above, there is a somewhat visible difference in quality between the optimized and unoptimized images. However, when considering that the file size of the optimized version is nearly 10 times smaller than the original file, it is a very small price to pay for vastly decreased bandwidth usage. Aside from image optimizations and AMP's smart caching, AMP Lite also integrates external font optimization which improves font loading time regardless of AMP Cache usage. Altogether, the developers of AMP found that these new additions have resulted in a 45% reduction of data usage for users browsing mobile sites.

Widespread adoption of AMP Lite will no doubt be a boon for mobile users with strict data and device constraints – particularly those in developing countries with mobile service infrastructure that is less than robust. Google is already beginning to roll out these improvements in Vietnam and Malaysia and will most likely expand into other countries soon after.

With Google clearly taking bandwidth-constrained user scenarios seriously, this space will likely see rapid improvements over the coming months and years. On the same day that these improvements to AMP were announced, Google Plus Project Manager John Nack announced that Google+ would integrate a new technology called RAISR (Rapid and Accurate Super-Resolution). Initially developed by three Google researchers, RAISR will bring intelligent, AI-based upscaling to all photos uploaded on Google Plus, resulting in a reported 75% decrease in bandwidth usage when accessing RAISR-optimized photos. Given that the image optimizations AMP Lite utilized resulted in a 40-50% bandwidth reduction, it is possible and maybe even likely that we will eventually see AMP Lite adopt a RAISR-influenced approach to image optimization in the future.

Whatever the future of AMP Lite is, the improvements it has already begun to provide consumers in Vietnam and Malaysia will hopefully make their digital lives a little easier and provide more usable experiences to anyone and everyone who has to deal with meager data plans and inconsistent wireless coverage.


Source: Google Developers Blog



from xda-developers http://ift.tt/2jqe085
via IFTTT