Google dismantles botnet
But then, no updates are applied to affected devices, and
Google worked with several other organizations to disrupt the x.cpe network, including Japan’s National Police Agency, Synthient, and Trend Micro. Google says it has taken legal action to shut down the domains and servers Videostrong
Sounds more like Google asked these other people to dismantle a botnet after detecting it.
The headline implies they somehow stopped it through Google Play
Fucking clown show
Original article with full write up: https://cloud.google.com/blog/topics/threat-intelligence/shutting-the-door-on-the-xcpe-botnet/
Videostrong’s compromised boxes, mostly sold under the MECOOL brand
shame, they make good droid tv boxes. easy to smart up your ancient tv
Google certified the boxes, the manufacturer installed a backdoor, and 1.3 million customers got an involuntary side hustle as residential proxies. Now the botnet is disconnected, but the malware remains and Play Protect is still disabled. Apparently »certified« just means the box passed inspection before it started spying.
Manufacturer: “here you go” 💰
G: lgtm ✅
How do I read “lgtm”? Legitimate?
“Looks good to me.” It’s a standard phrase used when signing off on changes.
“Let’s get this money” is how I read it.
Thanks. As an ESL, somehow I never come across that short form despite being online as a teenager since the 00s.
It’s mostly used in code reviews, I wouldn’t say it’s general online slang.
Tbh, English is my first language and I didn’t know that one either… And I’ve also been online since I was a teenager in the aughts.
It’s not a common term outside its niche. If you’re not in the industry, you’ll mostly see it used in pull request reviews by people who have professional backgrounds. Looks like it actually originated with Google.
I always thought it meant “Let’s get this merged”! 😆 Turns out I read this wrong for years.
Unless you’re on git, then the meaning shifts :^)
Of course LTT was hawking this stuff for a buck.
He’s gotta pay for his private jet somehow
I’ve been looking for a box to replace my Chromecast for a while now but was hesitant for precisely this reason. At some point I even looked at the MECOOL boxes. Good my paranoia prevailed. Still looking for an TV box though. Any suggestions?
I would go mini PC with Jellyfin but a friend of mine bought a Formuler Z12 Ultra & flashed CoreElec with Kodi & seems pleased with it
Apple TV has been the easiest for us, though the new version being loaded with ai means who the hell knows for them…
A mini pc and something like kodi or a lot of saved web page bookmarks would probably work fine.
The Apple TV is an excellent streaming box. It’s truly the first device that I have used that I don’t hate the interface on.
Odroid-c4 with lineageos on it.
This might sound silly, but I ended up just hooking up my PC to the TV via HDMI. I just have a wireless mouse and keyboard and it can do all the things
If I was living by myself I’d probably go this route, but as it stands an android box with a remote is just easier for everyone else.
The Onn boxes from Walmart are fantastic and cheap.
Sadly these are not available in Europe as far as I can tell.
They are or were. They were sold under a different name and by a different retailer.
https://www.amazon.co.uk/Thomson-Streaming-Resolution-Hands-Free-Control-Black/dp/B0DJT7JRWT
com.oemservice
com.android.carrierconfig is that you?
google doesnt like others cutting in thier own business.
Someone I know has one of these.
KD1:/ $ pm list packages | grep cpe package:x.cpe KD1:/ $ settings get global package_verifier_user_consent 1Hmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm, so Play Protect is enabled and doing nothing about it. Also, “nexus” wasn’t installed, not here at least. Not “system.ntp”, “oemservice” or “sso” either.
com.droidlogic.*is just generic AmLogic crap, if there’s a backdoor in there it’s probably a different company. The Google article mentionslibexploit.so, which doesn’t exist with a quickfind. Neither doeslibjaguar.so.libbase.sois just a generic file present everywhere, nothing interesting instringsfor it. My guess is that it’s geographically locked.So I am not sure what I am supposed to do with that. I just ran
pm disable-useron it, hopefully that’s enough.
