this post was submitted on 02 Sep 2026
23 points (89.7% liked)

Android

34663 readers
2 users here now

DROID DOES

Welcome to the Android community on Lemmy. Here you can participate in amazing discussions and events relating to all things Android.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules


1. All posts must be relevant to Android devices/operating system.


2. Posts cannot be illegal or NSFW material.


3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.


4. Non-whitelisted bots will be banned.


5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.


6. Memes are not allowed to be posts, but are allowed in the comments.


7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.


8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.


Community Resources:


founded 3 years ago
MODERATORS
 

A newly disclosed attack chain can potentially let someone with physical access to a locked Android phone browse its photo gallery through an incoming WhatsApp video call. The path is essentially: WhatsApp call → Effects → Backgrounds → Meta AI → Edit Photo → Gallery No PIN, pattern, or biometric authentication is required once the vulnerable path is available. Testing found the behavior on some Pixel and Oppo devices, while Samsung's One UI blocked the same path with authentication.

top 5 comments
sorted by: hot top controversial new old
[–] sbeak@sopuli.xyz 2 points 1 day ago (1 children)

Woah, good thing I uninstalled WhatsApp ages ago

[–] UnLocoPoco@lemmy.world 1 points 1 day ago (1 children)
[–] sbeak@sopuli.xyz 1 points 1 day ago* (last edited 1 day ago)

Neither, the former is only on iOS / various other Apple bits, the latter is awful in terms of privacy (arguably more so than Whatsapp)

I mainly use Matrix (Element on desktop, FluffyChat on Android, Fractal on mobile Linux) and email (Thunderbird), but I also have Halloy (IRC) installed to. As for any proprietary messaging services I use, it's mainly WeChat for messaging Chinese friends.

edit: I also have Signal, but pretty much no one in my circle uses it, as everybody who was bothered to switch to Signal went all the way and joined Matrix in my experience.

[–] limerod@reddthat.com 2 points 2 days ago (1 children)

Good thing I never granted the read media permission. Whatsapp can use the default photo picker for pictures and video and repeatedly asks for storage permission claiming it becomes limited without it.

I need to manually invoke the media picker whenever I want to send a picture. This lock screen bypass does not work in my case since I never granted the storage or read media permission to whatsapp.

[–] UnLocoPoco@lemmy.world 2 points 1 day ago

Yeah even I do the same for any app other than onedrive