LINux on MOBile - MalwareLINMOB.net is a blog about LINux on MOBile devices. With the PinePhone (Pro) and Librem 5 shipping it is back to report on GNU+Linux on mobile devices.Zola2021-12-08T21:32:00+00:00https://linmob.net/tags/malware/feed.xmlLinBits 74: Weekly Linux Phone news / media roundup (week 48/49)2021-12-08T21:32:00+00:002021-12-08T21:32:00+00:00https://linmob.net/linbits-74-weekly-linux-phone-news-week48-49/<p><em>This week in Mobile Linux:</em> A huge Plasma Mobile Gear release, a minor Phosh update, an overhaul to mobile-config-firefox, PinePhone malware, hope for mobile Signal Desktop lovers and more!</p>
<span id="continue-reading"></span><h3 id="software-releases">Software releases</h3>
<ul>
<li>mobile-config-firefox, the attempt to get a desktop browser to work acceptably well on a smartphone screen, <a href="https://gitlab.com/postmarketOS/mobile-config-firefox/-/tags/3.0.0_rc1">has seen a new pre-release</a>. It supports Firefox >= 91 properly and contains the following changes: The navigation bar is being moved to the bottom, uBlock origin is being installed by default, about:reader is now adaptive and lots for further UI fixes. Check <a href="https://fosstodon.org/web/@ollieparanoid/107394745970284867">ollieparanoid’s thread for visual impressions</a>.</li>
<li>Phosh 0.14.1 has been released, delivering improvements for lock screen call handling (avatars and DTMF) and convergence (improving docked mode when screen of, a run command prompt (Alt+F2)). Go read the <a href="https://gitlab.gnome.org/World/Phosh/phosh/-/releases#v0.14.1">full release notes</a> for more!</li>
<li>Plasma Mobile Gear 21.12 has been released, updating large number of core apps. Make sure to read the release announcement linked <a href="https://linmob.net/linbits-74-weekly-linux-phone-news-week48-49/#software-progress">below</a>!</li>
</ul>
<h3 id="worth-noting">Worth noting</h3>
<ul>
<li>Signal Desktop might be more usable on Linux Phones <a href="https://teddit.net/r/PinePhoneOfficial/comments/r7w19l/so_full_version_of_signal_now_has_collapsible/">now that it has a collapsible side panel</a>.</li>
<li>It looks like Sxmo might be getting a <a href="https://social.librem.one/@zachdecook/107384429641135497">swipe-typing keyboard</a> soon!</li>
<li>Malware is now a thing on the PinePhone (well, sort of): On December 5th, an IRC user posted what was supposed to be a snake game on the PinePhone chat, offering it as a package for Arch/Manjaro. Sadly, it turned out to contain malware that used a known <a href="https://nns.ee/blog/2021/04/03/modem-rce.html">vulnerability to brick the Quectel EG25-G modem</a>. Root permissions, as you may have guessed, where obtained during package install, and the actual malicious component was the obfuscated post-install script. RTP’s video <a href="https://linmob.net/linbits-74-weekly-linux-phone-news-week48-49/#security">below</a> has more info on this. <em>So, reminder: Don’t install random packages offered by random IRC users you don’t know. Also, kudos to PINE64 for catching this fast and making it public (well, on Discord only afaik, but still).</em></li>
</ul>
<h3 id="worth-reading">Worth reading</h3>
<h4 id="software-progress">Software progress</h4>
<ul>
<li>Plasma Mobile: <a href="https://plasma-mobile.org/2021/12/07/plasma-mobile-gear-21-12/">Plasma Mobile Gear 21.12 is Out</a>. <em>Four months of hard work condensed into one post absolutely worth reading – even if you’re not a Plasma lover.</em></li>
<li>Jozef Mlich: <a href="https://blog.mlich.cz/2021/12/nemomobile-in-december-2021/">Nemomobile in December/2021</a>. <em>Great strides forward!</em></li>
<li>This Week in GNOME: <a href="https://thisweek.gnome.org/posts/2021/12/twig-21/">#21 Software Cleanup</a>. <em>Nice developments!</em></li>
</ul>
<h4 id="software-progress-at-the-library-level">Software progress at the library level</h4>
<ul>
<li>Benjamin Otte: <a href="https://blog.gtk.org/2021/12/03/sizable-news/">sizable news</a>. <em>GTK 4.6 news.</em></li>
<li>mclasen: <a href="https://blogs.gnome.org/mclasen/2021/12/03/pango-updates-4/">Pango updates</a>. <em>Yes, this is not mobile specific, but foundations matter.</em></li>
</ul>
<h4 id="non-linux-software-progress">Non-Linux Software Progress</h4>
<ul>
<li>Phoronix: <a href="https://www.phoronix.com/scan.php?page=news_item&px=Genode-OS-21.11">Genode OS 21.11 Now Has Working Intel Gen9+ Graphics, Better PinePhone Support</a>. <em>I wish I had the time to try this!</em></li>
</ul>
<h4 id="linux-phone-buyers-guide">Linux Phone Buyers Guide</h4>
<ul>
<li>TuxPhones: <a href="https://tuxphones.com/best-linux-phones-buying-guide-2022/">The best Linux phones you can buy right now</a>. <em>Really good post! (I’ve been meaning to write something similar, but didn’t get to it – now I don’t have to!)</em></li>
</ul>
<h4 id="shipments">Shipments</h4>
<ul>
<li>Liliputing: <a href="https://liliputing.com/2021/12/pinephone-pro-and-pinenote-now-shipping-to-developers.html">PinePhone Pro and PineNote now shipping to developers</a>. <em>By now, many of these devices have arrived!</em></li>
</ul>
<h4 id="metadata-progress">Metadata progress</h4>
<ul>
<li>Matthias Klump: <a href="https://blog.tenstral.net/2021/12/new-things-in-appstream-0-15.html">New things in AppStream 0.15</a></li>
</ul>
<h3 id="worth-watching">Worth watching</h3>
<h4 id="ubuntu-touch">Ubuntu Touch</h4>
<ul>
<li>UBports: <a href="https://www.youtube.com/watch?v=xVmucF8aVok">Virtual machines? On my Ubuntu Touch? | Ubuntu Touch Q&A 113</a>. <em>Alfred developed a new app, OTA 21 is going to happen, Teleports (Telegram client) problems due to Telegram rushing things, notch support, 20.04 progress, Ayatana indicators landing, core development release roadmap. They also discuss community questions.</em></li>
</ul>
<h4 id="retiled-launcher-progress">Retiled launcher progress</h4>
<ul>
<li>Drew Naylor 2: <a href="https://www.youtube.com/watch?v=lvbaCgOvsik">RetiledStart demo #5: Pinning, Unpinning, and Resizing Tiles</a>. <em>Nice!</em></li>
</ul>
<h4 id="security">Security</h4>
<ul>
<li>RTP: <a href="https://tube.tchncs.de/w/tunn31t5p5R1gZirLMq2TW">Pinephone News: Snake "Game" Malware Shared!</a>. <em>Great video! Minor nitpick: I don't think you really need to read every bit of code before you install it. Don't install random packages, and if you use random PKGBUILD scripts with Arch (or Manjaro), make sure to check those before installing - it should be doable!</em></li>
</ul>
<h4 id="waydroid">Waydroid</h4>
<ul>
<li>NOT A FBI Honey pot: <a href="https://www.youtube.com/watch?v=yg3SJsypM8M">a pinephone rant……</a>. <em>Not a rant.</em></li>
</ul>
<h4 id="glodroid">GloDroid</h4>
<ul>
<li>Powen: <a href="https://twitter.com/powen00hsiao/status/1466740447376965634">Current setup of pinephone android 12</a>.</li>
</ul>
<h4 id="jingpad">JingPad</h4>
<ul>
<li>ETA PRIME: <a href="https://www.youtube.com/watch?v=A2NEkRtLOzc">JingPad A1 First look World's FIRST Consumer-level ARM-based Linux Tablet</a>. <em>It's not actually running KDE Plasma though, and it resembles iOS more than Android. That aside, good video!</em></li>
</ul>
<h3 id="missed-your-story">Missed your story?</h3>
<p>If we missed an important bit of news, please get in touch. If you want to make sure we don't miss your app release, distro update, blog post or video, just ping us on social media or send me an email! <em>It's very much appreciated!</em></p>
<h3 id="stuff-i-did">Stuff I did</h3>
<h4 id="content">Content</h4>
<p>Nothing, again. I did not manage to write my "Abandoning the Zola approach to LinuxPhoneApps" post. <em>Maybe I'll manage to do so in the coming week.</em></p>
<h4 id="linmobapps-and-linux-phone-apps">LINMOBapps and Linux Phone Apps</h4>
<p>This week I added </p>
<ul>
<li><a href="https://gitlab.gnome.org/World/AudioSharing">Audio Sharing</a>, which allows to automatically share the current audio playback in the form of an RTSP stream that can then be played back by other devices, and</li>
<li><a href="https://gitlab.gnome.org/danigm/loop">loop</a>, a simple audio loop machine application to create music.</li>
</ul>
<p>More is going to follow this week.</p>
<p><a href="https://framagit.org/linmobapps/linmobapps.frama.io/-/commits/master">Read here what (else) happened</a> on LINMOBapps this week. And please <a href="https://framagit.org/linmobapps/linmobapps.frama.io/-/blob/master/CONTRIBUTING.md">do contribute!</a></p>