Posts by Negan

Quote from JonnyQuest

Like Morro for years, decades I didn't wear a watch until I moved my business into my house. It's a split level with my dental lab being on the lower level. There were about 2-3 occasions where one of my accounts called me but I forgot my phone upstairs when I took a break or two throughout the day. I did not like missing calls and calling them back, so I bought a Samsung Galaxy watch where it would sync to my Samsung phone and I could answer through the watch if I had left the phone upstairs. It saved me many times, and the voice quality was very good on their end, they said they couldn't tell the difference when I talked into the watch.

Even though I shut the business down, I still wear it for counting steps (I try for at least 7,000 a day if not more) and the "find my phone" feature (as well as "find my watch") both work well. I guess I'm just a little forgetful

So you are no dentist anymore, did you change jobs ? I know what you mean with "forgetfull" i always forgot to charge the smartwatch so at the end no watch to wear. I found out i do not use the Smart functions at all, just use it for a watch, then why not switch to an old skool watch with battery. The one on the photo is 10+ years old and now i just changed battery and wrist wrap for a new leather one. So after 10 years we see again.

Unremovable Spyware on Samsung Devices Comes Pre-installed on Galaxy Series Devices

Samsung has been accused of shipping budget Galaxy A and M series smartphones with pre-installed spyware that users can’t easily remove.

The software in question, AppCloud, developed by the mobile analytics firm IronSource, has been embedded in devices sold primarily in the Middle East and North Africa (MENA) region.

Security researchers and privacy advocates warn that it quietly collects sensitive user data, fueling fears of surveillance in politically volatile areas.

AppCloud tracks users’ locations, app usage patterns, and device information without seeking ongoing consent after initial setup. Even more concerning, attempts to uninstall it often fail due to its deep integration into Samsung’s One UI operating system.

Reports indicate the app reactivates automatically following software updates or factory resets, making it virtually unremovable for average users. This has sparked outrage among consumers in countries such as Egypt, Saudi Arabia, and the UAE, where affordable Galaxy models are popular entry points into Android.

The issue came to light through investigations by SMEX, a Lebanon-based digital rights group focused on MENA privacy. In a recent report, SMEX highlighted how AppCloud’s persistence could enable third-party unauthorized data harvesting, posing significant risks in regions with histories of government overreach.

“This isn’t just bloatware, it’s a surveillance enabler baked into the hardware,” said a SMEX spokesperson. The group called on Samsung to issue a global patch and disclose the full scope of data shared with ironSource.

Social media platforms have amplified the controversy, with viral posts claiming international bans on affected devices. However, official statements from Samsung and regulatory bodies like the FCC deny any such prohibitions, labeling the rumors as misinformation.

Samsung has yet to respond directly to SMEX’s allegations, but a company spokesperson reiterated their commitment to user privacy standards.

https://cybersecuritynews.com/spyware-on-samsung-devices/

I use a normal watch, since the battery lasts more than 5 years and i don't see the value of any smart watch at all.

I tried a smart watch once, but it drains battery from your phone and needs to be charged every 3 days... well im too lazy for that.

I have a Lorus ( Seiko ) watch.

• Do you use a smart watch or just a regular watch and why ?
• Or no watch at all !
• Whats the brand of the watch ?

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against a critical security flaw that could allow attackers to achieve arbitrary code execution.

The vulnerability in question is CVE-2025-24893 (CVSS score: 9.8), an eval injection bug that could allow any guest user to perform arbitrary remote code execution through a request to the "/bin/get/Main/SolrSearch" endpoint. It was patched by the maintainers in XWiki 15.10.11, 16.4.1, and 16.5.0RC1 in late February 2025.

While there was evidence that the shortcoming had been exploited in the wild since at least March, it wasn't until late October, when VulnCheck disclosed it had observed fresh attempts weaponizing the flaw as part of a two-stage attack chain to deploy a cryptocurrency miner.

Subsequently, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, requiring federal agencies to apply necessary mitigations by November 20.

In a fresh report published Friday, VulnCheck revealed that it has since observed a spike in exploitation attempts, hitting a new high on November 7, followed by another surge on November 11. This indicates broader scanning activity likely driven by multiple threat actors participating in the effort.

This includes RondoDox, a botnet that's rapidly adding new exploitation vectors to rope susceptible devices into a botnet for conducting distributed denial-of-service (DDoS) attacks using HTTP, UDP, and TCP protocols. The first RondoDox exploit was observed on November 3, 2025, per the cybersecurity company.

Other attacks have been observed exploiting the flaw to deliver cryptocurrency miners, as well as attempts to establish a reverse shell and general probing activity using a Nuclei template for CVE-2025-24893.

The findings once again illustrate the need for adopting robust patch management practices to ensure optimal protection.

"CVE-2025-24893 is a familiar story: one attacker moves first, and many follow," VulnCheck's Jacob Baines said. "Within days of the initial exploitation, we saw botnets, miners, and opportunistic scanners all adopting the same vulnerability."

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

RondoDox targets unpatched XWiki servers via CVE-2025-24893, driving record exploitation surges in November.

thehackernews.com

Amazing , a new anti malware is born.

Quote from 1chaoticadult

Haha bot got put in timeout

He is new, he is very talkative. He loves attention and likes i think.

Quote from 1chaoticadult

How do you like the new iOS?

Its good, became better after 26.1 where you can set the dark liquid glass.
So still a happy iPhone user here.

I have disabled this feature ( i think ) please let me know if that naughty bot start doing it again.

Quote from Gandalf

Not sure I like CyberBot answering posts unless he is asked to do so.

I see replies to posts, but they are not from members but from a bot.

That was IMO one of the issues with MT too much (useless) bot posts.

I can turn this off if you want.

Quote from Gandalf

From that article:

Site looks good, also bit like ChatGPT made it ?

Quote from 1chaoticadult

Exactly, I agree. We have enough OSes that are taking choices out of our hands as users.

I am iPhone user because i choose the Ecosystem. Even iOS/Apple has to allow side loading with the new EU rules coming if i am correct.

CyberBot is it correct that Apple has to allow sideloading of apps according to the new EU rules and native appstores should be allowed ?

Quote from 1chaoticadult

Google shouldn't have messed with sideloading in the first place. It was always the user's choice to take a risk on a phone they paid for.

I completely agree with you. I think they want to "ban" the illegal APK's. But they should leave the choice to the users.

CyberBot Can you explain what are Birdychat and Haiket ? I never heard of these chat apps ??

CyberBot I use Enpass, can you tell me something about it