Build Bytes

The site is up

Downdetector has got the spike

IMDb is down guys! 😭😂

Nekogram appears to be using the TgDB Search Bot in an automated manner (without our knowledge; this is not a partnership), likely to search for usernames.

However, this is unrelated to their obfuscated scraping of phone numbers; we do not receive any data from Nekogram and are in no way affiliated with them.

EXPOSED: Source Code Evidence of Nekogram Phone Number Harvesting

1. Exfiltration Logic: The function uo5.g() (reconstructed as logNumberPhones) silently collects the UserID and Phone Number of every account logged into the app (up to 8 accounts).

2. Transmission: Data is sent via Inline Queries to the bot @nekonotificationbot. This is done programmatically, so no message appears in your "Sent" history.

3. Target Bots: Three bots embedded in the client's obfuscated code:
@nekonotificationbot: Receives the automated phone number uploads.
@tgdb_search_bot and @usinfobot: : An OSINT bot mentioned in the obfuscated classes.

4. Security Token: The app uses a hardcoded secret key 741ad28818eab17668bc2c70bd419fc25ff56481758a4ac87e7ca164fb6ae1b1 as a prefix for the stolen data, likely to authenticate with the bot's backend.

5. The image shows that Nekogram always wants to get the "reg date".

Unfortunately the Google Play Store version is also affected!!!

Follow @TechLeaksZone

BREAKING: Nekogram is secretly transmitting your telegram account phone number to the developer

According to SOTA,
"The backdoor is hidden in the http://Extra.java file, which differs from the template uploaded to the repository. The obfuscated code sends data as an inline request to the @nekonotificationbot, leaving no trace. The same file implements account 'doxing' via several bots; it is possible that the leaked data is used to populate their databases."

Additionally, the creator of the Nekogram client, (presumably a Chinese national) was previously known for conducting DDoS attacks and unethical online behavior (including death threats against acquaintances).

Apparently, in the early versions of the client, de-anonymization was applied only to Chinese phone numbers, which could have been used for political surveillance;. However, it is now applied to all users.

Follow @TechLeaksZone

BREAKING: Google Announced New Rules For Sideloading Apps

1. Enable developer mode

2. Confirm you aren't being coached:
A quick check to make sure that no one is talking you into turning off your security as scammers often pressure victims into disabling protections.

3. Restart your phone & reauthenticate:
This cuts off any remote access or active phone calls a scammer might be using to watch what you’re doing.

4. Come back after the protective waiting period and verify:
There is a one-time, one-day wait & then you can confirm that this is really you who’s making this change with our biometric authentication or device PIN. Scammers rely on manufactured urgency, so this breaks their spell.

5. Install apps:
Once you confirm you understand the risks, you’re all set to install apps from unverified developers, with the option of enabling for 7 days or indefinitely. For safety, you’ll still see a warning that the app is from an unverified developer, but you can just tap “Install Anyway.”

Follow @TechLeaksZone

🚨 Android will become a locked-down platform soon!

• Read the letter
• Get Active & Learn More
• Sign the petition
• F-Droid Blog

Everyone is requested to share it with whomsoever it may concern for awareness.

@Nothing_Archive

YouTube Down 🤧

Although you can Still Watch the Subscriptions Videos...

Edit: Started working again

New Unofficial Leak

Apple is Expected to Integrate Gemini into Siri
But New thing is
Previous name: Siri
New Name :Giri 🙂

Lol
It would be fun or great if it's Srigiri or Saptagiri 🙂🙂
Iykyk

The new realme P series phone with massive 10000mAh🔋has listed on India's BIS 🇮🇳 Certification 😍

It is likely the realme P5 Pro (RMX5107)

It'll launch soon in India 🇮🇳

😭

Happy New Year to everyone! 🎈🌟

- Team Build Bytes (yes, we have a team)

🚨 Google may finally let users change their @gmail.com address

For years, Gmail users have had one major limitation: once you created an address, you could not change it without opening a new account. That appears to be changing.

Recent support documentation updates indicate that Google has begun gradually rolling out the ability to change an existing Gmail address to a new @gmail.com address — while keeping the same Google Account.

🔎 What this update means

If your account becomes eligible, you may be able to:
- Change your current Gmail address to a new @gmail.com address
- Keep all account data (Gmail, Drive, Photos, YouTube, etc.)
- Sign in using either your old or new address
- Receive email sent to both addresses in the same inbox

The old Gmail address is expected to remain as an alias.

⚠️ Limitations & rollout conditions

Early details suggest that:
- Availability is rolling out gradually
- Address changes may be restricted to once every 12 months
- There may be a lifetime cap on total address changes
- Some accounts (Workspace, business-managed, restricted) may not be eligible

Google also indicates that once a new Gmail address is chosen, it may not be immediately reversible or removable.

🧩 Why this matters

A Gmail address is tightly connected to:
- identity across Google services
- login credentials and subscriptions
- account recovery and security
- professional and personal communication

Until now, changing it meant creating a new account and migrating everything manually. This shift represents one of Gmail’s most significant quality-of-life improvements to date.

🧭 How to check availability

Users may eventually see the option under:
Google Account → Personal info → Email → Google Account email

If the feature has reached your account, a change option should appear there.

💬 Discussion

If you could rename your Gmail address, would you?
Would you choose something more professional — or something simpler and clean?

#Google #News

RIP 💔

Source

JUST IN: The UK Government will consider every developer a hostile actor and in the interest of a foreign state if they offer end-to-end encryption in their product

The developer of an app, whose selling point is end-to-end encryption which would make it more difficult for UK security and intelligence agencies to monitor communications. It is a reasonable assumption that this would be in the interests of a foreign state even though the foreign state has never contemplated this potential advantage

Follow @TechLeaksZone

https://fixvx.com/AlecMuffett/status/2000899091086049783

Oh God! Anything worse left in this life?

Firefox is adding AI to the web browser.

Yeah, I'm killing myself tonight.

https://www.phoronix.com/news/Mozilla-New-CEO-AI

Hey everyone, hope you’re doing well...

Android root has changed a lot over time. Now, much of the effort goes into handling Play Integrity or finding a stable custom ROM, instead of simply enjoying and using the device.

Life has its uncertainties, and right now I’m stepping back from module development to focus more on life.
Data Backup and Bundle Mods are my final modules.

I’m buying a new phone soon and most likely won’t unlock the bootloader just for peace of mind :)

The channel won’t be dead though, we’ll still share tech news, windows or linux stuffs and useful mods or apps here.

Thanks for all the support, especially for Simple-Flag-Secure 🤍