overview for BoyetLeonantus

1.3 million Android-based TV boxes backdoored; researchers still don’t know how in c/cybersecurity@sh.itjust.works

[–] BoyetLeonantus@sh.itjust.works 15 points 1 month ago (2 children)

RethinkDNS (available on F-Droid) has a mode where it blocks every connection by default and you have to allow each app to access the network. I used that to effectively disable the pre-installed malware on my Android TV box (X88 Pro iirc). It also has DNS and connection logs to check network traffic (can be a lot though). GlassWire (Play Store) is nice to quickly check for an unexpected amount of network traffic. Not sure if there's ways around that, but it worked in my case a while ago.

9

Are any important things crammed into the Google app? (sh.itjust.works)

submitted 5 months ago by BoyetLeonantus@sh.itjust.works to c/degoogle@lemmy.ml

3 comments fedilink

I'm not sure about my phone, maybe I'd like to keep Google Lens, but on a TV box it seems completely unnecessary. Its identifier com.google.android.googlequicksearchbox also sounds like it shouldn't contain anything important for the working of a device, but who knows with Google. Is there anything unexpected that would stop working when uninstalling / disabling updates for this?

How do I enroll the liquorix kernel? I can't seem to find it anywhere. Or the default kernel for that matter. in c/linux4noobs@programming.dev

[–] BoyetLeonantus@sh.itjust.works 1 points 6 months ago

https://www.dannyvanheumen.nl/post/secure-boot-linux-shim-mokmanager/ seems to be a good introduction to the concept. Your distribution should have specific documentation on how to make custom kernels and secure boot work if you need more details.

If you have already made a certificate and imported it with mokutil maybe you just need to select the MokManager.efi from your screenshot and start that to enroll the key.