Apps
TikTok security questioned as fake Coronavirus videos spread
Hackers could spread misinformation via WHO’s official account
TikTok is one of the most widely used apps across the world today. Backed by Chinese giant Bytedance, the app poses serious competition to Facebook-owned Instagram. However, the platform has been mired in controversy over privacy issues and now a report alleges it’s compromised and can help spread misinformation about Coronavirus.
Developers Tommy Mysk and Talal Haj Bakry have shared a post detailing how TikTok relies on an unsecured path to deliver content to your phone. In simpler terms, there’s a vulnerability in the way content is delivered to your phone from TikTok’s base server.
HTTP is a standard protocol that’s the backbone of modern internet for data transfer from the origin (TikTok server) to a source (your phone). But, it’s not secure. For ensured privacy, an encrypted protocol is used — HTTPS. The “s” stands for secure.
The developers said TikTok’s CDN (Content Delivery Network), a complex practice that ensures data gets delivered to you faster, relies on HTTP and not HTTPS. It’s like a middleman between the base server and your phone. The problem is, data from the CDN isn’t secure when it gets delivered to you.
Hence, man-in-the-middle attacks are possible. Any hacker can exploit this insecure path and push content they want you to see. To demonstrate an example, the developers injected fake Coronavirus videos into the World Health Organization’s TikTok account, making it look like official communication. The same trick also worked for the Red Cross account.
The developers often called White hat hackers had no intention of causing harm and alerted the platform about its weakness. They said, “we directed the app to our fake server. Because it impersonates TikTok servers, the app cannot tell that it is communicating with a fake server. Thus, it will blindly consume any content downloaded from it.”
The same trick did not work on apps like Facebook, Twitter, Instagram, and Snapchat. Simply because they rely on HTTPS protocol for data transfer.
Google is slightly moving away from Material Design. Last week, a set of icon changes saw Android adding splashes of gradients to its formerly flat app icons. To poke fun at Android’s move away from flat designs, a user on X created a mockup of Android running Apple’s Liquid Design. Google, however, had a response ready in the chamber.
On X, @Micetor made a mockup of Android, specifically on the upcoming Pixel 11, using Apple’s latest Liquid Design aesthetics. It looked much like what an iPhone does except with Google’s icons and fonts.
Clearly, Google does not need to reply to any unsubstantiated mockups about its ecosystem. But they still did.
Sameer Samat, Google’s head for the Android ecosystem, personally replied to the mockup with a simple rebuttal: “Not happening!”
Not happening! Y'all are wild. 😂
— Sameer Samat (@ssamat) May 5, 2026
Despite using the design language for over a decade, Google does not want to drop Material Design altogether. Though the new gradients have revitalized the design language somewhat, the essence of flat design is still there.
Apple, on the other hand, wants a return to 3D. Liquid Design mimics the transparent aesthetics of Windows Vista. Though a bunch of users have found the design polarizing, other brands have started copying the design for themselves, incorporating elements on Liquid Design on their interfaces.
Whatever Google is doing, it’s coming in due time. The company is hosting its annual Google I/O on May 12 to showcase new developments coming to the Android ecosystem, including its design.
SEE ALSO: More iPhone switchers this year than Android switchers, report says
Apps
iOS 26.5 will support end-to-end encryption RCS messaging
The final update should come out within the month.
Back in 2023, Apple finally adopted the RCS messaging standard, ensuring that iOS and Android users could communicate more seamlessly despite being on different platforms. This year, the platform is adding an improvement to the feature: end-to-end encryption.
Starting with the upcoming launch of iOS 26.5, Apple will now support end-to-end encrypted RCS messaging between iOS and Android users (via 9to5Mac). Besides the seamless communication, users on both platforms can start enjoying secure messaging with one another.
Apple has been testing the feature since February. Now, the company is confident enough to release the encryption technology in a new build for iOS 26.5 meant for developers. At this point, it’s just waiting for an actual release.
Why is this a big deal? Encryption adds an extra layer of security for your messages. Plus, end-to-end encryption means that messages is encrypted and decrypted only by the sender and the receiver. Third parties, which includes Apple, cannot intercept and access your information.
With the feature on, both messaging platforms on Android and iOS will show a lock icon to signify that, yes, your messages are encrypted.
Though the current build isn’t meant for end users just yet, it’s expected that iOS 26.5 will launch within the month, if not by next week.
SEE ALSO: Apple iPhone 17e review
Apps
YouTube makes picture-in-picture mode free for everyone globally
The update is rolling out globally now.
Picture-in-picture (or PiP) mode is a godsend for multitaskers. The feature lets users watch videos in a tiny floating window while doing other tasks. However, the feature isn’t readily available for all users. Or wasn’t, at least. YouTube is now rolling out PiP mode for free globally.
Previously, PiP mode was exclusive to YouTube users who pay for Premium or Premium Lite. It was also exclusive to the United States.
Now, YouTube is making the feature completely free for users all over the globe. It will be available for both iOS and Android versions of the app.
There’s still a catch, though. The free version is available only for “longform, non-music content.” The same goes for Premium Lite subscribers. Music is still an exclusive feature for those who pay for the regular version of Premium. Basically, there is no change for paying users or users in the United States.
Using PiP mode is simple. All you need to do is load up a video you want to watch in the background. Then, just exit the YouTube app and go about your other tasks. The video will be inside a floating, resizable window while you look at other things.
There’s no timeline on when the update will reach your device. However, YouTube has promised that it will roll out globally within the coming months.
SEE ALSO: YouTube remains top PH video platform; advertisers urged to continue investing
-
Gaming1 week agoLevel Infinite launches Gangstar Mirage City exclusively in PH
-
News2 weeks agoThis rumored iPhone 18 color will make you switch phones
-
Reviews1 week ago5 games with the nubia Neo 5 GT 5G
-
Gaming2 weeks agoBeast of Reincarnation coming to PS5 this August
-
Convenient Smart Home2 weeks agoGiving up counter space for reverse osmosis: Living with Waterdrop M6H in NYC
-
Automotive1 week agoThe VinFast VF6 is perfect for urban travelers
-
Gaming1 week agoThe Steam Controller is coming out on May 4
-
Gaming1 week agoThe Blood of Dawnwalker launches September 3
