Developer Hosts Blog on PinePhone's GPS/LTE Modem Using Discovered ADB Access
By
xx_ns
Master baker tier. Every paragraph earns its place on the tray.
Summary
A developer discovers that the PinePhone's Quectel EG25-G modem (which handles GPS and LTE connectivity) has an accessible ADB key, allowing direct access to the modem's Android-based system. The article details how the author used this discovery to host a blog directly on the modem, bypassing the phone's main operating system. This reveals security implications of closed-source hardware components in open-source devices and demonstrates creative repurposing of embedded systems.
Key quotes
· 4 pulledNo, really. Despite the timing of this article, this is not an April Fool's joke.
modem-power serial1-0: ADB KEY is '41618099' (you can use it to unlock ADB access to the modem)
This piece of hardware is one of the few components on the phone which is closed-source.
When I saw that message and the mention of ADB, I immediately thought of Android Debug Bridge.
You might also wanna read
North Korean Chollima Group Targets PHP Developers via Malicious Packagist Package
A malicious obfuscated JavaScript payload was discovered appended to tailwind.js in the Packagist development version dev-drewroberts/featur
socket.dev·5h ago
Microsoft uncovers supply chain attack: Compromised @antv npm packages steal CI/CD credentials via Mini Shai-Hulud malware
Microsoft has identified an active supply chain attack targeting the @antv npm package ecosystem. A threat actor compromised an @antv mainta
wolfCOSE: A Lightweight COSE + CBOR Library for Embedded Systems with PQC and FIPS 140-3 Support
wolfCOSE is a lightweight C library implementing CBOR (RFC 8949) and COSE (RFC 9052/9053) for embedded systems, using wolfSSL as the crypto
github.com·1d ago
npm malware targeting Claude users leaks own GitHub token, reaches 676 downloads
An npm package called "mouse5212-super-formatter" targeting Claude users acted as information-stealing malware, reaching 676 downloads befor
theregister.com·1d ago
Attacker publishes 14 malicious npm packages impersonating OpenSearch and Elasticsearch libraries
A single npm user published 14 malicious packages over four hours, impersonating popular OpenSearch, Elasticsearch, DevOps, and environment-
briefly.co·2d ago
Embedded Week Roundup: Edge AI to Physical AI, Fail-Safe Engineering, and Microchip's New PQC Security Chips
This article is a roundup of Embedded Week's must-read articles, covering key developments in embedded software engineering. It highlights t
embedded.com·2d ago