I replaced my Fire TV remote with a keyboard, and it massively improved my experience

jetc.dev Newsletter Issue #319

Bản tin jetc.dev số 319 cập nhật các phiên bản mới nhất của Jetpack Compose gồm bản vá 1.11.3, beta 1.12 đầu tiên và Compose Multiplatform 1.12.0-alpha02. Nội dung nổi bật bao gồm hỗ trợ iOS cho Jetpack Ink, các BOM mới, lifecycle/viewmodel-compose 2.11.0 mở rộng đa nền tảng, thư viện locationbutton Compose mới, cùng nhiều chủ đề như scoping ViewModel, Coil 3 cho tải ảnh đa nền tảng, kiểm thử screenshot theo locale, và các thư viện mã nguồn mở mới.

Những tiến bộ mới trong Jetpack Compose và Compose Multiplatform từ phiên bản 1.12 beta sẽ giúp bạn tối ưu hóa ứng dụng Android/iOS/native với các tính năng mới như ink iOS, viewmodel scoping và Coil 3, từ đó nâng cao hiệu suất và tính đa nền tảng cho dự án.

Glitch SPY RAT Distributed Via Fake Polish Rental App

Cyble Research and Intelligence Labs has identified a new Android malware family called Glitch SPY, distributed via a fake Polish apartment rental website that tricks users into sideloading an APK. The dropper is the known Brokewell Android Loader, which installs the Glitch SPY payload. Once installed, the RAT abuses Android Accessibility Service to auto-grant permissions and supports over 70 C&C commands covering live screen streaming, keylogging, SMS/contact/call log theft, camera and microphone surveillance, file management, shell execution, and remote browser control. A crypto-clipper module silently replaces copied cryptocurrency wallet addresses (ETH, TRON, Bitcoin) with attacker-controlled ones. A hidden remote browser runs on the victim's device using their IP and cookies, enabling stealthy web-based account takeover. The Builder module allows operators to generate customized payloads with configurable names, icons, and decoy URLs, indicating a reusable multi-campaign platform still under active development.

jetc.dev Newsletter Issue #320

Issue #320 of the jetc.dev newsletter covers Jetpack Compose news including rendering composables on OpenGL surfaces via VirtualDisplay for 3D effects, a 3D chess game built with Compose Multiplatform using Filament and SceneView, a potential official web-rendering composable, and MeshGradientPainter in Compose 1.12.0 alpha. Also featured: an independent Compose Multiplatform RemoteCompose player, a Material 3 Expressive settings library, Compose Unstyled 2.8.0 release, and a large roundup of links covering navigation, ViewModels, performance, accessibility, and more.

Scalable UI in Android Automotive OS: The Panel Controller

A deep dive into the Panel Controller side of Android Automotive OS's Scalable UI framework. Covers how DecorPanelControllerBase and BaseTaskPanelController work, how to wire a custom View and Controller into CarSystemUI via Dagger, and how to build imperative panel behavior. Two proof-of-concept implementations are walked through: FlameSun, an animated AGSL shader rendered inside a DecorPanel with minimal controller logic, and FocusGlow, a dynamic glow border that tracks window focus using TaskStackListener, PanelPool, PanelUpdateConsumer, and AutoSurfaceTransaction to reposition its surface at runtime. Limitations such as no RRO-only View shipping, full CarSystemUI rebuilds for code changes, and no persistent state across SystemUI restarts are also discussed.

Clicks shows off its BlackBerry-inspired phone in a new hands-on video

Clicks Technology has released a new hands-on video showcasing the Clicks Communicator, a $499 BlackBerry-inspired smartphone set to ship in Q4. The device features a tactile touch-sensitive keyboard, a customizable 'Signal Light' for notification management, swappable back covers, a 3.5mm headphone jack, physical SIM tray, eSIM support, and expandable microSD storage up to 2TB. Running Android with the Niagara Launcher, it targets productivity-focused users and those seeking a less addictive smartphone experience. The video previews pre-production hardware and software ahead of the full launch.

An Android auth architecture with encrypted tokens, auto-refresh, and reactive navigation

A deep-dive into a production-grade Android authentication architecture that goes beyond simple token storage. The approach uses DataStore with Google Tink (AES-256-GCM) for encrypted token persistence, treats auth state as a reactive Flow so navigation responds automatically to login/logout/refresh events, and leverages Ktor's Auth plugin for transparent JWT auto-refresh. Key design decisions include two separate HTTP clients (plain and authenticated) to prevent refresh recursion, local JWT expiry checking with a 30-second buffer on cold start, and Koin DI to structurally enforce which client reaches which endpoint. Trade-offs between Koin vs Hilt, Navigation 3 vs classic Navigation Compose, and Result-based error handling are also discussed.

I use these hidden Pixel settings to turn my phone into a productivity machine

A personal walkthrough of four underused Google Pixel settings that improve daily productivity: Focus Mode for blocking distracting apps on a schedule, Modes for filtering notifications during work hours, QuickTap for launching the Recorder app with a double tap on the phone's back, Notification History for recovering accidentally dismissed alerts, and Live Transcribe for real-time audio captions. Each feature is explained with navigation steps and the author's specific use case.