[Samsung Galaxy Note 10+ ROMs, Kernels, Recoveries,] dr.ketan:
Wake-up Call

You might be aware of my message posted couple of days, Why you should prefer XDA

Here exmple what have had happened couple of days ago on one of telegram channel

Message from OP a well known developer

I already see couple of people reporting that they bricked their device from the "leak" Telegram group.

I assume many more accounting that some won't have a secondary device to use Telegram.

I don't know what to say to those using the leaked kernel other than that you played yourself.

While I never anticipated that this would actually happen, I did post a warning.

This "leaker" deliberately modified my kernel to brick the device.

With the attached screenshots, right one is the leaked kernel and the left is the one I released to my private Telegram group.

First screenshot:

The versioning string is different. My release tells you which exact Git HEAD commit was at the time of building. The "r20b6+" means that it's been built without CONFIG_LOCALVERSION_AUTO set.

Also, my build server's host name is "arter97-dgist". The leaked one is "arter97_dgist".

Second screenshot:

The highlighted part is the address of where execprog's data is located. It's different, which means that it's likely that the leaked one is built from source and not a binary modification.

The r20b6 includes some touch panel optimizations and removes the "[FTS][Error][IIC]: i2c_transfer" string in one of its commits. The leaked one still has that, which means it's not even r20b6.

Third screenshot:

The "leaker" actually wanted to brick devices. They injected a piece of code to execprog to wipe all internal UFS storage(including the bootloader) on January 29th 00:00 UTC time.

Forth/fifth screenshot:

Meanwhile, the admin there seems to be fine with it and says it's from a "trusted source" and keeps on posting Wolf of Wall Street memes with no context.

I hope this can be a wake up call to everyone: Always download stuffs from trusted and reliable sources.

A message from hacker

Well, after the end of a storm comes another storm. A bit of a clearance before we go off.

It was fun leaking that kernel but what was funnier and more amusing was fooling the present admins of that group and getting myself and my Chinese friend the admin right. God of Hell trusted me so badly, he didn't even question the builds, he didn't even question when I asked him to let Bai be the admin and asked him to let Bai leak builds immediately. He had plans of boosting his group to 400 members first but we had enough. It was time to play the trick. Such a fool

Our work with beryllium is complete. We've successfully achieved what we had targeted. But we got another news for you. Aside from the wipe, we had injected another code to send all the saved bits of the ufs to our server (Don't believe us? Ask arter and he'll let you know). I guess you understand what we want now.

P.S: the upload process started from the very moment you had flashed the kernel and continued the moments you had been connected to the internet.

It'd be £10 for the complete deletion of every bits sent to our server from your phone. £20 for the deletion and letting you get back your data. Sure we don't have everything depending on your internet connection, but there's still significant amount of data. Don't believe us? Good job you're not a retard after all but we'll let you have the advantage.

We'll let you receive your data first, and you'll have to pay us afterwards within 30 minutes. Beware, you must flash a kernel we'll provide and if the payment fails, you'll have the same outcome as before. We'll let you have remote access to our servers and allow you to delete stuff yourselves. You can do a complete wipe and flash some thing else afterwards

What if we wipe it even after you complete payment ?

Your call, let us know of the other options you have. All payment must be done with cryptocurrencies

You get served what you deserve :sunglasses:

Our work with beryllium is done, please don't tag us unnecessarily as we don't have any link to the device nor want to keep any. It was a fine bait. This channel and all accessible Adolf Hitler accounts would be down within 72 hours. Farewell, if you want to contact us

This is not to scare you guys, not every telegram channel have this happnes, but a lession to learn to download from only official sources.

And this is the reason I never allow other people to make mirror of my work as I can't monitor what have been changed.