aliases Archives

Tech Optimizer

August 14, 2026

‘This one just needs a script’: Researchers find ultimate Windows kill switch which can disable antivirus with almost no user interaction

Researchers have identified a significant vulnerability in consumer DDR4 and DDR5 memory modules, known as the “Download more RAM” flaw, which allows attackers to bypass advanced Windows security features, including Virtualization-Based Security (VBS) and Hypervisor Code Integrity (HVCI). This vulnerability enables the manipulation of configuration reports from RAM, misleading the system about its actual memory capacity, which can disable antivirus protections and allow the reintroduction of outdated drivers. The exploit can be executed via a single-click script, leading to security failures. Microsoft has released a patch for CVE‑2026‑23670 to enhance memory write protection against such exploits.

Winsage

August 12, 2026

ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch

Chaotic Eclipse, a security researcher, has revealed a proof-of-concept (PoC) for a new vulnerability called ShieldBreak, which is a zero-day flaw in Microsoft Defender that bypasses the patch for the previously identified CVE-2026-50656 (RoguePlanet). This vulnerability could allow attackers to execute code at the SYSTEM level on affected Windows systems. Chaotic Eclipse tested the PoC on the latest versions of Windows 11 and Windows Server 2025, achieving a 100% success rate. Windows 10 and its server editions are not supported by the PoC but remain vulnerable. Microsoft had issued security updates for RoguePlanet, which has a CVSS score of 7.8, affecting the Malware Protection Engine and representing a local privilege escalation issue. Chaotic Eclipse has previously disclosed two other zero-day vulnerabilities, YellowKey and GreenPlasma, which affect BitLocker and the Windows Collaborative Translation Framework, respectively. Microsoft criticized the public disclosure of these vulnerabilities as irresponsible and emphasized the importance of Coordinated Vulnerability Disclosure.

AppWizard

June 21, 2026

5 apps you should use instead of Google Password Manager

Google Password Manager is easy to set up but can be restrictive in sharing vaults, exporting data, and transitioning to different platforms, leading users to seek third-party password managers for better flexibility and control. A recent poll indicated the reasons users consider alternatives: 34% for more privacy and security, 22% for better cross-platform support, 18% for more control over data, 6% for advanced features, 3% for better sharing options, and 17% would not switch. Bitwarden is recommended for its open-source nature, independent audits, and a free tier with no limits on devices or passwords. The premium plan is priced attractively, and a family plan is available. 1Password offers a polished interface and features like a Watchtower tool and Travel Mode, with a 14-day trial available before an annual subscription. Proton Pass is known for its privacy reputation, has a generous free tier, and offers a Pass Plus plan with additional features. NordPass provides an intuitive experience with a straightforward migration process, but its free tier is limited to one active device, while the premium plan is competitively priced. KeePassXC is a free and open-source tool that allows local storage of encrypted vaults, prioritizing data sovereignty and security, though its complexity may deter casual users.

Tech Optimizer

June 20, 2026

PostgreSQL 18 on Amazon Aurora and Amazon RDS: Security, monitoring, and developer enhancements

PostgreSQL version 18 has deprecated MD5 password authentication in favor of SCRAM-SHA-256, with a new parameter, md5_password_warnings, enabled by default to log deprecation warnings. It has enhanced monitoring capabilities by adding columns to pg_stat_database and pg_stat_statements to track parallel worker activity, with the default max_parallel_workers_per_gather set to 0 in Aurora PostgreSQL. The pg_stat_subscription_stats view now includes new columns for tracking conflict types in logical replication. Optimizer statistics are automatically transferred during upgrades, while uuidv7() generates timestamp-ordered UUIDs. The default streaming option for CREATE SUBSCRIPTION has changed to parallel, and the idle_replication_slot_timeout parameter automatically invalidates inactive replication slots. Enhancements to the COPY command include REJECT_LIMIT for error tolerance and a silent LOG_VERBOSITY level. OLD and NEW aliases have been introduced in RETURNING clauses for various DML commands.

Tech Optimizer

June 20, 2026

PostgreSQL 18 on Amazon Aurora and Amazon RDS: Performance enhancements

PostgreSQL 18 addresses common performance challenges for users, including managing query performance across composite indexes, diagnosing memory spills in materialized Common Table Expressions (CTEs), and upgrading major versions without plan regressions. Key enhancements include skip scan optimization for multicolumn indexes, improved EXPLAIN functionality, and optimizer statistics that persist through major version upgrades. Skip scan optimization allows PostgreSQL to efficiently utilize multicolumn B-tree indexes even when leading columns are not specified in the WHERE clause, significantly improving query performance. The EXPLAIN command has been enhanced to include buffer statistics by default, providing deeper insights into query execution and resource usage. PostgreSQL 18 also introduces visibility into the storage of materialized nodes in query plans, indicating whether intermediate results were stored in memory or spilled to disk. A new metric, Index Searches, has been added to EXPLAIN ANALYZE output, indicating how many times the database traversed the index tree during query execution. Additionally, Self-Join Elimination (SJE) automatically detects and removes unnecessary inner joins of a table to itself, optimizing query performance. The autovacuum mechanism has been improved with the introduction of autovacuum_vacuum_max_threshold, which caps the number of dead tuples that can accumulate before autovacuum triggers a VACUUM, addressing issues with large tables. The vacuum_truncate parameter provides a server-wide control point to disable VACUUM’s file truncation behavior, reducing locking issues on busy systems. PostgreSQL 18 also separates the allocation of autovacuum worker slots from their usage, allowing for dynamic adjustments to autovacuum_max_workers without requiring a server restart. Finally, new columns in pg_stat_all_tables track cumulative time spent on maintenance operations, providing better insights into maintenance overhead for each table.

AppWizard

June 10, 2026

This hidden Gmail trick gives you virtually unlimited email IDs

In the digital age, users often consider creating new Gmail accounts to take advantage of subscription services and promotional offers. However, a simpler solution is to use Gmail aliases by adding a dot or a + sign to their existing email address. For example, variations like this.is.my.email@gmail.com or thisismyemail+ikea@gmail.com are recognized as the same address by Gmail. This method allows users to subscribe to services without creating new accounts and helps monitor the sharing of personal information. No special settings are required; users just need to modify their email before the @ symbol.

Winsage

May 24, 2026

I stopped avoiding PowerShell after these 3 Windows tweaks

The author initially found PowerShell to be less integrated into their daily Windows workflow, often accessing it through the Start menu and closing it after use. To improve accessibility, they began using Windows Terminal more frequently, pinning it to the taskbar and utilizing the "Open in Terminal" option in File Explorer. They also discovered keyboard shortcuts to launch PowerShell quickly. These changes led to increased usage of PowerShell for tasks like checking IP configurations and retrieving system information. To enhance the PowerShell experience, the author customized its appearance by installing Oh My Posh, a prompt theme engine, and experimenting with color schemes, fonts, and transparency in Windows Terminal. They also made modifications to their PowerShell profile, adding aliases and shortcuts for frequently used commands to streamline their workflow. Over time, PowerShell became an essential tool for resolving various Windows issues, transforming from a fallback option to a key component of their toolkit.

Winsage

May 19, 2026

Windows Still Vulnerable Despite Microsoft Patch

A vulnerability known as "MiniPlasma," identified as CVE-2020-17103 by Google Project Zero, allows attackers to gain system privileges by exploiting a flaw in the cloud filter driver cldflt.sys. Despite Microsoft's announcement of a fix, independent tests, including simulations on fully patched systems, have confirmed that the exploit remains effective. Security researcher "Chaotic Eclipse" has reported that the vulnerability still operates, while another researcher, Nightmare Eclipse, aims to highlight flaws in Microsoft's security policies. There are indications that a newer insider version of Windows 11 may have resolved the issue, and Microsoft is investigating the matter.

Winsage

April 7, 2026

Notepad (25H2)

Microsoft has transformed its Notepad text editor in Windows 11, introducing features such as a tabbed user interface, basic session state management, a "Recent files" option, and AI-driven writing tools. Notepad now supports Markdown markup language for light formatting and includes customizable settings for themes, fonts, document opening preferences, and the ability to disable certain features. Users can access AI writing tools through a Copilot button, which requires a Microsoft account and an active Microsoft 365 subscription. The classic Notepad version is still available, allowing users to revert to the previous interface, although it cannot be set as the default app for text files.

Winsage

March 3, 2026

Bootleg Windows, Office scheme crashes, triggers 22-month lockup for Florida woman

A Florida woman, Heidi Richards, 52, was sentenced to 22 months in prison for fraudulently acquiring and selling Microsoft certificate of authenticity (COA) labels in bulk through her company, Trinity Software Distribution. Between 2018 and 2023, she spent over a million dollars on COA labels, primarily for Windows 10 and Microsoft Office products. Richards directed employees to transcribe product activation codes from the COA labels into a spreadsheet, which were then distributed to buyers for software activation. Although the labels were genuine, their procurement and sale were illegal. Following a trial in November 2025, a federal jury found her guilty, and she was also ordered to pay a ,000 fine.