Azure Archives

Winsage

May 6, 2026

The Microsoft/OpenAI breakup: What does it actually mean for Copilot and other AI apps on your Windows 11 PC?

Microsoft's partnership with OpenAI has shifted from an exclusive agreement to a non-exclusive one, allowing OpenAI to offer its products on various cloud platforms while Microsoft remains its primary cloud partner. Microsoft is facing potential challenges, including its worst quarterly performance since 2008 and internal sales cuts due to low interest in its AI offerings. Despite this, CEO Satya Nadella reported that Microsoft 365 Copilot has reached 20 million paid enterprise seats, with user engagement increasing. However, there are concerns about the willingness of Microsoft 365 and Office 365 users to pay for Copilot. The non-exclusive agreement may weaken Microsoft's competitive edge, as OpenAI can now license its models to competitors. Microsoft is developing its own in-house AI models and has made leadership changes within its Copilot division to secure its position in the AI market. The future of Copilot in Windows 11 remains uncertain, but Microsoft continues to innovate with AI features across its platforms.

Winsage

May 4, 2026

You Can Get Windows 11 Pro on Sale for A$18 Right Now

Windows 11 Pro is currently available for a reduced price of A, down from A6. The operating system includes features such as Windows Copilot, a redesigned user interface, new productivity tools, remote desktop access, and robust security features like TPM 2.0, Smart App Control, biometric login options, BitLocker encryption, Azure AD integration, Hyper-V, and Windows Sandbox. The upgrade is available for one PC that meets the minimum system requirements: a 1GHz processor, 4GB of RAM, and 64GB of hard disk space.

Winsage

May 3, 2026

This $10 upgrade transforms your PC — but it’s only on sale until midnight

Microsoft Windows 11 Pro is available for .97, significantly reduced from its regular price of 9. This offer is valid only until midnight tonight. Windows 11 Pro includes features such as Snap layouts, seamless redocking, enhanced search functionality, and improved voice typing. It also offers tools like Azure AD, Hyper-V, Windows Sandbox, and BitLocker device encryption for security and productivity. For gaming, it features DirectX 12 Ultimate graphics and integrates Microsoft's AI-powered assistant, Copilot. Security enhancements include biometric logins, encrypted authentication, and robust antivirus protection.

Winsage

May 2, 2026

Upgrade your OS to Windows 11 Pro for only $10

Windows 11 Pro is typically priced at 9, but is available for .97 until May 3.

Winsage

May 2, 2026

Microsoft tests modern Windows Run, says it’s faster than legacy dialog

Microsoft has introduced a modernized Run dialog in the latest preview build of Windows 11, version 26300.8346. This updated Run dialog features a sleek design, dark mode support, and improved performance, achieving a median response time of 94 milliseconds compared to the legacy version's 103 milliseconds. The Browse button has been removed due to low usage statistics, with less than 0.0038% of users engaging with it. New functionalities include support for the ~ command for quick access to the home directory and the addition of icons in the command list. Users can enable or disable the modern Run feature through the Advanced Settings menu. The update also includes improvements to the Windows Share UI for Azure Active Directory users and enhancements to the Magnifier tool, which now offers zoom levels ranging from 5% to 400%. The Windows 11 Build 26300.8346 is available for download from the Experimental Channel.

Winsage

April 30, 2026

If you held off upgrading your PC because of the price, it’s now only $10 to get Windows 11 Pro

Windows 11 Pro is currently available for a promotional price of .97, a significant reduction from the standard price of 9. It includes security enhancements such as TPM 2.0, secure boot, built-in antivirus protection, Smart App Control, and Windows Hello for biometric security. BitLocker provides hard drive encryption, while Snap layouts and virtual desktops enhance multitasking. Unique features include Windows Sandbox for safely opening untrusted files, Hyper-V for managing virtual machines, and Azure AD support for workplace accounts. The integrated Copilot feature assists with various tasks. This promotional offer ends on May 3 at 11:59 p.m. PT.

Winsage

April 27, 2026

“The work we’re doing together remains ambitious”: OpenAI ends Microsoft exclusivity in a tone that doesn’t match last week’s leaked memo

Microsoft and OpenAI have redefined their partnership, ending Microsoft's exclusivity with OpenAI. Microsoft will continue as OpenAI's primary cloud partner, with products launching on Azure first, but OpenAI can now collaborate with other cloud providers if necessary. Key points include: - Microsoft retains its primary cloud partner status, with OpenAI products debuting on Azure unless Microsoft cannot meet capabilities. - OpenAI can distribute products across any cloud platform. - Microsoft's license to OpenAI's intellectual property is non-exclusive and extends through 2032. - Microsoft will no longer share revenue with OpenAI, while OpenAI will continue payments to Microsoft until 2030, capped at a predetermined total. - Microsoft remains a major shareholder in OpenAI. The partnership has faced challenges, including CEO Sam Altman's brief dismissal in late 2023, which displeased Microsoft CEO Satya Nadella. OpenAI's revenue chief acknowledged Microsoft's foundational support while indicating constraints on OpenAI's engagement with enterprise demands. Both companies are committed to ongoing collaboration amidst growing competition in the AI landscape.

Tech Optimizer

April 26, 2026

CanisterSprawl: pgserve Compromised on npm: Malicious Versions Harvest Credentials and Exfiltrate to a Decentralized ICP Canister

On April 21, 2026, compromised versions of pgserve (1.1.11, 1.1.12, and 1.1.13) were published on npm, containing a 1,143-line credential-harvesting script that executes during the postinstall phase of npm install. The malware functions as a supply-chain worm, reinjecting itself into other packages if it finds an npm publish token. Stolen credentials are encrypted using RSA-4096 and AES-256 and exfiltrated to a decentralized Internet Computer Protocol (ICP) canister. The last legitimate release was v1.1.10, published on April 17, 2026. The malware was detected by StepSecurity AI Package Analyst and Harden Runner, which flagged the compromised versions as Critical / Rejected and confirmed live exfiltration during analysis. The injected script performs operations such as harvesting environment variables, collecting filesystem secrets, encrypting payloads, and propagating to other npm packages and Python packages if a PyPI token is detected. The exfiltration domains have been added to a global block list.

Tech Optimizer

April 23, 2026

Take Control: Customer-Managed Keys for Lakebase Postgres

Encryption at rest is essential for cloud environments, especially in regulated sectors. Lakebase offers Customer Managed Keys (CMK), allowing organizations to control their encryption keys from preferred Key Management Services (KMS) like AWS KMS, Azure Key Vault, or Google Cloud KMS. Lakebase CMK manages both persistent storage and ephemeral compute, ensuring data security. Lakebase's architecture separates storage and compute layers, enabling elastic scaling and serverless operations. The storage layer maintains persistent data, while the compute layer consists of dynamic Postgres instances. This separation poses encryption challenges, addressed by Lakebase CMK through a hierarchical Envelope Encryption model. The key hierarchy includes: 1. Customer Managed Key (CMK): The Root of Trust in the cloud KMS, never accessed in plaintext by Databricks. 2. Key Encryption Key (KEK): A transient key for wrapping data keys. 3. Data Encryption Keys (DEKs): Unique keys for each data segment, stored in an encrypted state. When data access is needed, Lakebase retrieves DEKs by unwrapping keys from the KMS. If a key is revoked, access to the data is denied, and ephemeral compute instances are terminated. In practice, CMK applies to: 1. Persistence Layer (Storage): All data segments are encrypted with keys controlled by the CMK. 2. Ephemeral Layer (Compute): Each compute instance generates a unique ephemeral key, and upon revocation, the instance is terminated, destroying in-memory keys. CMK implementation follows a delegation model, allowing Security Admins to manage keys without accessing data. The process includes key configuration, workspace binding, and lifecycle management. Key rotation is seamless, requiring no data re-encryption. All cryptographic operations involving the CMK are logged by the cloud provider's audit service. Lakebase CMK is available for Enterprise tier customers, allowing organizations to manage their encryption keys effectively.

Winsage

April 23, 2026

Engineering secure passkey sync in Microsoft Password Manager

Passkeys are a new form of authentication that replace traditional passwords, providing a phishing-resistant and streamlined sign-in process. Microsoft Password Manager allows users to save and synchronize passkeys across devices linked to their Microsoft accounts, enhancing accessibility. The architecture for passkey syncing includes confidential computing for sensitive operations, hardware-rooted key protection for encryption keys, tamper-evident recovery storage, and encrypted synchronization across devices. Sensitive passkey operations are executed in Azure's confidential computing environments, ensuring cryptographic materials are processed securely. The encryption keys are protected using Azure Managed HSM, with access governed by attestation-based mechanisms. Registration and recovery processes require user authentication and enforce security measures within confidential computing boundaries, including a lockout state after consecutive incorrect PIN attempts. The system aims to provide a secure and user-friendly experience as part of a transition to a passwordless future.