biometrics Archives

Winsage

September 16, 2025

This tiny version of Windows 11 fits into just 2.29 GB and is ‘extremely aggressive’ in removing bloat such as Xbox, Solitaire and Defender

NTDev has compressed the Windows 11 operating system to a 2.29 GB file, down from the original 7.04 GB ISO size of the Insider build 26200. This project, called nano11, removes features such as Xbox, Weather, Office, Solitaire, Windows Update, Windows Defender, most drivers, Bitlocker, Search, biometrics, accessibility features, audio, Microsoft Edge, and Internet Explorer. The OS can run with just 184 MB of RAM, compared to Microsoft's minimum requirement of 4 GB. A text-only version can be created that occupies only 100 MB but lacks a graphical user interface. NTDev previously released tiny11, which also minimized Windows 11 by removing additional features.

AppWizard

September 12, 2025

Meet Max, Russia’s all-in-one app: From messages to spying on Russians

The Russian messaging application Max was first tested in March 2025 and is developed by Communication Platform LLC, a subsidiary of VK. It is marketed as a "national" and "unified" messenger, with significant promotion from the Kremlin. A law signed by President Vladimir Putin in June 2025 established Max as a state-owned entity, mandating its use in school chats and pre-installation on smartphones. Mobile operators are required to offer Max without consuming data traffic. Users in occupied Ukrainian territories are also required to install the app. Restrictions on other messaging services have been implemented, with security services limiting their functionalities. By mid-August 2025, Max had around 18 million users, but it has faced criticism for lacking end-to-end encryption and requesting excessive access to smartphone features. Users have reported performance issues and concerns over surveillance by the Russian government. The Kremlin has acknowledged monitoring through Max, and the app is compared to China's WeChat. Putin has ordered increased control over foreign messaging applications, aiming to restrict the use of foreign software by September 2025.

AppWizard

September 9, 2025

New RatOn Android Malware Targets Banking Apps and Crypto Wallets via NFC Attacks

A new strain of Android malware called RatOn was identified on July 5, 2025, targeting banking applications and cryptocurrency wallets, particularly in the Czech Republic. It integrates near-field communication (NFC) relay attacks with automated transfer system (ATS) capabilities, allowing attackers to hijack devices and execute unauthorized transactions. RatOn builds on tactics from previous malware like PhantomCard and employs overlay attacks to capture user credentials. It gains root-level access through vulnerabilities such as KernelSU, enabling call hijacking to bypass two-factor authentication. RatOn specifically targets local banking applications and cryptocurrency wallets, scanning for wallet apps and extracting private keys. Defending against RatOn involves enabling app sideloading restrictions, using reputable antivirus software, and monitoring NFC settings, while banks are enhancing anomaly detection systems. The emergence of RatOn raises concerns about mobile security globally, with calls for stricter app store vetting and improved NFC protocols. Experts predict that future malware will increasingly use AI-driven adaptations, complicating detection efforts.

AppWizard

August 21, 2025

Android 16 QPR2 Update is Out — These Upgrades Might Surprise You

Google has announced the Pixel 10 range and the Pixel Watch 4, along with the release of the Android 16 QPR2 Beta 1 for Pixel users. The QPR2 beta introduces features such as lock screen widgets (Hub mode), an expanded dark theme for apps, auto-theming for app icons, improved haptic feedback, a new HDR brightness slider, native PDF editing capabilities, a personal audio switcher for Bluetooth LE devices, and enhanced security with a new Secure Lock Device mode. Users enrolled in the QPR1 beta can transition to the QPR2 beta, which is available for Pixel 6 through Pixel 9 series, the Pixel Tablet, and the upcoming Pixel 10. The stable release of Android 16 QPR1 is expected in September, with the public release of QPR2 anticipated in December.

AppWizard

August 21, 2025

Google is expanding a key anti-theft feature to make your apps more secure

Android's Identity Check feature will be enhanced in the Android 16 QPR2 update, requiring biometric-only authentication for apps using the biometric prompt, eliminating screen lock credentials as a fallback. This aims to improve security for sensitive applications by preventing unauthorized access, particularly in untrusted environments. The update expands Identity Check to more applications, ensuring that access necessitates biometric verification. Users can activate this feature through Settings on their Pixel devices. Future updates may allow the use of a smartwatch as a trusted unlock mechanism, bypassing biometric authentication when connected.

Winsage

August 14, 2025

Announcing Windows 11 Insider Preview Build 27924 (Canary Channel)

Windows 11 Insider Preview Build 27924 has been released to the Canary Channel, with ISOs now available for download. New features include the rollout of Copilot+ PC experiences, which will gradually introduce improvements to Windows Search and Settings. Advanced settings have been redesigned, now allowing users to enable long paths, manage virtual workspaces, and view Git information in File Explorer. Changes include adjustments to the pointer indicator and a temporary change in the keyboard shortcut for it. The Windows MIDI Services have undergone a breaking change requiring updates for applications using the MIDI 2.0 SDK. Fixes have been made for issues related to upgrades, widgets, remote desktop, and webauth.dll crashes. Known issues include problems with Windows Hello PIN and Group Policy Editor. An update for the Snipping Tool introduces window mode screen recording. Insiders are reminded that Canary Channel builds are early development versions and may not align with future Windows releases.

Winsage

August 8, 2025

Microsoft improves Windows 11 Search UI settings, confirms group policy bug in build 27919

Microsoft has released a new Windows 11 build, 27919, for Insiders in the Canary channel, featuring a refreshed user interface for the Search page within the Settings app. The update reorganizes Windows Search settings under Settings > Privacy & security, introducing dedicated “Search permissions” and “Searching Windows” pages for easier navigation. The build also resolves several bugs, including a crash in File Explorer when accessing digital signatures and issues with the Microsoft Changjie Input method and phonetic keyboards. However, known issues include potential loss of Windows Hello PIN and biometrics for users transitioning from other channels, display errors during the upgrade process, error pop-ups in the Group Policy Editor, and remote desktop functionality defaulting to the primary monitor.

Winsage

August 8, 2025

German researchers show ‘Windows Hell No’ flaw at Black Hat

Microsoft is working to move Windows users away from traditional passwords to its Hello biometrics system. Researchers from ERNW Research, supported by the German government, discovered a critical vulnerability in Hello that allows individuals with local admin access or malware credentials to inject biometric data, bypassing security measures. Hello facilitates authentication for business users by connecting corporate PCs to platforms like Entra ID or Active Directory, storing a cryptographic key in a database linked to Microsoft's Windows Biometric Service. While Enhanced Sign-in Security (ESS) is designed to mitigate such vulnerabilities, not all PCs are compatible with it. During a presentation, researchers demonstrated the flaw by logging in with a facial scan and then injecting a captured facial scan to unlock the device. They suggested that users without ESS disable biometric authentication and revert to using a PIN. Microsoft has not yet responded to these findings, which are part of a research program called Windows Dissect.

AppWizard

August 5, 2025

Google Gemini Android App to Add Audio Uploads for AI Insights

Google's Gemini app for Android is set to enhance its functionality by supporting audio file uploads, as indicated by an APK teardown revealing code strings and user interface elements for this feature. This development will allow users to summarize podcasts, transcribe meetings, and extract insights from voice memos. The introduction of audio capabilities follows earlier features like Audio Overviews, which enable podcast-style discussions from written documents. However, there are significant privacy concerns regarding the handling of sensitive audio data, with fears that Google may access personal information without explicit user consent. Critics warn that audio uploads could lead to unauthorized data scraping and complicate compliance with data protection regulations. Google has mentioned configurable privacy settings to address these risks, but skepticism remains about their adequacy. The anticipated rollout of this feature is expected in the coming months.

AppWizard

July 31, 2025

Android users to finally get an extra layer of security on Chrome

Google Chrome on Android will soon require biometric verification to autofill passwords, enhancing security by preventing autofill without user authentication. This feature will be available in Google Password Manager and is expected to roll out more widely soon. Currently, Chrome has an option for biometric authentication in its Autofill settings, but this has only applied within apps. The update will extend this requirement to all apps, including Chrome, and will be labeled "Verify it's you" in the settings. Users will need to authenticate their identity through fingerprint, facial recognition, or screen lock before passwords can be autofilled. While an official release date is not yet announced, the feature has started appearing for some users, indicating a potential imminent rollout.