bootloader Archives

Winsage

March 6, 2026

Microsoft’s Secure Boot certificates expire in June 2026, but older PCs may never get the fix

Every Secure Boot-enabled Windows PC relies on cryptographic certificates issued by Microsoft in 2011 for boot process integrity. The first of these certificates will expire on June 24, 2026, impacting the ability to receive future security updates. Microsoft is rolling out replacement certificates through Windows Update, requiring collaboration between Microsoft, PC manufacturers, and users. Three critical certificates will expire: the Microsoft Corporation KEK CA 2011 and Microsoft UEFI CA 2011 in June 2026, and the Microsoft Windows Production PCA 2011 in October 2026. The new certificates introduced in 2023 have a restructured functionality to enhance security. Not all PCs are affected; newer devices manufactured since 2024 come with the new certificates. Windows 10 users face challenges as support ends in October 2025, and unsupported devices will not receive updates. Home users should ensure automatic Windows updates and check for firmware updates, while enterprise environments must verify firmware updates before applying certificate updates. The first certificate expiration is on June 27, 2026.

AppWizard

March 3, 2026

With developer verification, Google’s Apple envy threatens to dismantle Android’s open legacy

The F-Droid team published an open letter to Google, supported by 35 organizations, expressing concerns about Google's changes to the Android ecosystem. Many Android users rely on Google for app installations, facing challenges when trying to use alternative app stores or open-source apps without verification. Some developers are shifting to progressive web apps instead of Android. Alternatives to Google's verification system include non-certified Android devices and privacy-focused ROMs like LineageOS or GrapheneOS, but these options come with security vulnerabilities and installation difficulties for most users. Telecom companies impose restrictions on devices to ensure they work on their networks, leading to a reliance on stock software and security updates from Google and manufacturers.

AppWizard

October 22, 2025

Android users finally get Android 16 Beta 3.1, as bootloader fix comes in

Google has begun rolling out an update to address bootloop issues affecting users in the Android 16 QPR2 Beta 3 program. This update is being distributed to all devices, with specific instructions provided for those still facing problems. The Android 16 QPR2 Beta 3, released late last week, included new features such as an app shortcut button and updates to Live Caption, but was met with reports of bootloop issues among Pixel testers. The OTA patch rollout started on October 20, targeting bootloader issues, with patch version vBP41.250916.010 for Pixel 6, 6 Pro, or 6a devices, while other eligible Pixels receive the same version. Google has also provided steps for users still experiencing bootloop problems, including downloading Beta 3.1 and using Recovery mode for installation. Following the reports, Google retracted the patch to prevent further complications. Early feedback indicates that the new patch has resolved bootloop problems for some testers.

AppWizard

October 14, 2025

This Privacy-First Android Software Is Looking to Expand Beyond Pixel Devices

GrapheneOS is collaborating with an undisclosed original equipment manufacturer (OEM) to introduce new devices that will be competitively priced alongside Google’s Pixel lineup, featuring a flagship Qualcomm Snapdragon system-on-chip (SoC). This will be the first time GrapheneOS supports a Snapdragon processor since the Pixel 5 in 2020. Speculation points to potential partnerships with brands like Nothing or OnePlus. The anticipated device will have broad international availability and will be part of the OEM's regular product lineup with official GrapheneOS support. Current users of Pixel devices running GrapheneOS will continue to receive support until the end of their phones' update cycles, and compatibility with the Pixel 10 is planned, while support for the Pixel 11 is uncertain.

AppWizard

September 11, 2025

How Pixel and Android are bringing a new level of trust to your images with C2PA Content Credentials

The Google Pixel 10 phones incorporate C2PA Content Credentials in their camera and Google Photos, marking them as the first to attach these credentials to every photograph taken. The Pixel Camera app has achieved Assurance Level 2, the highest security rating from the C2PA Conformance Program, ensuring a secure environment for digital content. The integration employs a private-by-design strategy for certificate management, preventing traceability back to the creator. On-device trusted time-stamps allow users to trust images even after the certificate expires. The technology is supported by the Google Tensor G5 and Titan M2 security chip, enhancing hardware-backed security features. Content Credentials provide detailed information about the creation and protection of media files, helping users identify AI-generated or altered content. Google is a steering committee member of the Coalition for Content Provenance and Authenticity (C2PA), which aims to establish industry standards for digital content verification. The Pixel 10 categorizes digital content based on verifiable proof of its creation process. Each JPEG photo captured includes Content Credentials, and Google Photos validates these credentials for edited images. The implementation architecture is designed to be secure, verifiable, and usable offline. Google employs a unique certificate management strategy to enhance user privacy, ensuring that each key and certificate is used for only one image. An on-device offline time-stamping authority allows for the generation of trusted time-stamps without requiring internet connectivity.

Winsage

August 27, 2025

WSL made using my Windows 11 PC so much easier, here’s how

The author has used both Windows and Linux for two decades, with Windows as the primary operating system and Linux for experimentation. The introduction of the Windows Subsystem for Linux (WSL) has eliminated the need for dual-booting and virtual machines, allowing the author to use Linux apps and commands directly within Windows. WSL simplifies file sharing between Windows and Linux, making it easy to access documents and directories across both systems. The transition from WSL on Windows 10 to WSL2 on Windows 11 has further improved file management. WSL functions as a lightweight alternative to resource-heavy virtual machines, offering quick boot-up times and efficient performance. The author can install and run multiple WSL distributions, primarily using Ubuntu but also keeping an Arch installation for experimentation.

Winsage

August 27, 2025

Happy birthday Windows 95: the system that changed PCs forever!

On August 24, 2025, the 30th anniversary of Windows 95 was marked. Windows 95 was Microsoft’s first mass-market 32-bit consumer operating system, which sold one million copies in the first four days and approximately 40 million within a year. It aimed to unify MS-DOS and Windows into a single user experience with low minimum requirements: a 386DX processor, 4 MB of RAM, and 50-55 MB of disk space. Key innovations included the Start button, a unified interface, a full 32-bit Win32 API, and multitasking support for software from three generations. Official support for Windows 95 ended in December 2001, but its influence persists in modern operating systems. The launch featured the Rolling Stones’ song “Start Me Up,” which became iconic in tech marketing, despite initial challenges in securing the rights. The advertising campaign included celebrity appearances and contributed to Windows 95's cultural phenomenon status.

AppWizard

July 27, 2025

The alternate history of Android

July 2025 marks the 20th anniversary of Google’s acquisition of Android, Inc., which initially focused on developing an operating system for digital cameras. Android has evolved into a versatile operating system, known for its open-source nature that allows users to download, modify, and reinstall code. This flexibility has led to a vibrant community of developers, such as Steve Kondik, who created the CyanogenMod custom Android ROM. Around 2010, many Android users faced frustrations due to carrier restrictions that limited device customization and control. Despite these challenges, a culture of rooting and custom ROM development emerged, allowing users to unlock their devices and enhance functionality. The motivations for modifying devices stemmed from a desire for better performance and user experience, particularly in overcoming issues like bloatware. For example, the Motorola Atrix had impressive hardware but was limited by carrier restrictions, prompting the community to create a custom Android 4.4 ROM that improved its functionality. The evolution of Android has involved collaboration among manufacturers, Google, and a passionate user community dedicated to innovation and customization.

AppWizard

July 5, 2025

I built a PiKVM to control my PC remotely, and it’s a game-changer

The PiKVM project allows users to control a desktop or server remotely using a Raspberry Pi 4B and an HDMI-CSI bridge adapter, providing comprehensive keyboard, video, and mouse control even during reboots. It offers browser-based access to the PC's screen in real-time, enabling actions like force shutdowns, BIOS access, and operating system reinstallation, independent of the host system's operating system. The setup captures HDMI output and simulates USB input, functioning in scenarios like BIOS or crash screens. Essential components for building a PiKVM include a Raspberry Pi 4B, an HDMI-to-CSI bridge adapter, a microSD card, USB cables, an official power supply, and the latest PiKVM OS image. The setup process involves writing the OS image to the SD card, connecting the hardware, and accessing the web interface for remote control. PiKVM is beneficial for tasks such as troubleshooting boot sequences, configuring BIOS settings, and monitoring system status without physical interaction.

Winsage

June 29, 2025

Every Windows user should keep a live version of Linux handy

Many users experience frustration with operating system issues on Windows, often leading to time wasted on troubleshooting and rebooting. A live version of Linux, such as Linux Mint, can serve as a reliable alternative for diagnosing and fixing Windows-related problems. This live distribution runs from a USB drive and provides essential troubleshooting tools without the complications of Windows recovery environments. Utilities like GParted, Memtester, Foxclone, and Clonezilla are available for managing file systems, testing memory, and recovering data. Setting up a live version of Linux is straightforward, involving formatting a USB drive and flashing a live ISO. Linux Mint Xfce Edition is noted for its user-friendliness, while tools like Ventoy allow multiple ISOs on a single drive for versatility. A live Linux setup offers a familiar desktop experience and a suite of recovery tools, making it a valuable resource even for non-Linux users.