data collection Archives

Winsage

August 5, 2026

Microsoft denies Windows 11 secretly spies on you every 15 minutes

Scott Hanselman, deputy technical director at Microsoft, explained that a service within the Windows diagnostic system collects local performance data to help users identify PC slowdowns. This data remains on the user's device unless the user opts to share it with Microsoft. Hanselman acknowledged that the service's description is unclear and that Microsoft plans to revise it based on user feedback. Concerns about data collection have been raised by Windows users, particularly regarding services like Recall, which faced backlash despite its local data storage promise. Microsoft is reconsidering its data collection approach in light of these concerns.

AppWizard

August 4, 2026

Android app developers may be unwittingly sharing their users’ location data with advertisers

Mobile apps often require precise location data for functionality, but there are concerns about the unintentional sharing of this sensitive information with third parties, such as advertisers and data brokers. The Electronic Frontier Foundation (EFF) found that third-party code in apps may collect location data without users' explicit consent due to default settings in software development kits (SDKs). Unless developers disable this feature, SDKs inherit app permissions, leading to the collection of users' location data. This raises privacy issues, as users' location histories can be sold to data brokers and potentially accessed by military and intelligence agencies. The EFF identified that certain Android apps, downloaded over 60 million times, were sharing location data without user awareness. Currently, there are no SDK-specific location permissions, meaning that consent to share location data with an app also extends to advertisers. The EFF calls for a change in industry standards to prevent default data sharing by advertising SDKs.

AppWizard

August 4, 2026

Samsung follows LG in killing Smart TV apps that rent out your internet

Security researchers found that several Samsung Smart TV applications, including Pac-Man, were embedding residential proxy SDKs from data brokers like Bright Data. In response, Samsung has banned the inclusion of residential proxy functionality in new app submissions and is working to remove existing apps with such software. The investigation by Norwegian cybersecurity firm Mnemonic revealed that the Bright Data SDK was integrated into various gaming applications, some promoted by Samsung. While Samsung TVs were not automatically sharing internet connections, the SDK could be activated remotely by developers, requiring user consent. Once consent was granted, the proxy service could operate in the background. Many Samsung TV applications were found to download most of their code from remote servers, complicating verification processes. The issue of residential proxy software is not limited to Samsung, as it has also been identified in various Android apps and devices. Following these findings, LG and Google have also taken measures to address the risks associated with residential proxy networks.

AppWizard

August 4, 2026

Google Merges AI Mode, Search Live, and Song Search Into Android Voice Button

The four-color microphone button on Android homescreens has been updated to provide four distinct functionalities: Search, Translate, Live, and Create. This redesign includes a mode switcher similar to Google Lens, allowing users to select their preferred mode instead of relying on the app to infer intent. Each mode is powered by different AI architectures: AI Mode uses Gemini 3.5 Flash for complex queries, Search Live employs Gemini 3.1 Flash Live for real-time conversations, and Song Search identifies melodies using machine learning. The toolbar now remembers the last selected mode, enhancing user convenience. The new features are currently available in beta versions of the Google app (17.1 and 17.2) on Android, with no specified timeline for broader rollout.

Winsage

August 2, 2026

5 Reasons Why People Are Ditching Windows 11

Many users have embraced Windows 11, but a significant portion remains loyal to Windows 10 or is exploring alternative operating systems. Performance issues on older laptops with 4-8 GB of RAM are a primary concern, as Windows 11's background processes consume more memory than Windows 10, leading to slowdowns. Users have reported that even supported devices experience performance dips. Methods to enhance Windows 11 performance exist, but many users prefer lightweight alternatives like Linux and ChromeOS Flex, which often provide improved performance. Windows 11 is criticized for its bloatware, with pre-installed software occupying storage space and consuming resources. Users find the interface cluttered and the search functionality inefficient, prompting some to stick with Windows 10 or consider alternatives like Linux or macOS. The update process in Windows 11 has become frustrating due to buggy updates, leading users to delay updates and consider operating systems with more stable update experiences. AI integration in Windows 11 has not been universally appreciated, with some users feeling it is forced and expressing a desire for Microsoft to focus on performance and reliability instead. Data collection practices in Windows 11 have raised privacy concerns, causing some users to hesitate in upgrading from Windows 10. The requirement for a Microsoft account during setup complicates the experience for those who prefer privacy, prompting them to explore other operating systems that prioritize user privacy.

Tech Optimizer

July 24, 2026

CrashStealer Mac malware steals passwords and wallets

A sophisticated new malware targeting Mac users, named CrashStealer, has been discovered by security researchers at Jamf Threat Labs. It masquerades as Apple's legitimate crash-reporting software and was first identified in May 2026, with active attacks detected by early July. CrashStealer is designed to extract sensitive information, including browser credentials, password manager data, and cryptocurrency wallet information, and can copy the Mac login Keychain. It uses native C++ programming, encrypts collected files, and employs anti-debugging features. The malware is distributed through a disk image labeled "Werkbit Setup," which features a polished installer that bypasses Mac security warnings by using a valid Apple Developer ID and notarization ticket. Once opened, it connects to GitHub for commands and downloads a script that installs a second disk image named CrashReporter.dmg, which mimics an Apple system component. CrashStealer presents a fake password prompt resembling a legitimate macOS request, verifying entered passwords locally. It targets data linked to various browsers and password managers, scanning for approximately 80 cryptocurrency wallet extensions and 14 password managers. Stolen data is stored in hidden folders, encrypted using AES-256-GCM, and packaged into hidden ZIP archives before being uploaded. Warning signs of infection include a website requiring a meeting PIN for download, unexpected password prompts, and unfamiliar apps requesting Full Disk Access. Users are advised to download apps from verified sources, avoid overriding security warnings, pause before entering passwords, review app permissions, install security updates, use antivirus software, and act quickly if they installed Werkbit Setup.

Winsage

July 21, 2026

Persistent Telemetry: Permanent Microsoft Windows Identifier

Discussions about consumer privacy in the Windows ecosystem have focused on optional diagnostic settings and telemetry controls. Recently, the Global Device Identifier (GDID), a permanent device-level token embedded in the Windows operating system, was revealed in a U.S. Department of Justice complaint related to a cybercriminal investigation. The GDID uniquely identifies a Windows installation and is used by Microsoft services. It is generated when a device is linked to a Microsoft account and resides in the Windows registry, being included in data sent to remote servers. There is no option to disable or delete the GDID, and attempts to do so can disrupt essential features. This has led privacy-conscious users to consider alternatives like Linux, which offers more control over data and does not require persistent identifiers. For Windows users, strategies to minimize data linked to the GDID include using local accounts, disabling optional diagnostics, and reviewing cloud app sync settings. Privacy advocates are calling for better user controls and opt-out mechanisms for hardware tracking tokens.

Winsage

July 21, 2026

Ditching Windows is the loudest feedback you can ever give Microsoft

Frustration with Microsoft's data collection practices has increased, particularly since the transition from Windows 7, where the amount of user data collected has significantly risen. Microsoft gathers extensive data points, including device IDs, user IDs, operating system information, and application usage data. Many users are turning to Linux as an alternative, as it respects user privacy and does not collect personal data without consent. Microsoft has also employed manipulative design tactics to influence user behavior, such as persistent prompts and misleading visuals. Additionally, the introduction of ads in Windows 11 has been viewed as disrespectful to paying customers, while Linux remains ad-free. Users are encouraged to switch to Linux to express dissatisfaction with Microsoft's practices and to reclaim their digital autonomy.

Tech Optimizer

July 20, 2026

LG monitors are silently installing adware on your Windows PC

LG has faced criticism for the automatic installation of an application that delivers pop-up advertisements for McAfee antivirus subscriptions when certain LG monitor models are connected to a Windows PC. This issue was highlighted by Gamers Nexus, which reported that the LG Monitor App Installer activates upon connecting models like the LG UltraGear 34GX900A-B and the LG UltraFine 32UN880-B. In a test of 32 system boots, McAfee was promoted in 31 instances. The app can utilize extensive system resources and access internet connections, and LG's privacy policy indicates that user data such as names, phone numbers, birth dates, and online activity may be collected. Complaints about this practice have increased recently, suggesting a broader rollout or more frequent pop-ups. Other manufacturers, including Dell, have faced similar backlash for their software installation methods. Users hope Microsoft will require brands to seek explicit permission before installing utilities, although Microsoft's own history with unsolicited software raises uncertainty about this possibility.

Winsage

July 14, 2026

Microsoft blocks browser choice for 1.4 billion Windows users, study finds

Microsoft's design strategies continue to influence users towards its Edge browser, as revealed in a study by Dr. Harry Brignull and Cennydd Bowles, published by Mozilla. The researchers tested Windows 10 and 11 across the US, UK, India, and Germany, focusing on whether users could download, set, and maintain a default browser other than Edge without interference. Findings showed that users encountered harmful design patterns that hindered their ability to choose alternative browsers. For example, searching for "download Chrome" on Bing led to Edge promotions, and downloading Chrome triggered an Edge banner. In Windows 11, the setup prompts users to allow Edge to import data from other browsers, with the accept option more visible than the decline option. Additionally, Microsoft's Copilot and Windows Backup tool opened links in Edge regardless of the user's default browser choice, resetting the default browser to Edge during migration without consent. The study noted regional differences, with fewer harmful patterns in Germany due to the EU's Digital Markets Act, although some issues persisted. The researchers recommend eliminating these harmful design patterns and advocate for global regulatory enforcement.