dev Archives

AppWizard

July 23, 2026

Building a True Per-App Android Device Spoofer

Device spoofing in Android applications allows developers to manipulate device information, primarily through altering android.os.Build attributes. Existing spoofer applications often fail to modify native system API calls that retrieve genuine device information. Tweaks is a per-app spoofer integrated into AOSP and LineageOS, which changes device properties by modifying memory-mapped files under /dev/properties. It uses a private mount namespace to bind-mount modified property-context files, ensuring only the targeted application receives spoofed values while the rest of the system remains unaffected. The Tweaks app, which is platform-signed, communicates with the TweaksManagerService to write configurations and manage property overrides. The core functionality is handled by propgen, which generates property context files with spoofed values by identifying and patching properties in place. The TweaksManagerService ensures secure interactions and content-addresses generated property areas to allow sharing among apps with identical overrides. The spawn path in ProcessList.startProcess determines whether to apply spoofing based on conditions evaluated by the TweaksLocalService. Security is maintained through SELinux policies, which restrict access to spoofable properties. However, certain elements, such as /proc/self/mountinfo and /system/build.prop, still reveal authentic device information despite the spoofing capabilities of Tweaks. The source code for Tweaks and related patches is available for public access.

Tech Optimizer

July 21, 2026

I Built My Second ETL Pipeline. This Time, I Started Thinking Like a Data Engineer

The author transitioned from a data analyst role to a data engineer, creating a 12-month self-study roadmap focused on learning by building projects. The first project was a GitHub ETL pipeline, which evolved from a simple Python script to a more complex system using SQLite and GitHub Actions for automation. The author realized that the challenges of data engineering lay in system design and orchestration rather than just writing ETL logic. For the second project, the author built an automated RSS ingestion pipeline to explore engineering decisions in creating a reliable data pipeline. The project emphasized the importance of separating application responsibilities from orchestration tasks, leading to the use of Docker for consistent execution environments and Kestra for orchestration. The author validated each component of the project incrementally: first the Python ETL, then PostgreSQL, followed by Docker, and finally Kestra. This approach ensured that each layer functioned correctly before adding complexity. The final architecture included distinct responsibilities for each component: Python for data processing, PostgreSQL for data storage, Docker for execution, and Kestra for orchestration. The author learned that effective engineering involves considering system reliability, error handling, and observability, shifting the focus from merely writing code to designing entire systems. The experience transformed the author's mindset, emphasizing the importance of incremental building and the separation of execution and orchestration responsibilities.

Tech Optimizer

July 18, 2026

North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections

North Korea's Contagious Interview hackers have been using a deceptive strategy to target developers by posing as recruiters and embedding malware in SVG files. Elastic Security Labs discovered that the attackers hid malicious payloads within HTML comment blocks of these files, allowing the malware to evade antivirus detection. At the time of the findings, no antivirus engines flagged the compromised repositories, which included trojanized GitHub repositories disguised as coding challenges. The malware executed automatically at server startup and deployed four modules: a browser credential and cryptocurrency wallet stealer, a file stealer, a remote access Trojan, and a clipboard monitor. The campaign, tracked as REF9403, is part of the ongoing Contagious Interview operation attributed to North Korea's Lazarus Group, which aims to generate revenue through cryptocurrency theft. Developers are advised to audit any projects run from unsolicited sources and to monitor specific domains associated with the attack.

AppWizard

July 18, 2026

As Google sits back and watches, terrible ads are ruining Android’s free app ecosystem

The mobile advertising landscape has shifted from simple banner ads to aggressive monetization tactics that often manipulate users. Common intrusive ad experiences include unclosable interstitial ads, interactive playable ads that mislead users, and unsolicited notifications promoting unrelated games. This shift has negatively impacted independent developers, who struggle to compete against large ad networks and feel pressured to adopt disruptive ad practices. Google, which controls the Play Store and ad services, benefits financially from these intrusive ads but has not effectively addressed the issue, allowing low-quality ads to proliferate. The current state of advertising is eroding user trust in free applications, threatening the integrity of the Android ecosystem.

AppWizard

July 16, 2026

Original Witcher dev says remaking it as an open world won’t be easy: ‘As a player, I might be happy about that, but as a designer, I’m starting to get gray’

The Witcher remake, currently in development at Fool's Theory, aims to transform the original 2007 game into an open-world RPG, a significant shift from its linear gameplay. Designer Artur Ganszyniec noted that this transition requires expanding the game environment and integrating new content with existing elements. The open-world format allows players to approach quests and challenges non-linearly, which complicates design considerations. Ganszyniec expressed both excitement and concern about balancing player freedom with narrative coherence. The development process is complex, reflecting the challenges of reworking the game's fundamental nature.

AppWizard

July 14, 2026

Remember Flash games? This Android app will let you relive your childhood

A developer named NaviVani-dev has launched an app called Swiff, which allows users to play over 100,000 Flash games and animations on Android devices by integrating with the Flashpoint Archive. Swiff features include gamepad mapping, on-screen controls, an offline proxy, frontend and Android shortcuts, save file export, and custom SWF content importing. It is powered by the open-source Ruffle engine and is committed to continuous improvement through updates based on user feedback. Other similar applications include Retro Flash Game Player and FlashArch.

AppWizard

July 12, 2026

Helldivers 2 dev cracks down on ‘suspicious super credit activity’, though it would help if earning premium currency wasn’t so boring to begin with

A segment of players in Helldivers 2 has found ways to exploit super credits, prompting developer Arrowhead to address the issue. Arrowhead acknowledged player frustrations regarding cheating and announced plans to implement changes to tackle the problem. The current method of earning super credits is seen as tedious, as they can only be obtained from a limited number of points on the map, and the most efficient way to accumulate them is by playing on easier difficulty levels. Arrowhead has sold over 20 million copies of the game and is considering introducing new side objectives or combat challenges to enhance the super credit earning process. The studio has been responsive to player feedback, leading to a shift in Steam reviews from mostly negative to predominantly positive in a couple of months.

Winsage

July 12, 2026

Windows 95 didn’t detect installers, it ‘guessed’ based on the file name, says veteran dev — it simply checked for words like setup, install, inst, or localized equivalents

Raymond Chen, a Microsoft engineer, revealed that Windows 95 identified installation programs by analyzing executable filenames against a list of keywords, including "setup," "install," and "inst." The system would then initiate a routine to repair any compromised system files. The list included six terms: setup, install, inst, imposta, ayarla, and felrak. Chen noted redundancy in the list, suggesting "install" was unnecessary since it included "inst." For executables not matching the terms, Windows 95 scanned the executable's path for "Setup." The system maintained backup copies of frequently overwritten files in a hidden directory at C:WindowsSYSBCKUP and would restore correct versions after installers completed. File verification was often postponed until the next system boot, especially for installers that reverted to MS-DOS for file replacements. This file repair mechanism continues to influence modern operating systems, including Windows 11.

AppWizard

July 11, 2026

Doom dev Id is now “about the same size we were when making Doom 2016” after layoffs

Id Software has experienced significant layoffs, with 136 team members affected, which is over half of its workforce. This reduction is part of broader job cuts by Xbox, totaling 3,200 positions across Microsoft. Despite the layoffs, Id Software has communicated that it has sufficient staff to continue game development and maintain its creative output. The studio's current team size is reportedly similar to that during the development of the 2016 Doom reboot. Id Software is known for its influential titles and proprietary Id Tech engines, and it recently released Doom: The Dark Ages.

Tech Optimizer

July 10, 2026

Google Cloud: PostgreSQL community contribution updates

Google Cloud actively participates in the PostgreSQL ecosystem by supporting community-driven events and contributing to open-source initiatives. Recent key events include: - **PGConf.dev 2026**: Featured strategic discussions on logical replication and global index architecture, with a consensus to adopt a deparsing-based approach for DDL replication. Dilip Kumar presented on global indexes. - **PGConf India 2026**: Attracted over 580 participants, featuring various sessions including keynotes and technical talks by Google Cloud contributors. - **PGDay Paris & PGDay France 2026**: Matt Cornillon was involved in organizing PGDay France, with sessions led by him and Yves Colin. - **PGDay FOSDEM 2026**: Focused on AI-assisted workflows in PostgreSQL development, with a technical talk by Matt Cornillon. - **PGConf Belgium 2026**: The session was selected as supplementary material for a database exam, indicating student engagement. - **Nordic PG Day 2026**: Google participated as a Partner-level sponsor and hosted a dedicated booth. - **Swiss PGDay 2026**: Featured a demonstration on processing vectors in PostgreSQL. - **Postgres Conference 2026 San Jose**: Google sponsored the event, with Vikas Arora discussing PostgreSQL adaptations for AI workloads. Community leadership roles included: - Dilip Kumar on the Program Committee for PGConf.dev 2026 and the Paper Selection Committee for PGConf India 2026. - Matt Cornillon on the organization committee for PGDay France, and Yves Colin on the Program Committee. Acknowledgment was given to various contributors for their dedication to PostgreSQL conferences.