encrypted Archives

Tech Optimizer

October 10, 2026

How and why we built Managed PostgreSQL for AI workloads

The Nebius Managed PostgreSQL team developed a solution for AI workloads using CloudNativePG and Kubernetes, resulting in improved backup and restore times by transitioning from Barman to WAL-G, reducing a 1.5 TB backup duration from over a day to two hours. Since its launch in 2025, the service supports hundreds of production clusters and manages tens of tebibytes of data. Key features include high availability, point-in-time recovery, automated failover, compressed and encrypted backups, rapid restoration, connection pooling, and strict synchronous replication for zero data loss. Kubernetes and CloudNativePG were chosen for their advantages, including out-of-the-box features and open-source distribution. Each cloud project has a separate MK8s cluster for customer isolation and security. Persistent data is stored on fault-tolerant SSD drives, enabling swift instance migration during failures. Regular physical backups are archived, allowing restoration within a seven-day window with a single click. The transition from Barman to WAL-G addressed slow backup and restoration times and resource control limitations. With WAL-G, backups and restorations for a 1.5 TB cluster improved to two hours and one hour, respectively. PgBouncer was implemented to manage database connections effectively, reducing connection storms during peak AI workload traffic. Two vector search extensions, pgvector and pgvectorscale, are available to cater to different memory and dataset needs. Benchmarking showed that Nebius performs competitively with AWS at a lower cost. The infrastructure integrates cloud engineering principles with specialized expertise to meet AI workload demands.

AppWizard

October 8, 2026

Android users can now add Oklahoma Driver’s License, State ID to Google Wallet

Eligible Android users in Oklahoma can now integrate their driver's licenses or state ID cards into Google Wallet. Residents must still carry their physical IDs even if they are uploaded to mobile devices. Participating TSA checkpoints, including Tulsa International Airport and OKC Will Rogers International Airport, accept these digital IDs, along with over 250 airports nationwide. Service Oklahoma has introduced a free verification app, "Oklahoma Reader," for businesses to confirm transaction details without retaining customer data. Digital IDs in Google Wallet are encrypted and require personal authentication for access. To add an Oklahoma Driver License or State ID to Google Wallet, users must open the app, tap "Add to Wallet," select "ID Card," and follow the verification instructions.

AppWizard

October 3, 2026

These 9 Thunderbird features made me ditch Gmail for good

The author switched from Gmail to Thunderbird after 15 years, citing frustrations with Gmail's ad inundation and cluttered features. They appreciate Thunderbird's offline email access, extensive customization options, open-source nature, absence of forced AI features, free distribution without targeted ads, cross-platform compatibility, reliable notifications, effective multi-account management, customizable junk filtering, and its focus solely on email functionality. These aspects have led to a more streamlined and efficient email experience compared to Gmail.

AppWizard

October 1, 2026

Top 5 Proxy vs VPN for Android App Developers Tools to Secure Test Builds

In Android app development, maintaining connectivity, security, and debugging capabilities is crucial. When connecting to a London edge server, all requests must be visible to QA teams, but using a consumer VPN can hinder debugging proxies. A debugging proxy allows developers to inspect request headers and modify data by terminating TLS on their workstation. In contrast, a VPN creates an encrypted tunnel for all device traffic but prevents debugging proxies from intercepting packets. TorGuard is a hybrid solution that combines a VPN with SOCKS5 and V2Ray endpoints, allowing for traffic encryption and application-specific proxying. mitmproxy is an open-source tool that enables scripted request manipulation and can intercept various traffic types. Tailscale uses a WireGuard-based mesh network to provide stable private IPs for devices without needing port forwarding. HTTP Toolkit offers a rootless interception method for Android, directing traffic to a laptop without complex configurations. WireGuard is a high-speed self-hosted VPN that encrypts packets but does not allow for inspection. To inspect traffic while changing geographic egress, developers can run mitmproxy on a laptop and connect it to a VPN, ensuring the proxy is closest to the app. For debugging Android HTTPS traffic, a proxy is preferred for reading or rewriting requests, while a VPN is better for changing exit IPs or encrypted routing. SOCKS5 masks IP addresses but does not encrypt traffic.

Winsage

October 1, 2026

Upgrade Your Work PC With Office and Windows 11 Pro for $33

The Ultimate Microsoft Office Professional 2021 for Windows lifetime license and Windows 11 Pro Bundle is available for .97, reduced from an MSRP of 9.99, until October 4. The bundle includes a lifetime license for Microsoft Office Professional 2021, which features applications like Word, Excel, PowerPoint, Outlook, OneNote, Teams, Access, and Publisher. Windows 11 Pro offers multitasking capabilities, enhanced voice typing, a robust search experience, and advanced cybersecurity measures. Prices are subject to change.

Tech Optimizer

September 30, 2026

Do You Actually Need a Separate Antivirus, VPN and Scam Protection? McAfee’s All-in-One Plans Have You Covered

Antivirus software prevents malicious software from infiltrating devices. A VPN encrypts internet traffic, providing privacy, especially on public Wi-Fi. Scam protection tools use AI to scan for signs of fraud in texts, emails, and videos. McAfee offers bundled security plans that include antivirus, VPN, and scam protection, with higher tiers providing features like Personal Data Cleanup, credit monitoring, and identity-theft protection. Users can save over 0 in the first year by consolidating security subscriptions. Antivirus software typically costs to 0 annually, standalone scam protection apps range from to per year, and VPN access costs between to 0 annually. McAfee’s Basic plan is available for .99 for the first year for one device, while the Essential plan covers up to five devices for an additional fee. McAfee’s plans include different features based on tiers: - Basic: Covers one device with essential security tools. - Essential: Covers up to five devices with core security tools. - Premium: Unlimited devices with personal info scans. - Advanced: Unlimited devices with personal info removal and identity restoration. - Ultimate: Unlimited devices with extensive financial monitoring and identity-theft coverage. Setting up McAfee involves downloading the app, creating an account, following setup instructions, turning on the Scam Detector, configuring the VPN, and adding other devices. McAfee plans include unlimited VPN data and support multiple operating systems under a single subscription. McAfee's Scam Detector has an accuracy of over 99% and works on both iPhone and Android.

Winsage

September 28, 2026

Windows 11 can keep thumbnails of photos you deleted. Here’s how to remove them

A recent post on X claims that Windows retains a thumbnail of every deleted photo in a file named thumbcache_256.db, which has raised privacy concerns among users. While Windows does maintain a thumbnail cache for efficiency, this practice is not unique to Windows, as other operating systems like macOS, Linux, and Android also use similar systems. Users can inspect or clear their thumbnail cache by accessing specific database files in the Windows Explorer directory. The claim that Windows retains "every photo you’ve ever deleted" is misleading, as thumbnails are only created when images are viewed in thumbnail mode. Windows does not cache every file, and thumbnails must exist before they can be cached. Additionally, Windows keeps app launch records in Prefetch files for performance optimization, maintains entries for USB devices in the USBSTOR registry key, retains records of Wi-Fi networks and passwords (which are encrypted), and can keep clipboard history and recent file shortcuts. Caching previews is common across various operating systems, and Microsoft is focused on user consent and privacy as it enhances Windows 11 with AI functionalities.

AppWizard

September 25, 2026

Ocean Browser , Secure Browser for Android

Ocean Browser is an Android application that provides a secure and private browsing experience by integrating advanced proxy technology, eliminating the need for separate VPN applications. It reroutes browsing traffic through its secure infrastructure, hiding users' actual IP addresses from websites. Ocean Browser offers features such as encrypted proxy connections, the ability to select proxy locations, and seamless management of proxy connections without complex settings. It is designed for everyday use, particularly on public Wi-Fi networks, and is available for free on Google Play.

Winsage

September 23, 2026

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Cisco Talos has disclosed a new Windows implant called CLOSEDQUORUM, which operates without human operators by using four commercial large language models (LLMs) to autonomously decide on actions after deployment. The implant is a 16.4-megabyte executable that conducts reconnaissance on the target system and sends structured prompts to the LLMs, which respond with one of four actions: steal, inject, persist, or move. When the "steal" action is chosen, it simultaneously attacks three credential stores, extracting Windows credentials, browser passwords, and cryptocurrency wallet data. The "inject" action uses either Early Bird APC injection or process hollowing based on model recommendations. For persistence, it employs three overlapping mechanisms, including a Registry Run key, a scheduled task, and a WMI event subscription. To evade detection, CLOSEDQUORUM suppresses ETW telemetry and introduces delays before executing actions. It circumvents traditional command-and-control structures by calling legitimate API endpoints, making blocking these domains impractical. Talos introduced the CAIRN toolkit for detecting AI-integrated malware, which operates on metadata and employs rule-based detection. Unlike previous AI-assisted malware, CLOSEDQUORUM automates decision-making processes entirely, highlighting a significant evolution in malware capabilities. Security teams are advised to focus on behavioral detection strategies and utilize the YARA rule and CAIRN toolkit for identifying this threat.

Winsage

September 23, 2026

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Cisco Talos has disclosed a Windows implant called CLOSEDQUORUM, which automates cyberattack execution using four advanced commercial large language models: DeepSeek, Qwen, Mistral, and Google Gemini. The implant is a 16.4-megabyte executable that conducts reconnaissance on the system and formats the gathered data into prompts for the AI models. Each model votes on one of four actions: steal, inject, persist, or move, with the action receiving the most votes being executed. When stealing, CLOSEDQUORUM targets three credential stores, dumping LSASS memory and retrieving saved passwords from browsers and cryptocurrency wallets. The stolen data is encrypted and sent to the operator via Discord. For injection, it uses Early Bird APC injection or process hollowing based on model responses. The persist action creates three mechanisms for longevity, including a Registry Run key, a scheduled task, and a WMI event subscription. CLOSEDQUORUM evades detection by suppressing ETW telemetry and delaying activity to avoid sandbox analyses. It connects to legitimate API endpoints, making blocking ineffective without disrupting enterprise applications. Talos recommends behavioral combination detection strategies and the use of a YARA rule for detection. The CAIRN toolkit has been introduced to detect AI-integrated malware without executing binaries. Unlike previous AI-assisted malware, CLOSEDQUORUM removes human decision-making from the attack process.