file system Archives

Winsage

July 1, 2026

Bottles is how you should actually run Windows apps on Linux

Wine enables users to run Windows applications on Linux by translating Windows calls into POSIX calls. It has evolved significantly, especially with contributions from Valve's Proton project, but can be complex and unpredictable, leading to potential glitches with updates. Bottles enhances this experience by creating isolated containers for each application, allowing users to run specific versions of Wine tailored to individual applications. This approach improves compatibility and organization, as users can group applications with similar settings. Bottles also features Eagle, a tool that recommends optimal Wine setups, and allows easy backup and restoration of configurations, ensuring a clean system.

Winsage

June 28, 2026

Microsoft denies WSL 3 exists, reveals Windows 11’s WSL Containers ship next week

Microsoft has clarified that there is no WSL 3 in development, as stated by Craig Loewen, the Product Manager for the Windows Subsystem for Linux (WSL). The confusion arose from articles discussing a new feature called WSL Containers, which will be launched soon. WSL allows users to run Linux environments on Windows without dual-booting, while WSL Containers enable the creation and management of Linux containers directly within Windows, eliminating the need for third-party tools like Docker Desktop. WSL 1, introduced in 2016, served as a translation layer for Linux system calls, and WSL 2, launched in 2019, included a full Linux kernel in a lightweight virtual machine. WSL Containers is an enhancement to WSL, allowing developers to build, run, and deploy containers directly from Windows using the wslc.exe command. This feature is part of Microsoft's strategy to make Windows a more accessible platform for running Linux workloads, helping to retain developers who might consider switching to other operating systems.

Tech Optimizer

June 18, 2026

Here’s What Actually Happens When Antivirus Software Scans Your PC

Interactions with antivirus software occur during installation and when issues arise, while the software operates quietly in the background. Modern antivirus solutions continuously monitor for threats using various detection methods, including real-time scanning, which actively scrutinizes files as they are downloaded or accessed. The signature database is essential for identifying malware by comparing files against known signatures, but it can only detect documented threats. Heuristic detection and behavioral analysis help catch unknown malware by evaluating suspicious characteristics and monitoring file actions during execution. Sandboxing allows suspicious files to run in a controlled environment, logging their behavior to determine if they are malicious. Quarantine neutralizes threats by locking files in a secure location, allowing users to review them before deletion. Full scans are resource-intensive and can slow down system performance, while real-time scanning is less demanding. Users can schedule scans during idle times, exclude trusted folders, or consider cloud-based solutions to mitigate performance impacts.

AppWizard

June 16, 2026

Honda Civics And Installing Software With Android Test Keys

Eric McDonald conducted reverse-engineering on the Android-based infotainment system in a 2021 Honda Civic, revealing a significant vulnerability. The head unit can be updated via USB using accessible standard Android Open Source Project (AOSP) test keys. This exploit, named the EvilValet attack, allows anyone with physical access to the car's USB port to execute arbitrary code signed with these test keys. While confirmed only in the 2021 Honda Civic, similar Android-based systems may also be at risk due to shared technology across different vehicle models. This vulnerability raises concerns about vehicle security as it allows unauthorized users to manipulate the system through a USB connection.

Winsage

June 16, 2026

China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth

Cybersecurity researchers have identified two new Windows variants of the SprySOCKS backdoor, named WINDRV and WINPLUS, which were previously thought to be exclusive to Linux systems. Both variants feature hard-coded command-and-control configurations and can communicate via TCP, UDP, and WebSocket protocols. They support over 30 commands for operations such as system information collection and file management. WINDRV employs kernel drivers for stealth, obscuring network connections and allowing TCP traffic diversion. SprySOCKS was first documented by Trend Micro in September 2023, linked to the Chinese state-sponsored threat actor Earth Lusca, also known as FishMonger. The Windows variants belong to version 1.8 of SprySOCKS and utilize a kernel driver named RawWNPF for enhanced stealth. The attack chain begins with an initial access method that drops a batch script, leading to the installation of the backdoor. Evidence suggests these variants may have been used in attacks against government organizations in Honduras, Taiwan, Thailand, and Pakistan between 2023 and 2024. The WINPLUS variant was first detected in July 2024 in Pakistan. There are indications of a potential UEFI bootkit involvement exploiting CVE-2023-24932, a vulnerability in the Windows Boot Manager.

Winsage

June 15, 2026

Linux 7.2 To Better Communicate File-System Casefolding For Helping Windows NFS & More

The Linux 7.2 kernel has introduced enhancements for reporting case-folding behavior in local file systems, allowing file servers to accurately convey their case sensitivity capabilities. Linus Torvalds merged Virtual File System (VFS) related pull requests that enable local file systems to report case-folding behavior, benefiting services like NFSD and KSMBD, particularly for Microsoft Windows NFS clients. Filesystems can now report case-insensitive and case-nonpreserving behavior through new filekattr flags in their fileattrget implementations. Supported filesystems include FAT, exFAT, NTFS3, HFS, HFS+, XFS, CIFS, NFS, VBoxSF, and ISOFS, with others defaulting to POSIX behavior. NFSd uses this information to report case folding via NFSv3 PATHCONF and implement NFSv4 attributes for case insensitivity and case preservation. The enhancements aim to improve interoperability, allowing Windows NFS clients to function correctly by reporting case-insensitivity, which streamlines operations and avoids unnecessary requests. The Linux NFS client has previously supported case-insensitive shares, requiring adjustments to caching behavior. Accurate case folding reporting is crucial for servers operating in multi-protocol environments to maintain interoperability.

Winsage

June 11, 2026

Microsoft refuses to add this File Explorer feature, so the Files app stepped up

The Files app has introduced a feature in version 4.1.3 that allows users to calculate folder sizes on demand, which was not available in Windows 11's File Explorer. Users can toggle this option in Settings, and when disabled, a View size button appears in the Size column for easy access. The app now retains selection across different layouts, ensuring previously selected items remain highlighted. It also offers multiple methods for clearing tags from files, including options from the context menu, toolbar, and Command Palette. Additionally, the update features a refreshed OneDrive icon that reflects current branding, and several fixes have been implemented, including resolving issues with extracting tar archives and correcting display problems for BitLocker locked drives.

Winsage

June 9, 2026

Microsoft reveals Windows 11 will bulk delete files at least 30% faster, and it’s only the start

Microsoft is working on enhancements for File Explorer on Windows 11 to improve speed and efficiency, particularly in batch file deletions. Internal testing is underway for a performance boost, with potential speed increases of over 30% for bulk deletions following an upcoming update. Other file operations, such as transfers and copies, are also set to become faster. The company aims to improve launch times, reduce flickering, and eliminate distracting flashes in dark mode. Users have already noticed faster launch times and better handling of file names and paths. Microsoft is testing a preloading feature for File Explorer and plans to revamp the right-click menu for faster loading and a streamlined appearance. Additionally, the company is exploring ways to minimize File Explorer’s memory footprint and modernize legacy elements. Microsoft plans to introduce up to 19 new features by 2026, including a movable taskbar and a customizable Start menu.

Winsage

June 5, 2026

Microsoft Promises Customizable Windows Right-Click Menus

Microsoft is working on a more efficient, streamlined, and customizable right-click context menu for Windows File Explorer and Desktop interactions, responding to user feedback about the cluttered nature of existing menus. The initiative aims to improve user experience by allowing customization, which marks a shift from Microsoft's previous rigid approach. Developers will need to adapt to new APIs and guidelines for context menu interactions, and there may be restrictions on the number of items that can be added. Performance improvements are also planned to address slow-loading context menus. The timeline for implementation is uncertain, but updates may first appear through Windows Insider testing channels. The changes are part of Microsoft's broader strategy to modernize Windows 11 and improve basic functionalities like file management and interface responsiveness. Customizable context menus could provide enterprise IT departments with new management options, and the initiative reflects Microsoft's awareness of competition from other operating systems.

Tech Optimizer

June 4, 2026

How We Test Antivirus and Security Software

Most software applications clearly indicate their functionality, but the effectiveness of antivirus utilities is often less tangible. PCMag rigorously evaluates antivirus products through comprehensive tests that validate their claims, including real-world malware samples and various protective measures. Each antivirus tool is assessed based on its on-demand scanner and real-time monitor capabilities. PCMag compiles fresh malware samples annually, analyzing them to ensure they are suitable for testing. The testing process includes evaluating malware-blocking capabilities and web-level protection against known malware-hosting sites. Phishing site detection is also tested using recent URLs, and antispam testing has been simplified due to the effectiveness of email providers. Performance impact tests have been discontinued as modern security suites show improved efficiency. Firewall protection is evaluated through program control, exploit defenses, and overall resilience against malware. Parental control features are tested for effectiveness in content filtering and monitoring. Ransomware protection is assessed by releasing real-world samples in a controlled environment. PCMag monitors independent antivirus lab tests from various organizations, including AV-Test, AV-Comparatives, SE Labs, MRG-Effitas, and AVLab, to inform their reviews. An aggregate testing score is calculated to summarize lab results. Testing methodologies do not include VPN evaluations, which are covered separately.