file Archives

Tech Optimizer

July 28, 2026

ClamAV Setup: Linux Antivirus in 12 Steps [2026]

Malware can threaten Linux systems, which are often mistakenly believed to be immune to viruses. It can be introduced through email attachments, infected files, or compromised plugins, especially when Linux servers interact with Windows clients or handle internet uploads. ClamAV is an open-source antivirus engine maintained by Cisco Talos, designed for scanning mail traffic and file uploads. As of mid-2026, the stable release is ClamAV 1.5.x, with version 1.5.2 being the latest patch. To deploy ClamAV, users need root or sudo access on a compatible Linux machine, at least 2 vCPUs and 2GB of RAM, 5GB of free disk space, and outbound HTTPS access to ClamAV’s signature mirrors. The installation process involves several steps, including configuring freshclam for automatic updates, validating detection with the EICAR test file, and setting up cron jobs for regular scans. ClamAV can also be integrated with mail servers and a SIEM for enhanced security. Common pitfalls in deployment include skipping the initial freshclam run and using clamscan instead of clamdscan for repeated scans. ClamAV is free for commercial use and can also scan Windows systems, although it does not replace comprehensive endpoint protection solutions.

Tech Optimizer

July 28, 2026

‘PGSimCity’ shows how the PostgreSQL database actually works internally in a SimCity-like 3D environment.

PGSimCity is a web application that provides a 3D visualization of PostgreSQL's architecture, allowing users to explore its internal operations during SQL query execution. The application features an interactive interface that guides users through the connection process to PostgreSQL, illustrating how client connections reach the Postmaster and backend processes. It highlights the significance of connection pooling and the impact of increasing connections on backend processes. In the 'Query Lab' section, SQL statements are transformed into execution plans, showcasing processes like Parser, Rewriter, Planner, and Executor, along with execution paths such as Seq Scan and Index Scan. The shared_buffers area represents PostgreSQL's buffer cache, optimizing performance by reading data in 8KiB pages. Visualizations depict data pages stored on disk, with pathways showing the movement of pages to shared_buffers. The Write-Ahead Log (WAL) mechanism records changes for recovery, and transaction commits wait for WAL records to be flushed. Checkpointing writes dirty pages to storage in batches, which can cause latency spikes. PostgreSQL uses Multi-Version Concurrency Control (MVCC) to manage updated rows and dead tuples, which are cleaned up by autovacuum processes. The application also illustrates replication, where WAL from the primary server is sent to the standby server to maintain data consistency. Overall, PGSimCity provides a comprehensive view of PostgreSQL's components and potential performance issues related to caching, WAL management, checkpointing, vacuuming, and replication.

Winsage

July 28, 2026

Your Windows Recycle Bin is a privacy risk—here’s how to actually delete your files

The Recycle Bin in Windows, introduced in 1995, serves as a temporary storage for deleted files rather than permanently removing them. When a file is deleted, it is moved to the Recycle Bin, which requires manual emptying or activation of a Storage Sense policy to clear its contents. This can lead to reduced hard drive space for users unaware of its behavior. The Recycle Bin can contain sensitive information, and if someone gains access to a Microsoft account, they can view its contents. Even after emptying the Recycle Bin, data can be recovered unless overwritten, with different recovery processes for solid-state drives (SSDs) due to maintenance routines like the TRIM command. Risks extend beyond physical access, as compromised accounts or malware can access deleted files. To securely delete sensitive files, users can use the Shift + Del shortcut, file shredding applications, and consider encrypting their drives with BitLocker. Specialized shredders for SSDs exist, and users can optimize drives through Windows settings to manage data recovery risks.

Winsage

July 28, 2026

Why Does Windows Explorer Use So Much Memory?

A user on Reddit reported that Windows Explorer was using over 21GB of memory, which can cause performance issues on systems with less than 8GB of RAM. One cause of excessive memory consumption is third-party shell extensions, which can be identified by booting into Safe Mode. A tool called ShellExView can help locate problematic extensions. To create a system restore point, users can press Win + R, type systempropertiesprotection.exe, click Create, enter a description, and click Create. Windows Explorer may also retain large caches of temporary data, leading to high memory usage. To clear temporary files, users can press Win + I, navigate to System > Storage > Temporary files, check the relevant boxes, and click Remove files. They can also manually clean the thumbnail and icon cache by deleting specific files in the %localappdata% directory. Corrupted system files can contribute to high memory usage, and users can run DISM and SFC tools to repair these files by accessing the Terminal (admin) and executing the commands DISM.exe /Online /Cleanup-image /Restorehealth and sfc /scannow.

Winsage

July 27, 2026

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for the "Certighost" vulnerability (CVE-2026-54121) has been released, affecting Windows Active Directory Certificate Services. This vulnerability allows authenticated attackers to compromise a Windows domain by manipulating machine account attributes to obtain certificates from AD CS, enabling them to authenticate as that machine or even as a domain controller. The flaw was reported to Microsoft on May 14, 2026, and addressed in the July 2026 Patch Tuesday updates. The vulnerability exploits a fallback mechanism in AD CS during certificate enrollment requests, allowing attackers to direct the Certification Authority to their controlled systems. The researchers demonstrated that a low-privileged user could create a machine account and use it to impersonate a domain controller, leading to potential domain compromise. Microsoft has added validation to the chase process in the July updates to prevent this exploitation. For those unable to install the updates, a temporary workaround involves disabling the chase fallback, though this has not been extensively tested.

Winsage

July 27, 2026

Microsoft lays out a buffet of Windows goodies for JavaScript Developers

Microsoft has introduced "dynamic projections" that allow developers using JavaScript and TypeScript to access Windows internals more easily. The Windows Runtime API (WinRT) projection for Node.js is currently in public preview, simplifying access to Windows features without introducing new capabilities. A new single Node runtime package, dynwinrt, enables developers to generate JavaScript wrappers and TypeScript declarations for Windows features, while the winappCli package offers a command-line interface for setup and sample code. This setup utilizes Windows Metadata (winmd) to dynamically list available Windows APIs, automatically updating wrappers or declarations when API metadata changes. Developers can access various Windows functionalities, excluding UI elements, and utilize local AI capabilities for tasks such as text generation and image manipulation. Microsoft’s developments aim to align with industry trends rather than enforce a proprietary ecosystem.

AppWizard

July 27, 2026

The best PS2 emulator on Android just gained LAN play support

ARMSX2 v2.6.5.1, the premier PS2 emulator for Android, has introduced multiplayer functionality through system link gameplay, allowing players to connect multiple consoles on the same internet network or via a mobile hotspot. This version also supports playing system link games over the internet with a VPN. Notable PS2 titles that support this feature include Gran Turismo 4, SOCOM series, Call of Duty 2: Big Red One, Star Wars: Battlefront games, and Tony Hawk titles. Additionally, ARMSX2 v2.6.5.3 includes a backup and restore option, enabling users to create a zip file of their app data, which is useful for fresh installations or custom folder management.

Tech Optimizer

July 27, 2026

Hackers are hiding malware behind AI agents that antivirus cannot see

Sergey Lozhkin, head of Kaspersky’s global research and analysis team for the Asia-Pacific, Middle East, Turkey, and Africa, reported an increase in malware injection attacks targeting AI agents, particularly from outside an organization’s network. He noted that traditional signature-based analysis is becoming ineffective as AI skills operate in the cloud, connecting to external resources. Dmitry Galov, leading Kaspersky’s research for Russia and the CIS, emphasized the importance of behavioral analysis and sandboxing AI applications to combat these threats. Lozhkin warned that the rapid growth of skills and plugins requires organizations to adopt innovative security measures, as old models are no longer sufficient.

Winsage

July 27, 2026

Powerful Windows 11 app Wintoys just got significantly better with long list of improvements

Microsoft has enhanced the Windows experience with utilities like the Media Creation Tool and PowerToys, while third-party applications like Wintoys, an unofficial counterpart to PowerToys, have also been updated. The latest version of Wintoys features performance improvements from upgrades to .NET 10 and Windows App SDK 2.3.1, resulting in a 30% reduction in RAM usage on the Services page, a 20% decrease on the Apps page, and a 10% improvement on the Startup entries page. Key updates include the ability to enable or disable the recommended section in the Start menu, manage recent items tracking, and a new Device metadata option to prevent unauthorized app installations. The Services page has been rewritten for better memory usage and real-time updates. Additional improvements include enhanced keyboard navigation, new acrylic backdrop features for Windows 10 and 11, and various bug fixes for system settings, network stats, and overall stability. The updated version of Wintoys is available for download via the Microsoft Store.

TrendTechie

July 26, 2026

Одиссею Кристофера Нолана слили в Сеть в HD-качестве (26.07.2026)

The digital version of Christopher Nolan's film "Odyssey" was leaked online ahead of its official release, raising security concerns in the film industry. The full HD version was found on the social media platform X and quickly spread across various posts. Nolan is known for his strict security measures, making this leak particularly surprising. Many posts featuring the pirated film have been removed, but copies are circulating on torrent trackers and file-sharing sites. The leak occurred ten days after the film's theatrical release, prompting Universal Pictures to initiate an internal investigation to identify the source of the breach and prevent future incidents.