fingerprint Archives

Winsage

July 26, 2026

Are you the family’s tech support? This Windows security checklist helped put an end to late night panic texts.

- A text message from the author's father prompted a discussion about using a password manager for cybersecurity. - The author's mother had a previous concern about an unexpected "tech support" notification on her computer. - The author created a cybersecurity best practices document to help their parents and others with technology. - Key security vulnerabilities to address include enabling Windows Hello, ensuring Windows Update is running, confirming Windows Defender is on, and turning on the 'Find my Device' feature. - One-time security measures recommended are switching from a local account to a Microsoft account with two-factor authentication, enabling device encryption, switching from a Windows 11 Administrator account to a Standard account, and using a password manager. - Good cybersecurity habits include learning to spot phishing scams, being cautious of unsolicited tech support calls, and avoiding the installation of unsolicited software.

Winsage

July 26, 2026

How I stopped being my parents’ emergency IT hotline — The complete list of Windows Security settings I made them fix once and for all

A family member inquired about the necessity of a password manager, reflecting growing cybersecurity concerns. A parent received a suspicious "tech support" message, indicating potential security risks. Windows Hello allows users to log in with a PIN, fingerprint, or facial recognition on Windows 11 PCs. Users can set it up via Settings > Accounts > Sign-in options. Regular updates through Windows Update are essential for security, and users can check their status in Settings > Windows Update. Windows Defender is the built-in antivirus for Windows 11, typically enabled by default, but users should verify its status in Settings > Privacy & security > Windows Security > Virus & threat protection. The 'Find My Device' feature can be enabled in Settings > Privacy & security > Find my device to track and lock a lost or stolen laptop. Switching from a local account to a Microsoft account with two-factor authentication (2FA) enhances security, accessible via Settings > Accounts > Your info. Device encryption can protect sensitive data, available in Settings > Privacy & security > Device encryption for Home versions and BitLocker for Pro versions. Using a Standard account instead of an Administrator account reduces malware risks, managed through Settings > Accounts > Family. Password managers like NordPass, 1Password, and Bitwarden help generate strong, unique passwords for accounts. Users should learn to spot phishing scams, be cautious of unsolicited tech support calls, and avoid installing software suggested by unknown callers to maintain cybersecurity.

AppWizard

July 23, 2026

Building a True Per-App Android Device Spoofer

Device spoofing in Android applications allows developers to manipulate device information, primarily through altering android.os.Build attributes. Existing spoofer applications often fail to modify native system API calls that retrieve genuine device information. Tweaks is a per-app spoofer integrated into AOSP and LineageOS, which changes device properties by modifying memory-mapped files under /dev/properties. It uses a private mount namespace to bind-mount modified property-context files, ensuring only the targeted application receives spoofed values while the rest of the system remains unaffected. The Tweaks app, which is platform-signed, communicates with the TweaksManagerService to write configurations and manage property overrides. The core functionality is handled by propgen, which generates property context files with spoofed values by identifying and patching properties in place. The TweaksManagerService ensures secure interactions and content-addresses generated property areas to allow sharing among apps with identical overrides. The spawn path in ProcessList.startProcess determines whether to apply spoofing based on conditions evaluated by the TweaksLocalService. Security is maintained through SELinux policies, which restrict access to spoofable properties. However, certain elements, such as /proc/self/mountinfo and /system/build.prop, still reveal authentic device information despite the spoofing capabilities of Tweaks. The source code for Tweaks and related patches is available for public access.

Winsage

July 21, 2026

Persistent Telemetry: Permanent Microsoft Windows Identifier

Discussions about consumer privacy in the Windows ecosystem have focused on optional diagnostic settings and telemetry controls. Recently, the Global Device Identifier (GDID), a permanent device-level token embedded in the Windows operating system, was revealed in a U.S. Department of Justice complaint related to a cybercriminal investigation. The GDID uniquely identifies a Windows installation and is used by Microsoft services. It is generated when a device is linked to a Microsoft account and resides in the Windows registry, being included in data sent to remote servers. There is no option to disable or delete the GDID, and attempts to do so can disrupt essential features. This has led privacy-conscious users to consider alternatives like Linux, which offers more control over data and does not require persistent identifiers. For Windows users, strategies to minimize data linked to the GDID include using local accounts, disabling optional diagnostics, and reviewing cloud app sync settings. Privacy advocates are calling for better user controls and opt-out mechanisms for hardware tracking tokens.

AppWizard

July 13, 2026

This week in PC games: vert-ramping trains, a retold murder mystery, and Cthulhu’s new gig as an AI Director

Edwin is currently sidelined by an illness following TennoCon, and he is expected to submit stories on Soulframe and Warframe: Tau before fully resting. New PC games being released this week include: - Ascend to Zero: A sci-fi action-roguelike with temporal manipulation. - Forensics: Crime Scene Detective: A game focused on managing fingerprint and bullet comparisons. - Soulforge Lost Path: A Survivorslike/bullet heaven game with limited inventory management. - D-Topia: A puzzle adventure about maintaining an AI-managed society. - The Incident at Galley House: A visual novel remake of a murder mystery text adventure. - Happy's Humble Burger Cult: A cooking horror game for 1-4 players. - Moss: The Forgotten Relic: A 3D platformer available for non-VR PC players. - Storebound: A cooperative horror puzzler launching into version 1.0. - Wreck Runners: A multiplayer game set in a haunted Bermuda Triangle. - Fogpiercer: A tactical roguelike deckbuilder focused on defending a train. - Frozen Ship: A first-person survival game launching in early access on the 17th. Additionally, today marks RPS’s 19th birthday, and the team will be scattered in the coming days for various events and holidays.

Winsage

July 11, 2026

Windows 11 Has a Hidden Tracker – Here’s How to Limit It

Peter Stokes allegedly used sophisticated methods to obscure his identity during a breach at a luxury retailer, but the FBI uncovered his identity through a Global Device Identifier (GDID) linked to his Windows installation. GDID is a persistent device-level identifier that uniquely identifies a Windows installation and remains unchanged through operating system updates, only resetting upon complete reinstallation. Users cannot disable GDID, and attempts to remove it may disrupt Windows activation. To minimize data associated with GDID, users can opt for a local account, limit diagnostic telemetry, disable Activity history, and be cautious during reinstallation. VPNs do not prevent Microsoft from logging GDID, IP addresses, and URLs, making them ineffective for privacy on Windows. GDID has been described as a covert tracking beacon, and security experts advise against using Windows for sensitive tasks, suggesting alternatives like Linux.

Winsage

July 10, 2026

Windows 11 Has a Hidden Tracker – Here’s How to Limit It

Peter Stokes is involved in a breach with a luxury retailer, using tactics like VPNs and rotating IP addresses to hide his digital activity. The FBI discovered a Global Device Identifier (GDID) linked to his Windows installation, which is a persistent device-level identifier that uniquely identifies Windows installations. GDID remains unchanged through operating system updates but resets with a full reinstallation. Disabling GDID is not possible, as attempts to do so would disrupt Windows activation. Users can minimize data linked to GDID by using a local account, reducing diagnostic telemetry, disabling Activity history, and carefully managing reinstalls. VPNs do not prevent Microsoft from logging GDID, IP address, and URL data. Privacy researchers view GDID as a covert tracking mechanism, and Windows lacks user-facing options to reset this identifier, unlike Apple and Google.

AppWizard

July 10, 2026

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

Researchers analyzed 281 popular free VPN applications on the Google Play Store and found significant privacy and security shortcomings. The study, conducted by teams from the University of Michigan, the University of New Mexico, and IIT Delhi using a framework called MVPNalyzer, revealed that flagged apps had over 2.4 billion downloads. Key findings included: - Five apps transmitted configuration files unencrypted, allowing attackers to intercept and modify them. - 29 apps allowed user traffic to leak outside the encrypted tunnel, with 24 leaking DNS traffic and six leaking full browsing traffic. - 169 apps made no effort to disguise their traffic, making it identifiable to network operators or government censors. - 76 apps transmitted the device's Advertising ID to advertisers, and over 80% contacted known advertising and tracking servers. - Only one of 108 OpenVPN configurations adhered to recommended security practices; 89% used a single authentication method, and nearly 20% employed outdated encryption techniques. - Many apps passed through Play Store checks without adequate scrutiny, with safety labels often serving as marketing tools rather than security indicators. These findings align with previous research highlighting similar issues in popular Android VPN apps. Users are advised to be cautious when selecting VPNs, prioritizing those with recent independent security audits.

Winsage

July 10, 2026

You can’t fully disable Microsoft’s GDID Windows 11 tracker, but these settings limit what it captures

A 19-year-old named Peter Stokes was detained at Helsinki airport in April 2026 while traveling to Japan, carrying two 2TB hard drives. He was subject to an Interpol Red Notice and faced a federal complaint from U.S. prosecutors by July for his alleged involvement in the Scattered Spider hacking group, which breached a U.S. luxury jewelry retailer in May 2025, leading to a ransom demand. The Global Device Identifier (GDID), developed by Microsoft, is a persistent identifier that uniquely identifies a Windows installation on a device. It links online activities back to a single identity, which law enforcement can use to trace a device's owner. The GDID is generated when a user signs into Windows with a Microsoft Account and remains through updates but does not survive a clean reinstall. Stokes' use of the same Windows device allowed investigators to trace his activities through the GDID, which linked him to the hacking incident. Privacy advocates have raised concerns about the lack of consent for GDID assignment and the potential for surveillance.

Tech Optimizer

July 10, 2026

Your Antivirus Has A Blind Spot, And Advanced Persistent Threats (APTs) Know Where It Is

Advanced Persistent Threats (APTs) are a type of cyber threat characterized by long-term infiltration aimed at stealing sensitive data or surveilling communications, often orchestrated by well-funded groups. Unlike traditional malware, which seeks immediate disruption, APTs employ a methodical approach, spending weeks mapping out networks and identifying valuable credentials. Traditional antivirus solutions often fail to detect APTs because they rely on signature-based detection, which is ineffective against custom malware. APTs frequently use legitimate tools already present on systems, making detection challenging, and some forms of APTs operate directly from memory without writing to disk, evading traditional scans. To combat APTs, a multifaceted strategy is recommended, including behavioral detection, network monitoring for unusual patterns, and a mindset of skepticism towards all network activities.