initialization Archives

Winsage

October 15, 2026

Operating system Windows 7 was able to run on a hacked PlayStation 5

A user named araiz_why has launched Windows 7 on a jailbroken PlayStation 5 running lower firmware versions. The operating system is executed through a virtual machine or emulator within the modified console environment. Videos show the OS loading from the console's main menu, displaying the Microsoft desktop with the Aero interface. This experiment has generated discussions about the potential of modern consoles as alternatives to PCs. However, the current build is a proof of concept and lacks stable hardware acceleration for 3D graphics.

BetaBeacon

October 6, 2026

Lemuroid Setup Guide: 20 Retro Systems [2026]

Lemuroid is an open-source Android frontend built on top of the Libretro core ecosystem, maintained by developer Swordfish90. It is distributed under the GNU General Public License v3.0 and has 4,371 stars, 366 forks, and 595 open issues on GitHub. Late 2026 is a good time to set it up due to its active development. It is available on Google Play, F-Droid, and GitHub, providing redundancy in case of policy changes. Lemuroid supports twenty systems, each mapped to a specific Libretro core. PlayStation 2, GameCube, and Nintendo Switch are not supported. It requires Android 6.0, 500MB of storage, 3GB of RAM for 8-bit and 16-bit systems, and legally dumped ROMs/ISOs. BIOS files are required for PS1, PSP, and DS cores. It is recommended for managing multiple systems in one library.

Tech Optimizer

September 4, 2026

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

A significant vulnerability in PostgreSQL, tracked as CVE-2026-6471, has been identified by cybersecurity firm Cyera. This flaw, present since 2014, allows attackers with minimal privileges to potentially take control of databases and servers. The vulnerability, known as PostGREShell, has a CVSS score of 7.2 and can be exploited for remote code execution and privilege escalation due to a missing authorization in the database's logical decoding mechanism. Attackers with 'Replication' privileges can load arbitrary files through the logical decoding plugin, executing code with the privileges of the postgres system user. This can lead to the elevation of privileges to superuser status, granting unrestricted access to all tables and the ability to execute operating system commands. All PostgreSQL versions from 9.4 to 18 are affected, with a patch available in versions 18.6, 17.11, 16.15, 15.19, and 14.24. Organizations are advised to update their PostgreSQL instances and audit their Replication accounts.

AppWizard

August 11, 2026

Xodus Cracks Xbox Authentication and Game Package Decryption to Bring PC Game Pass to Linux

Developers of the Heroic Games Launcher have announced Xodus, an open-source project aimed at enabling access to PC Game Pass on Linux and macOS. Launched on August 10, 2026, Xodus has successfully addressed Xbox identity authentication and the decryption of MSIXVC packages, allowing local play of Game Pass titles for Linux and macOS users. Currently, the only way to access Game Pass on non-Windows devices is through Xbox Cloud Gaming, which requires a Game Pass Ultimate subscription and introduces latency. Xodus employs a layered architecture, including an Xbox Authentication Library (xal-rs) for managing Microsoft account sign-ins and license verification, and a reimplementation of the xgameruntime.dll for license checks and Xbox service access. The project can retrieve MSIXVC game packages using a valid Game Pass subscription and decrypt executables for local storage. However, it does not yet support UWP-based titles and lacks a user-friendly interface for general users. The project is under pressure due to Microsoft's upcoming transition to the MSIXVC2 package format, which Xodus does not currently support. Xodus is in early development with only a command-line interface available, and the team is working on emulating the GDK Gaming Services layer necessary for game initialization. The project is legal as it reimplements Xbox runtime behavior without enabling piracy, but it faces risks if Microsoft alters its authentication infrastructure.

AppWizard

July 23, 2026

Building a True Per-App Android Device Spoofer

Device spoofing in Android applications allows developers to manipulate device information, primarily through altering android.os.Build attributes. Existing spoofer applications often fail to modify native system API calls that retrieve genuine device information. Tweaks is a per-app spoofer integrated into AOSP and LineageOS, which changes device properties by modifying memory-mapped files under /dev/properties. It uses a private mount namespace to bind-mount modified property-context files, ensuring only the targeted application receives spoofed values while the rest of the system remains unaffected. The Tweaks app, which is platform-signed, communicates with the TweaksManagerService to write configurations and manage property overrides. The core functionality is handled by propgen, which generates property context files with spoofed values by identifying and patching properties in place. The TweaksManagerService ensures secure interactions and content-addresses generated property areas to allow sharing among apps with identical overrides. The spawn path in ProcessList.startProcess determines whether to apply spoofing based on conditions evaluated by the TweaksLocalService. Security is maintained through SELinux policies, which restrict access to spoofable properties. However, certain elements, such as /proc/self/mountinfo and /system/build.prop, still reveal authentic device information despite the spoofing capabilities of Tweaks. The source code for Tweaks and related patches is available for public access.

Tech Optimizer

July 10, 2026

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

Microsoft Threat Intelligence has identified the GigaWiper malware, which has been detected in compromised environments since October 2025. This malware has destructive capabilities and comes in two forms: standalone wiper binaries and larger binaries with backdoor functionalities, both developed in Golang. The standalone wiper operates at the physical disk level, overwriting disk content and removing partition references. The backdoor variant includes the same wiper functionality and adds persistence through a registry key and scheduled tasks, along with command and control communication via RabbitMQ and Redis. GigaWiper can execute various commands, including wiping drives, triggering a Blue Screen of Death (BSOD), file encryption that mimics ransomware behavior, and managing system elements. The malware integrates components from multiple malware families, including wipers and ransomware mechanisms, and has been linked to a previous malware known as FlockWiper. To defend against GigaWiper, organizations are advised to implement security measures such as tamper protection, blocking access to known C2 infrastructure, and utilizing endpoint detection and response solutions. Microsoft Defender provides detections for GigaWiper and related malware, and threat intelligence reports are available for customers to stay informed about threats. Indicators of compromise include specific SHA-256 hashes and IP addresses associated with GigaWiper.

Tech Optimizer

July 8, 2026

Logical replication improvements in Amazon RDS for PostgreSQL 18

PostgreSQL logical replication has operational challenges, such as the absence of generated columns in the replication stream, replication conflicts causing apply worker halts, and lingering replication slots consuming write-ahead log (WAL) files. PostgreSQL 18 introduces enhancements to address these issues, including the ability to include STORED generated columns in the replication stream with a new publication parameter, detailed conflict counters in pg_stat_subscription_stats, automatic invalidation of idle replication slots, and the ability to toggle two-phase commit settings on live subscriptions. To set up a test environment, two PostgreSQL 18 instances (one publisher and one subscriber) are required, along with an EC2 instance for executing commands. The publisher and subscriber must have specific configurations for logical replication, including enabling logical replication and setting appropriate parameters. PostgreSQL 18 allows the replication of STORED generated columns by using the publish_generated_columns parameter. The subscriber must define these columns as regular columns. The new version also enhances conflict monitoring by providing detailed counters for different types of replication conflicts. Parallel streaming is now the default behavior for subscriptions, improving efficiency. The two-phase commit feature can now be modified on existing subscriptions without needing to recreate them. PostgreSQL 18 also introduces automatic cleanup of idle replication slots, which can be configured to invalidate unused slots after a specified duration. Considerations for implementation include ensuring that the subscriber's column types match those of the publisher for generated columns, the requirement for track_commit_timestamp for certain conflict counters, and the fact that sequences are not replicated. Cleanup of replication resources is recommended after testing to prevent unnecessary costs and WAL accumulation.

AppWizard

July 7, 2026

How to run Linux GUI apps on Android (when it actually works)

Android 17 is progressing towards enabling a fully functional Linux desktop environment, allowing for the potential to run Linux GUI applications. The Android kernel is based on Linux, and Google has integrated Linux terminal support. Users face challenges with the implementation of the Weston app, which is intended to provide a graphical environment for Linux GUI applications. The process to enable Linux GUI apps involves several steps, including enabling Linux terminal support, installing Flatpak, and accessing the Wayland terminal. However, users encounter technical hurdles, such as insufficient memory allocation and issues with the D-bus portal, leading to a frustrating experience. Despite some successful attempts to run the Weston command, persistent errors hinder functionality, and the feature is not yet ready for widespread use.

Winsage

July 7, 2026

Windows 11 24H2 and 25H2 Issue Causes Black Screen, Start Menu Failure, and Taskbar Crashes

Microsoft has addressed critical user interface failures affecting Windows 11 versions 24H2 and 25H2 in enterprise environments, documented under update advisory KB5072911. These issues arise from cumulative updates released after July 2025, including KB5062553 and KB5065789, primarily impacting enterprise-managed systems and virtualized environments. Users may experience black screens, unresponsive Start menus, and taskbar failures following updates, particularly in non-persistent environments like Virtual Desktop Infrastructure (VDI). Core components such as Explorer.exe and XAML-dependent applications may fail to initialize or crash due to a timing issue in the update process, where required application packages are not properly registered. Microsoft has released updates starting June 23, 2026, under KB5095093 to address these issues and recommends temporary workarounds for affected systems, including manual registration of missing packages and deploying logon scripts in non-persistent environments. Organizations are encouraged to install the latest updates and review their update procedures to prevent future disruptions.

Winsage

June 24, 2026

A bunch of bugs that broke PowerToys have been squashed

PowerToys has updated to version 0.100.1, fixing critical bugs from version 0.100.0 that affected core features. - Color Picker: Resolved a bug causing the main window to appear within the zoomed-in picker view. - Command Palette: Corrected initialization of Run history in Ahead-of-Time builds, fixed "???" display in Performance Monitor after restart, adjusted Hibernate command to use the Sleep icon, and limited "pin to dock" dialog to enabled displays. - Keyboard Manager: Addressed remapped modifier keys being delivered as system-key events. - Power Display: Fixed monitor power-state control not waking monitors from standby and resolved display detection and brightness control issues on dual-GPU laptops. - PowerToys Run: Improved discovery of Visual Studio Code workspaces. - Quick Access: Fixed crashes in the Quick Access flyout due to unhandled XAML exceptions. - Shortcut Guide: Resolved a crash in the sidebar navigation, corrected number-key rendering in shortcut manifests, and updated bundled manifests for consistent rendering. - ZoomIt: Fixed a race condition in audio initialization for video recording.