mount Archives

AppWizard

July 23, 2026

Building a True Per-App Android Device Spoofer

Device spoofing in Android applications allows developers to manipulate device information, primarily through altering android.os.Build attributes. Existing spoofer applications often fail to modify native system API calls that retrieve genuine device information. Tweaks is a per-app spoofer integrated into AOSP and LineageOS, which changes device properties by modifying memory-mapped files under /dev/properties. It uses a private mount namespace to bind-mount modified property-context files, ensuring only the targeted application receives spoofed values while the rest of the system remains unaffected. The Tweaks app, which is platform-signed, communicates with the TweaksManagerService to write configurations and manage property overrides. The core functionality is handled by propgen, which generates property context files with spoofed values by identifying and patching properties in place. The TweaksManagerService ensures secure interactions and content-addresses generated property areas to allow sharing among apps with identical overrides. The spawn path in ProcessList.startProcess determines whether to apply spoofing based on conditions evaluated by the TweaksLocalService. Security is maintained through SELinux policies, which restrict access to spoofable properties. However, certain elements, such as /proc/self/mountinfo and /system/build.prop, still reveal authentic device information despite the spoofing capabilities of Tweaks. The source code for Tweaks and related patches is available for public access.

AppWizard

July 22, 2026

Coming to XBOX Game Pass: Halo: Campaign Evolved, Beast of Reincarnation, and More

- Available Today: - The Planet Crafter (July 21) - Terraform a planet in solo or co-op mode. - Coming Soon: - Shift at Midnight (July 22) - Online co-op detective horror game. - Hell is Us (July 23) - Explore a nation in civil war with supernatural elements. - Halo: Campaign Evolved (July 28) - Reimagined Halo: Combat Evolved with HD visuals and new content. - Mistfall Hunter (July 30) - Dark fantasy ARPG with combat challenges. - Corsair Cove (July 31) - City-builder focused on pirate life. - Heretic + Hexen (August 4) - Re-release of classic spell-casting shooters. - Beast of Reincarnation (August 4) - Action RPG set in post-apocalyptic Japan. - In Case You Missed It: - Buckshot Roulette (July 8) - Tabletop horror game. - Denshattack! (July 15) - Fast-paced adventure in a Japanese dystopia. - In-Game Benefits: - Zenless Zone Zero (July 29) - New game featuring a first-gen Void Hunter. - Leaving July 31: - Titles departing from Game Pass include Back to the Dawn, Celeste, Crusader Kings 3, Mount & Blade 2: Bannerlord, My Friendly Neighborhood, Rain World, Sniper Elite Resistance, and Whiskerwood.

AppWizard

July 22, 2026

Halo: Campaign Evolved and Game Freak’s Beast of Reincarnation Lead Xbox Game Pass July 2026 Wave 2 Lineup

Xbox Game Pass will add several titles in late July and early August, including: - Shift at Midnight (July 22) - Hell is Us (July 23) - Halo: Campaign Evolved (July 28) - Mistfall Hunter (July 30) - Corsair Cove (July 31) - Heretic + Hexen (August 4) - Beast of Reincarnation (August 4) Halo: Campaign Evolved and Beast of Reincarnation will be available on day one for subscribers of Game Pass Ultimate and PC Game Pass. Several titles will leave Xbox Game Pass on July 31: - Back to the Dawn - Celeste - Crusader Kings 3 - Mount & Blade 2: Bannerlord - My Friendly Neighborhood - Rain World - Sniper Elite Resistance - Whiskerwood

Winsage

July 20, 2026

Enable BitLocker on Windows 11: 11 Steps, 45 Min [2026]

A stolen laptop can lead to a significant data breach, particularly when taken from public places. Windows 11 has introduced BitLocker, a full-disk encryption feature that became mandatory for Australian businesses in 2026. The Office of the Australian Information Commissioner reported 766 notifiable data breaches in the latter half of 2024, with unauthorized access to devices being a major cause. Full-disk encryption is crucial for compliance with the Essential Eight framework, which mandates data protection on portable devices. BitLocker ensures that data on an encrypted drive becomes unreadable if the drive is removed and connected to another computer. It aligns with the Essential Eight framework, requiring evidence of encryption rather than just claims of protection. There are three types of encryption on Windows 11: Device Encryption, BitLocker Drive Encryption, and File-Level Encryption. BitLocker is available only on Windows 11 Pro and higher editions. To use BitLocker, certain prerequisites must be met, including having Windows 11 Pro or higher, a Trusted Platform Module (TPM) 2.0, UEFI firmware with Secure Boot enabled, and local administrator rights. The process to enable BitLocker involves confirming the edition, checking TPM status, enabling BitLocker through Windows Settings or PowerShell, and backing up the recovery key. Organizations can deploy BitLocker fleet-wide using Microsoft Intune, and additional security measures like TPM+PIN can be implemented for pre-boot authentication. Common pitfalls during BitLocker rollout include skipping recovery key backup and assuming that Home edition machines are covered. Troubleshooting common BitLocker issues involves identifying symptoms and applying appropriate fixes. Advanced tips for enhancing security include suspending BitLocker before maintenance and auditing compliance at the fleet level. BitLocker is integral to protecting data on portable devices, and compliance documentation is essential for proving that every device has an active recovery key.

AppWizard

July 19, 2026

RTS IS BACK! The Best Upcoming Real-Time Strategy (RTS) Games of 2026-2027

The real-time strategy (RTS) genre, which thrived in the late 90s and early 2000s, experienced a decline from the late 2000s until around 2015 but is expected to make a comeback in 2026 and 2027. Anticipated titles include Stronghold 4, ZeroSpace, D.O.R.F., Dawn of War IV, and Total War: Warhammer 40,000. Bergfried, developed by Quid Pro Games, is a medieval strategy game that combines castle-building mechanics, town management, and real-time combat, with a unique grid reflecting European castle shapes. Panzer Strike, by ISAK Team, aims to recapture the essence of late 90s RTS games and is set for release in Q3 2026. Falling Frontier, a procedurally generated space RTS, is highly wishlisted on Steam and promises detailed ship combat. Chronicles: Medieval, releasing in 2026, offers a sandbox strategy experience during the Hundred Years’ War, blending free-roaming gameplay with large-scale battles. Dinolords, developed by Northplay, features a medieval world with armored dinosaurs and allows players to control dinosaur-riding Lords, presenting a unique twist on traditional RTS gameplay.

Winsage

July 16, 2026

Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day

A security researcher known as Nightmare Eclipse has revealed a new unpatched vulnerability in Windows, named LegacyHive, which is a local privilege escalation flaw in the Windows User Profile Service. This vulnerability allows attackers to access and load user hives of other accounts, including administrators. Nightmare Eclipse has provided proof-of-concept exploit code that works on systems with Microsoft's July 2026 patches. The exploit initially did not require user credentials but now necessitates them for accessing other hives. Nightmare Eclipse has previously disclosed over half a dozen zero-day vulnerabilities affecting Microsoft products. Microsoft has not yet acknowledged the LegacyHive exploit.

AppWizard

July 15, 2026

PC gamer turns Steam games into cartridges with ingenious 2.5-inch SSD system — games are stored on 128GB drives alongside a script to auto-start the title once plugged in

A Reddit user named Jibril-sama has created a Steam Game Cartridge system that uses old SATA SSDs as game cartridges, allowing users to access their Steam library in a nostalgic format. The system includes a disk mount detection and execution script for easy game launching, alleviating storage issues for gamers. It operates on Linux, utilizing Valve’s Steam URL Protocol for navigation. The setup requires a systemd template and a udev rule to function properly. There are concerns about the compatibility of Steam game libraries when transferred across different PCs, and there is potential for Jibril-sama to share guides and resources for others to replicate the project.

Winsage

July 15, 2026

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Security researcher Chaotic Eclipse has released a proof-of-concept exploit called LegacyHive, which targets a vulnerability in the Windows User Profile Service. The exploit requires standard user credentials and a third username, potentially an administrator account. It can mount the target user hive in the current user classes root and is designed to reduce the risk of public exploitation. The exploit works across all supported desktop and server versions of Windows, including those updated with the July 2026 Patch Tuesday release. Microsoft is investigating the findings related to LegacyHive. Microsoft has patched 622 vulnerabilities, including two privilege escalation flaws in SharePoint Server (CVE-2026-56164, CVSS score: 5.3) and Active Directory Federation Services (CVE-2026-56155, CVSS score: 7.8), which are actively exploited threats. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included these vulnerabilities in its Known Exploited Vulnerabilities catalog, requiring Federal Civilian Executive Branch agencies to implement fixes by specified deadlines. CISA has also noted active exploitation of several SharePoint Server vulnerabilities, including CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, which allow unauthorized access to vulnerable instances. CVE-2026-56164 enables attackers to send crafted network requests to access functions that should require authorization, leading to privilege escalation without prior authentication. Additionally, CVE-2026-55040 (CVSS score: 9.1) allows remote unauthenticated attackers to bypass authentication on a vulnerable SharePoint server, enabling unauthorized operations.

AppWizard

July 14, 2026

Assassin’s Creed Black Flag Resynced’s offline mode failure proves Ubisoft doesn’t actually know what an offline mode is supposed to be

Sony announced the discontinuation of physical discs for PlayStation, prompting discussions about digital media ownership. Ubisoft launched Assassin's Creed Black Flag Resynced, which sold 2 million units on launch day. However, a significant outage of Ubisoft Connect, the DRM platform for PC users, prevented many players from accessing the game. Although the game was designed for a single online connection for validation, players expected to switch to offline mode afterward, leading to frustration when server issues arose. Ubisoft had previously promised an offline mode for The Crew 2 but has left players questioning future assurances. Some users noted that pirated versions of the game remained playable during the outage, increasing interest in DRM-free titles. A gamer shared their positive experience with Project Motor Racing, which allowed for offline installation, highlighting a trend toward user-friendly gaming solutions as frustrations with DRM systems grow.

Winsage

July 7, 2026

Microsoft Windows telemetry identified hacker despite VPN use

Microsoft's telemetry capabilities helped identify Peter Stokes, a 19-year-old suspected member of the Scattered Spider hacking group, despite his use of a VPN. The investigation revealed a significant cybersecurity breach in May 2025 at a luxury jewelry retailer, leading to the theft of approximately 77 GB of sensitive data and a ransom demand. Investigators linked Stokes to the breach through a Global Device Identifier (GDID) associated with a Windows device that created an ngrok account used in the attack. This device accessed various online platforms and shared IP addresses with Stokes' accounts on Apple, Snapchat, and Facebook, corroborated by travel records and social media posts. The evidence included server logs from Scattered Spider's infrastructure and records from ngrok and other providers.