Open-Source Archives

Winsage

July 26, 2026

Microsoft is using TPM chips to crack down on pirated Windows activations

Microsoft has mandated the inclusion of the Trusted Platform Module (TPM) as a standard feature in all new motherboards and CPUs to enhance the Windows activation process. The company has introduced an enhancement to its Key Management Service (KMS) that leverages TPM's security capabilities to authenticate the legitimacy of KMS servers. This new "TPM-based attestation" aims to mitigate exploitation risks associated with KMS by validating the cryptographic integrity of KMS servers. Starting in August 2026, TPM-based attestation will be required for KMS activation with the next release of Windows Server. Microsoft has also closed off the "KMS38" activation method in 2025, while traditional KMS activation remains functional. The Massgrave collective has developed an Online KMS method that may be impacted by the new TPM-based attestation.

Winsage

July 25, 2026

How Valve’s desperation to escape Windows 8 turned it into a Linux powerhouse

In 2012, Valve's CEO Gabe Newell expressed concerns about Microsoft's control over the PC market due to Windows 8, prompting the company to explore Linux and develop SteamOS. Valve addressed the "chicken and egg" issue of game compatibility on Linux by introducing Proton, a compatibility layer that allows Windows games to run on Linux without separate versions. The company also began contributing to the Linux ecosystem by upstreaming improvements in graphical rendering and developing the RADV open-source Vulkan driver for AMD GPUs. Valve has made SteamOS available for free download and installation on personal computers, aiming to compete with Windows in the gaming sector and promote broader Linux adoption. As a result, Valve has become a significant player in the Linux landscape, enhancing the gaming experience and benefiting the open-source community.

AppWizard

July 25, 2026

Conceived in a secure military facility, this Jedi Knight fansite has been running consistently for almost 30 years: ‘It looks really close to what it did back in 1998’

In the late 1990s, the internet saw a surge in websites, including those dedicated to PC gaming. The Massassi Temple, a website for Star Wars Jedi Knight: Dark Forces 2, was founded by Brian E. Lozier in early 1998. Lozier created the site to share tutorials and support fellow modders after discovering a community of modders while exploring other gaming websites. He learned programming to build the site, which has remained active due to the dedication of its community, despite challenges like the dotcom bubble burst and the failure of some games. The site hosts a vast collection of Jedi Knight content, including mods and multiplayer maps, and serves as a hub for ongoing support and development. Lozier has stepped away from the site multiple times but continues to return to ensure its survival. He aims to create a permanent archive of community contributions and reflects on the evolution of the internet and the shift toward corporate dominance.

AppWizard

July 25, 2026

Amid youth protests, Centre directs blocking of messaging app that works without internet: Developer

The Union Home Ministry has requested GitHub to remove repositories related to Bitchat, a Bluetooth-based messaging app that functions without internet connectivity, due to security concerns amid protests in central Delhi. Jack Dorsey, co-founder of Twitter, shared the directive, which aims to suppress the availability of such technologies. The Indian Cybercrime Coordination Centre has expressed worries that decentralized communication tools like Bitchat could be misused for unlawful activities. The directive, issued under Section 79(3)(b) of the Information Technology Act, 2000, requires GitHub to disable access to three Bitchat-related repositories within three hours. The Internet Freedom Foundation criticized the government's lack of transparency and argued that concerns about potential misuse do not justify banning access to the app's code. The protests, initiated by the Cockroach Janta Party, are demanding the resignation of Union Education Minister Dharmendra Pradhan over alleged mismanagement of competitive examinations, with increased support following police actions against demonstrators.

AppWizard

July 25, 2026

GitHub ordered to remove decentralized messaging app Bitchat in India

India's Ministry of Home Affairs has ordered GitHub to remove repositories related to Jack Dorsey's Bitchat application, citing concerns that the platform could allow users to bypass internet shutdowns and evade surveillance. The directive targets the software itself rather than specific unlawful content, referencing Section 79(3)(b) of the Information Technology Act, 2000, and requires compliance within three hours to avoid legal repercussions for GitHub. The repositories in question are: - github.com/permissionlesstech/bitchat - github.com/permissionlesstech/bitchat-android - github.com/permissionlesstech/bitchat-android/releases Bitchat is a decentralized messaging app that operates over Bluetooth mesh networks, which does not require internet access and facilitates anonymous communication. The app's design includes features like end-to-end encryption and no mandatory user registration. The Indian Cyber Crime Coordination Centre (I4C) claims the app could be misused for illegal activities and cites local laws as justification for the takedown. The order comes amid ongoing protests in New Delhi, where internet access has been suspended. The Internet Freedom Foundation has criticized the order as unconstitutional and has called for its retraction. It is currently unclear if GitHub will comply with the takedown request.

AppWizard

July 24, 2026

India orders takedown of Jack Dorsey’s bitcoin-linked messaging app Bitchat

India's Cyber Crime Coordination Centre has ordered GitHub to remove Bitchat, an offline messaging app created by Jack Dorsey, due to its use by anti-government demonstrators in Delhi. The order, issued under Section 79(3)(b) of the IT Act, targets three GitHub repositories linked to Bitchat and requires action within three hours. The app enables anonymous communication without registration, posing challenges for law enforcement regarding lawful interception and investigation. Bitchat is a decentralized messaging tool that uses Bluetooth mesh networks for encrypted communication without internet access, and it also supports offline bitcoin transactions, ensuring continuity during outages or shutdowns.

Tech Optimizer

July 23, 2026

Optimizing PostgreSQL on Azure directly in Visual Studio Code

Poor database performance can lead to missed SLAs, delayed releases, customer dissatisfaction, and lost revenue. Microsoft has enhanced PostgreSQL on Azure, transforming it into a fully managed platform that meets enterprise demands. Azure Database for PostgreSQL and the new Azure HorizonDB offer significant performance improvements, with HorizonDB being three times faster than self-managed PostgreSQL. The PostgreSQL extension for Visual Studio Code integrates performance management into development workflows, providing tools for managing PostgreSQL throughout its lifecycle. Key features include a server metrics dashboard that displays performance indicators, Azure Advisor recommendations for actionable insights, improved query plan visualization, and AI-assisted query analysis. The extension also enhances schema design and query formulation experiences, ensuring secure and governed interactions with PostgreSQL. Azure HorizonDB is in public preview, designed for AI-native workloads. These advancements aim to reduce friction, enhance clarity, and enable faster actions for enterprise teams managing PostgreSQL at scale.

Winsage

July 21, 2026

Persistent Telemetry: Permanent Microsoft Windows Identifier

Discussions about consumer privacy in the Windows ecosystem have focused on optional diagnostic settings and telemetry controls. Recently, the Global Device Identifier (GDID), a permanent device-level token embedded in the Windows operating system, was revealed in a U.S. Department of Justice complaint related to a cybercriminal investigation. The GDID uniquely identifies a Windows installation and is used by Microsoft services. It is generated when a device is linked to a Microsoft account and resides in the Windows registry, being included in data sent to remote servers. There is no option to disable or delete the GDID, and attempts to do so can disrupt essential features. This has led privacy-conscious users to consider alternatives like Linux, which offers more control over data and does not require persistent identifiers. For Windows users, strategies to minimize data linked to the GDID include using local accounts, disabling optional diagnostics, and reviewing cloud app sync settings. Privacy advocates are calling for better user controls and opt-out mechanisms for hardware tracking tokens.

AppWizard

July 20, 2026

Reader poll says 1 thing matters most in free apps — and it’s not open source

A recent poll among users of free Android applications revealed their preferences regarding app features. The absence of advertisements was the top priority for 33.6% of respondents, indicating a strong aversion to intrusive ads. Additionally, 12.4% valued the absence of paywalls, suggesting they prioritize accessibility over ads. Only 5.7% considered the open-source nature of apps significant. Notably, 48.2% of participants believed that all three features—absence of ads, no paywalls, and open-source access—are equally important.

Tech Optimizer

July 18, 2026

North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections

North Korea's Contagious Interview hackers have been using a deceptive strategy to target developers by posing as recruiters and embedding malware in SVG files. Elastic Security Labs discovered that the attackers hid malicious payloads within HTML comment blocks of these files, allowing the malware to evade antivirus detection. At the time of the findings, no antivirus engines flagged the compromised repositories, which included trojanized GitHub repositories disguised as coding challenges. The malware executed automatically at server startup and deployed four modules: a browser credential and cryptocurrency wallet stealer, a file stealer, a remote access Trojan, and a clipboard monitor. The campaign, tracked as REF9403, is part of the ongoing Contagious Interview operation attributed to North Korea's Lazarus Group, which aims to generate revenue through cryptocurrency theft. Developers are advised to audit any projects run from unsolicited sources and to monitor specific domains associated with the attack.