operator Archives

AppWizard

July 31, 2026

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

Bitsight's investigation revealed that inexpensive Android TV boxes are being shipped with applications that can change their hardware identity, allowing them to impersonate popular smartphone brands like Samsung and Huawei. This operation, named Fuyao, is linked to Zhejiang Fengwo IoT Technology Co., Ltd., a Chinese company established in 2019. The H96MAXV11 model was frequently reported among the affected devices. In one day, the operation received 65,957 reports from about 38,000 unique MAC addresses, with many devices misidentified as phones due to spoofed identifiers. Fengwo has also promoted over 120,000 "AI digital humans," though details on this marketing term are vague. The command-and-control server for Fuyao sends phone profiles to devices, masking their actual hardware specifications. The operation uses machine vision technology and a YOLOv8s object-detection model to identify advertisements. Bitsight documented 40 fraud tasks, 21 unique campaigns, and 166 modules across four devices. The operation's payout structure involves 144 operator-owned domains, with an estimated gross return of .25 per device daily, potentially leading to annual revenues in the millions. Attribution to Fengwo is supported by shared TLS certificate data and public patent records, although the patents do not directly address advertising. There is uncertainty about how the fraudulent apps were installed and at what point in the supply chain they were introduced. Device owners are advised to verify Play Protect certification and disconnect suspicious devices.

Tech Optimizer

July 28, 2026

Migrate self-managed PostgreSQL to Amazon RDS using the RDS console

Running PostgreSQL on Amazon EC2 requires users to manage operational tasks such as patching, backups, and security. Migrating to Amazon RDS for PostgreSQL or Amazon Aurora PostgreSQL-Compatible Edition offers a fully managed service that automates these tasks, allowing development teams to focus on application development. The migration process uses the auto-migration feature in the Amazon RDS console, supported by AWS Database Migration Service (AWS DMS), which facilitates PostgreSQL-to-PostgreSQL migrations using native tools for accurate schema mapping and faster migration. The migration can be executed using various methods, including pg_dump/pg_restore, manual AWS DMS tasks, or third-party tools, with the RDS console approach being preferred for its reliability and minimal setup effort. AWS DMS supports three replication modes: full load, CDC only, and full load + CDC, with the migration duration depending on database size and network throughput. Prerequisites for migration include having a source PostgreSQL 10.4+ on Amazon EC2, a target RDS for PostgreSQL or Aurora PostgreSQL, proper IAM roles, stored credentials in Secrets Manager, and appropriate networking configurations. Considerations include unsupported objects, potential issues with sequence values, and the need to avoid schema changes during CDC. The migration involves preparing the source database, creating necessary users and permissions, and executing the migration through the RDS console. Post-migration, it is essential to verify data integrity, optimize performance by updating statistics and rebuilding indexes, and implement security best practices such as disabling the DMS user and enforcing SSL/TLS connections. Common troubleshooting errors during migration include permission issues, incorrect WAL levels, and connection refusals, each with specific resolutions. Finally, to avoid ongoing charges, it is recommended to clean up resources created during the migration process, including deleting the DMS migration task, logical replication publications, Secrets Manager secrets, and the target RDS/Aurora instance.

AppWizard

July 25, 2026

There’s only one Jedi Operator in Star Wars Zero Company, and reckless players may end up with none at all: ‘Be careful that nothing unfortunate happens to her!’

The upcoming tactical game, Star Wars Zero Company, will feature only one Jedi Operator, Tel-Rea, highlighting the rarity of Jedi in the game's narrative. The game includes a permadeath mechanic, meaning players could permanently lose Tel-Rea if they are not careful. While permadeath is a key feature, players can choose to disable it on certain difficulty levels. The decision to include permadeath was debated internally at Bit Reactor, with narrative lead Aaron Contreras noting its potential impact on the story. Star Wars Zero Company is set to launch next month.

AppWizard

July 25, 2026

Total War: Warhammer 40k shows off its first full battle live, providing its biggest info dump yet

The Alpha Strike livestream for Total War: Warhammer 40,000 revealed several gameplay features: - Units consist of multiple entities with unique stats and weaponry. - Heroes will have customizable bodyguards. - Units can strafe while firing, with a trade-off in accuracy. - Airstrikes and army abilities are available, with Regimental Orders benefiting nearby units. - The balance of power bar shows reinforcements waiting off the field. - Each entity can target different enemies based on line of sight. - All projectiles are simulated, and units have unlimited ammunition. - A new Sentry Mode allows marking enemy units for prioritization. - New unit abilities include grenades and psykers. - A morale system reflects damage sustained by units. - Players can deploy reserves strategically with options like drop pods. - Blood effects are included without additional cost. Positioning, cover, line of sight, and terrain will be crucial in battles, and unit loadouts will add strategic depth. Further livestreams are expected as the beta approaches.

Tech Optimizer

July 23, 2026

Simplify AI agent orchestration with Lakebase Postgres

The auditing process has traditionally been labor-intensive, requiring extensive document reviews. CLA (CliftonLarsonAllen LLP) partnered with the Databricks Forward Deployed Engineering team to develop a document processing application that reduces extraction time from hours to minutes while maintaining quality. The application is built on the Databricks platform, utilizing technologies like Lakebase Postgres, Databricks Apps, Lakeflow Jobs, MLflow, and Unity Catalog Volumes. The application addresses challenges in document parsing, including unpredictable per-task latency, rate-limit-aware throttling, workload prioritization, cost attribution per task, and real-time progress visibility. It eliminates the need for multiple specialized systems by integrating components such as a web application for user interaction, Lakebase for state management, an orchestrator for task management, and AI agents for document processing. The task queue is supported by two Postgres tables in Lakebase, tracking task status and execution attempts. Concurrency safety is ensured through a locking mechanism, and crash recovery is facilitated by lease-based locking. The orchestrator implements rate-limit-aware throttling and idempotent webhook callbacks to manage task processing effectively. An operator dashboard provides real-time metrics on task status, agent performance, and workload costs, with live updates through Postgres LISTEN/NOTIFY events. Cost attribution is managed at the application level, allowing for detailed monitoring of expenditures. Lakebase enhances the orchestration process with features like autoscaling compute, OAuth-rotated authentication, Unity Catalog integration, and support for branching and snapshots.

AppWizard

July 20, 2026

Minecraft 26.3 Snapshot 4 is a big update hiding under the hood

Minecraft's Snapshot 26.3 update transitions the Java Edition from GLFW to SDL3, improving window management, input handling, and platform support. It uses SDL scancodes for key positions and SDL keycodes for text shortcuts, enhancing control responsiveness. The Raw Input mouse option has been removed, and players can switch between Borderless and Exclusive Fullscreen modes without restarting the game. However, Exclusive fullscreen mode may cause crashes on Windows and is not supported on macOS. Players in Spectator mode can now interact with Nether portals, End portals, and End gateways. The debug overlay has been improved, and the creative inventory has been reorganized. Armadillos will no longer roll up while submerged. New item components for cooking and brewing fuels have been introduced, allowing data pack creators to define parameters like burn duration and cooking speed. Sign behavior has been adjusted to prevent click events by default. There are extensive format changes to world generation, loot tables, predicates, number providers, and advancement triggers, updated to Data Pack version 111.0 and Resource Pack version 92.0. Snapshot 4 addresses various bugs, but players are advised to back up their worlds before using the snapshot to avoid potential damage to saved games.

TrendTechie

July 18, 2026

Что такое троттлинг и как понять, что провайдер намеренно замедляет ваш трафик

Throttling is the intentional limitation of speed for specific types of traffic, services, protocols, devices, or users. It can occur due to various reasons, such as exceeding data caps, prioritization of certain services, load management during peak hours, or technical policies in networks. Users may experience speed drops that are selective to specific traffic types, indicating potential throttling, while universal slowdowns suggest network overload or outages. Speed tests measure connectivity to specific servers and may not reflect actual download speeds across different paths. Signs of potential throttling include isolated speed drops, consistent slowdowns at specific times, and discrepancies between speed tests and real-world performance. Initial checks should rule out home network issues, and practical diagnostics can help identify throttling by comparing speeds across different servers, types of downloads, and times of day. If throttling is confirmed and support does not resolve the issue, exploring alternative ISPs may be necessary.

AppWizard

July 17, 2026

VK and Max messenger removed from Google Play store

VK's core applications, including the VK social network and Max messenger, have been removed from the Google Play store and previously from the Apple App Store. Users searching for these apps will find them absent, and this may be linked to recent international sanctions. VK's press service stated that users who have the apps installed will not experience disruptions, and all features and security systems will remain stable. Users are encouraged to download the apps from alternative platforms, such as RuStore, Huawei AppGallery, Samsung Galaxy Store, and Xiaomi GetApps. Additionally, the Odnoklassniki social network application has also disappeared from the Google Play store. The European Union has imposed sanctions against VK and its subsidiary, "Kommunikatsionnaya platforma," which is linked to the removal of these applications from major tech platforms.

Winsage

July 15, 2026

LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software

LabubaRAT is a newly identified Rust-based remote access tool (RAT) that disguises itself as NVIDIA software to facilitate operations on Windows systems. It establishes a reusable foothold for hands-on activity and can profile the host system, identify security tools, execute commands, transfer files, capture screenshots, and proxy network traffic. LabubaRAT retrieves its configuration at launch via command-line arguments or environment variables, allowing operators to specify parameters like the command-and-control server and API key at runtime. It maintains local state in a SQLite database and supports communication through HTTPS polling, Microsoft Edge WebView2, and DNS tunneling. The malware includes capabilities for command execution, file handling, and establishing persistence through a Windows Run registry key. The entry point for the attack is an executable named nvidia-sysruntime.exe, which masquerades as NVIDIA’s container runtime toolkit. LabubaRAT conducts thorough profiling of the host, checking for installed browsers and security products, and gathers information on the system's specifications. Blackpoint Cyber has shared indicators of compromise to help detect LabubaRAT activity.

AppWizard

July 14, 2026

Chatto: Open-source team messenger with privacy at its core

Chatto is a self-hosted messaging software released under an open-source license, allowing users to run it on their own hardware. It supports builds for Linux, macOS, and Windows and requires only a single executable for installation. Chatto encrypts message texts and selected durable account fields using per-user keys, ensuring that only the account owner can access their plaintext data. When a user deletes their account, the associated keys are destroyed, rendering the data unreadable. Each Chatto server is dedicated to a single community, isolating users and messages from others. The software includes built-in voice and video calls with end-to-end encryption. A paid hosting option, Chatto Cloud, is set to enter public beta soon, operating on European infrastructure while maintaining compatibility with self-hosted versions. Chatto is available for free on GitHub.