policy change Archives

Winsage

September 9, 2026

Microsoft’s Two-Track Patch Tuesday: Cloud Identity Flaws Fixed Before Disclosure, Windows Still Catching Up

The September 2026 security cycle revealed a bifurcated approach to vulnerability management by Microsoft, focusing on cloud-side identity services with silent mitigations and traditional Patch Tuesday updates for on-premises Windows infrastructure. On September 3, Microsoft addressed nine cloud-side vulnerabilities, including two with a CVSS score of 10.0: CVE-2026-83711 (Azure AD B2C elevation of privilege) and CVE-2026-70352 (Azure AI Language Authoring missing authentication). Additionally, CVE-2026-83941 (Entra ID elevation of privilege, rated 9.9) and CVE-2026-80098 (Copilot Studio cryptographic flaw) were noted. On September 8, the Patch Tuesday update addressed 70 CVEs, including critical issues in the on-premises stack, such as CVE-2026-83939 (Windows Secure Kernel Mode elevation of privilege). CVE-2026-69414 (ShieldBreak), an elevation of privilege vulnerability in the Defender Malware Protection Engine, was patched out-of-band on September 3 after being publicly exposed for three weeks. Microsoft is shifting its Self-Service Password Reset (SSPR) enforcement to default to passkeys as of September 7, with plans to phase out SMS and voice-based authentication by February 2027. This aims to enhance security by moving away from legacy credentials.

AppWizard

September 7, 2026

Google Photos just halved the time you have to rescue trashed pictures

Google Photos has changed its photo retention policy, reducing the grace period for restoring deleted images from 60 days to 30 days. This update aligns the retention period for deleted cloud images with that of locally stored photos. Notifications about this policy change are being sent to Android users, marking its official rollout.

AppWizard

September 7, 2026

Xbox Cloud Gaming Caps Hours: 15 for Ultimate [2026]

On September 3, 2026, Microsoft announced that Xbox Game Pass subscribers will see a shift in cloud gaming access. Starting November 2026, unlimited cloud streaming will be replaced by a tiered hour bank system: 15 hours for Ultimate, 10 for Premium, and 5 for Essential subscribers. Once a subscriber exhausts their allotted hours, they must wait for the next billing cycle or purchase additional time. This change is the most significant since the beta launch of Xbox Cloud Gaming in 2019. The announcement was made on Xbox Wire, and the new structure is reflected on Xbox’s product pages. The new tiered system introduces a scarcity model, with every paid tier now having its own cloud gaming quota. Essential subscribers, who previously had no cloud access, will now receive 5 hours per month. The pricing for the Game Pass tiers is as follows: Ultimate at .99 for 15 hours, Premium at .99 for 10 hours, and Essential at .99 for 5 hours. The free ad-supported tier remains unchanged at 5 hours per month. Microsoft's rationale for the change is based on usage data indicating that most subscribers do not heavily utilize cloud streaming, coupled with the rising costs of operating cloud gaming services. The company has stated that additional hours can be purchased once a subscriber's monthly allotment is used up, although pricing details for these add-ons have not yet been disclosed. The new hour caps will take effect in November 2026, following a shorter notice period compared to NVIDIA's GeForce NOW service, which implemented a 100-hour monthly cap earlier in 2026. The response from gaming communities has been largely negative, with concerns about the limits falling short of typical usage patterns and conflicting with the marketing of Game Pass as offering unlimited access. The introduction of hour caps could impact Game Pass's subscriber base, particularly among those who rely on cloud gaming as their primary access point. Microsoft's internal usage data will determine the extent of this impact, as the company aims to control costs without raising subscription prices.

AppWizard

August 16, 2026

Bumble Ends Its Signature Women-First Messaging Rule in Major Dating App Shakeup

Bumble has officially abandoned its women-first messaging rule, allowing either person in a heterosexual match to send the first message. This policy change eliminates the previous requirement for women to initiate conversations, which has been in place since the app's launch in 2014. Additionally, Bumble has extended the response window for initial messages from 24 hours to 72 hours to enhance user experience. The company had previously started easing its messaging framework in 2024 with the introduction of Opening Moves, allowing women to add conversation starters to their profiles. Reports indicate a growing demand for more flexibility in conversation initiation among users. Bumble's decision comes amid challenges in the online dating industry, including dating-app fatigue and evolving user habits. The change marks a significant shift in Bumble's operational ethos, moving away from a model that emphasized women's control in initiating conversations.

AppWizard

July 17, 2026

Telegram Trolls France On World Cup 2026 Exit; The Reason Is Not Football At All

Spain defeated France 2-0 in the semifinals of the FIFA World Cup 2026, advancing to the finals. Telegram Messenger expressed schadenfreude over France's exit, tweeting "BYE BYE" with a match result screenshot. Pavel Durov, Telegram's co-founder, faced legal issues in France, including a preliminary investigation into criminal activities involving Telegram, his detention in August 2024, indictment on 12 charges, and a subsequent policy change regarding user data sharing with authorities. Durov characterized his arrest as politically motivated, while Elon Musk criticized the situation, questioning the scrutiny faced by tech leaders.

Winsage

April 8, 2026

Microsoft Abruptly Terminates VeraCrypt Account, Halting Windows Updates

Microsoft has terminated an account linked to VeraCrypt, an encryption software, raising concerns about the future of Windows updates for the software, as confirmed by its developer. This situation highlights the vulnerabilities in the supply chain of open-source software, which often relies on larger technology companies.

AppWizard

March 20, 2026

Google eases Android app sideloading rules after

Google is implementing a policy change to allow easier installation of Android applications from sources outside its Play Store, following an antitrust settlement. This includes an "advanced flow" option that lets users bypass mandatory app verification safeguards through a structured process. The changes aim to balance user choice with protections against scams and malware risks. Previously, Google required all Android applications to be registered by verified developers to mitigate risks like malware and fraud. The new process requires users to enable developer mode, restart their devices, and undergo a waiting period of up to 24 hours before verifying their identity with biometrics or a PIN to install apps from unverified developers. Users can install these apps temporarily for up to seven days or indefinitely, with ongoing warning prompts. Additionally, Google is offering free, limited app distribution accounts for students and hobbyists to share apps without full developer verification.

AppWizard

March 14, 2026

Instagram says your chat privacy is going away, as its encryption vanishes soon

Instagram's end-to-end encryption (E2EE) for direct messages will be removed on May 8, 2026, resulting in decreased privacy for user chats. The platform is also enhancing protections for younger users by implementing advanced AI to manage Teen Accounts, which will have restrictions on unsolicited contacts and curated content.

AppWizard

October 30, 2025

Google is giving users more options to pay for apps, and hopefully save some money too

Google has revised its Play Store policy, allowing Android developers to present alternative billing options and link to external payment systems. Developers can now implement their own billing systems instead of relying solely on Google Play Billing and are permitted to link directly to external checkout pages within their applications. This external billing option is currently limited to the U.S. market and will remain in effect until November 1, 2027. Google has also instituted new rules requiring certain apps to verify the age of users prior to download. Historically, Google restricted developers from guiding users toward more affordable payment alternatives outside the Play Store. With the new policy, developers can promote special offers and manage in-app payments outside of Google’s ecosystem, potentially leading to lower subscription rates for users.

Winsage

October 28, 2025

End of Windows 10 support could mean huge e-waste increase

Microsoft is discontinuing support for Windows 10, raising concerns about increased electronic waste and cybersecurity risks for users unable to upgrade. Approximately 40% of Windows users may lack alternatives, as many devices do not meet the requirements for Windows 11. Research indicates that up to 240 million outdated devices could end up in landfills due to this policy change. Microsoft will provide security updates for Windows 10 for one more year, but users delaying upgrades may face vulnerabilities to cyber threats. Upgrading to new devices can be costly, with prices starting around 0, while Linux Mint is suggested as a free alternative that can extend the life of current devices. Linux Mint requires only 2GB of RAM, 20GB of disk space, and a minimum resolution of 1024×768. Advocates are promoting the right to repair and legislation to combat planned obsolescence to make technology more sustainable.