privacy Archives

Winsage

July 10, 2026

A hacker’s arrest just revealed how Microsoft can track your Windows device

A teenager named Peter Stokes is facing federal charges in Chicago for allegedly hacking a U.S. jewelry retailer while using a VPN to conceal his online activities. Microsoft provided the FBI with data linked to a tracking mechanism called the Global Device Identifier (GDID), which is a unique number assigned to every Windows installation that persists through updates. This identifier allowed authorities to connect Stokes' computer to specific websites, despite his VPN usage. Stokes was arrested in Helsinki in April 2026 while trying to board a flight to Japan, carrying two two-terabyte hard drives. The GDID enabled Microsoft to track Stokes' activities on third-party services, raising concerns about privacy and data tracking.

AppWizard

July 10, 2026

Proton VPN on Android: features, requirements, how to install

Proton VPN is a prominent VPN provider known for its speed and security, with its headquarters in Switzerland, which has strong privacy laws. The Android app features include Secure Core for enhanced anonymity, NetShield Ad-blocker to block ads and trackers, a kill switch to protect data during connection drops, alternative routing for bypassing restrictions, split tunneling for selective app usage, a VPN Accelerator for increased speeds, and P2P support for secure file sharing. The app requires Android 8 or later for installation, which can be done via the Play Store. Users can connect as guests to access limited features of Proton VPN Free.

Winsage

July 10, 2026

Windows 11 Has a Hidden Tracker – Here’s How to Limit It

Peter Stokes is involved in a breach with a luxury retailer, using tactics like VPNs and rotating IP addresses to hide his digital activity. The FBI discovered a Global Device Identifier (GDID) linked to his Windows installation, which is a persistent device-level identifier that uniquely identifies Windows installations. GDID remains unchanged through operating system updates but resets with a full reinstallation. Disabling GDID is not possible, as attempts to do so would disrupt Windows activation. Users can minimize data linked to GDID by using a local account, reducing diagnostic telemetry, disabling Activity history, and carefully managing reinstalls. VPNs do not prevent Microsoft from logging GDID, IP address, and URL data. Privacy researchers view GDID as a covert tracking mechanism, and Windows lacks user-facing options to reset this identifier, unlike Apple and Google.

Tech Optimizer

July 10, 2026

I tested Norton Antivirus on my PC – and it found a hidden Trojan in 15 minutes

Norton Antivirus is a well-regarded malware protection tool, consistently ranking among the top in the industry with a robust suite of security features. It has a user-friendly interface similar to Malwarebytes, but intrusive upselling tactics detract from usability. Norton offers comprehensive scanning tools, including Quick Scan, Full Scan, Smart Scan, Targeted Scan, and Startup Scan, which successfully detected a Trojan missed by other antivirus software. Its Scam Protection tools provide alerts for online scams and phishing attempts, and it includes unique features like Deepfake Protection and an AI assistant named Genie. According to MRG Effitas, Norton blocked 98% of malware samples with a 0.33% miss rate, achieving a Level 2 certification. Pricing includes several plans, with Norton 360 Deluxe offering the best value at an introductory price of .99 for the first year, rising to .99 annually. Despite its strengths, the intrusive upselling makes it less recommendable compared to Malwarebytes, although it has unique capabilities in threat detection and a comprehensive suite of security tools.

AppWizard

July 10, 2026

The next big addition to T-Life app sounds an awful lot like targeted advertising

T-Mobile has made the T-Life app central to its retail operations, requiring all transactions in physical stores to be conducted through it. The company plans to enhance the app with richer account profiles and interest-based preferences for personalized user experiences, including recognizing customer birthdays. There are concerns about data privacy and the potential use of enhanced data collection for marketing, especially given T-Mobile's history of data breaches. The company has been asked about data sharing and security measures. New features for T-Mobile Tuesday have been introduced, including weekly participation streaks and support for Spanish-language users. A major app update earlier this year improved loading times by 30% and allowed users to change phone numbers. T-Mobile reported record engagement with the app, with increased daily, weekly, and monthly active users.

Tech Optimizer

July 10, 2026

Gen Digital stock holds steady as cybersecurity demand supports long term growth

Gen Digital is a publicly traded company focused on cybersecurity and digital privacy solutions, primarily targeting consumers and small businesses. The company generates revenue through recurring subscriptions for its security and identity protection services, which include antivirus software, VPN services, and identity monitoring. Gen Digital's business model relies on bundling multiple security features into comprehensive offerings, providing predictable revenue and stability in cash flows. The company emphasizes continuous updates to its services to protect against evolving cybersecurity threats. Its growth prospects are linked to trends in cybersecurity spending and the increasing adoption of subscription-based solutions. Gen Digital differentiates itself from competitors by focusing on individual devices and home networks rather than large enterprises. The company also benefits from distribution partnerships that help expand its customer base. Long-term demand for its products is driven by digitalization, cyber risks, and growing consumer awareness of privacy issues. Gen Digital's stock performance is influenced by both company-specific factors and broader market trends in technology and cybersecurity.

AppWizard

July 10, 2026

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

Researchers analyzed 281 popular free VPN applications on the Google Play Store and found significant privacy and security shortcomings. The study, conducted by teams from the University of Michigan, the University of New Mexico, and IIT Delhi using a framework called MVPNalyzer, revealed that flagged apps had over 2.4 billion downloads. Key findings included: - Five apps transmitted configuration files unencrypted, allowing attackers to intercept and modify them. - 29 apps allowed user traffic to leak outside the encrypted tunnel, with 24 leaking DNS traffic and six leaking full browsing traffic. - 169 apps made no effort to disguise their traffic, making it identifiable to network operators or government censors. - 76 apps transmitted the device's Advertising ID to advertisers, and over 80% contacted known advertising and tracking servers. - Only one of 108 OpenVPN configurations adhered to recommended security practices; 89% used a single authentication method, and nearly 20% employed outdated encryption techniques. - Many apps passed through Play Store checks without adequate scrutiny, with safety labels often serving as marketing tools rather than security indicators. These findings align with previous research highlighting similar issues in popular Android VPN apps. Users are advised to be cautious when selecting VPNs, prioritizing those with recent independent security audits.

Winsage

July 10, 2026

You can’t fully disable Microsoft’s GDID Windows 11 tracker, but these settings limit what it captures

A 19-year-old named Peter Stokes was detained at Helsinki airport in April 2026 while traveling to Japan, carrying two 2TB hard drives. He was subject to an Interpol Red Notice and faced a federal complaint from U.S. prosecutors by July for his alleged involvement in the Scattered Spider hacking group, which breached a U.S. luxury jewelry retailer in May 2025, leading to a ransom demand. The Global Device Identifier (GDID), developed by Microsoft, is a persistent identifier that uniquely identifies a Windows installation on a device. It links online activities back to a single identity, which law enforcement can use to trace a device's owner. The GDID is generated when a user signs into Windows with a Microsoft Account and remains through updates but does not survive a clean reinstall. Stokes' use of the same Windows device allowed investigators to trace his activities through the GDID, which linked him to the hacking incident. Privacy advocates have raised concerns about the lack of consent for GDID assignment and the potential for surveillance.

AppWizard

July 9, 2026

A Spotify Teardown Just Showed Us How Apps Will Actually Work on Android XR Glasses.

An APK teardown of Spotify version 9.1.66.1259 revealed plans for a Gemini experience designed for Android XR smart glasses. Users can link their Google account to access Gemini for voice-controlled playback, contextual music discovery, and real-time playlist management through prompts. The glasses can analyze the environment via a camera to suggest music based on surroundings. The architecture allows the app to run on a smartphone while the glasses act as a display and sensor, making development easier for developers by enabling them to extend existing Android apps for the glasses. This model supports the creation of lightweight AI glasses. Spotify's early preparation for Android XR glasses signals positive ecosystem development and developer engagement ahead of hardware releases. However, the use of cameras for contextual music selection raises privacy concerns. The findings are based on an unreleased build and may change before official confirmation.

Winsage

July 9, 2026

Microsoft Teams removal shows why we shouldn’t get too excited about preview features

Microsoft has paused the development of two anticipated minimized views for Teams meetings, originally expected to roll out in May 2026. The Expanded view was designed to show up to four participant videos, while the Compact view aimed to provide quick access to meeting controls. The future of these features remains uncertain, with questions about potential changes or cancellation.