privacy Archives

Tech Optimizer

July 10, 2026

Gen Digital stock holds steady as cybersecurity demand supports long term growth

Gen Digital is a publicly traded company focused on cybersecurity and digital privacy solutions, primarily targeting consumers and small businesses. The company generates revenue through recurring subscriptions for its security and identity protection services, which include antivirus software, VPN services, and identity monitoring. Gen Digital's business model relies on bundling multiple security features into comprehensive offerings, providing predictable revenue and stability in cash flows. The company emphasizes continuous updates to its services to protect against evolving cybersecurity threats. Its growth prospects are linked to trends in cybersecurity spending and the increasing adoption of subscription-based solutions. Gen Digital differentiates itself from competitors by focusing on individual devices and home networks rather than large enterprises. The company also benefits from distribution partnerships that help expand its customer base. Long-term demand for its products is driven by digitalization, cyber risks, and growing consumer awareness of privacy issues. Gen Digital's stock performance is influenced by both company-specific factors and broader market trends in technology and cybersecurity.

AppWizard

July 10, 2026

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

Researchers analyzed 281 popular free VPN applications on the Google Play Store and found significant privacy and security shortcomings. The study, conducted by teams from the University of Michigan, the University of New Mexico, and IIT Delhi using a framework called MVPNalyzer, revealed that flagged apps had over 2.4 billion downloads. Key findings included: - Five apps transmitted configuration files unencrypted, allowing attackers to intercept and modify them. - 29 apps allowed user traffic to leak outside the encrypted tunnel, with 24 leaking DNS traffic and six leaking full browsing traffic. - 169 apps made no effort to disguise their traffic, making it identifiable to network operators or government censors. - 76 apps transmitted the device's Advertising ID to advertisers, and over 80% contacted known advertising and tracking servers. - Only one of 108 OpenVPN configurations adhered to recommended security practices; 89% used a single authentication method, and nearly 20% employed outdated encryption techniques. - Many apps passed through Play Store checks without adequate scrutiny, with safety labels often serving as marketing tools rather than security indicators. These findings align with previous research highlighting similar issues in popular Android VPN apps. Users are advised to be cautious when selecting VPNs, prioritizing those with recent independent security audits.

Winsage

July 10, 2026

You can’t fully disable Microsoft’s GDID Windows 11 tracker, but these settings limit what it captures

A 19-year-old named Peter Stokes was detained at Helsinki airport in April 2026 while traveling to Japan, carrying two 2TB hard drives. He was subject to an Interpol Red Notice and faced a federal complaint from U.S. prosecutors by July for his alleged involvement in the Scattered Spider hacking group, which breached a U.S. luxury jewelry retailer in May 2025, leading to a ransom demand. The Global Device Identifier (GDID), developed by Microsoft, is a persistent identifier that uniquely identifies a Windows installation on a device. It links online activities back to a single identity, which law enforcement can use to trace a device's owner. The GDID is generated when a user signs into Windows with a Microsoft Account and remains through updates but does not survive a clean reinstall. Stokes' use of the same Windows device allowed investigators to trace his activities through the GDID, which linked him to the hacking incident. Privacy advocates have raised concerns about the lack of consent for GDID assignment and the potential for surveillance.

AppWizard

July 9, 2026

A Spotify Teardown Just Showed Us How Apps Will Actually Work on Android XR Glasses.

An APK teardown of Spotify version 9.1.66.1259 revealed plans for a Gemini experience designed for Android XR smart glasses. Users can link their Google account to access Gemini for voice-controlled playback, contextual music discovery, and real-time playlist management through prompts. The glasses can analyze the environment via a camera to suggest music based on surroundings. The architecture allows the app to run on a smartphone while the glasses act as a display and sensor, making development easier for developers by enabling them to extend existing Android apps for the glasses. This model supports the creation of lightweight AI glasses. Spotify's early preparation for Android XR glasses signals positive ecosystem development and developer engagement ahead of hardware releases. However, the use of cameras for contextual music selection raises privacy concerns. The findings are based on an unreleased build and may change before official confirmation.

Winsage

July 9, 2026

Microsoft Teams removal shows why we shouldn’t get too excited about preview features

Microsoft has paused the development of two anticipated minimized views for Teams meetings, originally expected to roll out in May 2026. The Expanded view was designed to show up to four participant videos, while the Compact view aimed to provide quick access to meeting controls. The future of these features remains uncertain, with questions about potential changes or cancellation.

AppWizard

July 9, 2026

This open-source app fixed my notification chaos when Android couldn’t

Megan Ellis shared her experience using the app DoNotNotify, which helped her manage and reduce the number of notifications on her smartphone. She found that many apps, including Pokémon Go and Temu, sent numerous vague notifications that were difficult to filter effectively. Despite Android's notification channels, she often had to disable notifications entirely for certain apps. DoNotNotify allowed her to customize her notification preferences without requiring personal data or account creation. The app features tabs for History, Rules, and Blocked notifications, enabling users to track and manage alerts. Ellis successfully used DoNotNotify to block unwanted notifications, particularly from games and shopping apps, and appreciated its privacy-focused design and adaptability to changes in notification content. She recommends the app for users overwhelmed by notifications.

Winsage

July 9, 2026

Microsoft Confirms Windows 11 Bug That Can Consume Over 500GB of Storage Through Permission Log File

Microsoft has acknowledged a bug in Windows 11 that causes the Capability Access Manager's write-ahead log file to expand indefinitely, potentially exceeding 500GB of storage on affected devices. This issue is addressed in update KB5095093, which includes builds 26200.8737 and 26100.8737. Users can manually install this update via the optional updates section of Windows Update or wait for its automatic rollout during the July 2026 Patch Tuesday. The Capability Access Manager manages app permissions and logs usage of privacy-sensitive features, but the WAL file continues to grow unchecked on affected systems. The file can reach sizes from 70GB to over 513GB. To check if a system is affected, users can check storage settings or use Robocopy to verify the file size. The update is available through the Optional updates section and will be included in the cumulative update on July 8, 2026. The excessive size of the WAL file can lead to critical storage shortages and related issues, but it does not compromise the security or core functionality of the permission system. Microsoft has not confirmed if Windows 11 26H1 Insider builds are affected.

Winsage

July 9, 2026

Windows hides a secret identifier that Microsoft hands over to the FBI

19-year-old Peter Stokes, a member of the Scattered Spider group, was arrested by the FBI due to a unique number embedded in his Windows operating system known as the Global Device Identifier (GDID). This identifier, assigned during Windows installation, remains unchanged and can leak user information despite the use of VPNs. The FBI identified Stokes by obtaining a history of IP addresses linked to his GDID from Microsoft, which allowed them to trace his online activities across various platforms. Microsoft tracks over a billion devices with this permanent identifier, which cannot be disabled.

Winsage

July 9, 2026

GDID Windows – Cut the tracker that follows you even through a VPN

In April 2026, the FBI apprehended an individual associated with the Scattered Spider group, who had concealed his online activities using a VPN. His efforts were thwarted by the GDID, a 64-bit Persistent Unique Identifier assigned by Microsoft upon logging into Windows. The GDID is stored in plain text in the registry and is linked to Microsoft’s servers, remaining unaffected by changes to IP addresses or attempts to delete it. Disabling Windows telemetry does not prevent the GDID from being accessed, as it operates through other services. To mitigate its transmission, users can disable certain services and modify the hosts file, although the GDID itself remains stored on Microsoft’s servers. Scripts are available on GitHub to audit and implement changes regarding the GDID. Transitioning to a local account does not guarantee anonymity, and for sensitive activities, using a live Linux system is recommended for better data control.

Winsage

July 8, 2026

Arrest and extradition of Scattered Spider hacker shines light on how Windows telemetry GDIDs can identify and track users — Microsoft device identifier is just one digital fingerprint in a software world rife with them

Peter Stokes, a 19-year-old from Estonia, was arrested and extradited to the United States on charges related to digital crimes, with the FBI using telemetry logs from Microsoft Windows to trace his online activities. These logs included his Global Device Identifier (GDID) and records of websites he visited. Stokes likely had his telemetry settings configured to Optional/Full, which allowed the transmission of URL data. The FBI connected Stokes to his ngrok account and linked his travel records to a New York IP address and a rental at the Empire Hotel, aided by photos he shared. Google and Apple assisted in the investigation by tracing Stokes' phishing phone number back to the same IP address used for his ngrok account. Stokes attempted to obscure his digital footprint using a VPN and other services, but modern digital identification methods made it difficult to remain anonymous.