replacement

Winsage
November 4, 2024
Paint 3D has been officially delisted from the Microsoft Store, although users who have it installed can continue to use it without interruption. No further updates or new features will be introduced for the app. Microsoft is likely to phase out Paint 3D in the future, as the cessation of updates typically indicates a complete discontinuation. Users are encouraged to consider alternatives for their 3D content needs, with Microsoft suggesting its 3D Viewer app as a replacement. The decision to phase out Paint 3D follows its exclusion from new Windows 10 installations in 2021 and reflects a reevaluation of Microsoft's 3D strategy due to the lack of anticipated success with related initiatives.
Winsage
October 28, 2024
A newly identified attack technique poses a risk to fully patched Windows systems by circumventing Microsoft's Driver Signature Enforcement (DSE), potentially enabling operating system downgrade attacks that allow malicious actors to load unsigned kernel drivers. This vulnerability is linked to two privilege escalation flaws in the Windows update mechanism, identified as CVE-2024-21302 and CVE-2024-38202, which can be exploited to revert updated systems to earlier versions with unpatched security weaknesses. A tool called Windows Downdate can hijack the Windows Update process, facilitating undetectable downgrades of critical OS components. The exploit takes advantage of a race condition to replace a verified security catalog file with a malicious version, allowing the loading of an unsigned kernel driver. The DSE bypass can be executed by downgrading the "ci.dll" library, but can be thwarted if Virtualization-Based Security (VBS) is active on the host. Attackers can disable VBS by manipulating registry keys, and the attack fails only if VBS is enabled with a UEFI lock and a "Mandatory" flag, which prevents booting if VBS files are corrupted. Microsoft has addressed the vulnerabilities in August and October 2024.
Winsage
October 26, 2024
SafeBreach security researcher Alon Leviev has identified a vulnerability in the Windows operating system that allows attackers to downgrade kernel components, bypassing security measures like Driver Signature Enforcement (DSE). This vulnerability enables the installation of rootkits on fully patched systems. Leviev demonstrated that attackers can manipulate the Windows Update process to introduce outdated components without altering the system's patched status. He introduced a tool called Windows Downdate, which allows the creation of custom downgrades, exposing updated systems to previously patched vulnerabilities. Leviev's method, named "ItsNotASecurityBoundary," exploits a flaw in the DSE, allowing unsigned kernel drivers to be loaded and facilitating the deployment of rootkit malware. Despite Microsoft addressing the privilege escalation aspect of this vulnerability, it does not protect against downgrade attacks. Leviev's research shows that attackers can replace the 'ci.dll' file responsible for enforcing DSE with an unpatched version during the Windows Update process, thereby circumventing protections. He also discussed methods to disable Microsoft's Virtualization-based Security (VBS), which is designed to protect critical resources, by modifying registry keys. Leviev emphasizes the need for endpoint security tools to monitor downgrade procedures to mitigate these risks.
AppWizard
October 20, 2024
Unity announced the cancellation of its controversial runtime fee and introduced Unity 6, its first major update in nearly a decade. The new version aims to improve relationships with developers and features advancements in game optimization and generative AI integration. 10 Chambers Collective, known for their work on GTFO, has embraced Unity 6 for their upcoming project, Den of Wolves. Co-founder Hjalmar Vikström noted that players were surprised to learn GTFO was built on Unity, which is often overshadowed by Unreal Engine. He highlighted Unity's speed and flexibility as advantages, despite previous challenges with physics optimizations. Unity 6 includes enhancements like the High Definition Rendering Pipeline (HDRP) with advanced shaders and ray tracing, as well as a GPU resident drawer for better CPU performance. Vikström emphasized the importance of dedicated optimization efforts for diverse hardware configurations. Both Vikström and Unity's VP of Product, Ryan Ellis, acknowledged the role of generative AI in game development while stressing the need for human creativity.
Winsage
October 19, 2024
A new mod called Seelen UI offers a fully customizable desktop environment for Windows 10 and Windows 11 users. Key features include a Tiling Windows Manager that organizes open windows for better multitasking, a revamped system tray, and a floating taskbar that can be repositioned vertically. The mod also includes Rofi for additional customization. Microsoft Edge is required for Seelen UI to function, and users must reinstall it if removed. The aesthetic of Seelen leans towards a modern, Mac-like design. Users are advised to download the app from the Microsoft Store for safety and to consider testing it in a virtual machine due to its ongoing development.
Winsage
October 15, 2024
Microsoft's push for users to upgrade to Windows 11 has faced resistance due to stringent hardware requirements, particularly the need for TPM 2.0, which many older PCs lack. Despite initial concerns, recent updates have shown that older hardware can run Windows 11 effectively, challenging the notion that only new machines are suitable. The TPM 2.0 requirement has led to older CPUs being deemed obsolete, even though they can perform adequately. This situation raises concerns about electronic waste, as users may discard functional machines that do not meet the criteria. Additionally, Microsoft's hardware push may be aimed at boosting sales of its new Copilot+ devices, which rely on AI for enhanced productivity. As Windows 10 nears its end-of-life, users must consider alternatives, including non-Windows operating systems.
Winsage
October 15, 2024
The Page Fault in Non-Paged Area Blue Screen of Death (BSOD) occurs when the operating system tries to access non-paged memory but encounters an issue. Common causes include corrupt or faulty drivers, corrupted system files, faulty RAM, issues with the paging file, and antivirus software conflicts. To troubleshoot this error, several methods can be employed: 1. Restart in Safe Mode: Boot the system in Safe Mode to facilitate troubleshooting. 2. Check for Faulty Drivers: Update or uninstall problematic drivers using Device Manager. 3. Run Windows Memory Diagnostic: Use the tool to check for defective RAM. 4. Check for Corrupted System Files: Run System File Checker (SFC) and DISM tools to repair corrupted files. 5. Disable Automatic Paging File Management: Adjust paging file settings to resolve virtual memory issues. 6. Uninstall Third-Party Antivirus Software: Temporarily remove antivirus software to check for conflicts. 7. Perform a System Restore: Revert the system to a previous state using System Restore. 8. Reset Your PC: Reinstall Windows while choosing to keep personal files or remove everything.
Search