repositories Archives

AppWizard

July 25, 2026

Govt orders GitHub to remove code for internet-free messaging app

The Indian Cyber Crime Coordination Centre (I4C) has directed GitHub to remove three repositories associated with the Bitchat messaging application, co-founded by Jack Dorsey. This action is one of the first implementations of the amended IT Rules' "reasoned intimation" mechanism, extending the takedown framework to software repositories. I4C expressed concerns about Bitchat's potential misuse for unlawful activities such as coordinating unlawful assemblies, inciting violent protests, disseminating misinformation, radicalization, and criminal conspiracies. The application allows for anonymous communication without user registration or centralized logging, complicating law enforcement's ability to conduct lawful interception and investigations.

AppWizard

July 25, 2026

Amid youth protests, Centre directs blocking of messaging app that works without internet: Developer

The Union Home Ministry has requested GitHub to remove repositories related to Bitchat, a Bluetooth-based messaging app that functions without internet connectivity, due to security concerns amid protests in central Delhi. Jack Dorsey, co-founder of Twitter, shared the directive, which aims to suppress the availability of such technologies. The Indian Cybercrime Coordination Centre has expressed worries that decentralized communication tools like Bitchat could be misused for unlawful activities. The directive, issued under Section 79(3)(b) of the Information Technology Act, 2000, requires GitHub to disable access to three Bitchat-related repositories within three hours. The Internet Freedom Foundation criticized the government's lack of transparency and argued that concerns about potential misuse do not justify banning access to the app's code. The protests, initiated by the Cockroach Janta Party, are demanding the resignation of Union Education Minister Dharmendra Pradhan over alleged mismanagement of competitive examinations, with increased support following police actions against demonstrators.

AppWizard

July 25, 2026

GitHub ordered to remove decentralized messaging app Bitchat in India

India's Ministry of Home Affairs has ordered GitHub to remove repositories related to Jack Dorsey's Bitchat application, citing concerns that the platform could allow users to bypass internet shutdowns and evade surveillance. The directive targets the software itself rather than specific unlawful content, referencing Section 79(3)(b) of the Information Technology Act, 2000, and requires compliance within three hours to avoid legal repercussions for GitHub. The repositories in question are: - github.com/permissionlesstech/bitchat - github.com/permissionlesstech/bitchat-android - github.com/permissionlesstech/bitchat-android/releases Bitchat is a decentralized messaging app that operates over Bluetooth mesh networks, which does not require internet access and facilitates anonymous communication. The app's design includes features like end-to-end encryption and no mandatory user registration. The Indian Cyber Crime Coordination Centre (I4C) claims the app could be misused for illegal activities and cites local laws as justification for the takedown. The order comes amid ongoing protests in New Delhi, where internet access has been suspended. The Internet Freedom Foundation has criticized the order as unconstitutional and has called for its retraction. It is currently unclear if GitHub will comply with the takedown request.

AppWizard

July 24, 2026

I replaced my old Android Auto sideloading method with this, and it’s so much easier

The process of sideloading apps for Android Auto can be complex due to varying permissions by device and app. Users often face issues with platforms like Android Auto Apps Download (AAAD), which may go offline. Some beneficial sideloaded apps include AABrowser for internet browsing and CarStream for watching YouTube. A new sideloading method allows users to bypass AAAD, ensuring app icons appear in the vehicle's infotainment system. This method was effective on a Pixel 10 Pro running Android 17 without being rooted, but results may vary on other devices. To enable this method, users must activate Developer Mode on their Android device and Android Auto. It is important to install apps from reputable sources, such as GitHub, as recent updates to Android Auto may remove sideloaded apps that circumvent restrictions. After enabling the Unknown Sources option in Android Auto's developer settings, users can install apps like AABrowser, which then appears in the Android Auto launcher and the vehicle's infotainment system.

AppWizard

July 24, 2026

India orders takedown of Jack Dorsey’s bitcoin-linked messaging app Bitchat

India's Cyber Crime Coordination Centre has ordered GitHub to remove Bitchat, an offline messaging app created by Jack Dorsey, due to its use by anti-government demonstrators in Delhi. The order, issued under Section 79(3)(b) of the IT Act, targets three GitHub repositories linked to Bitchat and requires action within three hours. The app enables anonymous communication without registration, posing challenges for law enforcement regarding lawful interception and investigation. Bitchat is a decentralized messaging tool that uses Bluetooth mesh networks for encrypted communication without internet access, and it also supports offline bitcoin transactions, ensuring continuity during outages or shutdowns.

Tech Optimizer

July 24, 2026

The most online generation is also the least protected: over half of Gen Z have already faced a cyberattack – Adaderana Biz English

New research from Kaspersky surveyed 7,200 respondents globally and found that Generation Z spends 57% of their time online, primarily using smartphones (67% identify them as their main device). While 59% of Gen Z feel confident in navigating the digital landscape, only 28% consider their digital skills advanced. Alarmingly, only 27% use antivirus software on their mobile devices, and over half (52%) have encountered attacks on their devices or accounts. Significant data, such as personal photographs (38%) and passwords (30%), is stored on smartphones, yet only 28% regularly back up important data. Kaspersky recommends integrating cybersecurity into daily routines and has introduced an interactive game, “Case 404,” to educate Gen Z on recognizing digital threats.

Tech Optimizer

July 21, 2026

I Built My Second ETL Pipeline. This Time, I Started Thinking Like a Data Engineer

The author transitioned from a data analyst role to a data engineer, creating a 12-month self-study roadmap focused on learning by building projects. The first project was a GitHub ETL pipeline, which evolved from a simple Python script to a more complex system using SQLite and GitHub Actions for automation. The author realized that the challenges of data engineering lay in system design and orchestration rather than just writing ETL logic. For the second project, the author built an automated RSS ingestion pipeline to explore engineering decisions in creating a reliable data pipeline. The project emphasized the importance of separating application responsibilities from orchestration tasks, leading to the use of Docker for consistent execution environments and Kestra for orchestration. The author validated each component of the project incrementally: first the Python ETL, then PostgreSQL, followed by Docker, and finally Kestra. This approach ensured that each layer functioned correctly before adding complexity. The final architecture included distinct responsibilities for each component: Python for data processing, PostgreSQL for data storage, Docker for execution, and Kestra for orchestration. The author learned that effective engineering involves considering system reliability, error handling, and observability, shifting the focus from merely writing code to designing entire systems. The experience transformed the author's mindset, emphasizing the importance of incremental building and the separation of execution and orchestration responsibilities.

Tech Optimizer

July 21, 2026

Advanced Threat Protection: How AI Transforms Enterprise Security

An attacker is testing stolen passwords against a company with inadequate firewall protection, highlighting the flaws in traditional security measures. Modern attacks, including ransomware and phishing, have evolved, necessitating advanced threat protection (ATP) that incorporates artificial intelligence (AI) for improved threat detection and response. AI-driven ATP identifies attacks that conventional tools miss, such as fileless malware and targeted phishing, by learning normal operating patterns and flagging deviations. Traditional security relies on known malware signatures, which are ineffective against zero-day attacks and polymorphic malware that changes its identity. Cloud misconfigurations and hybrid security gaps further complicate security. AI enhances detection by focusing on malicious behaviors rather than just file signatures, allowing for rapid identification of threats. Automated incident response can isolate affected endpoints and terminate malicious processes quickly. Behavioral analytics and threat intelligence integration improve ATP effectiveness by understanding user behavior and recognizing attack patterns. AI-powered ATP significantly reduces breach containment time and false positives, shifting the focus from reactive cleanup to proactive prevention. Best practices for maximizing ATP include integrating it into existing security operations, keeping machine learning models updated, and regularly testing defenses against real-world threats.

Tech Optimizer

July 18, 2026

North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections

North Korea's Contagious Interview hackers have been using a deceptive strategy to target developers by posing as recruiters and embedding malware in SVG files. Elastic Security Labs discovered that the attackers hid malicious payloads within HTML comment blocks of these files, allowing the malware to evade antivirus detection. At the time of the findings, no antivirus engines flagged the compromised repositories, which included trojanized GitHub repositories disguised as coding challenges. The malware executed automatically at server startup and deployed four modules: a browser credential and cryptocurrency wallet stealer, a file stealer, a remote access Trojan, and a clipboard monitor. The campaign, tracked as REF9403, is part of the ongoing Contagious Interview operation attributed to North Korea's Lazarus Group, which aims to generate revenue through cryptocurrency theft. Developers are advised to audit any projects run from unsolicited sources and to monitor specific domains associated with the attack.

Tech Optimizer

July 15, 2026

Hundreds of GitHub repos found posing as real software to push malware

Cybersecurity firm ArcticWolf has identified 292 malicious GitHub repositories that impersonate legitimate software tools, part of a campaign to deliver a new variant of the BoryptGrab infostealer. This malware can extract sensitive information from 19 web browsers, 32 cryptocurrency wallets, messaging applications like Telegram and Discord, gaming platforms such as Steam, and Windows Credential Manager. It can also exfiltrate files from users' Desktop and Documents folders and capture screenshots. This variant bypasses Chrome’s App-Bound Encryption using direct code injection and does not include an anti-analysis layer or conceal itself, aiming to harvest data quickly without persistence. The malicious activity began in late June, with most repositories removed from GitHub, though several dozen remain active. GitHub's status as a key platform in the open-source community makes it a target for cybercriminals, emphasizing the need for developers to thoroughly vet code before integration.