safety Archives

Winsage

July 28, 2026

Your Windows Recycle Bin is a privacy risk—here’s how to actually delete your files

The Recycle Bin in Windows, introduced in 1995, serves as a temporary storage for deleted files rather than permanently removing them. When a file is deleted, it is moved to the Recycle Bin, which requires manual emptying or activation of a Storage Sense policy to clear its contents. This can lead to reduced hard drive space for users unaware of its behavior. The Recycle Bin can contain sensitive information, and if someone gains access to a Microsoft account, they can view its contents. Even after emptying the Recycle Bin, data can be recovered unless overwritten, with different recovery processes for solid-state drives (SSDs) due to maintenance routines like the TRIM command. Risks extend beyond physical access, as compromised accounts or malware can access deleted files. To securely delete sensitive files, users can use the Shift + Del shortcut, file shredding applications, and consider encrypting their drives with BitLocker. Specialized shredders for SSDs exist, and users can optimize drives through Windows settings to manage data recovery risks.

AppWizard

July 27, 2026

My parents’ Android phones were ruined by invasive ads. Here’s how I fixed them for good

Mobile advertising on Android devices has seen a rise in deceptive pop-ups that mimic legitimate notifications or system updates, leaving many users, particularly less tech-savvy individuals, vulnerable. A personal experience highlighted this issue when a family member fell for a misleading PDF ad, leading to the installation of multiple fraudulent applications. Recently, similar deceptive ads were encountered on YouTube, raising concerns about the safety of family members who rely on their devices for important tasks. Discussions on platforms like Reddit have pointed out the prevalence of misleading ads on family-friendly platforms. The author expressed a desire to block all ads if companies cannot ensure their safety. To address the issue, the author sought an ad-blocking solution that allows for remote management and network-wide filtering, ultimately choosing NextDNS. This content filtering solution offers a free account with sufficient monthly DNS queries and supports individual profiles for tailored settings. The setup process for NextDNS involves creating profiles for each family member, allowing for distinct settings and blocklists, and configuring devices with the provided DNS-over-TLS endpoint details. While NextDNS is effective, it does not eliminate all ads, particularly those from platforms like YouTube, indicating that additional measures may be necessary for comprehensive security. Regularly reviewing app permissions and uninstalling unnecessary applications are also recommended for enhancing security.

AppWizard

July 24, 2026

I completely reimagined my videos with Video Remix in Google Photos — here’s how you can, too

Google has introduced an AI model called Gemini Omni in the Create tab of the Google Photos app, featuring a tool named Video Remix. This allows users to transform 10-second video clips into new creations using various templates. The feature enhances existing content but has limitations, such as not generating remixes for videos with faces of minors. For creating new video content, the Omni model in the Gemini app is preferred, while Video Remix is more convenient for minor modifications. Users can access Video Remix through a subscription to Google AI, and purchasing a Google Pixel 10 Pro includes a complimentary year of Google AI Pro.

AppWizard

July 23, 2026

US Court Rules That Meta May Have Concealed Messenger Encryption Risks for Children

The Eighth Circuit Court of the United States ruled against Meta, finding the company likely violated Nevada’s Unfair Trade Practices Act by misleading users about the security of its end-to-end encryption on Messenger. The court noted that Meta did not disclose knowledge of serious child safety issues related to the encryption technology. Nevada Attorney General Aaron Ford criticized Meta for concealing information that could help parents protect their children online. Following the ruling, the court has restricted Meta from making false statements or withholding safety information regarding Messenger for users under 18 in Nevada.

AppWizard

July 23, 2026

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

GitHub will reject command-line support bundle uploads from outdated versions of GitHub Enterprise Server lacking security patches starting August 18, 2026. The npm package @copilot-mcp/apex has been identified as a post-install dropper that installs a macOS infostealer, phishing for sensitive information and maintaining a connection to an attacker's server. A rogue extension on the Microsoft Visual Studio Code marketplace, "Markdown All Pro," impersonates a legitimate tool and opens a backdoor after installation. A phishing campaign targeting Portuguese users delivers the Lampion banking malware, which has been active since 2019. DoubleVerify reports a rise in "AfterCall" apps that exploit user permissions for ad fraud. The GhostCommit attack method hides malicious instructions within PNG images in pull requests. The U.S. government has updated its advisory on Iranian-affiliated cyber activity targeting operational technology devices. An Android app posing as a civil defense alert system has been found to contain malware for data harvesting. An Iranian threat actor is distributing MarkiRAT malware through fake applications. An analysis of 28 AI-coded applications revealed 434 vulnerabilities, prompting Cisco to introduce Antares to identify vulnerabilities in codebases. A Russian-speaking threat actor is dismantling guardrails on AI models to create offensive tools.

AppWizard

July 23, 2026

EU hits Google with $1 billion fine over its Play app store and search

The European Union imposed a fine of 890 million euros on Google for violations of digital antitrust regulations, alleging that Google manipulated its Play platform and search engine to favor its own services over competitors. This action is part of the EU's broader efforts to regulate major technology firms and protect consumer interests. Google has faced previous legal challenges, including an unsuccessful appeal of a 4.3 billion euro antitrust fine related to its Android operating system. The EU has identified major tech companies as "gatekeepers" that must ensure fair competition. Google's President of Global Affairs criticized the fine, claiming it would harm European businesses and consumers.

Tech Optimizer

July 23, 2026

Simplify AI agent orchestration with Lakebase Postgres

The auditing process has traditionally been labor-intensive, requiring extensive document reviews. CLA (CliftonLarsonAllen LLP) partnered with the Databricks Forward Deployed Engineering team to develop a document processing application that reduces extraction time from hours to minutes while maintaining quality. The application is built on the Databricks platform, utilizing technologies like Lakebase Postgres, Databricks Apps, Lakeflow Jobs, MLflow, and Unity Catalog Volumes. The application addresses challenges in document parsing, including unpredictable per-task latency, rate-limit-aware throttling, workload prioritization, cost attribution per task, and real-time progress visibility. It eliminates the need for multiple specialized systems by integrating components such as a web application for user interaction, Lakebase for state management, an orchestrator for task management, and AI agents for document processing. The task queue is supported by two Postgres tables in Lakebase, tracking task status and execution attempts. Concurrency safety is ensured through a locking mechanism, and crash recovery is facilitated by lease-based locking. The orchestrator implements rate-limit-aware throttling and idempotent webhook callbacks to manage task processing effectively. An operator dashboard provides real-time metrics on task status, agent performance, and workload costs, with live updates through Postgres LISTEN/NOTIFY events. Cost attribution is managed at the application level, allowing for detailed monitoring of expenditures. Lakebase enhances the orchestration process with features like autoscaling compute, OAuth-rotated authentication, Unity Catalog integration, and support for branching and snapshots.

AppWizard

July 22, 2026

WhatsApp’s latest update makes the app way more useful on Android Auto

WhatsApp has introduced enhancements for Android Auto and CarPlay, allowing users to hear and respond to incoming messages through their car's infotainment system, streamline call-making and access call history, and quickly reach favorites for a hands-free experience. Additionally, for desktop and web users, WhatsApp now enables opening PDFs directly in the chat interface with basic editing features, and users can share songs from platforms like Apple Music or Spotify to their WhatsApp status.

Tech Optimizer

July 21, 2026

I Built My Second ETL Pipeline. This Time, I Started Thinking Like a Data Engineer

The author transitioned from a data analyst role to a data engineer, creating a 12-month self-study roadmap focused on learning by building projects. The first project was a GitHub ETL pipeline, which evolved from a simple Python script to a more complex system using SQLite and GitHub Actions for automation. The author realized that the challenges of data engineering lay in system design and orchestration rather than just writing ETL logic. For the second project, the author built an automated RSS ingestion pipeline to explore engineering decisions in creating a reliable data pipeline. The project emphasized the importance of separating application responsibilities from orchestration tasks, leading to the use of Docker for consistent execution environments and Kestra for orchestration. The author validated each component of the project incrementally: first the Python ETL, then PostgreSQL, followed by Docker, and finally Kestra. This approach ensured that each layer functioned correctly before adding complexity. The final architecture included distinct responsibilities for each component: Python for data processing, PostgreSQL for data storage, Docker for execution, and Kestra for orchestration. The author learned that effective engineering involves considering system reliability, error handling, and observability, shifting the focus from merely writing code to designing entire systems. The experience transformed the author's mindset, emphasizing the importance of incremental building and the separation of execution and orchestration responsibilities.

AppWizard

July 21, 2026

Google Play Store update ensures you don’t forget about widgets from that shiny new app

Google has updated its Play Services to version 26.28, allowing users to display their device's IMEI number on the lock screen, which can aid in device recovery but may pose security risks. This feature is server-side and may not be available on all devices immediately. Other enhancements include audio permission requests in WebViews, Android Credential Manager support for Android TV, and various quality-of-life improvements. The Play Store has been updated to version 52.4, introducing natural language queries for search, expanded search suggestions, limited mobile data usage for app restoration in India, Nigeria, and Indonesia, and the option to add app widgets during installation. Users can update their Google System Services through their device settings.