Thunderbird Archives

Winsage

April 24, 2025

Reinstalled Windows? Now is the time to Ninite it

Ninite is a tool that simplifies the installation of applications and runtimes during the setup of a fresh Windows LTSC edition. It allows users to create a custom installer that can be reused to update applications to their latest versions. Windows 10 will reach its support deadline in October 2025, prompting users to transition to Windows 11 or consider LTSC editions, which have support until 2027 or 2032 for US English. Users must back up data and have the necessary media and license keys for applications when switching to LTSC, which involves formatting and reinstalling the PC. Ninite enables users to select applications from its website, creating a single installation program that automates the process without unnecessary prompts. It offers a wide range of software, including web browsers, graphics packages, developer tools, messaging apps, and utilities. Additionally, users may need device drivers, for which Snappy Driver Installer Origin can be useful, while O&O ShutUp10++ can help disable Microsoft telemetry.

Winsage

December 22, 2024

5 open source tools to replace Microsoft apps on Windows

Windows users can find open-source alternatives to Microsoft's applications, which can help avoid subscription fees. 1. Thunderbird: A free, open-source email client from the Mozilla Foundation, it offers features like multiple account support, a unified inbox, advanced filtering, and calendar integration. The latest version, 128, includes a modernized interface called Nebula UI and is available on Windows, Linux, Mac, and Android. 2. Nextcloud: An open-source platform for personal cloud storage and collaboration, allowing users to host their files on personal servers. It offers file storage, syncing, and sharing, but lacks advanced chat or video conferencing features. 3. Joplin: An open-source note-taking application similar to OneNote, supporting multiple themes, Markdown formatting, and tagging. It features end-to-end encryption and a web clipper for Chrome and Edge, though its user interface may feel outdated. 4. Kdenlive: An open-source video editor that supports multi-track editing, various effects, and advanced tools like chroma keying and audio mixing. It is free to use and compatible with many video and audio formats. 5. LibreOffice: A free office suite that includes applications comparable to Word, PowerPoint, and Excel. It allows users to open, edit, and save Microsoft Office formats, although it lacks mobile versions and is compatible with Windows, Mac, and Linux desktops.

AppWizard

December 20, 2024

7 Android widgets to make your phone or tablet more useful

Widgets on Android devices enhance the home screen by providing quick access to information and functionalities from apps. - Google Calendar: Allows users to view the entire month or daily events, with easy event addition through a + button. Separate widgets are needed for multiple calendars. - Email Widget: Displays incoming messages and enables quick email composition. It can be used with Gmail or other email apps like Thunderbird. - Keep Notes: Offers options for scrolling through existing notes or quickly creating new notes via text, voice, or images. Widget size can be adjusted for tablets or phones. - Arc Search: Enables users to initiate searches directly through Arc Search instead of the Google search bar. - Battery Widget: Provides real-time updates on charge levels for connected devices, including smartwatches and headphones. - Pixel Weather: Exclusive to Pixel devices, it presents weather information in an accessible format, allowing quick checks without switching apps. - Spotify: Grants access to playlists and current tracks, allowing users to launch playlists and control playback easily. To add a widget, long-press on a blank area of the home screen, select Widgets, browse for the desired widget, and drag it onto the screen. Widgets can be resized and repositioned.

Winsage

December 11, 2024

This Linux distro is so Windows-like, it even comes with Microsoft apps

Linux allows for extensive customization of desktop environments. Wubuntu is a Linux distribution that mimics the look and functionality of Windows 11, featuring elements like Microsoft's AI assistant, Copilot, and the Edge browser, while avoiding intrusive advertisements. It is built on Ubuntu and uses the KDE Plasma desktop, providing a familiar interface for Windows users. Upon first login, Wubuntu presents a Settings window for theme selection and includes a weather app, sidebar, comprehensive menu, run command launcher, favorites, system tray, and Copilot. It also offers tools such as Microsoft PowerShell and quick access to Office 365 applications, with OnlyOffice Desktop Editors available for local document management. Wubuntu supports interaction with Android devices, Active Directory, and comes pre-installed with applications like Google Chrome, Microsoft Teams, OneDrive, Steam, Thunderbird, VLC media player, Webcamoid, Wine/Winetricks, and Flatpak. Wubuntu is user-friendly and compatible with a wide range of hardware, running on kernel version 6.8.0-48. An icon for Copilot is located at the bottom right of the desktop, requiring a Microsoft account for access. Wubuntu caters to users who appreciate the Windows desktop experience but prefer a Linux environment, offering stability, ease of use, and the ability to run Windows applications. It combines the strengths of Ubuntu and KDE Plasma with a Windows-like aesthetic, making it a suitable option for those transitioning from Windows.

Winsage

November 28, 2024

RomCom exploits Firefox and Windows zero days in the wild

ESET researchers discovered a critical vulnerability, CVE-2024-9680, in Mozilla products exploited by the Russia-aligned group RomCom. This vulnerability, with a CVSS score of 9.8, affects various versions of Firefox, Thunderbird, and the Tor Browser, allowing code execution within the browser's restricted context. When combined with another Windows vulnerability, CVE-2024-49039, attackers can execute arbitrary code in the context of the logged-in user. The exploit can be triggered simply by visiting a malicious web page, enabling the installation of RomCom's backdoor without user interaction. RomCom has been linked to the exploitation of significant zero-day vulnerabilities, including the earlier use of CVE-2023-36884 via Microsoft Word in June 2023. The newly identified vulnerability was reported to Mozilla on October 8th, 2024, and patched the following day. The vulnerability is a use-after-free bug in Firefox's animation timeline. Further investigation revealed CVE-2024-49039, a privilege escalation bug in Windows, which Microsoft patched on November 12th, 2024. RomCom has targeted various sectors in 2024, including governmental entities in Ukraine, the pharmaceutical sector in the US, and the legal sector in Germany, among others. The compromise chain begins with a fake website that redirects victims to a server hosting the exploit. ESET identified multiple command-and-control servers used by RomCom, employing deceptive naming schemes to obscure their intentions. The exploit utilizes shellcode that executes arbitrary code by manipulating animation objects in Firefox. The vulnerability was patched by Mozilla within a day of its discovery. The RomCom backdoor is capable of executing commands and downloading additional modules onto the victim's machine. Indicators of compromise include specific JavaScript files and DLLs associated with the exploit.

Winsage

November 27, 2024

Firefox and Windows zero-day security bugs hit by Russian hackers, so be on your guard

A recent investigation by ESET has identified two critical zero-day vulnerabilities in popular web browsers that can lead to remote code execution. A Russian APT group, RomCom, is exploiting these vulnerabilities to deploy backdoor malware. The first vulnerability, a use-after-free bug in Firefox's animation timeline feature, was discovered on October 8 and assigned the identifier CVE-2024-9680. This flaw allows the browser to use freed memory, potentially enabling code execution. The exploit is classified as "zero-click," requiring victims only to visit a malicious website. The majority of affected individuals tracked between October 10 and November 4 were in Europe and North America. Patches for both vulnerabilities have been available for over a month, with the Firefox fix released shortly after its discovery. Users are advised to update their Firefox, Thunderbird, Tor Browser, and Windows operating systems.

Winsage

November 27, 2024

‘RomCom’ APT Mounts Zero-Day, Zero-Click Browser Escapes in Firefox, Tor

In October, Russian hackers gained the ability to deploy arbitrary code against users of Firefox and Tor, exploiting two zero-day vulnerabilities: CVE-2024-9680 in Mozilla software and CVE-2024-49039 in Windows. The first vulnerability, a use-after-free flaw in Firefox's animation timelines, was rated 9.8 on the CVSS and allowed attackers to execute arbitrary commands. The second vulnerability enabled privilege escalation through an undocumented remote procedure call (RPC) endpoint. Both vulnerabilities were quickly patched, with CVE-2024-9680 addressed on October 9 and CVE-2024-49039 on November 12. The majority of targets were located in North America and Europe, particularly in countries like the Czech Republic, France, Germany, Poland, Spain, Italy, and the US. None of the victims tracked by ESET were compromised via Tor.

Winsage

November 27, 2024

Microsoft Windows Hacking Warning—450 Million Users Must Now Act

A critical vulnerability in Windows, identified as CVE-2024-49039 with a CVSS score of 8.8, allows arbitrary code execution via a web page visit. It is compounded by another vulnerability, CVE-2024-9680, which has a CVSS score of 9.8 and affects browsers like Firefox and Thunderbird, enabling a sandbox escape through the Windows Task Scheduler. Both vulnerabilities have been addressed, but users must update their systems. RomCom, a cyber threat group linked to Russia, has been exploiting these vulnerabilities to install malicious software. Microsoft has extended Windows 10 support until October 2024, urging users to upgrade for long-term security. Mozilla released a fix for the browser vulnerability within 25 hours, while Microsoft has patched the Windows flaw. Regular updates are essential to protect against evolving cyber threats.

AppWizard

November 25, 2024

These are the best alternatives to Google’s most popular apps

Many users rely on Google-made Android applications, which can create dependency, but alternatives exist. Heliboard is an open-source keyboard that can replace Gboard after initial setup. Mozilla Thunderbird is a strong alternative to Gmail, offering a clean interface and support for multiple email providers. Mozilla Firefox is a preferred browser alternative to Google Chrome, providing extensive customization and support for extensions. Notally offers a familiar layout for note-taking as an alternative to Google Keep. Material Notes and Mixplorer are alternatives to Files by Google, with Material Notes offering a sleek interface and Mixplorer providing advanced features. Todoist is a feature-rich alternative to Google Tasks, with its own calendar solutions and voice recognition for task entry. OsmAnd and Organic Maps are navigation alternatives to Google Maps, utilizing OpenStreetMap data. Aves Gallery is a feature-rich gallery app alternative to Google Photos, while Focus Go offers a simpler experience for less powerful devices. Some Google apps, like Google Recorder and Google Messages, lack genuine alternatives.

Tech Optimizer

November 17, 2024

Bitdefender Total Security review: Great, easy to use protection

Bitdefender Total Security is a mid-tier antivirus solution that includes antivirus, firewall, ransomware defenses, network, web, and email protection. It monitors for brute force attacks, malicious links, and harmful attachments, and offers a spam filter for Outlook and Thunderbird, as well as controls for webcam and microphone access. Additional features include a secure browser, limited VPN access, tracker blocking, parental controls, a vulnerability scanner, and anti-theft tools. It is compatible with Windows, macOS, Android, and iOS, though not all features are available on every platform. The pricing for Bitdefender Total Security includes a five-device plan for the first year, transitioning to a lower annual fee thereafter, and a ten-device plan with a similar pricing structure. Users can request refunds within 30 days of renewal or purchase, and discounts are available from various retailers. Installation is user-friendly, but users should be cautious during account setup. The application features a clean interface with a shield icon indicating security status. Bitdefender provides real-time protection, scheduled and manual scans, a vulnerability scanner, and controls over the Windows firewall. The VPN offers limited daily bandwidth. Customer support is available through various channels, including email, chat, and phone. In independent tests, Bitdefender has a 100% detection rate for zero-day attacks and a 99.6% success rate in real-world protection tests, with minimal impact on system performance, although it may slow down mid-range and budget PCs during intensive scans.