NewApp Digest
search bot

TLS

Top 5 Proxy vs VPN for Android App Developers Tools to Secure Test Builds
AppWizard
October 1, 2026

Top 5 Proxy vs VPN for Android App Developers Tools to Secure Test Builds

In Android app development, maintaining connectivity, security, and debugging capabilities is crucial. When connecting to a London edge server, all requests must be visible to QA teams, but using a consumer VPN can hinder debugging proxies. A debugging proxy allows developers to inspect request headers and modify data by terminating TLS on their workstation. In contrast, a VPN creates an encrypted tunnel for all device traffic but prevents debugging proxies from intercepting packets. TorGuard is a hybrid solution that combines a VPN with SOCKS5 and V2Ray endpoints, allowing for traffic encryption and application-specific proxying. mitmproxy is an open-source tool that enables scripted request manipulation and can intercept various traffic types. Tailscale uses a WireGuard-based mesh network to provide stable private IPs for devices without needing port forwarding. HTTP Toolkit offers a rootless interception method for Android, directing traffic to a laptop without complex configurations. WireGuard is a high-speed self-hosted VPN that encrypts packets but does not allow for inspection. To inspect traffic while changing geographic egress, developers can run mitmproxy on a laptop and connect it to a VPN, ensuring the proxy is closest to the app. For debugging Android HTTPS traffic, a proxy is preferred for reading or rewriting requests, while a VPN is better for changing exit IPs or encrypted routing. SOCKS5 masks IP addresses but does not encrypt traffic.
Android Studio vs Genymotion vs BlueStacks 5 [2026]
BetaBeacon
September 9, 2026

Android Studio vs Genymotion vs BlueStacks 5 [2026]

Android Studio Emulator is the official Android SDK tooling maintained by Google for app developers to test code against specific Android API levels, screen densities, and hardware profiles.
Pterodactyl Multi-Game Cloud Server: 13 Steps [2026]
AppWizard
September 6, 2026

Pterodactyl Multi-Game Cloud Server: 13 Steps [2026]

In 2026, hosting game servers has become more efficient, allowing multiple game servers to run on a single cloud VPS using Pterodactyl Panel, which utilizes Docker containers for isolation. Pterodactyl is a free, open-source game server management panel that gained popularity due to its user-friendly interface and robust architecture. The latest stable release, v1.12.0, was launched in January 2026, with newer deployment templates available as of August 2026. To set up Pterodactyl, prerequisites include a cloud VPS with specific CPU and RAM requirements, Ubuntu 24.04 LTS, PHP 8.3, MariaDB 11.8.8 or newer, Redis 8.10.0 or newer, Docker Engine, a registered domain for SSL, SteamCMD dependencies, and at least 80 GB SSD storage. The installation process involves provisioning the VPS, installing necessary software, configuring Pterodactyl, setting up Nginx with SSL, and deploying game servers. Common pitfalls include under-provisioning RAM for resource-intensive games, neglecting firewall settings, and allowing backup retention to grow uncontrollably. Troubleshooting may involve addressing PHP-FPM issues, connection problems, and ensuring proper resource allocation. Advanced scaling may require multiple VPS nodes, and security measures like two-factor authentication can help protect the server. Pterodactyl is free to use commercially and can run multiple game containers on a single node.
Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems
Winsage
September 2, 2026

Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems

An ongoing malware campaign is targeting Windows devices through counterfeit download pages for well-known software brands like Microsoft Edge, Kaspersky, and Razer. The campaign affects various sectors, including healthcare, manufacturing, gaming, technology, logistics, government, and education. It utilizes high-fidelity fraudulent websites that closely mimic legitimate vendors, with observed lure domains such as app-microsoft-edge[.]com[.]cn and kaspersky-lab[.]hl[.]cn. Attackers employ evasion tactics like server-side payload regeneration and create multiple copies of the same archive in quick succession. Victims are lured into downloading ZIP files that contain a bundled wrapper installer, which activates a stage-one executable in randomized directories. The malware often masquerades as legitimate software, with some payloads impersonating known applications. Persistence is achieved through scheduled tasks with unusual names, and the malware employs various evasion techniques, including deleting shadow copies and altering file permissions. Microsoft Defender has identified activity across multiple stages of the attack, including delivery, execution, and command-and-control communications. To mitigate risks, organizations are advised to block downloads from unofficial sources, enforce Tamper Protection, and implement Attack Surface Reduction rules. Indicators of compromise (IOCs) include specific lure domains and URLs associated with the campaign.
Android 17 adds new protections against sneaky Wi-Fi tracking and web snooping
AppWizard
August 29, 2026

Android 17 adds new protections against sneaky Wi-Fi tracking and web snooping

Google has introduced several network security enhancements in Android 17 to improve user privacy. One key feature is Encrypted Client Hello (ECH), which encrypts domain names to prevent external observers from monitoring user activities. ECH is integrated with private DNS and is enabled by default for apps using compatible networking libraries. Google claims to be the first major mobile operating system to implement widespread ECH support. Testing conducted by Jigsaw showed stable connection success rates and minimal interference across various networks. Additional security features in Android 17 include: - Local Network Protection, requiring apps to request permission before accessing devices on a user's home network. - Certificate Transparency, mandating public logging of certificates to detect forged ones. - A 2G Network Shutdown option for mobile operators to disable 2G services, reducing exposure to phishing messages.
Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies
AppWizard
July 31, 2026

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

Bitsight's investigation revealed that inexpensive Android TV boxes are being shipped with applications that can change their hardware identity, allowing them to impersonate popular smartphone brands like Samsung and Huawei. This operation, named Fuyao, is linked to Zhejiang Fengwo IoT Technology Co., Ltd., a Chinese company established in 2019. The H96MAXV11 model was frequently reported among the affected devices. In one day, the operation received 65,957 reports from about 38,000 unique MAC addresses, with many devices misidentified as phones due to spoofed identifiers. Fengwo has also promoted over 120,000 "AI digital humans," though details on this marketing term are vague. The command-and-control server for Fuyao sends phone profiles to devices, masking their actual hardware specifications. The operation uses machine vision technology and a YOLOv8s object-detection model to identify advertisements. Bitsight documented 40 fraud tasks, 21 unique campaigns, and 166 modules across four devices. The operation's payout structure involves 144 operator-owned domains, with an estimated gross return of .25 per device daily, potentially leading to annual revenues in the millions. Attribution to Fengwo is supported by shared TLS certificate data and public patent records, although the patents do not directly address advertising. There is uncertainty about how the fraudulent apps were installed and at what point in the supply chain they were introduced. Device owners are advised to verify Play Protect certification and disconnect suspicious devices.
Search