token Archives

AppWizard

July 16, 2026

Google Play Must Carry Rival App Stores Jul. 22

Google will introduce rival Android app stores within its Play Store starting July 22, following a court ruling that mandates the inclusion of competing app stores. This change allows cryptocurrency applications greater visibility while still processing downloads through Google Play, which will maintain its service fee. Competing app stores must be U.S.-based, keep malware rates below 1%, and pay an annual fee of ,000. The order is temporary, lasting until November 1, 2027, and prohibits Google from incentivizing device manufacturers to prioritize its own store.

AppWizard

July 16, 2026

Amnesia: What If a Messenger Was Designed to Forget?

In digital communication, traditional messaging platforms act as persistent archives of user data, including accounts, devices, contacts, and interactions, which can hinder the essence of communication. While end-to-end encryption enhances privacy, it does not eliminate data retention. Amnesia is a concept that proposes a messaging platform emphasizing temporary communication with no permanent accounts or conversation histories. The initial prototype allows users to create one-time sessions using QR codes, ensuring that all data is destroyed once the session ends. Each session generates unique identity keys, preventing credential reuse and session token theft. The system does not retain any conversation history, reinforcing the principle that once a session is terminated, the data is irretrievable. Amnesia's relay facilitates communication without retaining user accounts or histories, and its design minimizes durable information to reduce risks. The project is currently an architectural concept and an early prototype, not ready for production or sensitive communications.

Winsage

July 15, 2026

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Security researcher Chaotic Eclipse has released a proof-of-concept exploit called LegacyHive, which targets a vulnerability in the Windows User Profile Service. The exploit requires standard user credentials and a third username, potentially an administrator account. It can mount the target user hive in the current user classes root and is designed to reduce the risk of public exploitation. The exploit works across all supported desktop and server versions of Windows, including those updated with the July 2026 Patch Tuesday release. Microsoft is investigating the findings related to LegacyHive. Microsoft has patched 622 vulnerabilities, including two privilege escalation flaws in SharePoint Server (CVE-2026-56164, CVSS score: 5.3) and Active Directory Federation Services (CVE-2026-56155, CVSS score: 7.8), which are actively exploited threats. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included these vulnerabilities in its Known Exploited Vulnerabilities catalog, requiring Federal Civilian Executive Branch agencies to implement fixes by specified deadlines. CISA has also noted active exploitation of several SharePoint Server vulnerabilities, including CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, which allow unauthorized access to vulnerable instances. CVE-2026-56164 enables attackers to send crafted network requests to access functions that should require authorization, leading to privilege escalation without prior authentication. Additionally, CVE-2026-55040 (CVSS score: 9.1) allows remote unauthenticated attackers to bypass authentication on a vulnerable SharePoint server, enabling unauthorized operations.

TrendTechie

July 12, 2026

Релиз BATorrent 4.0 — BitTorrent-клиента, созданного на C++, Qt 6 и libtorrent-rasterbar

In mid-June 2026, BATorrent released version 4.0, a lightweight BitTorrent client developed with C++, Qt 6, and libtorrent-rasterbar. The source code is available on GitHub under the MIT license, with builds for Windows, Linux, and macOS. Key features include support for magnet links, resumable downloads, sequential downloading, customizable file priorities, and an automatic RSS download feature. The client prioritizes user privacy with no telemetry or analytics, and the only outgoing request is a release check on GitHub. The user interface includes three themes, a real-time speed graph, a detailed tabbed panel, drag-and-drop support, and multilingual options. Privacy features include a PT mode for anonymous connections and a one-click Tor proxy setup. Notifications are integrated with Telegram and Discord, and key improvements in versions 4.0 and 4.1 include an interactive tour, automatic launch after updates, refined protection against automatic updates, and the ability to add torrents via URL.

Tech Optimizer

July 8, 2026

Critical PHP PDO Driver Bugs Expose Firebird SQL Injection and PostgreSQL DoS Risks

A recent examination of PHP's database driver layer revealed two significant vulnerabilities in PHP Data Objects (PDO) affecting the pdo_firebird and pdo_pgsql drivers. The first vulnerability, CVE-2026-25289, allows SQL injection attacks through NUL byte manipulation in quoted strings, compromising the safety of SQL statements. The second vulnerability, CVE-2026-25290, can cause application crashes due to null pointer dereferencing when invalid multibyte character sequences are processed. Both vulnerabilities stem from assumptions about C string handling and have been addressed in a security release. Researchers recommend treating binary input as untrustworthy and encapsulating financial workflows within atomic transactions.

Tech Optimizer

July 7, 2026

PDO PostgreSQL Bug Triggers NULL Pointer Dereference and Crashes PHP Worker Processes

Researchers at Positive Technologies have identified two significant vulnerabilities in the PHP Data Objects (PDO) extension layer, both posing high severity risks. The first vulnerability (CVE-2025-14180) leads to a NULL pointer dereference, causing PHP worker processes to crash. It affects PHP versions 8.1.x prior to 8.1.34, 8.2.x before 8.2.30, 8.3.x before 8.3.29, 8.4.x before 8.4.16, and 8.5.x before 8.5.1. This issue occurs when the pdo_pgsql driver operates with PDO::ATTR_EMULATE_PREPARES enabled, allowing a remote attacker to exploit it without authentication by submitting malformed character sequences. The second vulnerability (CVE-2025-14179) allows for SQL injection and affects PHP versions 8.2.x before 8.2.31, 8.3.x before 8.3.31, 8.4.x before 8.4.21, and 8.5.x before 8.5.6. It arises from a mishandling of NUL bytes in the Firebird driver during the PDO::prepare() process, despite the quoting routine functioning correctly. Additionally, the audit revealed an integer overflow in PostgreSQL’s libpq client library and an information disclosure flaw in Firebird 3’s fbclient.

TrendTechie

July 2, 2026

Релиз BATorrent 3.0 — легковесного BitTorrent-клиента, созданного на C++, Qt 6 и libtorrent-rasterbar

BATorrent 1.0 is a lightweight BitTorrent client released in March 2026, developed using C++, Qt 6, and libtorrent-rasterbar. It is open-source and available on GitHub under the MIT license, with builds for Windows, Linux, and macOS. Key features include support for magnet links and .torrent files, resuming capabilities, sequential downloading, file prioritization, and imports from qBittorrent. It has automatic RSS downloading with regex filtering, duplicate detection, and automatic tracker list generation from Stremio. Streaming is supported with players like VLC and IINA. BATorrent emphasizes user privacy with no telemetry or analytics, and the only outgoing request is a release check on GitHub, which can be disabled. The user interface includes three themes, a real-time speed graph, a detailed tabbed panel, a filter panel, drag-and-drop support, and system tray notifications. It supports multiple languages and prioritizes privacy with features like PT mode for private trackers, one-click Tor proxy setup, and leech blocking. Notifications can be sent via Telegram webhook, and it has enhanced Discord presence status and native OS notifications.

AppWizard

June 24, 2026

Star Wars: Galactic Racer Fuses Episode 1: Racer and Burnout Into a Compelling Roguelite Racing Game

Disney has shifted its Star Wars video game strategy to allow a wider range of developers to create games, moving away from reliance on a limited internal team. The upcoming title, Star Wars: Galactic Racer, is developed by Fuse Games and features players as Shade, who participates in an underground racing circuit in the Outer Rim. The game includes various vehicles, a roguelite structure, and character customization. Players face challenges from AI competitors and can explore planets between races, upgrading vehicles and interacting with characters. The game also features an Arcade mode for podracing, emphasizing quick reflexes and control.

AppWizard

June 21, 2026

Sideloading Android apps is great — until you have to update them. Here’s my fix

Obtainium is a free and open-source sideload manager designed to simplify the updating process for sideloaded Android applications. Users can add their sideloaded apps to Obtainium’s tracking list after a one-time setup, allowing the app to monitor these sources for updates in the background. Obtainium supports various sources, including GitHub, GitLab, F-Droid, APKMirror, and Uptodown. The app checks for updates every six hours and can either download and install updates automatically or notify the user. Setting up Obtainium involves downloading the APK, adding app source URLs, and ensuring the correct source is used for each app. However, it has limitations, such as relying on HTML scraping for websites without an API and potential API rate limits for GitHub apps. Additionally, Obtainium may have read-only access to certain sites, requiring users to manually update apps in some cases.

AppWizard

June 13, 2026

Gemini 3.5 Flash lands on Google’s Android coding rankings, but it’s 3x the cost for slower performance

Google has released benchmark results for evaluating AI models in Android coding, revealing that the Gemini 3.5 Flash is the most resource-intensive model but ranks sixth overall. The benchmarks indicate that Gemini 3.5 Flash has higher latency and a 9% performance gap compared to its predecessor, Gemini 3.1 Pro Preview, despite being marketed as a faster alternative. In terms of cost, Gemini 3.5 Flash averages 355.9 tokens per benchmark run at approximately 7.1, while Gemini 3.1 Pro Preview uses only 73.3 tokens at about a third of that cost. The top-ranked models include GPT 5.5, GPT 5.4, and Gemini 3.1 Pro Preview, while Claude Opus 4.7 ranks fourth. The rankings feature both open-weight and closed-weight models, with the list remaining consistent since the last release, except for the removal of GPT 5.3 Codex.