trust Archives

Winsage

April 24, 2026

Microsoft to roll out Entra passkeys on Windows in late April

Microsoft will introduce passkey support for phishing-resistant passwordless authentication on Microsoft Entra-protected resources starting in late April, with broader availability expected by mid-June 2026. This feature will allow passwordless sign-in on unmanaged Windows devices and will support various device types, including corporate, personal, and shared options. Administrators can manage passkeys through Conditional Access and Authentication Methods policies. Users can create device-bound passkeys stored securely within the Windows Hello container, using methods like facial recognition, fingerprint scanning, or a PIN. The passkeys will adhere to FIDO2 standards and will be securely bound to individual devices, preventing transmission over the network to enhance security against phishing and malware attacks. Microsoft has also announced plans for mandatory multifactor authentication registration for Entra tenants by October 2024 and that all new accounts will be passwordless by default starting in May 2025.

AppWizard

April 24, 2026

My favorite RPG of 2026 put an impossible challenge in the second room to teach you not to save scum: ‘I am your DM, trust me’

Esoteric Ebb is a role-playing game that effectively balances challenge and player agency by embracing failure as a key element of storytelling. The game introduces a resource called "Shards of Jor," which allows players to reroll failed checks, promoting engagement with the narrative rather than relying on save scumming. Designer Christoffer Bodegård emphasizes a flexible approach to rules, encouraging players to design their own experiences. He provides examples of gameplay where failure is integral, such as a challenging Wisdom check involving a mysterious benefactor and accessing a magically sealed tea shop, both of which offer multiple pathways to success. Bodegård's philosophy aims to create an illusion of agency, empowering players to explore their choices within the game's narrative framework.

Winsage

April 24, 2026

I got an inside look at the plan to bring the soul back to Windows 11 — Microsoft’s bet on quality, community, and making the OS feel human again

Microsoft is implementing significant changes to the Windows Insider Program and Windows 11 to enhance user engagement and address feedback from the community. Key changes include: - A simplified channel strategy with clearer purpose-driven channels: an Experimental track for early feature flags and a Beta track for a more predictable experience. - Introduction of a feature-flags page in Experimental builds, allowing testers to opt into visible features. - Easier transitions between channels without the need for complete reinstalls. - The appointment of Directly Responsible Individuals (DRIs) for each priority area to synthesize feedback and telemetry for improvements. Upcoming enhancements for Windows 11 include new taskbar positioning options, improved integration of Copilot, updates to File Explorer, and better user control over updates and widgets. A redesigned Feedback Hub will streamline the feedback submission process. Microsoft acknowledges the need for accountability and aims to rebuild trust within the community by ensuring quality in Beta builds and publicly recognizing community contributions. The focus will remain on refining Windows 11 rather than launching a new version like Windows 12. The company is committed to reengineering the Windows experience to provide users with more control and flexibility.

AppWizard

April 24, 2026

Weighing the Trade-offs in Web Development 4k Wallpaper Today

Bryce Drew is the head coach of the Grand Canyon University (GCU) Antelopes, emphasizing player development and strategic gameplay. He previously coached at Vanderbilt University and Valparaiso University, where he gained a reputation for successful recruitment and effective game strategies. Drew's coaching philosophy focuses on developing well-rounded individuals, fostering teamwork, defensive intensity, and a fast-paced offensive strategy. Since his arrival, GCU basketball has improved significantly, becoming more competitive in their conference and enhancing player development and team dynamics. Under his guidance, the Antelopes have achieved notable milestones and are positioned for continued growth in the future.

Tech Optimizer

April 23, 2026

Take Control: Customer-Managed Keys for Lakebase Postgres

Encryption at rest is essential for cloud environments, especially in regulated sectors. Lakebase offers Customer Managed Keys (CMK), allowing organizations to control their encryption keys from preferred Key Management Services (KMS) like AWS KMS, Azure Key Vault, or Google Cloud KMS. Lakebase CMK manages both persistent storage and ephemeral compute, ensuring data security. Lakebase's architecture separates storage and compute layers, enabling elastic scaling and serverless operations. The storage layer maintains persistent data, while the compute layer consists of dynamic Postgres instances. This separation poses encryption challenges, addressed by Lakebase CMK through a hierarchical Envelope Encryption model. The key hierarchy includes: 1. Customer Managed Key (CMK): The Root of Trust in the cloud KMS, never accessed in plaintext by Databricks. 2. Key Encryption Key (KEK): A transient key for wrapping data keys. 3. Data Encryption Keys (DEKs): Unique keys for each data segment, stored in an encrypted state. When data access is needed, Lakebase retrieves DEKs by unwrapping keys from the KMS. If a key is revoked, access to the data is denied, and ephemeral compute instances are terminated. In practice, CMK applies to: 1. Persistence Layer (Storage): All data segments are encrypted with keys controlled by the CMK. 2. Ephemeral Layer (Compute): Each compute instance generates a unique ephemeral key, and upon revocation, the instance is terminated, destroying in-memory keys. CMK implementation follows a delegation model, allowing Security Admins to manage keys without accessing data. The process includes key configuration, workspace binding, and lifecycle management. Key rotation is seamless, requiring no data re-encryption. All cryptographic operations involving the CMK are logged by the cloud provider's audit service. Lakebase CMK is available for Enterprise tier customers, allowing organizations to manage their encryption keys effectively.

AppWizard

April 23, 2026

How to tame the Abyss Heuklang in Crimson Desert

The Abyss Heuklang is a new pet available in Crimson Desert, unlocked in a recent patch. Players can find it at the entrance of the Axiom Archive during Chapter 1's quests. To tame the Abyss Heuklang, players must perform pet actions like petting or offering treats (milk or bird meat) to build trust. Once trust is established, players can select the "Take In" option to add it to their pets.

AppWizard

April 23, 2026

Parents of Instagram and Messenger teens can see what they’re asking AI.

Meta has introduced a feature that allows parents to monitor the inquiries their teenagers make to the company's AI on platforms such as Instagram and Messenger. This feature is available in the United States, United Kingdom, Australia, Canada, and Brazil, providing insights into the topics explored by teens with Meta's AI over the past week. It also extends to Facebook, although the platform's relevance among younger users is decreasing. The initiative is part of Meta's efforts to safeguard young users, including alerts to parents about searches related to self-harm.

AppWizard

April 23, 2026

New Crimson Desert update brings new difficulty options and, most importantly, a pet bird

Pearl Abyss has released a significant update (1.04.00) for the open-world RPG Crimson Desert within a month of its launch, introducing three difficulty levels: Easy, Normal, and Hard. The update features redesigned boss combat patterns, multiple housing layout options, improved furniture controls, and new storage solutions for crafting and cooking items. Players can now also bond with birds through the new Sotdae of Bond item, expanding pet options. Future updates will include detailed controller customization and various UI and accessibility improvements.

Winsage

April 23, 2026

Engineering secure passkey sync in Microsoft Password Manager

Passkeys are a new form of authentication that replace traditional passwords, providing a phishing-resistant and streamlined sign-in process. Microsoft Password Manager allows users to save and synchronize passkeys across devices linked to their Microsoft accounts, enhancing accessibility. The architecture for passkey syncing includes confidential computing for sensitive operations, hardware-rooted key protection for encryption keys, tamper-evident recovery storage, and encrypted synchronization across devices. Sensitive passkey operations are executed in Azure's confidential computing environments, ensuring cryptographic materials are processed securely. The encryption keys are protected using Azure Managed HSM, with access governed by attestation-based mechanisms. Registration and recovery processes require user authentication and enforce security measures within confidential computing boundaries, including a lockout state after consecutive incorrect PIN attempts. The system aims to provide a secure and user-friendly experience as part of a transition to a passwordless future.

AppWizard

April 23, 2026

Binance’s Android app is quietly running TikTok and WeChat SDKs alongside 13 other trackers

Security researchers have found that the Binance Android app includes SDKs from ByteDance and Tencent, along with 13 additional third-party trackers. This raises privacy concerns for users, as the TikTok SDK collects device fingerprints, behavioral signals, and potentially clipboard data, while the WeChat SDK adds functionalities not necessary for a financial trading platform. The incorporation of these SDKs could expose sensitive financial information. Under EU GDPR and FTC regulations, undisclosed telemetry in financial apps may be considered deceptive trade practices, potentially leading to regulatory repercussions for Binance. Users are advised to revoke permissions from the app or switch to the browser-based platform. The situation could prompt regulatory scrutiny and audits of cryptocurrency asset management apps.