tunneling Archives

Tech Optimizer

August 12, 2026

NordVPN outpaces competitors in independent tests, with top marks for speed and malware protection

NordVPN received the highest AAA certification from West Coast Labs for its built-in antivirus tool, achieving a 99.1% malware detection rate. Artifact Security recognized NordVPN as the fastest and most reliable VPN provider in a global performance test, where it scored 91 and earned the Platinum award. In testing on the Windows platform, NordVPN recorded an average download speed of 271.9 Mbps and a peak median of 568.4 Mbps, with a tunnel establishment time of 1.8 seconds and a 98% success rate. All tested providers, including NordVPN, passed various leak tests without data escaping the encrypted tunnel.

Winsage

August 10, 2026

Microsoft, Red Hat, and DH2i to Present, “Simplify Hybrid SQL Server: Windows & Red Hat OpenShift Side By Side”

DH2i will host a live webinar titled "Simplify Hybrid SQL Server: Windows & Red Hat OpenShift Side By Side" on August 20 at 12:00 PM Eastern Time (9:00 AM Pacific Time) in collaboration with Microsoft and Red Hat. The webinar aims to help organizations extend their SQL Server OLTP environments to Red Hat OpenShift, focusing on deploying a secure, cross-platform Availability Group (AG) linking Windows Server VMs with Red Hat OpenShift. Key topics include automating Kubernetes AG cluster deployment, establishing secure connections using Zero Trust Networking (ZTNA), and implementing HA automation for hybrid SQL Server environments. Featured speakers include OJ Ngo from DH2i, Amit Khandelwal from Microsoft, and Vivien Wang from Red Hat. Registration is available for those interested in attending or accessing the recording later.

Winsage

August 9, 2026

This VPN firm has created a way to stop Microsoft’s hidden tracking tool on Windows — although it will break some key cloud services

Windscribe has developed an open-source script called deGDID to remove Microsoft's Global Device Identifier (GDID) from Windows systems. The script functions as a firewall against the DeviceAdd endpoint, preventing Microsoft identity services from recognizing the machine as registered. It includes a flag, -Unprotect, to restore default settings if needed. Testing on a Windows 11 machine confirmed its effectiveness, with the -Status flag showing cached identifiers before removal. The tool is compatible with antivirus and endpoint protection but has limitations: it cannot delete keys stored on Microsoft's servers, cannot run on managed systems or domain-joined accounts, and Windows does not provide a built-in method to disable GDID. The identifier persists across IP addresses, regardless of VPN use. Windscribe notes that the script may disrupt certain Microsoft account functionalities, making it a partial solution rather than a comprehensive fix.

Tech Optimizer

August 3, 2026

How to Turn Off McAfee

McAfee provides various cybersecurity features, including real-time antivirus protection, firewalls, VPNs, and browser extensions. Users can adjust settings based on their device. To pause real-time scanning on Windows, open the McAfee app, click on My Protection Widgets, select Real-Time Scanning, and turn it off. For Mac, click the McAfee icon in the menu bar, access the product console, and turn off Real-Time Scanning. To shut down the Advanced Firewall, open the McAfee app, select Advanced Firewall, and turn it off. Scheduled scans can be stopped by navigating to Scheduled Scans in the McAfee app and using the Turn off control. To turn off Secure VPN, open the app, find the Secure VPN tile, and toggle it off. For disabling McAfee WebAdvisor in browsers, users should manage extensions in Chrome, Edge, Firefox, and Safari. To stop notifications and alerts, users can adjust settings in Windows and various browsers. Uninstalling McAfee involves navigating through the device's settings, and to stop renewal billing, users must log in to their McAfee account and disable auto-renewal. Users should be aware of older and managed-device guides and how to stop notifications on mobile devices. Disabling features does not uninstall McAfee, and turning off auto-renewal does not remove the application from the device.

Winsage

July 15, 2026

LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software

LabubaRAT is a newly identified Rust-based remote access tool (RAT) that disguises itself as NVIDIA software to facilitate operations on Windows systems. It establishes a reusable foothold for hands-on activity and can profile the host system, identify security tools, execute commands, transfer files, capture screenshots, and proxy network traffic. LabubaRAT retrieves its configuration at launch via command-line arguments or environment variables, allowing operators to specify parameters like the command-and-control server and API key at runtime. It maintains local state in a SQLite database and supports communication through HTTPS polling, Microsoft Edge WebView2, and DNS tunneling. The malware includes capabilities for command execution, file handling, and establishing persistence through a Windows Run registry key. The entry point for the attack is an executable named nvidia-sysruntime.exe, which masquerades as NVIDIA’s container runtime toolkit. LabubaRAT conducts thorough profiling of the host, checking for installed browsers and security products, and gathers information on the system's specifications. Blackpoint Cyber has shared indicators of compromise to help detect LabubaRAT activity.

Winsage

July 10, 2026

A hacker’s arrest just revealed how Microsoft can track your Windows device

A teenager named Peter Stokes is facing federal charges in Chicago for allegedly hacking a U.S. jewelry retailer while using a VPN to conceal his online activities. Microsoft provided the FBI with data linked to a tracking mechanism called the Global Device Identifier (GDID), which is a unique number assigned to every Windows installation that persists through updates. This identifier allowed authorities to connect Stokes' computer to specific websites, despite his VPN usage. Stokes was arrested in Helsinki in April 2026 while trying to board a flight to Japan, carrying two two-terabyte hard drives. The GDID enabled Microsoft to track Stokes' activities on third-party services, raising concerns about privacy and data tracking.

AppWizard

July 10, 2026

Proton VPN on Android: features, requirements, how to install

Proton VPN is a prominent VPN provider known for its speed and security, with its headquarters in Switzerland, which has strong privacy laws. The Android app features include Secure Core for enhanced anonymity, NetShield Ad-blocker to block ads and trackers, a kill switch to protect data during connection drops, alternative routing for bypassing restrictions, split tunneling for selective app usage, a VPN Accelerator for increased speeds, and P2P support for secure file sharing. The app requires Android 8 or later for installation, which can be done via the Play Store. Users can connect as guests to access limited features of Proton VPN Free.

Winsage

July 10, 2026

You can’t fully disable Microsoft’s GDID Windows 11 tracker, but these settings limit what it captures

A 19-year-old named Peter Stokes was detained at Helsinki airport in April 2026 while traveling to Japan, carrying two 2TB hard drives. He was subject to an Interpol Red Notice and faced a federal complaint from U.S. prosecutors by July for his alleged involvement in the Scattered Spider hacking group, which breached a U.S. luxury jewelry retailer in May 2025, leading to a ransom demand. The Global Device Identifier (GDID), developed by Microsoft, is a persistent identifier that uniquely identifies a Windows installation on a device. It links online activities back to a single identity, which law enforcement can use to trace a device's owner. The GDID is generated when a user signs into Windows with a Microsoft Account and remains through updates but does not survive a clean reinstall. Stokes' use of the same Windows device allowed investigators to trace his activities through the GDID, which linked him to the hacking incident. Privacy advocates have raised concerns about the lack of consent for GDID assignment and the potential for surveillance.

Winsage

July 8, 2026

Arrest and extradition of Scattered Spider hacker shines light on how Windows telemetry GDIDs can identify and track users — Microsoft device identifier is just one digital fingerprint in a software world rife with them

Peter Stokes, a 19-year-old from Estonia, was arrested and extradited to the United States on charges related to digital crimes, with the FBI using telemetry logs from Microsoft Windows to trace his online activities. These logs included his Global Device Identifier (GDID) and records of websites he visited. Stokes likely had his telemetry settings configured to Optional/Full, which allowed the transmission of URL data. The FBI connected Stokes to his ngrok account and linked his travel records to a New York IP address and a rental at the Empire Hotel, aided by photos he shared. Google and Apple assisted in the investigation by tracing Stokes' phishing phone number back to the same IP address used for his ngrok account. Stokes attempted to obscure his digital footprint using a VPN and other services, but modern digital identification methods made it difficult to remain anonymous.

AppWizard

June 13, 2026

As a longtime Android privacy nerd, here are 6 privacy apps I actually regret installing

The author shares experiences with six privacy applications that did not meet expectations. 1. Private Internet Access (PIA): A robust VPN service with a cluttered interface and concerns about its U.S. base; transitioned to NordVPN for a better user experience. 2. Brave Browser: Known for ad and tracker blocking, but had issues with Brave Search reliability, syncing, and battery drain; switched to Firefox with uBlock Origin. 3. LastPass: A former leading password manager that lost trust due to security breaches; moved to Bitwarden for its solid and secure platform. 4. KeePassDX: Impressive for local storage and clean UI, but lacked cloud syncing and required manual password management; eventually chose Bitwarden for convenience. 5. OpenBoard: A privacy-focused keyboard app that is no longer available on Google Play; basic features and installation hassles led to regret over its use; better alternatives exist. 6. OsmAnd: An open-source offline navigation app with extensive customization but a steep learning curve and rigid address searches; now prefers Organic Maps for ease of use.