tunneling Archives

AppWizard

October 1, 2026

Top 5 Proxy vs VPN for Android App Developers Tools to Secure Test Builds

In Android app development, maintaining connectivity, security, and debugging capabilities is crucial. When connecting to a London edge server, all requests must be visible to QA teams, but using a consumer VPN can hinder debugging proxies. A debugging proxy allows developers to inspect request headers and modify data by terminating TLS on their workstation. In contrast, a VPN creates an encrypted tunnel for all device traffic but prevents debugging proxies from intercepting packets. TorGuard is a hybrid solution that combines a VPN with SOCKS5 and V2Ray endpoints, allowing for traffic encryption and application-specific proxying. mitmproxy is an open-source tool that enables scripted request manipulation and can intercept various traffic types. Tailscale uses a WireGuard-based mesh network to provide stable private IPs for devices without needing port forwarding. HTTP Toolkit offers a rootless interception method for Android, directing traffic to a laptop without complex configurations. WireGuard is a high-speed self-hosted VPN that encrypts packets but does not allow for inspection. To inspect traffic while changing geographic egress, developers can run mitmproxy on a laptop and connect it to a VPN, ensuring the proxy is closest to the app. For debugging Android HTTPS traffic, a proxy is preferred for reading or rewriting requests, while a VPN is better for changing exit IPs or encrypted routing. SOCKS5 masks IP addresses but does not encrypt traffic.

Tech Optimizer

August 12, 2026

NordVPN outpaces competitors in independent tests, with top marks for speed and malware protection

NordVPN received the highest AAA certification from West Coast Labs for its built-in antivirus tool, achieving a 99.1% malware detection rate. Artifact Security recognized NordVPN as the fastest and most reliable VPN provider in a global performance test, where it scored 91 and earned the Platinum award. In testing on the Windows platform, NordVPN recorded an average download speed of 271.9 Mbps and a peak median of 568.4 Mbps, with a tunnel establishment time of 1.8 seconds and a 98% success rate. All tested providers, including NordVPN, passed various leak tests without data escaping the encrypted tunnel.

Winsage

August 10, 2026

Microsoft, Red Hat, and DH2i to Present, “Simplify Hybrid SQL Server: Windows & Red Hat OpenShift Side By Side”

DH2i will host a live webinar titled "Simplify Hybrid SQL Server: Windows & Red Hat OpenShift Side By Side" on August 20 at 12:00 PM Eastern Time (9:00 AM Pacific Time) in collaboration with Microsoft and Red Hat. The webinar aims to help organizations extend their SQL Server OLTP environments to Red Hat OpenShift, focusing on deploying a secure, cross-platform Availability Group (AG) linking Windows Server VMs with Red Hat OpenShift. Key topics include automating Kubernetes AG cluster deployment, establishing secure connections using Zero Trust Networking (ZTNA), and implementing HA automation for hybrid SQL Server environments. Featured speakers include OJ Ngo from DH2i, Amit Khandelwal from Microsoft, and Vivien Wang from Red Hat. Registration is available for those interested in attending or accessing the recording later.

Winsage

August 9, 2026

This VPN firm has created a way to stop Microsoft’s hidden tracking tool on Windows — although it will break some key cloud services

Windscribe has developed an open-source script called deGDID to remove Microsoft's Global Device Identifier (GDID) from Windows systems. The script functions as a firewall against the DeviceAdd endpoint, preventing Microsoft identity services from recognizing the machine as registered. It includes a flag, -Unprotect, to restore default settings if needed. Testing on a Windows 11 machine confirmed its effectiveness, with the -Status flag showing cached identifiers before removal. The tool is compatible with antivirus and endpoint protection but has limitations: it cannot delete keys stored on Microsoft's servers, cannot run on managed systems or domain-joined accounts, and Windows does not provide a built-in method to disable GDID. The identifier persists across IP addresses, regardless of VPN use. Windscribe notes that the script may disrupt certain Microsoft account functionalities, making it a partial solution rather than a comprehensive fix.

Tech Optimizer

August 3, 2026

How to Turn Off McAfee

McAfee provides various cybersecurity features, including real-time antivirus protection, firewalls, VPNs, and browser extensions. Users can adjust settings based on their device. To pause real-time scanning on Windows, open the McAfee app, click on My Protection Widgets, select Real-Time Scanning, and turn it off. For Mac, click the McAfee icon in the menu bar, access the product console, and turn off Real-Time Scanning. To shut down the Advanced Firewall, open the McAfee app, select Advanced Firewall, and turn it off. Scheduled scans can be stopped by navigating to Scheduled Scans in the McAfee app and using the Turn off control. To turn off Secure VPN, open the app, find the Secure VPN tile, and toggle it off. For disabling McAfee WebAdvisor in browsers, users should manage extensions in Chrome, Edge, Firefox, and Safari. To stop notifications and alerts, users can adjust settings in Windows and various browsers. Uninstalling McAfee involves navigating through the device's settings, and to stop renewal billing, users must log in to their McAfee account and disable auto-renewal. Users should be aware of older and managed-device guides and how to stop notifications on mobile devices. Disabling features does not uninstall McAfee, and turning off auto-renewal does not remove the application from the device.

Winsage

July 15, 2026

LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software

LabubaRAT is a newly identified Rust-based remote access tool (RAT) that disguises itself as NVIDIA software to facilitate operations on Windows systems. It establishes a reusable foothold for hands-on activity and can profile the host system, identify security tools, execute commands, transfer files, capture screenshots, and proxy network traffic. LabubaRAT retrieves its configuration at launch via command-line arguments or environment variables, allowing operators to specify parameters like the command-and-control server and API key at runtime. It maintains local state in a SQLite database and supports communication through HTTPS polling, Microsoft Edge WebView2, and DNS tunneling. The malware includes capabilities for command execution, file handling, and establishing persistence through a Windows Run registry key. The entry point for the attack is an executable named nvidia-sysruntime.exe, which masquerades as NVIDIA’s container runtime toolkit. LabubaRAT conducts thorough profiling of the host, checking for installed browsers and security products, and gathers information on the system's specifications. Blackpoint Cyber has shared indicators of compromise to help detect LabubaRAT activity.

Winsage

July 10, 2026

A hacker’s arrest just revealed how Microsoft can track your Windows device

A teenager named Peter Stokes is facing federal charges in Chicago for allegedly hacking a U.S. jewelry retailer while using a VPN to conceal his online activities. Microsoft provided the FBI with data linked to a tracking mechanism called the Global Device Identifier (GDID), which is a unique number assigned to every Windows installation that persists through updates. This identifier allowed authorities to connect Stokes' computer to specific websites, despite his VPN usage. Stokes was arrested in Helsinki in April 2026 while trying to board a flight to Japan, carrying two two-terabyte hard drives. The GDID enabled Microsoft to track Stokes' activities on third-party services, raising concerns about privacy and data tracking.

AppWizard

July 10, 2026

Proton VPN on Android: features, requirements, how to install

Proton VPN is a prominent VPN provider known for its speed and security, with its headquarters in Switzerland, which has strong privacy laws. The Android app features include Secure Core for enhanced anonymity, NetShield Ad-blocker to block ads and trackers, a kill switch to protect data during connection drops, alternative routing for bypassing restrictions, split tunneling for selective app usage, a VPN Accelerator for increased speeds, and P2P support for secure file sharing. The app requires Android 8 or later for installation, which can be done via the Play Store. Users can connect as guests to access limited features of Proton VPN Free.

Winsage

July 10, 2026

You can’t fully disable Microsoft’s GDID Windows 11 tracker, but these settings limit what it captures

A 19-year-old named Peter Stokes was detained at Helsinki airport in April 2026 while traveling to Japan, carrying two 2TB hard drives. He was subject to an Interpol Red Notice and faced a federal complaint from U.S. prosecutors by July for his alleged involvement in the Scattered Spider hacking group, which breached a U.S. luxury jewelry retailer in May 2025, leading to a ransom demand. The Global Device Identifier (GDID), developed by Microsoft, is a persistent identifier that uniquely identifies a Windows installation on a device. It links online activities back to a single identity, which law enforcement can use to trace a device's owner. The GDID is generated when a user signs into Windows with a Microsoft Account and remains through updates but does not survive a clean reinstall. Stokes' use of the same Windows device allowed investigators to trace his activities through the GDID, which linked him to the hacking incident. Privacy advocates have raised concerns about the lack of consent for GDID assignment and the potential for surveillance.

Winsage

July 8, 2026

Arrest and extradition of Scattered Spider hacker shines light on how Windows telemetry GDIDs can identify and track users — Microsoft device identifier is just one digital fingerprint in a software world rife with them

Peter Stokes, a 19-year-old from Estonia, was arrested and extradited to the United States on charges related to digital crimes, with the FBI using telemetry logs from Microsoft Windows to trace his online activities. These logs included his Global Device Identifier (GDID) and records of websites he visited. Stokes likely had his telemetry settings configured to Optional/Full, which allowed the transmission of URL data. The FBI connected Stokes to his ngrok account and linked his travel records to a New York IP address and a rental at the Empire Hotel, aided by photos he shared. Google and Apple assisted in the investigation by tracing Stokes' phishing phone number back to the same IP address used for his ngrok account. Stokes attempted to obscure his digital footprint using a VPN and other services, but modern digital identification methods made it difficult to remain anonymous.