user safety Archives

Winsage

June 21, 2025

Windows updates might finally be getting better — Microsoft to remove legacy drivers from Windows Update to boost security

Microsoft is removing potentially vulnerable legacy drivers from Windows Update to enhance security for Windows users. This initiative aims to mitigate security and compatibility risks while improving the overall quality of drivers. The first phase will target legacy drivers that have newer, more secure replacements available. Microsoft plans to implement this driver cleanup strategy regularly and expand it to include additional categories of drivers deemed suitable for removal.

Winsage

June 16, 2025

Microsoft’s Windows Hello facial recognition no longer works in the dark

Microsoft updated its Windows Hello face unlock feature in April, requiring adequate lighting for functionality to address a security vulnerability. The facial recognition system now relies on color cameras to detect visible faces, making it ineffective in low-light conditions. Users can disable the webcam via Windows 11 Device Manager as a workaround, but this disables the camera for all applications. The security flaw was identified by researchers at Nanyang Technological University and classified by Microsoft as "important," though it has not been publicly disclosed or exploited. Inquiries about reinstating dark-room functionality in future updates are pending.

Tech Optimizer

May 25, 2025

Microsoft’s Smart App Control blocks malware and has ‘lighter impact on your PC’s performance’

Microsoft has introduced Smart App Control (SAC) with the rollout of Windows 11 22H2, enhancing its security framework by proactively blocking untrusted or unknown applications. Users must perform a fresh installation of Windows to utilize this feature. Unlike traditional antivirus solutions that operate on a reactive basis, SAC employs a "Guilty until proven innocent" approach, assessing applications against Microsoft's Intelligence Security Graph and verifying digital signatures to determine legitimacy. If an application is deemed potentially harmful or unsigned, it is blocked by Windows Security.

AppWizard

May 22, 2025

Developers can finally pull that buggy app update from the Play Store

Google has announced that app developers will soon be able to pause the release of their apps and updates through the Play Console and publishing API. This new functionality allows developers to stop the distribution of problematic versions to new users, addressing a significant gap in the current system. Previously, developers had no official means to halt the rollout of updates after a major bug was discovered, complicating the release process. The upcoming feature aims to streamline developers' workflows and enhance user safety by preventing users from unknowingly downloading problematic app versions.

Winsage

May 20, 2025

Securing the Model Context Protocol: Building a safer agentic future on Windows

The Model Context Protocol (MCP) is a lightweight, open protocol functioning as JSON-RPC over HTTP, facilitating standardized discovery and invocation of tools. MCP defines three roles: MCP Hosts (applications accessing capabilities), MCP Clients (initiators of requests), and MCP Servers (services exposing functionalities). Windows 11 will incorporate MCP to enable developers to create intelligent applications leveraging generative AI. An early preview of MCP capabilities will be available for developer feedback. MCP introduces security risks, including cross-prompt injection, authentication gaps, credential leakage, tool poisoning, lack of containment, limited security review, registry risks, and command injection. To address these, Windows 11's MCP Security Architecture will establish security requirements for MCP servers, ensuring user safety and transparency, enforcing least privilege, and implementing security controls like proxy-mediated communication, tool-level authorization, a central server registry, and runtime isolation. MCP servers must comply with security requirements, including mandatory code signing, unchanged tool definitions at runtime, security testing, mandatory package identity, and declared privileges. An early private preview of MCP server capability will be offered to developers post-Microsoft Build for feedback, with a secure-by-default enforcement strategy planned for broader availability. Microsoft aims to enhance defenses continuously and collaborate with partners to bolster MCP's security framework.

AppWizard

May 16, 2025

Android users lose key Nextcloud feature because Google said so, and the reason doesn’t add up

Google has restricted file upload capabilities for the Nextcloud Files Android app by revoking the "All files access" permission, which has been essential for the app since 2011. This change prevents Android users from uploading various file types to their Nextcloud accounts. Nextcloud has expressed frustration over this decision, suggesting it is a strategic move by Google to maintain dominance in the cloud storage market and favor its own applications. The alternatives proposed by Google, such as the MediaStore API or Storage Access Framework (SAF), do not meet Nextcloud's functionality needs. Nextcloud draws parallels to past corporate tactics that limited competition and highlights ongoing concerns regarding fair competition and regulatory responses.

AppWizard

May 14, 2025

Android launches new protections against phone call scammers

Google is implementing new features to enhance security for Android users against phone call scams. Users will be restricted from sideloading applications or granting sensitive permissions while on a call with an unknown contact, receiving a notification that states, “This setting is blocked to protect your device.” Google has also prevented users from disabling its Play Protect security service during calls. These measures are available for devices running Android 16. Additionally, Google is piloting a feature for banking apps in the UK that alerts users of a “likely scam” when accessing these apps while sharing their screen with an unknown caller. Users can choose to end the call or face a 30-second delay before accessing their banking app’s screen. This feature will roll out for devices running Android 11 and newer. These updates build on existing scam protection tools, including AI that identifies potential scam callers and integrates scam detection into Google Messages.

AppWizard

May 13, 2025

Google just gave Android phones new features to thwart scammers

Google is piloting a feature to enhance security for banking app access during screen-sharing sessions, currently being tested with UK banking applications like Monzo, NatWest, and Revolut. When a user shares their screen while accessing their banking app, a pop-up notification will alert them to a "likely scam," reminding them to be cautious.

AppWizard

May 9, 2025

Gemini fuels Chrome for Android with enhanced scam and spam protection

Google has announced a new security feature for Chrome on Android that uses machine learning through its Gemini intelligence to alert users about potential scams, spam, and unwanted notifications from malicious websites. This update allows Chrome to analyze website notifications more effectively, enhancing user protection. In September, Google also updated Chrome's Safety Check for Android, which now includes improved background tasks, notification alerts, and scans for security risks in passwords and installed extensions. The machine learning model was trained using synthetic data evaluated against real notifications to ensure effectiveness. The enhancements aim to provide a stronger defense against online threats.

Tech Optimizer

May 3, 2025

Use Protection: 6 Tips to Watch Porn Online Safely

Seventeen U.S. states have enacted age verification laws that effectively prohibit adult websites from operating within their jurisdictions. The use of Incognito Mode can help hide browsing history, but it is not completely secure as data may still be retained by Google. Data theft is a risk when engaging with adult content, especially if personal information is shared on pornographic sites. Using a VPN can enhance anonymity, but it does not protect against voluntarily shared information. Privacy services like IronVest can help create disposable email addresses and phone numbers. Ads on adult websites can contain malware, making antivirus software important for protection. Trusted pornographic sites typically prioritize user privacy and security, so caution is advised when choosing platforms.