user tracking Archives

AppWizard

July 16, 2026

VK Sells RuStore to Developer’s CEO Following EU Sanctions

VK has announced its decision to sell 100% of RuStore to Dmitry Pankrushev, the CEO of Mnogo Prilozheniy. This announcement coincided with recent European Union sanctions against VK. RuStore was established as a domestic alternative for Android users in response to restrictions imposed by Apple and Google after Russia's invasion of Ukraine in 2022. The platform currently features over 110,000 applications and games, attracting 68 million monthly users. VK did not disclose the financial details of the sale or the reasons behind the divestment, while assuring users that operations would continue seamlessly. On the same day, Russian media reported that VK-related applications were removed from Google Play and Huawei's AppGallery, following previous removals from Apple's App Store. RuStore has faced allegations of user tracking and unauthorized access to data, which it denies, stating that its practices are standard for major app storefronts.

Winsage

July 11, 2026

Windows 11 Has a Hidden Tracker – Here’s How to Limit It

Peter Stokes allegedly used sophisticated methods to obscure his identity during a breach at a luxury retailer, but the FBI uncovered his identity through a Global Device Identifier (GDID) linked to his Windows installation. GDID is a persistent device-level identifier that uniquely identifies a Windows installation and remains unchanged through operating system updates, only resetting upon complete reinstallation. Users cannot disable GDID, and attempts to remove it may disrupt Windows activation. To minimize data associated with GDID, users can opt for a local account, limit diagnostic telemetry, disable Activity history, and be cautious during reinstallation. VPNs do not prevent Microsoft from logging GDID, IP addresses, and URLs, making them ineffective for privacy on Windows. GDID has been described as a covert tracking beacon, and security experts advise against using Windows for sensitive tasks, suggesting alternatives like Linux.

Winsage

July 10, 2026

Windows 11 Has a Hidden Tracker – Here’s How to Limit It

Peter Stokes is involved in a breach with a luxury retailer, using tactics like VPNs and rotating IP addresses to hide his digital activity. The FBI discovered a Global Device Identifier (GDID) linked to his Windows installation, which is a persistent device-level identifier that uniquely identifies Windows installations. GDID remains unchanged through operating system updates but resets with a full reinstallation. Disabling GDID is not possible, as attempts to do so would disrupt Windows activation. Users can minimize data linked to GDID by using a local account, reducing diagnostic telemetry, disabling Activity history, and carefully managing reinstalls. VPNs do not prevent Microsoft from logging GDID, IP address, and URL data. Privacy researchers view GDID as a covert tracking mechanism, and Windows lacks user-facing options to reset this identifier, unlike Apple and Google.

AppWizard

July 10, 2026

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

Researchers analyzed 281 popular free VPN applications on the Google Play Store and found significant privacy and security shortcomings. The study, conducted by teams from the University of Michigan, the University of New Mexico, and IIT Delhi using a framework called MVPNalyzer, revealed that flagged apps had over 2.4 billion downloads. Key findings included: - Five apps transmitted configuration files unencrypted, allowing attackers to intercept and modify them. - 29 apps allowed user traffic to leak outside the encrypted tunnel, with 24 leaking DNS traffic and six leaking full browsing traffic. - 169 apps made no effort to disguise their traffic, making it identifiable to network operators or government censors. - 76 apps transmitted the device's Advertising ID to advertisers, and over 80% contacted known advertising and tracking servers. - Only one of 108 OpenVPN configurations adhered to recommended security practices; 89% used a single authentication method, and nearly 20% employed outdated encryption techniques. - Many apps passed through Play Store checks without adequate scrutiny, with safety labels often serving as marketing tools rather than security indicators. These findings align with previous research highlighting similar issues in popular Android VPN apps. Users are advised to be cautious when selecting VPNs, prioritizing those with recent independent security audits.

Winsage

July 8, 2026

Arrest and extradition of Scattered Spider hacker shines light on how Windows telemetry GDIDs can identify and track users — Microsoft device identifier is just one digital fingerprint in a software world rife with them

Peter Stokes, a 19-year-old from Estonia, was arrested and extradited to the United States on charges related to digital crimes, with the FBI using telemetry logs from Microsoft Windows to trace his online activities. These logs included his Global Device Identifier (GDID) and records of websites he visited. Stokes likely had his telemetry settings configured to Optional/Full, which allowed the transmission of URL data. The FBI connected Stokes to his ngrok account and linked his travel records to a New York IP address and a rental at the Empire Hotel, aided by photos he shared. Google and Apple assisted in the investigation by tracing Stokes' phishing phone number back to the same IP address used for his ngrok account. Stokes attempted to obscure his digital footprint using a VPN and other services, but modern digital identification methods made it difficult to remain anonymous.

AppWizard

June 11, 2026

Apple removes Russian messenger from App Store

Apple has removed Russia’s state-backed Max messenger from its App Store, as confirmed by the app’s developers. The Max app, which lacks encryption, has been promoted by the Russian government, which has restricted access to popular messaging platforms like WhatsApp and Telegram, forcing civil servants and state agencies to use Max for communications. The app became unavailable for download on Apple’s platform on Wednesday night, and while current users can still access it, new downloads and updates are prohibited. Max, introduced in 2025 by VK, combines social media, messaging, government services, and banking options, and has been endorsed by President Putin. It is pre-installed on devices sold in Russia but not available in the European Union, with user data stored on Russian servers.

AppWizard

June 5, 2026

Apple Removes Max from App Store, Russian Messaging App Without Encryption

Apple has removed the messaging app Max from its App Store, making it unavailable for download as of June 3. Max is classified as a super-app that integrates various services, including messaging, social media, government services, and banking, but lacks end-to-end encryption, raising concerns about security and user tracking. The Russian government has encouraged citizens to adopt Max, restricting access to other messaging platforms, and state employees have been directed to use it for communications. While existing users in Russia can continue to use Max, new downloads and updates are no longer available. Launched in 2025 by VK, Max is compared to China's WeChat and is pre-installed on devices sold in Russia, but it is not available in the European Union. The app's terms of use state that user data is stored on Russian servers, raising further concerns about surveillance.

AppWizard

June 4, 2026

Apple removes Russia’s state-backed messenger from App Store

Apple has removed the state-backed Russian messaging app Max from its App Store, as confirmed by the app's developers. This action is part of a broader initiative by the Russian government to promote Max, which lacks encryption and has raised concerns regarding user tracking. The app had become a mandatory communication tool for civil servants and state entities in Russia, especially as access to popular messaging platforms like WhatsApp and Telegram was restricted. Max acknowledged its removal from the App Store and noted that while existing users can still use the app, new users cannot download it or access updates. The app was introduced in 2025 by VK and is compared to China's WeChat, integrating messaging with government services and banking. It has been pre-installed on devices sold in Russia since September but is not available in the EU. Max does not use end-to-end encryption, and its user data is stored on servers in Russia.

AppWizard

April 11, 2026

X’s messaging app, XChat, may be available soon

XChat is now available for pre-order on the App Store and will be officially released on April 17. The app is designed for users of the X platform and features end-to-end encryption, the ability to edit and delete messages, block screenshots, and enable disappearing messages. It supports group chats of up to 481 members and is promised to be ad-free without user tracking. Users can pre-order XChat for iPhones and iPads, ensuring automatic download upon release.

BetaBeacon

February 18, 2026

GameHub will give Mac owners another imperfect way to play Windows games

The main reason behind the release of GameSir's Windows emulation tool was to boost sales of its controllers.