verification Archives

Winsage

July 20, 2026

Enable BitLocker on Windows 11: 11 Steps, 45 Min [2026]

A stolen laptop can lead to a significant data breach, particularly when taken from public places. Windows 11 has introduced BitLocker, a full-disk encryption feature that became mandatory for Australian businesses in 2026. The Office of the Australian Information Commissioner reported 766 notifiable data breaches in the latter half of 2024, with unauthorized access to devices being a major cause. Full-disk encryption is crucial for compliance with the Essential Eight framework, which mandates data protection on portable devices. BitLocker ensures that data on an encrypted drive becomes unreadable if the drive is removed and connected to another computer. It aligns with the Essential Eight framework, requiring evidence of encryption rather than just claims of protection. There are three types of encryption on Windows 11: Device Encryption, BitLocker Drive Encryption, and File-Level Encryption. BitLocker is available only on Windows 11 Pro and higher editions. To use BitLocker, certain prerequisites must be met, including having Windows 11 Pro or higher, a Trusted Platform Module (TPM) 2.0, UEFI firmware with Secure Boot enabled, and local administrator rights. The process to enable BitLocker involves confirming the edition, checking TPM status, enabling BitLocker through Windows Settings or PowerShell, and backing up the recovery key. Organizations can deploy BitLocker fleet-wide using Microsoft Intune, and additional security measures like TPM+PIN can be implemented for pre-boot authentication. Common pitfalls during BitLocker rollout include skipping recovery key backup and assuming that Home edition machines are covered. Troubleshooting common BitLocker issues involves identifying symptoms and applying appropriate fixes. Advanced tips for enhancing security include suspending BitLocker before maintenance and auditing compliance at the fleet level. BitLocker is integral to protecting data on portable devices, and compliance documentation is essential for proving that every device has an active recovery key.

AppWizard

July 20, 2026

Spotted the new Android Developer Verifier app? Read this before you uninstall it

The "Android Developer Verifier" is a system service from Google that verifies whether an app being sideloaded is associated with a verified developer account. This app is part of Google's strategy to implement sideloading restrictions to protect users from social engineering scams. A verified developer account has undergone legal identity and background checks to ensure apps can be traced back to legitimate individuals or businesses. The app is automatically installed on certain devices, such as the Pixel 9 Pro XL and Galaxy S26 Ultra, through Google System Updates, and users cannot opt out of it. Currently, the app is inactive for most users, with registration requirements beginning in select regions on September 30. Uninstalling the app may not prevent its reinstallation. The updated sideloading process requires users to enable Developer mode, confirm they are not being coerced, restart their device, wait 24 hours, and authenticate before installing an APK. Although this process may seem cumbersome, it aims to disrupt scammers' tactics. Users can still sideload via ADB, which is exempt from the new restrictions. Keeping the Android Developer Verifier on the device is advised until the sideloading restrictions are fully implemented.

Winsage

July 20, 2026

July 2026 Patch Tuesday: KB5101650 Windows 11 Update

On July 14, 2026, Microsoft released cumulative update KB5101650 for Windows 11 versions 25H2 and 24H2, addressing OS Builds 26200.8875 and 26100.8875. This update includes essential security fixes, updates to Secure Boot certificates, and enhanced Remote Desktop Protocol (RDP) defenses against phishing attacks. It consolidates July 2026's security content, addressing known vulnerabilities and introducing functional improvements. The update is critical for minimizing exposure to identified threats and is prioritized for systems managing remote access or nearing certificate expiration. The update enhances Remote Desktop security by supporting SHA-2 certificate thumbprints while retaining SHA-1 for legacy compatibility. It includes new Group Policy options to mitigate phishing risks associated with malicious .rdp files. The curl upgrade to version 8.21.0 incorporates security patches for command-line tools in Windows environments. Secure Boot certificates are automatically updated through Windows updates, ensuring boot security across various hardware. KB5101650 installs primarily through the Windows Update interface, requiring a restart to activate changes. Enterprise environments can use the Microsoft Update Catalog for manual distribution. A temporary restriction affects certain Dell devices with Intel Innovation Platform Framework drivers, which Microsoft plans to address in a future update. The cumulative update resolves a total of 622 Microsoft CVEs, including 416 affecting Windows components. Users are advised to verify and install the update promptly to secure the full suite of improvements.

AppWizard

July 18, 2026

Google Pixel May Finally Be Adding A Feature Every Other Android Phone Has

Recent developments indicate that an app lock feature for Google Pixel phones is in the works, allowing users to lock individual apps independently and potentially use biometric verification instead of traditional PINs and passwords. Currently, Pixel devices offer a feature called Private Space, accessible through settings, which creates a secure interface for apps but requires a separate password and does not allow notifications from locked apps. Users can enhance app security using in-app encryption options available in various applications or by utilizing third-party app lock solutions from the Play Store. Additionally, the Files by Google app provides a Safe Folder feature that allows users to secure specific data with a password.

Winsage

July 18, 2026

Windows 11 Secure Boot certificates have expired, and Microsoft says what to do next

Microsoft held its OEM Secure Boot Office Hours event on July 15, where engineers collaborated with OEM representatives from companies like Acer, Asus, Cisco, Dell, and HP. IT administrators were able to ask live questions about the Secure Boot 2023 rollout. The discussion thread became a detailed technical record, especially following the expiration of the first certificates three weeks prior. Concerns raised by IT admins included BitLocker recovery loops, stuck confidence ratings, and unhelpful Intune error codes. Key facts include: - Devices offline for long periods will still receive the 2023 certificates upon reconnecting to Windows Update. - Devices with existing 2023 certificates in firmware will switch to the new boot manager after the latest Windows patches are installed. - A new script, Detect-SecureBootCertUpdateStatus.ps1, is available in Windows for checking certificate status. - BIOS updates may reset a device’s confidence rating to unrated, which is normal and does not indicate certificate failure. - Admins should edit the AvailableUpdates registry key, not the AvailableUpdatesPolicy, which is managed by Intune and Group Policy. - A licensing bug affecting AvailableUpdatesPolicy on devices upgraded from Pro to Enterprise was resolved by Microsoft in 2026. - BitLocker recovery is not typically linked to the certificate update process but may relate to firmware or PCR issues. - Dell and HP provided guidance on which BIOS versions include the 2023 certificates for their newer models. - Older HP EliteBook 840 G5 units require a manual update package for the new certificates. - Eligible devices can still receive the 2023 certificates in the future, and Surface devices released from 2024 onward come pre-equipped with them. - Microsoft confirmed that devices running 2011 certificates will not lose the ability to receive the 2023 chain. - The Microsoft Corporation KEK CA 2011 and Microsoft UEFI CA 2011 certificates have expired, with the Microsoft Windows Production PCA 2011 set to expire on October 19, 2026.

Tech Optimizer

July 15, 2026

Can Chromebooks Get Viruses? How to Protect Your Device

Chromebooks are designed with robust security features, including sandboxing, Verified Boot, automatic updates, data encryption, and Recovery Mode, which collectively reduce the risk of malware infections. However, they are still vulnerable to threats such as malicious Chrome extensions, scam Android apps from third-party stores, phishing attacks, and risks associated with using Developer Mode and cloud storage. Users can identify potential malware through signs like slow performance, unexpected pop-ups, and unusual battery drain. To remove malware, users should eliminate suspicious extensions, uninstall dubious apps, run antivirus scans, enable Google Play Protect, or perform a Powerwash to reset the device. To protect their Chromebooks, users should avoid Developer Mode, check app permissions, use two-factor authentication, verify website URLs, and use a VPN on public Wi-Fi.

AppWizard

July 13, 2026

How to Install Messaging Apps Safely on Windows PCs and Android Devices

Messaging applications are widely used for communication across various platforms, including Windows PCs and Android devices. Users often install these apps on both types of devices to facilitate conversations. The installation process requires careful consideration of the app's source, compatibility, permissions, and avoidance of counterfeit installers. Before installation, users should verify the app's source for transparency and security, ensuring it is from a trusted provider and appropriate for their device. For Windows users, a checklist includes confirming system compatibility, verifying the installer, and reading installation screens carefully. Android users should also confirm the app's source, check permissions, and avoid suspicious APK files. Fake installers and unsafe APKs pose risks, as they can contain modified versions of apps that compromise security. Users should be cautious of misleading download pages and links shared in online groups. Keeping messaging apps updated is essential for performance and security, and users should manage updates from trusted sources. Before logging into a messaging app, users should ensure it was downloaded from a reliable source, verify the file's compatibility with their device, review permissions, and safeguard verification codes. After logging in, users should check active sessions and remain vigilant against suspicious links and files.

Winsage

July 13, 2026

A Microsoft engineer revealed Windows 95’s smart way for spotting installers: It just guessed

Developers of Windows 95 faced the challenge of preventing software installers from overwriting existing files with older versions. They implemented a heuristic approach that identified running setup programs by scanning the program's name for specific "magic words." These included "setup," "inst," "imposta," "ayarla," and "felrak." The word "install" was considered redundant since variations like "inst" could also be detected. If a program's name did not contain these magic words, Windows 95 would check the executable path for matches and perform post-installation verification to ensure newer files were not replaced by older versions.

Winsage

July 12, 2026

Windows 95 didn’t detect installers, it ‘guessed’ based on the file name, says veteran dev — it simply checked for words like setup, install, inst, or localized equivalents

Raymond Chen, a Microsoft engineer, revealed that Windows 95 identified installation programs by analyzing executable filenames against a list of keywords, including "setup," "install," and "inst." The system would then initiate a routine to repair any compromised system files. The list included six terms: setup, install, inst, imposta, ayarla, and felrak. Chen noted redundancy in the list, suggesting "install" was unnecessary since it included "inst." For executables not matching the terms, Windows 95 scanned the executable's path for "Setup." The system maintained backup copies of frequently overwritten files in a hidden directory at C:WindowsSYSBCKUP and would restore correct versions after installers completed. File verification was often postponed until the next system boot, especially for installers that reverted to MS-DOS for file replacements. This file repair mechanism continues to influence modern operating systems, including Windows 11.

AppWizard

July 11, 2026

“Compliance-in-advance is never enough to appease a zealous censor”: Robert Yang on the current challenge of bringing experimental gay games to Steam

Radiator Forever, a collection of short and experimental gay games by developer Robert Yang, has launched on Steam alongside its presence on Itch.io. Yang discussed the challenges faced by adult game creators, particularly due to payment processor issues and online regulations in the UK, which affect the viability of such games on major platforms. Users must log in to view the collection on Steam, and UK users need a valid credit card for age verification. The Steam listing is difficult to find without a direct link and is subject to geoblocking in certain regions. Yang explained that the anti-sexuality censorship campaign led by Collective Shout and payment processors prompted Itch to obscure many NSFW games. He noted that Valve has classified Radiator Forever as containing "frequent nudity and sexual content," which limits its visibility on Steam. Despite efforts to comply with content guidelines, Yang faced challenges due to perceived biases against indie developers compared to major publishers. The re-remastered collection includes enhancements like a completion percentage tracker and a tagging system for new content.