verification Archives

AppWizard

July 31, 2026

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

Bitsight's investigation revealed that inexpensive Android TV boxes are being shipped with applications that can change their hardware identity, allowing them to impersonate popular smartphone brands like Samsung and Huawei. This operation, named Fuyao, is linked to Zhejiang Fengwo IoT Technology Co., Ltd., a Chinese company established in 2019. The H96MAXV11 model was frequently reported among the affected devices. In one day, the operation received 65,957 reports from about 38,000 unique MAC addresses, with many devices misidentified as phones due to spoofed identifiers. Fengwo has also promoted over 120,000 "AI digital humans," though details on this marketing term are vague. The command-and-control server for Fuyao sends phone profiles to devices, masking their actual hardware specifications. The operation uses machine vision technology and a YOLOv8s object-detection model to identify advertisements. Bitsight documented 40 fraud tasks, 21 unique campaigns, and 166 modules across four devices. The operation's payout structure involves 144 operator-owned domains, with an estimated gross return of .25 per device daily, potentially leading to annual revenues in the millions. Attribution to Fengwo is supported by shared TLS certificate data and public patent records, although the patents do not directly address advertising. There is uncertainty about how the fraudulent apps were installed and at what point in the supply chain they were introduced. Device owners are advised to verify Play Protect certification and disconnect suspicious devices.

AppWizard

July 30, 2026

Google Play Rolls Out Age Signals Worldwide: Get Tailored Per-App Safety Shields

Google has announced the global rollout of its Age Signals API for the Google Play platform, aimed at helping parents manage age-appropriate content for their children across Android applications from a single interface. Initially launched in Brazil, the tool will be extended to users in Australia and Canada by mid-August, with a full worldwide release expected later this year. The Age Signals API allows developers to customize in-app experiences based on the user's actual age, moving away from generic safety measures. Developers receive age range signals to adjust content and features accordingly, while adult users can voluntarily share their age range. Parents can centralize control through the Google Family Link app, sharing their child's age range once for automatic communication to participating apps. Age data is not shared by default, and parents can modify permissions at any time. The API enhances existing safety tools on Google Play, including mandatory standards for family-friendly apps and features in Google Family Link.

AppWizard

July 29, 2026

Google brings its age-assurance technology to Android developers worldwide

Google will globally roll out its Play Signal API by the end of 2026 to enhance age assurance for younger users. The API will first be introduced in Australia and Canada by mid-August, followed by a rollout to all markets by the end of the year. This technology allows Android developers to identify younger users without accessing sensitive personal information, enabling parents to share their child's age range directly with apps. Age details will be managed through Google's Family Link parental controls dashboard, and parents must opt in to share this information. The feature is part of broader safety tools on Google Play, which include options for developers to limit children's app discovery and parental controls for managing screen time and content filters.

Winsage

July 29, 2026

Microsoft will make it harder to illegally activate Windows and close a popular piracy loophole

Microsoft is requiring the use of TPM 2.0 security modules for Key Management Service (KMS) activation servers to combat unlicensed software and corporate piracy. KMS, used by organizations for mass activation of devices, has been targeted by hackers who create counterfeit servers. The new protocol mandates that KMS hosts validate their hardware credentials through the TPM 2.0 chip before activating client devices. This initiative will mainly affect illegal infrastructures in the corporate sector, while legitimate PC users will not be impacted. Starting in August 2026, Windows Server 2025 will introduce hardware readiness alerts to help system administrators prepare for these changes. TPM 2.0 has been required for Windows 11 since 2021, and its application is being expanded to address vulnerabilities in volume licensing.

AppWizard

July 27, 2026

My parents’ Android phones were ruined by invasive ads. Here’s how I fixed them for good

Mobile advertising on Android devices has seen a rise in deceptive pop-ups that mimic legitimate notifications or system updates, leaving many users, particularly less tech-savvy individuals, vulnerable. A personal experience highlighted this issue when a family member fell for a misleading PDF ad, leading to the installation of multiple fraudulent applications. Recently, similar deceptive ads were encountered on YouTube, raising concerns about the safety of family members who rely on their devices for important tasks. Discussions on platforms like Reddit have pointed out the prevalence of misleading ads on family-friendly platforms. The author expressed a desire to block all ads if companies cannot ensure their safety. To address the issue, the author sought an ad-blocking solution that allows for remote management and network-wide filtering, ultimately choosing NextDNS. This content filtering solution offers a free account with sufficient monthly DNS queries and supports individual profiles for tailored settings. The setup process for NextDNS involves creating profiles for each family member, allowing for distinct settings and blocklists, and configuring devices with the provided DNS-over-TLS endpoint details. While NextDNS is effective, it does not eliminate all ads, particularly those from platforms like YouTube, indicating that additional measures may be necessary for comprehensive security. Regularly reviewing app permissions and uninstalling unnecessary applications are also recommended for enhancing security.

AppWizard

July 27, 2026

I couldn’t sign into the PlayStation App on Android, but I found an easy way to get around Sony’s finicky 2FA

Sony has faced criticism for discontinuing physical game discs and issues with the PlayStation app, particularly regarding two-factor authentication (2FA). Many users have reported difficulties logging into their accounts when they do not receive verification text messages. This problem has affected access to PS4s and PS5s. Users can recover their accounts by following these steps: open the PlayStation app, sign in with their email, select "Trouble Signing In?", choose "Recover Your Account", and reset their password. They can then set up a passkey, which disables 2FA, allowing them to log in without needing the verification code. Previously, users could use 2FA on consoles if they did not receive an SMS code, but this option is no longer available, making backup codes essential.

Winsage

July 26, 2026

Microsoft is using TPM chips to crack down on pirated Windows activations

Microsoft has mandated the inclusion of the Trusted Platform Module (TPM) as a standard feature in all new motherboards and CPUs to enhance the Windows activation process. The company has introduced an enhancement to its Key Management Service (KMS) that leverages TPM's security capabilities to authenticate the legitimacy of KMS servers. This new "TPM-based attestation" aims to mitigate exploitation risks associated with KMS by validating the cryptographic integrity of KMS servers. Starting in August 2026, TPM-based attestation will be required for KMS activation with the next release of Windows Server. Microsoft has also closed off the "KMS38" activation method in 2025, while traditional KMS activation remains functional. The Massgrave collective has developed an Online KMS method that may be impacted by the new TPM-based attestation.

AppWizard

July 25, 2026

Govt orders GitHub to remove code for internet-free messaging app

The Indian Cyber Crime Coordination Centre (I4C) has directed GitHub to remove three repositories associated with the Bitchat messaging application, co-founded by Jack Dorsey. This action is one of the first implementations of the amended IT Rules' "reasoned intimation" mechanism, extending the takedown framework to software repositories. I4C expressed concerns about Bitchat's potential misuse for unlawful activities such as coordinating unlawful assemblies, inciting violent protests, disseminating misinformation, radicalization, and criminal conspiracies. The application allows for anonymous communication without user registration or centralized logging, complicating law enforcement's ability to conduct lawful interception and investigations.

Winsage

July 25, 2026

BackupChain Expands Hyper-V Backup for Windows Server 2025 as a Veeam Alternative

BackupChain has released an update to its backup and disaster recovery platform for Windows Server and Windows 11 users, introducing features such as faster compression, improved Hyper-V protection, expedited restores, and comprehensive backup validation. The update includes a redesigned deduplication engine that accelerates backup speeds and reduces storage usage. It also features advanced Hyper-V change tracking for efficient incremental backups and is compatible with Windows Server 2016 and later, as well as Windows 10 and 11. Restoration processes have been simplified with single-pass restores, minimizing downtime. Additionally, Deep Verification for VM backups allows for ongoing verification of the backup chain without needing to restore the virtual machine. BackupChain aims to provide robust backup technology tailored for SMBs and IT professionals, positioning itself as an alternative to larger enterprise platforms like Veeam. The latest version is now available.

AppWizard

July 25, 2026

Google ends Play Services Support, likely to stop these Android phones from downloading apps & games

Google Play Services operates in the background on Android devices, facilitating essential functions such as account management, push notifications, location tracking, maps functionality, security verification, and data syncing. It simplifies signing into Google accounts, provides timely updates, enhances navigation, supports Google Maps, safeguards user data, and ensures consistent data across applications.