Cookie Banners are here to stay, but there will be exceptions

Posted on by Martin Brinkmann

So called cookie banners are nearly everywhere on today’s Internet. What started out as a rule to give users more control over cookies turned into an annoyance pretty quickly.

With banners on many sites, users started to spend a lot of time reacting to these banners to get them away. Extensions were created that would do away with the banners automatically and other workarounds were created to lighten the burden.

Talks about changing the legislation in the European Union started some time ago. The initial idea was to introduce controls in browsers. Users would have to set their preference there and the browsers would do the rest.

This proposal seems to be off the table. The new solution wants to increase the number of exceptions. The main idea is that certain cookies can be set without permission of the user visiting the site. This includes service delivery, audience measurement and device security according to the new draft.

Sites would no longer have to display cookie banners to the user for getting permission to set these types of cookies. The rules remain for other types, including advertisement that relies on tracking.

Ideally, if the change passes, website visitors would see less cookie banners than they see right now. The change is a massive undertaking, as scripts, extensions, plugins and code need to be rewritten to comply with the new rules.

However, it may still take a while before — if — the change becomes the new status quo. For now, on of the better options to deal with cookie banners is to use extensions or browsers that try to disallow everything that is necessary or get rid of the banners entirely, which would automatically mean that the user has not given the site any permission to set cookies.

Google Chrome may now warn users before visiting “suspicious” websites

Posted on by Martin Brinkmann

Google announced that it is improving Chrome’s Enhanced Protection feature. The new “suspicious” website warning may pop up on sites that exhibit “deceptive patterns commonly associated with known malicious sites” Google writes on its security blog.

The feature follows the downloads warning system that Google implemented in Chrome in 2024. It differentiated between suspicious and dangerous downloads.

A dangerous rating for a download is the result of a “high confidence verdict” and means that there is a high risk of harm.

Suspicious on the other hand means that Chrome’s security feature has a lower confidence in the verdict and that there is “unknown risk of user harm” associated with the download.

Translated for websites, a suspicious rating means that a site could contain harmful elements whereas a dangerous rating means that there is a higher risk of it containing harmful content.

When Enhanced Protection detects a suspicious website, it displays a prompt in the upper left corner of the browser window saying “this site doesn’t seem right”. The site is grayed out and users have several options to deal with the warning, including adding the site to an allow-list and going back to a safer location.

Dangerous sites, those that Chrome determines pose a high risk to users, show the usual “dangerous site” full screen warning instead.

Is it a useful feature? It depends on how well its rating system works and also on the experience level of the user. It may serve inexperienced users well while experienced users usually know what they are doing and have other protections, like content blockers, installed that improve security significantly.

How to enable this right now

Google is rolling out the feature over time to all Chrome users. If you do not want to wait, or prefer to disable the feature if it landed already, you can do so in the following way:

  • Load chrome://flags/#suspicious-site-warnings in the browser’s address bar.
  • Set the flag to True to enable suspicious site warnings or to False to disable the feature.
  • Restart Google Chrome.

ClickFix Protection

Google is also rolling out another security improvement. ClickFix describes malicious attacks that try to get users to run commands on their computer, usually by pasting and running them.

Google says that Chrome is now detecting suspicious commands a user copies. The command is submitted to Safe Browsing for analysis and a warning is shown if the analysis concluded that the script is dangerous.

Some Windows users can’t sign in to some of their Xbox games currently

Posted on by Martin Brinkmann

Reports suggest that some players on Windows 11 PCs can’t sign in to their Xbox accounts in certain games anymore. The issue started to appear for affected users after installation of recent updates for the operating system.

A thread on the Microsoft Learn website exemplifies the issue. The user writes:

No matter what I do, I get the above error trying to sign in to Microsoft Solitaire & Casual Games. I have a subscription. I’m signed on to XBOX with my browser, but the game won’t sign in and I have to play as Guest without all my settings & how far I’ve gotten with various games in that collection. HELP! Bots are useless and I’m spending too much time reading instead of playing. What a waste of my time. I’m getting charged for that game whether I can play it or not.

My machine installed a Windows Update before this started happening. I played yesterday for a while, so it’s not my computer, dangit. How can I be logged in with my browser, but not inside the game. I supposedly cleared cache, tried to reset, and reinstalled XBOX Live and the game.

Considering that this post got 21 comments and that there are more than 90 posts with the same question on the website already, it appears that the issue is widespread.

Games like Microsoft Solitaire, Microsoft Mahjong and even Gears of War 4 are listed as affected by the users.

Microsoft has not acknowledged the issue at this point. There is no entry in the list of known issues for recent versions of Windows 11 and no Microsoft representative has posted a reply on the forum.

One user suggested that the issue is caused by an Xbox Live Service connection issue. The official status page for Xbox Services does not list any issues, however.

At least two users said that they rolled back to a previous state of their Windows 11 system and that they experienced the issue still. While not confirmed, it is probably best to wait for an official statement by Microsoft before making rushed changes to an otherwise fine running system.

Latest Windows updates break Smart App Control on some devices

Posted on by Martin Brinkmann

Recently, Microsoft changed the security feature Smart App Control on Windows so that it could be enabled on existing installations. Previously, the feature could only be activated on new systems. Even worse, once turned off, it could not be enabled again without setting up the system anew.

Clearly, this meant that many Windows users never came into contact with the feature in first place. Microsoft changed the behavior so that Smart App Control could be enabled on all Windows devices.

This week, the company had to admit that the most recent Windows updates could cause problems with enabling the security feature on Windows devices.

After installing this update, some devices might be unable to turn on Smart App Control in the Windows Security app if it has been turned off. On affected devices, the option to turn on Smart App Control might be grayed out.

Devices where Smart App Control is already turned on are not affected and remain protected.

Good news is that the issue does not affect systems with Smart App Control enabled. However, it may affect Windows users who want to enable the feature, as they may not be able to do so.

Even better, there is a Registry workaround that should enable the toggle functionality again.

Option #1: Modify the registry

You can modify the registry to restore the ability to turn on Smart App Control by following these steps:

Open a Command Prompt window by typing cmd in the Search box.

Select Run as administrator.

At the command prompt, enter the following commands. Then restart the device.

reg add “HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides” /v 2883193997 /t REG_DWORD /d 1 /f

reg add “HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides” /v 2850574478 /t REG_DWORD /d 1 /f

Option #2: Install a Group Policy

IT administrators can instead choose to mitigate this issue for enterprise-managed devices managed by IT departments by installing and configuring the special Group Policies listed below.

Group Policy downloads with Group Policy name:

  • Download #1 for Windows 11, versions 24H2, 25H2, and 26H2 — KB5074105 261015_19222 Feature Preview
  • Download #2 for Windows 11, versions 24H2, 25H2, and 26H2 — KB5074105 261015_19221 Feature Preview

Important: You should install and configure both Group Policies to resolve this issue. The first Group Policy is needed to turn on Smart App Control. The second Group Policy ensures that logging is available to assist with troubleshooting in case any problems arise.

The special Group Policies can be found in Computer Configuration > Administrative Templates > {Group Policy name} > Windows 11, version 24H2, 25H2. After installing the Group Policies, configure the value for both settings to Enabled and restart your device(s) to apply the Group Policy settings.

Should you use it?

While Smart App Control may sound good on paper with its threat blocking happening before actual execution, its lack of exceptions makes it highly problematic. Furthermore, since it relies on online checks, it may also be problematic from a privacy point of view.

More and more companies create software using AI tools

Posted on by Martin Brinkmann

The rise of AI systems fueled several trends: from AI generated articles over media generation to coding. The latter has been at the forefront of interest by some companies.

The idea is simple: instead of paying engineers a lot of money to create or improve software, you use AI for the most part. This allows you to “let go” of employes that are no longer needed.

The result? More money in the pockets of the organization and less human workers to worry about.

But there is a problem. At least some of the creations are not well-liked or can even be considered AI slop.

Update: Sega announced that it has pulled the remake of Shogun 2 from stores and reinstated the old version.

Two examples to illustrate the point. Epic Games “vibe coded” its new store. Yes, the same Epic Games responsible for Unreal Engine, one of the most widely used development systems for digital games.

At least some users showed off some bugs on X, others recommended removing any payment methods as vibe coded software did not give them confidence in the quality of the code.

Epic Games confirmed that the new client is unfinished and is asking customers to report bugs that they encounter.

Then there is the remake of Total War: Shogun 2 by Creative Assembly and Sega. It appears that the developers used AI to upscale graphics, removed the classic version from Steam to charge more for the remake and give gamers no other option.

The game has over 80 percent negative comments on Steam at the time of writing, mostly because of the use of AI and not disclosing that AI was used.

It seems likely that the use of AI in software products and elsewhere is going to rise in the coming years. The best way to deal with it is to avoid products that do not offer the same quality as purely human-coded software.

Mozilla launches Firefox Enterprise and Thunderbird Enterprise

Posted on by Martin Brinkmann

For years, Mozilla offered Firefox ESR to businesses and Enterprises. While the organization implemented features aimed specifically at managing Firefox on large fleets of devices, it never offered a specific Firefox version for Enterprises.

This changes today with the introduction of Firefox Enterprise (and Thunderbird Enterprise):

Firefox Enterprise is built for organizations with strict security, governance, and compliance requirements. It pairs the Firefox browser, built on Mozilla’s independent Gecko engine, with a management console organizations can run on their own infrastructure. From that console, IT teams can centrally manage browser policy and access, govern how data moves through the browser and set controls around AI use.

Mozilla says that Firefox Enterprise is giving organizations more control, not only over the browser but also over the infrastructure that is managing it. The highlight features are sovereignty, control and resilience according to the official website.

As far as features are concerned, here are the highlights:

  • Centralized policy control — manage browser behavior across endpoints
  • External connection controls — govern browser callouts and telemetry
  • Native DLP — warn or block sensitive data actions by domain
  • AI controls — allow, restrict or disable AI tools
  • SIEM integration — export browser events and audit activity
  • Lockdown Mode — harden high-risk or restricted browsing
  • Extension governance — allow or block add-ons organization-wide
  • Professional Support included — private triage and defined response times

Firefox Enterprise is rolling out in select European markets first, with France, Germany, Austria and Switzerland in the beginning.

Brave Debloater: Remove potentially unwanted features of Brave Browser

Posted on by Martin Brinkmann

Brave Debloater is an open-source PowerShell script designed to remove the extra, often unwanted features (bloatware) that come bundled with the Brave Browser, such as crypto wallets, AI chatbots, and sponsored content. It works across Windows, macOS, and Linux.

What Does Brave Debloater Do?

Instead of manually clicking through menus to turn off various features or using policies, Brave Debloater turns off the features in one swift operation instead.

Specifically, it can disable and hide:

  • Crypto & Paid Features: Brave Rewards, BAT prompts, Brave Wallet, and Brave VPN.
  • Add-on Services: Leo AI Chat (sidebar and address bar), Brave News, Brave Talk, Playlist, and Email Aliases.
  • Telemetry & Tracking: Brave’s P3A telemetry, stats ping, Web Discovery, Chromium metrics, and URL-keyed data collection.
  • Clutter (using the “Extreme” preset): Sponsored new tab backgrounds, new tab cards, shopping lists, QR generators, and the Google search side panel.

Is it Safe?

Many Windows debloat scripts aggressively delete system files, patch binaries, or mess with the hosts file, which can break your system or browser. Brave Debloater takes a much safer, standardized approach.

It uses official Enterprise Policies: Rather than modifying individual files of the browser, it tells your operating system to enforce official Chromium/Brave enterprise policies (e.g., writing native registry policies on Windows or JSON policies on Linux). This is the exact same method IT departments use to manage browsers on company computers.

In doing so, it does not weaken security. Furthermore, you can use a preview mode feature. This lists the changes that the script does without applying them.

For recovery, it creates a backup that you can restore at any time. Lastly, any change that it makes is highlighted on brave://policy, a native page of the browser listing all changes enforced by policies on the device.

If you like Brave’s ad-blocking but dislike the crypto integrations, AI tools, and telemetry, Brave Debloater is a safe option to remove unwanted features. While you can make the changes manually as well, doing so would take much longer for most users, but it would mean that you would stay in full control during the entire activity.

Microsoft 365 changes: Family and Premium plan storage cuts and new Pro plan

Posted on by Martin Brinkmann

Microsoft announced a series of changes for its Microsoft 365 subscription service today. The changes affect family and premium subscribers only at this time and change storage quotas significantly.

For those unaware, a Microsoft 365 subscription includes access to Microsoft Office apps, online storage, Copilot AI access and some other features. The two main plans for many customers are Personal, which gives one person access on up to five devices, and Family, which gives up to 6 people access.

Up until now, Family included 1 TB of storage for each member. Starting October 8, 2026 for new customers, this is reduced to 2 TB shared storage. In other words, users of a Family plan no longer have private storage. When a member buys additional storage, it is added to the shared pool as well.

The same was true for the Premium plan, which supported up to 6 people as well. Instead of 1 TB for each user, Premium subscribers get 2 TB shared now.

Existing customer plans are affected as well, but not immediately. The change takes effect when the subscription is renewed after May 2027. Microsoft reveals that existing subscribers may get bonus storage added to their account when the subscription “renews after shared storage rolls out”. It does not mention if it is permanent or how much customers get though.

Last but not least, if storage is exceeded when the transition happens, access to files is not lost immediately. Microsoft says that customers get notifications that explain the available options. These range from deleting online files to buying more storage.

While Microsoft is cutting storage, it is not changing the price of a subscription. Family and Premium continue to cost $12.99 or $19.99 per month.

Microsoft explains on a FAQ page why this is a good thing:

Storage automatically goes where it’s needed.
Members are less likely to run into individual storage limits.
Unused storage can benefit the entire family.
Additional storage purchases can help everyone with the subscription.

What the company fails to mention is that these benefits would also apply if Microsoft would not have reduced the storage of the plans. In fact, it would have even be better for the cases mentioned.

The new Pro plan

Microsoft 365 Pro is a new plan that Microsoft introduced. Subscribers get 5 TB of shared storage and the highest limits when using Copilot AI. This new plan is anything but cheap though. It costs $99.99 per month and includes up to 6 users. However, AI features are limited to the subscription owner according to the description.

Microsoft Trials a Faster, Streamlined Windows Search for Insiders

Posted on by Martin Brinkmann

The days of using Windows Search mostly as an application launcher may be officially numbered. Starting this week, Microsoft is rolling out a fundamentally redesigned Windows Search experience to testers in the Windows Insider Experimental channel.

Built on a modernized WinUI 3 foundation, this new update transforms the familiar taskbar feature into a streamlined, clutter-free command center. The new Search allows users to perform some system tasks, such as toggling dark mode, right from the search results.

From finding to doing

The most significant shift in this update is the introduction of inline actions. Microsoft aims to reduce the friction of everyday tasks by allowing you to complete them directly within the search interface.

If that sounds familiar, it is something that Microsoft had planned for the initial Copilot AI for Windows. While the former never came to fruition, it appears that Microsoft has finally found a way to link user requests to direct actions.

Need to tweak your settings? You can now type phrases like “switch to dark mode,” “dim my screen,” or “turn on Bluetooth” to make immediate adjustments without digging through menus. The new search can even help you manage your workspace, responding to commands like “minimize all my windows” or “arrange windows on screen”.

In the near future, this functionality will expand to include Phone Link integrations, enabling actions like sending a text message from a connected device directly through the search bar.

What’s Ahead

Looking forward to next year, Microsoft plans to bring this new search experience to the Start menu, ensuring it adapts to various taskbar configurations. For now, searches originating from the Start menu will still use the existing interface while Microsoft gathers feedback from Insiders.

Ultimately, the goal is to create a search tool that understands natural language, provides richer in-context information, and integrates deeply with features like Copilot, closing the gap between finding information and taking action.

With testing just getting started, it is too early to tell if the reimagined search is going to be everything that Microsoft hopes it can be. The past has shown us that announcements and implementations do not always go hand in hand. If Microsoft manages to implement more than a few inline actions, it has the potential of becoming a useful feature used by many users of the system.

On the other hand, if there are just ten or so actions, it is probably something that won’t make a big impact.

About Chrome’s error “This site doesn’t support a secure connection”

Posted on by Martin Brinkmann

Last year, Google announced that it would change the behavior of its Chrome browser regarding HTTP websites. The company said that it would enable “always use secure connections” in Chrome 154.

The browser is out now, but the change has not come yet on my test devices. It is likely that Google is using rollouts for this to monitor feedback.

What it does: When Google Chrome encounters a public site that uses HTTP, it displays the warning “This site doesn’t support a secure connection” instead of connecting to the site as it did previously.

The prompt displays an option to go back or to continue to site. Going back cancels the navigation request, the continue option attempts to load the HTTP site.

It is noteworthy that the feature impacts redirects as well, even if the actual target website uses HTTPS. Something that webmasters may want to keep in mind as well and address.

Chrome remembers the choice to visit the site and won’t display the security prompt for the next 15 days. Any visit in that time refreshes the period, so that the browser won’t terrorize you with security prompts when you visit a HTTP website often.

Private sites are exempt by default. There is an option under chrome://settings/security to enable the warning for private sites, e.g. Intranet sites or a router’s administrative frontend, as well.

An option to disable the warning altogether exists right now, but it is unclear for how long it remains available to users.