Author: Martin Brinkmann

When I was young, I studied German, History and English at Essen University in Germany. I worked in computer support for several years at the time to help other computer users when they ran into issues. Writing started out as a passion project, as I wanted to help more users and not just the ones that I handled in support. This lead to the founding of Ghacks Technology News in 2005. First, as a side-project, but shortly thereafter as a full-time project as the site's popularity exploded. I sold Ghacks to Softonic some years ago, but stayed on as Editor. You can still read my articles on the site. I do publish on Betanews as well. In recent years, I started to write and publish technology books, including my latest book "Windows 11 From Beginner to Advanced", which is available on Amazon. I'm also a freelance writer for the German publisher Gamestar. Chipp.in is my newest project. I want to use it to talk about my book projects, sell my books directly, and write about technology, as this is what interests me.

Microsoft confirms Windows 11 version 24H2 as the 2024 feature update

Posted on by Martin Brinkmann

Last year, rumors began to emerge about a new version of Windows that would focus heavily on AI. Microsoft had just begun its AI push, adding Copilots everywhere. Panos Panay, then leader of Surface and Windows teams, left the company in the same year. Panay was replaced by Yusuf Mehdi.

Windows 12, the name that Microsoft never confirmed officially, was said to focus heavily on AI. This went hand-in-hand with the AI PCs for Windows. One of the requirements of these PCs was an integrated chip, neural processing unit, to speed up AI processing on these devices.

The leadership change and the success of AI products at Microsoft may have played a role in Microsoft’s decision to postpone the release of Windows 12.

The company released a new build to the Insider channel this week. This build introduced a few new features, including sudo.

The release notes include confirmation that the 2024 update for Windows 11 will be Windows 11 version 24H2.

Here is what Microsoft reveals in the release notes:

Starting with Build 26-xx today, Windows Insiders in the Canary and Dev Channels will see the versioning updated under Settings > System > About (and winver) to version 24H2. This denotes that Windows 11, version 24H2 will be this year’s annual feature update. As mentioned here, Windows 11 will have an annual feature update cadence that releases in the second half of the calendar year.

While this does not include confirmation that Windows 12 won’t be released this year, there is no indication that Microsoft is preparing another operating system release in 2024. It is possible that Microsoft’s initial plans were to release the functionality of the feature update as Windows 12, but that it changed its mind.

Windows 11 version 24H2

Windows 11 version 24H2 is the feature update for Windows 11 in 2024. It is still assumed that the update will focus heavily on AI, but recent changelogs reveal little about the functionality that Microsoft plans to add.

Rumors suggest that Microsoft could launch an improved version of Copilot on Windows. The current iteration lacks any meaningful Windows-specific functionality, which is why users disable Windows Copilot on their devices. This could change, but Microsoft has not released the updated version for testing yet. For now, Copilot on Windows is more or less identical in functionality to Copilot on the Web.

Microsoft has a few months left before the release in the second half of 2024. It is possible that main AI improvements and tools are tested internally only at this time. Microsoft would have to integrate them into preview versions eventually though. This has to happen in the coming months.

AI PCs may have specific requirements, including an NPU. It seems highly unlikely that Windows 11 version 24H2 will only be available to devices with such a chip. It would block updates for the vast majority of systems and fragment the userbase even further.

More likely is that certain features are limited to devices with a NPU or work a lot better on these PCs.

Closing Words

As it stands, there will be a single major Windows release in 2024. It won’t be Windows 12, but Windows 11 version 24H2. Windows 12 may not be off the table though.

Next year will be interesting. It is the year that support for Windows 10 ends officially. While customers may extend support for several years, for a price, it may also be the perfect year for a Windows 12 release.

After all, with Windows 10 gone, there is only Windows 11 and hundreds of millions of Windows 10 devices that cannot be upgraded to the new operating system.

Now You: what do you expect from Windows 11 version 24H2?

Firefox

First look at Firefox’s new Tab Previews feature

Posted on by Martin Brinkmann

Tab previews allow you to hover over open tabs in the Firefox web browser to get a preview of the page’s content. Mozilla added the functionality into Firefox Nightly this week. Reason enough to take a look at the feature.

Tab Previews are only available in Firefox Nightly at the time of writing. The feature is disabled by default, but you may enable it.

This is done by setting the preference browser.tabs.cardPreview.enabled to true on about:config. A restart of the Firefox web browser completes the process.

Tip: you may set this feature to off in Firefox Stable later on to turn off tab previews. This restores Firefox’s display of the page title and URL then when you hover over a tab.

How Tab Previews work in Firefox

Hover over any open tab in Firefox and you see a thumbnail of the page after 1 second. The snapshot displays a screenshot of the top of the page. In other words, it ignores the actual position on the page.

It may look cut off as well, as you can see on the screenshot above. Still, hover over any tab and you do get a preview of the page.

Tab previews is a handy feature at times, especially if you have multiple tabs with the same title open. Think ten eBay auctions that have similar titles.

The 1 second delay is set by Mozilla. There is a preference that supposedly changes it, but it does not seem work right now. Check browser.tabs.cardPreview.delayMs on about:config to change the delay.

Comparison to Google Chrome

Firefox is not the only web browser that introduced support for tab previews recently. Google’s Chrome browser displays tab previews as well now in the Stable version.

Hover over any tab in Chrome and you get a screenshot preview of the tab. Google displays the same information as Firefox plus a tab’s memory usage.

There is one difference though. Firefox displays a screenshot of the top of the webpage all the time. Google Chrome, however, displays a screenshot of the actual position on the webpage.

It is possible that Firefox’s tab previews feature will also support this in the future. It is in development and it may change in the future though.

Closing Words

Not every browser user likes tab previews. It should be easy enough to turn these off in Firefox once they land in stable.

Now You: tab previews, yay or nay?

Google Maps

Google Maps shows weather information now on Android

Posted on by Martin Brinkmann

Google is rolling out a new feature on Google Maps that shows weather information on Android. Whether this is going to take away usage from dedicated weather apps remains to be seen.

Google Maps on iOS displays information about the temperature and air quality index already. Google is now rolling out the same feature to Maps on Android.

A small and easy to overlook widget in the left corner of the screen displays the current temperature and air quality index when enabled. An icon depicts the weather condition, e.g., rain, sun or clouded, and the temperature in either Fahrenheit or Celsius. Below that is the air quality index, again with a quality indicator.

A tap on the widget displays additional information. You get the weather forecast for the next hours among other information, including the chance of rain.

A tap on the air quality section displays an overlay on the map that uses colors to highlight the quality of air in the region.

Google Maps: weather information widget

The weather widget is only displayed when nothing is selected. Once you make a selection, e.g., by tapping on a place, you won’t see the information in Google Maps.

Google seems to roll out the feature over time. If it is not available on a device, you may want to see if you have the latest Google Maps version installed. Also, weather information is not displayed if you select anything on Google Maps or have any character in the search field. You need to clear any character in the search field before the weather widget is displayed.

The display of weather information on Google Maps is useful but also limited. It can be useful, even when you check out a place that is nearby. While the actual temperature or air quality index may not be that useful, the forecast may be. You can now check how the weather is going to be in a few hours.

As for places far away, it can be useful as well, but not as much. The main limitation is that the forecast is limited to the next few hours. It does not help much if you want to visit the place tomorrow or next week.

Tip: users from the European Union may allow or disallow the sharing of data between Google services.

Closing Words

The Android version of Google Maps features the same weather widget as the iOS version now. The information is useful, but it is also limited, which makes it less useful than it could be. A forecast for the next one or two days would improve the usability significantly.

The information seems to be pulled from weather.com, at least that is what Google links to when you open the details view.

The web-based version of Google Maps shows weather information as well.

Now You: do you use Google Maps?

youtube

Here is one way to stop binging on YouTube so much

Posted on by Martin Brinkmann

Look at those cute cats. Just one more video and I’m done for the day. Promise! One of the many appeals of YouTube is the site’s vast assortment of videos. There is probably nothing that you cannot watch on YouTube, with the exception of prohibited content of course. If you find a video you like, there is a good chance that hundreds, thousands or even more videos exist that are similar.

Google does a good job of pushing video recommendations to users. You get them on the startpage, while watching videos, and even after watching videos. Some vides may also autoplay after you finish watching a video. While it does not mean that these recommendations are great, they are not sometimes, they do parade new content in front of your eyes all the time.

In fact, you could probably spend the whole day on autopilot on YouTube without ever running out of something to watch.

Google knows that recommendations are key to keep users on the site. The more it knows about its users, the more likely it is that the next video may be of interest. Yes, YouTube gets it wrong at times.

I get a lot of Turkish video recommendations on YouTube, even though I do not speak the language and never watched a single Turkish video on the site. Still, most of the time, you get more of the same, which many users seem to like.

Binging may be a problem for some, especially if it keeps you from something more important. Some YouTube users seek for ways to limit binging on the site. While it may be easy for some, all it takes is to close the YouTube tab and that is that, it can be really difficult for others.

Read on to find out about one way that may help you with your binging on YouTube, at least a bit.

Stop binging on YouTube

YouTube stop binging

One of the ways that YouTube may get you is through recommendations on the homepage. Open the YouTube homepage and you will see a list of recommendations. YouTube uses the watch history to show recommendations. The main intent is to provide users with something new to watch. This keeps them on the site and Google earns money through video ads and other ads on the site.

If you turn off the watch history, and delete all watched items, then you won’t get any recommendations on YouTube’s homepage anymore. It is a simple option that does require a Google account.

You could create a simple Google account for that, if you don’t want to stay signed-in on YouTube.

Here is how you disable the watch history on YouTube:

  1. Open the YouTube website.
  2. Sign-in to a Google account, if you have not done so already.
  3. Activate the profile icon in the top right corner and select “Your data in YouTube”.
  4. Scroll down to YouTube controls.
  5. Check the “YouTube Watch History” status. If it reads on, click on the “on” line.
  6. On the page that opens, select “turn off”.
  7. An overlay with information opens. It tells you that you can only pause the history, not stop it entirely. Scroll down until the pause button becomes active and activate it.
  8. Select “Delete old activity” on the next page to delete information about previously watched videos.
  9. Select “all time” on the page that opens.
  10. Select “delete” on the next page to finally delete the information.
  11. Select “Got it” to go back to the main page.

When you go back to YouTube now, you should see no recommendations on the startpage.

You could also hide YouTube Shorts, especially if you do not find Shorts useful on the site, but happen to tune in from time to time anyway.

Closing Words

Obviously, not everyone may want to stay signed-in on YouTube just to limit binging on the video site. Working on self-control may also help. You could, for instance, make sure that everything else is done already before launching YouTube.

Another option that you have is to download YouTube videos instead of watching them online. Use a program like Vividl and download the video that interests you. You can play it locally then and do not get any recommendations while playing the video or afterwards.

Now You: do you binge on something?

YouTube Slow

Is YouTube slow? Your adblocker may be the reason

Posted on by Martin Brinkmann

Google implemented a change recently that makes YouTube slow for some users. This is not a bug, but a deliberate action by Google to punish visitors that use adblockers.

It is quite easy to find out. Visit YouTube and check what happens. If you stare at a blank page for seconds, then you’ve experienced Google’s punishment first hand.

The code is rather simplistic. You can break it down to 1) check for adblocker and 2) delay loading by 5 seconds if an adblocker is found.

It is interesting to note that this may also affect YouTube Premium subscribers. YouTube Premium subscribers do not see ads on the site. They pay a monthly subscription fee for that. If YouTube Premium subscribers have an adblocker installed, loading will be delayed as well.

Google wants you to disable the adblocker on the site. While this speeds up the loading of YouTube, it also enables ads on the site. Not a problem for YouTube Premium subscribers, who may try this to resolve the slow loading issue.

Thankfully though, there are some options to speed up YouTube without disabling adblockers on the site.

Options to fix YouTube’s slowness

Option 1: new filter

Brave custom filter to speed up YouTube

This is one of the easier options. You add a new custom filter to your adblocker and YouTube should load faster again. Most adblockers support custom filters, but some may not.

Here is the filter:

youtube.com##+js(set, yt.config_.EXPERIMENT_FLAGS.web_enable_ab_rsp_cl, false)

Add this filter to your content blocker, e.g., uBlock Origin or Brave Browser, restart the browser and YouTube should load fast again.

Here is how you add the filter to Brave Browser:

  1. Click on the Shield icon in the Brave address bar.
  2. Select Filter lists.
  3. Scroll down on the page that opens and paste the new filter into the “create custom filters” field.
  4. Select save changes.
  5. Restart Brave.

This is the way if you use uBlock Origin:

  1. Select the uBlock Origin icon in the browser’s toolbar.
  2. Activate the “open the dashboard” button.
  3. Switch to the “My filters” tab.
  4. Paste the line into the field on the page.
  5. Select “apply changes”
  6. Restart the browser.

Option 2: Frontends or third-party clients

This is another option. Instead of using YouTube directly in a browser or the official apps, you’d use a frontend in the browser or a third-party app.

Check out my guide on bypassing ads on YouTube without adblockers for a list of suggestions.

The main difference between a frontend and an app is simple:

  • Frontends — can be opened in any browser. They work like the YouTube website in the browser for the most part. Some features, for instance some that may require a YouTube account, may not work.
  • Third-party apps — these install on mobile devices. Run them instead of the dedicated YouTube app or the YouTube website. They may also have limitations.

Video playback and searches work in all instances.

Option 3: switch to extensions that skip or speed-up ads

This type of extension is relatively new. It does not block ads on YouTube, but it either skips them, if supported, or fast forwards them.

Install an extension like Ad Speedup to use the functionality. You need to disable your adblocker on YouTube and the new extension will take over for it.

Closing Words

A cat and mouse game is going on between Google and adblock users. Google seems dedicated to make the life of adblock users as miserable as possible, at least where it comes to interactions with YouTube. Adblock users, on the other hand, need to find new ways to deal with those.

Now You: do you use an adblocker YouTube on?

Windows 10 issue: File system error (-2147219196)

Posted on by Martin Brinkmann

Some Windows 10 users reported issues with certain apps on their devices that refused to launch. Users noticed that default apps would not launch anymore on their systems or crash shortly after launch. Some received the error message File system error (-2147219196), others no error at all.

One user reported the issue on Microsoft’s official Answers forum. The thread blew up quickly. 380 users confirmed that they had the “same question”, and 524 replied to the original message.

The thread starter noted that Microsoft’s official Photos app would crash a few seconds after launch on a Windows 10 system. Double-clicks on photos returned the error message File system error (-2147219196) instead of a view of the selected image.

File system error (-2147219196)
source Richard / Microsoft Answers forum

The apps, including the Photos app, were all native apps of the operating system. Even Microsoft’s Feedback Hub app, used to report feedback and issues, did not work anymore on affected devices.

To sum it up: affected users are no longer able to launch (select) native Windows 10 apps on their devices.

Bug hunting

Users reported the issues elsewhere, including on Microsoft’s Answers forum. There, it quickly became clear that the issue could not be resolved easily. Rollbacks of updates and even reinstallations of Windows did not resolve the issue for affected users.

More and more reports poured in and some users managed to find commonalities. It became clear quickly that the issue affected older systems only. Devices with Intel Core 2 Duo and and Quad processors, as well as older AMD Athlon chips were affected, while devices with newer processors were not. All of these processors shared another commonality, the lack of support for SSE 4.2.

Tip: you can use the free program Glow to list hardware information.

Windows 10’s list of officially supported processors does not include Core 2 chipsets. Microsoft did not introduce barriers in Windows 10 to prevent the installation of the operating systems on devices with unsupported hardware.

The company introduced compatibility blocks in Windows 11. The operating system cannot be installed on devices with unsupported processors, at least not without hacks.

Any attempt to install Windows 11 on a device with an unsupported processor is blocked.

Windows 10 gets installed on devices with unsupported hardware. It may run a bit slower, but that seems to be the only sideeffect.

Microsoft is working on a solution

Microsoft employee Mahmoud G Saleh confirmed the issue and revealed that Microsoft is working on a resolution.

He wrote:

Hi, the Visual C++ team has identified the problem as a regression in the vclibs framework package that the Photos app and other apps depend on. The problem affects computers with older hardware (that do not support SSE 4.2 instructions). Microsoft is currently working on validating a solution and it’s expected to rollout to affected customers soon.

He confirmed that the issue is caused by a regression in a framework package, and that devices with processors that do not support SSE 4.2 instructions are affected.

Saleh posted the information on February 2, 2024. It is unclear when Microsoft is going to roll out a fix to affected users.

Good news is that Microsoft is working on a fix. Bad news is that it is unclear when the fix will be released.

Is the main purpose of Windows 11’s Settings Home page advertising?

Posted on by Martin Brinkmann

I never really liked the Home page of the Settings app that Microsoft introduced last year in Windows 11. Back then, I described it as half promotion half pointless.

Windows 11 users who open the Settings app see the home page by default. It features a mix of quick settings, which Microsoft calls recommended, account information, and, in some cases, promotions.

These promotions focused on OneDrive cloud storage and Microsoft 365 up until now. One ad unit displays “Try Microsoft 365” to the user, if no Microsoft 365 is detected.

Microsoft 365 is a subscription service that unlocks additional cloud storage and gives users access to the most recent versions of Microsoft Office. A subscription includes other benefits, such as premium templates or a dedicated Microsoft Defender app.

Now it appears that Microsoft is adding another ad unit to the home page. Discovered by Twitter user PhantomOcean3, the new unit promotes the Microsoft Copilot Pro subscription.

Microsoft Copilot is part of Windows. Operating system users may launch it with a click on the Copilot icon on the taskbar or the keyboard shortcut Windows-C. Soon, they may also use the dedicated Copilot key on keyboards of select devices to do so.

Those who do not require Windows Copilot may disable it.

Get Copilot Pro

The new unit is not enabled by default at this time. It was spotted in development builds and it is unclear if and when it lands in stable versions. My guess is that it will land this year in Windows 11, maybe even as part of the upcoming Moment update.

The unit advertises Microsoft Copilot Pro. The subscription gives users priority access to Microsoft’s Copilot AI. It is available for $20 per month in select regions at the time of writing.

Copilot Pro gives users priority access to the AI. Apart from that, it gives users 100 boosts for Designer per day. Designer is an AI image creator and boosts prioritize requests. While boosts are not required to use Designer, using the tool without boosts may take longer.

The Settings home page

The Settings home page has the following sections:

  • Recommended Settings — displays recent and commonly used settings.
  • Cloud Storage — lists used and available cloud storage, powered by OneDrive.
  • Bluetooth devices — manage, add, and remove Bluetooth devices.
  • Personalize your device — option to change the color mode and a link to personalization.
  • Microsoft 365 — an advert to try Microsoft 365. Subscribed users see options to manage their subscription.
  • Microsoft Copilot Pro — an advert for the Copilot Pro subscription.

If you don’t count the Cloud Storage unit as an ad, you get two units on the page. This means that 1/3 of the page is used for advertisement. If you add OneDrive to it, you get 1/2 that is used for ads.

The non-ad units are not that useful. Recommended settings displays dynamic options. While these appear limited, most options are just a click or two away anyway on the system.

Hiding the home page in Settings

Windows users may hide the Windows 11 Settings home page. There is no toggle, though. To hide it, Windows 11 users need to add an entry to the Registry.

Here is how that is done:

  1. Open the Start Menu.
  2. Type regedit.exe and press the Enter-key.
  3. Confirm the UAC prompt.
  4. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
    • Note: If one of the keys does not exist, create it with a right-click on the previous key and the selection of New > Key. Name it accordingly.
  5. Right-click on Explorer and select New > String Value.
  6. Name it SettingsPageVisibility.
  7. Double-click on the new entry and set hide:home as the value.
  8. Close the Registry Editor.
  9. Restart the system.

The home page of the Settings app is gone. Windows 11 opens the System page instead, which it used to in the past.

You may undo the change at any time by deleting the Registry key again.

Closing Words

The idea of a Settings home page is not bad in itself. It could display popular and often used preferences to the user. Customization options could further expand the usefulness of the Settings page.

It seems unlikely that this functionality is introduced in future versions of Windows.

Now You: do you use the home page of the Settings app?

Amazon Prime Video Ad Free

Ad Free on Prime Video does not mean ad free, apparently

Posted on by Martin Brinkmann

When Amazon announced that it would introduce ads in Prime Video for all customers, it revealed that customers could pay a few bucks per month extra to avoid advertisement on the service.

Prime Video customers from the United States may see ads already when they view shows and movies on the platform. Soon, starting next week, customers from other regions will also see ads on Amazon Prime Video.

Amazon customers who do not want ads on the platform may purchase an add-on, which Amazon calls Ad free. It turns out now that adding Ad Free to the Amazon Prime subscription does not really remove all ads on the platform.

Amazon may show trailers for shows to customers, even if they pay for an ad free experience. Clearly, Amazon does not define these trailers as advertisement. At least some customers may have a different opinion on that, especially since it appears no longer possible to skip these to access the actual content.

When is an ad an ad?

Are trailers for other shows ads? Considering that these trailers promote other content on the platform, they can be considered advertisement.

Back in the days of DVD videos, companies used to put trailers in front of the actual film or TV show. These were often unskippable as well. Now, Amazon seems to use the very same strategy to push other shows on its platform.

At least some Amazon customers who paid the extra $3 think that this is unacceptable.

Amazon may run into trouble in other regions with the introduction of ads on the platform and the option to pay more to remove these again. In Germany, consumer protection organizations believe that this change should be considered a price increase. Price increases need explicit customer approval in Germany and several other European countries.

Several organizations plan to take legal action against Amazon. There is a good chance that the court will decide against Amazon in the case. While this may not help Amazon customers in the United States and, maybe some other regions, it may in some regions.

Closing Words

Streaming services started out as “better” replacements for Cable TV. Customers would get access to an ad-free experience for a monthly fee.

Some services showed ads on their platforms from the get-go. Amazon was one of them, provided that trailers are considered ads.

Now it seems, that streaming is quickly turning into the same behemoth that it initially thought to slay. Most major streaming platforms support advertisement plans now. These are cheaper, but viewers have to watch several minutes of ads each hour.

Streaming service hopping still works as a way to counter price increases and ads on platforms. Sign-up for just a month or two instead of longer periods, and switch services regularly. This guarantees that you don’t miss shows that you want to watch, but without breaking the bank.

Now You: do you use streaming services?

Amazon launches the AI Clerk Rufus

Posted on by Martin Brinkmann

Amazon launched Rufus to a small audience in the United States today. Rufus, a “generative AI-powered expert shopping assistant”, adds something to the shopping experience on Amazon that has been missing until now.

Online shopping, as comfortable as it is, lacks interactions with clerks. Even simple questions may remain unanswered on Amazon and other shopping sites.

Amazon maintains a question and answers section on its site for products, and these help sometimes. While it may be easy enough to find out if a particular shoe is available in a specific size, questions about the difference between AMD and Intel laptops may not be answered at all on Amazon’s website at the moment.

Getting the answer or information is often not a problem at local stores. Ask the clerk, and if the clerk is knowledgeable, you will get an answer.

Amazon introduces Rufus for exactly this. Rufus is a conversational AI that is designed to help shoppers on the site shop and buy products.

The AI was trained on Amazon’s product catalog, customer reviews, the questions and answers of the community, and information from “across the web”.

In other words, it may answer some of the questions that users may have about a particular product on Amazon. It is still necessary to look closely at the AI before you start using it.

Rufus, the AI clerk

Amazon Rufus
source: Amazon

Rufus may “answer customer questions on a variety of shopping needs and products, provide comparisons, and make recommendations based on conversational context” according to Amazon.

Amazon announced Rufus on its About Amazon website. Rufus may help shoppers in several ways. It may answer broad questions, such as “what to consider when buying running shoes” to very specific questions, e.g., if a pair of running shoes are durable.

Amazon gives a few general examples regarding Rufus’ capabilities:

  • Learn what to look for while shopping product categories
  • Shop by occasion or purpose
  • Get help comparing product categories
  • Find the best recommendations
  • Ask questions about a specific product while on a product detail page

Rufus is available in the official Amazon mobile app for a small subset of U.S. customers. Amazon plans to roll out Rufus to all U.S. customers in the coming weeks. No word on expansion to other markets outside the United States at this point.

Amazon published a short video on YouTube that announces the AI.

Closing Words

Rufus adds something to Amazon that was missing until now: the option to communicate with “someone” to get answers to questions or advice. Whether Rufus is capable of filling the missing role of clerks at Amazon remains to be seen. It may take years before it is mature enough to be of use to the majority of Amazon shoppers.

AI’s like Rufus may replace store clerks in the long run. Think of talking to an Android instead of a human when shopping at Footlockers or another store.

AI introduces the risk of false information. While human clerks may also give bad advice, AI may hallucinate and this introduces another dimension to interactions.

There is also the risk that shopping sites manipulate AIs to push certain products. Again, this may also happen in Stores, but with AI, it is turning into large scale operations.

Now You: would you communicate with AI tools while shopping?

Patch

0Patch patches Windows vulnerability that Microsoft did not consider “patchworthy”

Posted on by Martin Brinkmann

Not every Windows vulnerability requires patching according to Microsoft. When Microsoft analyses reported vulnerabilities, it may conclude that a vulnerability does not meet the bar for servicing.

Exactly this happened to a security researcher recently who reported a Windows Event Log vulnerability to Microsoft. Successful exploitation of the vulnerability results in a crash of the Windows Event Log service. The vulnerability requires authentication but no special user privileges. Attacks may crash the service on local or remote devices.

The vulnerability affects Windows 10 and Windows Server 2022 devices according to the researcher. 0Patch discovered later that it affects more Windows systems. On the client side, all Windows operating systems starting with Windows 7. On the server side, all Windows server operating systems starting with Windows Server 2008 R2.

The researcher published a proof of concept of the vulnerability on GitHub. A short demo GIF is also available there.

0Patch steps in, creates free micro-patch

Micro-patching service 0Patch analyzed the issue. It discovered that the proof of concept was “remarkably simple” and that attacks did not take more than a second to execute.

The Windows Event Log service restarts if it stops, but this happens only twice according to 0Patch. Attackers may run the attack multiple times to stop it for the session.

No events are logged when the service is not running. This means that events cannot be read either while the service is down. 0Patch notes on its website that Windows keeps a separate record of security and system events when the logging service is down.

These are added to the log when it is up again. Company engineers discovered that the information persists across sessions, but that it gets lost when the system crashes.

To sum it up: a successful attack, which includes a crash of the system in the end, may prevent the logging of any events on the system. This makes forensic work difficult on attacked systems and may be exploited by malicious actors to cover their tracks even better.

0Patch writes:

During the service downtime, any detection mechanisms ingesting Windows logs will be blind, allowing the attacker to take time for further attacks – password brute-forcing, exploiting remote services with unreliable exploits that often crash them, or running every attacker’s favorite whoami – without being noticed.

0Patch created a free micro-patch that addresses the vulnerability in all affected versions of Windows.

The patch requires the installation of 0Patch Agent on affected systems. 0Patch continues to support some Windows systems that Microsoft does not support anymore. Windows 10 will also receive extended support by 0Patch, but also by Microsoft through its Extended Security Updates program.

Additional information, including vulnerability and patch details, are available on the 0Patch website.

Closing Words

Whether it is necessary to patch the vulnerability depends on risk assessment. Most home users are not targeted by sophisticated attacks, but this may be different for organizations.

The patch is free at the moment and it will stay that way. Only the release of an official patch by Microsoft may change that in the future.