not_a9
Re:Show HN: A working Nintendo in ~1GB of Qwen weights
on Friday October 30, 2026 @02:35PM (#50308282)
Re:Four Months of Zig
on Wednesday October 28, 2026 @03:04AM (#50270081)
The next choice will be dynamically resolving syscall IDs from NTDLL? Surely that has no issues that could possibly happen.
Re:Jailbreaking the Switch 2
on Friday October 23, 2026 @08:12AM (#50207725)
If you look at unknowncheats.me you’ll see a significant amount of reversing of their games
Re:PHP2Shell: AI uncovers critical RCE in PHP
on Wednesday October 21, 2026 @11:57AM (#50183144)
Plenty of function pointers to overwrite, presumably
Re:Is Liquid Metal Killing Our PCs? Scientific Analysis and a 2-Year T...
on Saturday October 17, 2026 @12:28PM (#50132474)
For what it’s worth isn’t liquid metal actually not very good for extreme overclocking seeing as it solidifies at subzero temps?
Re:Steam Client Is Now Faster Than Epic's New Vibe Coded Launcher
on Thursday October 15, 2026 @07:12PM (#50111655)
Do you think Deadlock will not devolve into a mixture of gambling and hvh like every Valve multiplayer game that’s been relevant in the last 10 years (except Dota because hvh in dota sounds complex, so it's just gambling there)?
Fortnite avoids this by having no gambling and by making hvh infeasible FYI
Re:Steam Client Is Now Faster Than Epic's New Vibe Coded Launcher
on Thursday October 15, 2026 @04:33PM (#50109807)
> They clearly know what they are doing at Valve
Yeah, at promoting child gambling. Not sure about games
Re:Gaming on Linux Without Cheating
on Wednesday October 14, 2026 @02:36PM (#50092719)
What ranks are you playing on? While a player of any rank can buy Neverlose and win and if they wanna just pwn cleans they can buy Midnight (speaking of buying P2Cs: if Faceit is apparently riddled with cheaters, where can I buy a P2C that I can pwn on Faceit with for an affordable price?), said cyber athletes will naturally gravitate towards higher ranks.
> FACEIT is riddled with cheaters
According to sources of… what? In any case it’s sure as shit less riddled with cheaters than Premier LMAO
Re:Gaming on Linux Without Cheating
on Wednesday October 14, 2026 @02:28PM (#50092575)
Most likely there’ll be lots more hunting for physmem read/write vulnerabilities as well as bugs in userspace stuff like GUI whatsits that’d give code execution/memory readwrite.
Userspace bugs is where I’d look first.
Re:Gaming on Linux Without Cheating
on Wednesday October 14, 2026 @02:25PM (#50092516)
How is Valve’s VACNET doing? I think you should take a look at what’s happening in Counter-Strike 2 these days to see what the true frontier of ML based anticheat looks like.
Frankly at this point I’m pretty sure John McDonald plays HvH too
Re:AnyPS5: Port PS5 binaries to PC without emulation (87% system libra...
on Friday October 09, 2026 @10:02AM (#50020698)
I can't edit this post anymore but if you wanna read a bunch of stuff on the topic https://k0mkc.hatenablog.com/ is a nice blog. All in Japanese, but it should be perfectly translatable.
Funny thing is they removed all their blogposts on Griffin (an obfuscator several anticheats, including EA's, Riot's and FaceIT's utilize) for whatever reason.
Re:AnyPS5: Port PS5 binaries to PC without emulation (87% system libra...
on Friday October 09, 2026 @07:55AM (#50019232)
Devirtualization and recompilation is unfortunately a really, really tough task even for clank assisted RE.
Re:AnyPS5: Port PS5 binaries to PC without emulation (87% system libra...
on Thursday October 08, 2026 @09:13PM (#50014774)
Unlikely most of the Denuvo cracks actually remove the virtualized code from the executable. Not feasible without extensive binary rewriter tooling (that, while being sloppable, still takes a lot of time to slop).
Re:Beating the Compiler
on Tuesday October 06, 2026 @10:17AM (#49978886)
I don’t think most obfuscators will care about self-modifying code anyway, outside of cases like packing (…and in that case you probably won’t be rewriting the unpacker stub anyway :D). Also self modifying code breaks on targets like Windows kernel drivers, which are a big target for SOTA obfuscation these days.
Re:CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox P...
on Sunday September 27, 2026 @12:55AM (#49863481)
Technically most malware should generally be able to rely on the syscall interface, no? As generally it doesn’t need a GUI or anything
Re:Rust Is Tier-1 Language at Microsoft
on Thursday September 10, 2026 @11:11AM (#49645129)
Visual Studio does have a really nice C++ debugger - one would imagine the C++ debugging capabilities should translate to Rust.
Re:HelloAssembly The smallest possible complete Windows application
on Thursday September 10, 2026 @08:09AM (#49642416)
> PS C:\Program Files\Microsoft Visual Studio\18\Community> dumpbin.exe /EXPORTS C:\Windows\System32\ntdll.dll | rg ZwMapViewOfSection
2072 80F 001612B0 ZwMapViewOfSection
2073 810 00163160 ZwMapViewOfSectionEx
425 1A0 001612B0 NtMapViewOfSection
426 1A1 00163160 NtMapViewOfSectionEx
https://learn.microsoft.com/en-us/windows-hardware/drivers/k...
Re:How accurate have Ed Zitron's AI skeptic predictions been?
on Sunday September 06, 2026 @08:41AM (#49585998)
Given the cost of openweight frontier models like Kimi I’m fairly sure the token prices actually make some money.
Re:HelloAssembly The smallest possible complete Windows application
on Monday August 31, 2026 @08:10AM (#49508690)
> This has nothing to do with ntdll at all.
I can only wonder where `NtMapViewOfSection` could be exported from...
Re:Progress Linux 7.2 – Asahi Linux
on Thursday August 27, 2026 @07:12AM (#49462880)
I wonder how they handle merging upstream clanked stuff.
Re:How much of HN is AI?
on Tuesday August 25, 2026 @08:17PM (#49442569)
I guess Hex-Rays and Vector35 must be hallucinating their effects for, say, reverse engineering. OFC rev isn't be all and end all of computing but the effect LLMs had on security research and adjacent spaces (say, CTF) is interesting
Re:HelloAssembly The smallest possible complete Windows application
on Tuesday August 25, 2026 @04:55PM (#49440506)
In addition a bunch are documented in the driver docs, such as
https://learn.microsoft.com/en-us/windows-hardware/drivers/d....
> If the call to this function occurs in user mode, you should use the name "NtMapViewOfSection" instead of "ZwMapViewOfSection".
Re:Anthropic's best AI model struggles to attract users as cheaper too...
on Sunday August 23, 2026 @08:15PM (#49413888)
Memories break Fable 5 for me as well in chatbot. I ask Opus a lot of sec related stuff and now if I even type “hello” in chat it gets insta-downgraded to Opus 5.
Re:Microsoft Blames Windows Gaming Issues on RGB Lighting Devices
on Sunday August 23, 2026 @12:51PM (#49410326)
Assuming you want to preserve the same functionality of drivers, how would giving the userspace RGB controller driver the same set of tools (usually fun things like physical memory RW) change anything?
Re:Microsoft Blames Windows Gaming Issues on RGB Lighting Devices
on Sunday August 23, 2026 @12:45PM (#49410277)
Microsoft did break backwards compatibility with some drivers (packed stuff that relied on being able to write to executable sections, for instance) w/ HVCI and then with some other stuff (for instance, drivers using push+ret for obfuscating function calls + some exception handling related machinery some virtualization based obfuscators used) with KCET.
With that being said virtualization based security is not mandatory, though compliance is needed for signing new drivers (note: this is funky too and some drivers will do HVCI-noncompliant things when it’s disabled, like some anticheat drivers hooking #PF to more efficiently catch unsigned code execution in HVCI-free scenario). I think next backwards compatibility breaking move will be enabling SMAP.
Re:Microsoft Blames Windows Gaming Issues on RGB Lighting Devices
on Sunday August 23, 2026 @12:38PM (#49410216)
Technically the hardware threshold is sort of real for making virtualization based security usable and useful.
Re:Claudette: Make Claude Stop Talking Like a BuzzFeed Article
on Friday August 21, 2026 @11:51AM (#49389956)
https://x.com/_can1357/status/2090360068529111530
Should be pretty difficult to ignore
Re:How do functions like alloca allocate memory from the stack?
on Tuesday August 18, 2026 @11:08AM (#49346763)
The significantly increased capabilities of cheats if you can read/write memory and the dogshit that AI-oriented anticheat approaches continue producing (look at VACnet, though I am sure there are other companies producing better things like Anybrain - the thing is, 99% of the time the products of said companies are integrated along with a proper strong anticheat like EAC) will ensure kernel mode anticheats will be alive and well.
Re:How do functions like alloca allocate memory from the stack?
on Monday August 17, 2026 @10:21PM (#49340383)
While I’m not sure if this is a bot (where did vidya enter the convo?), game hacking on both cheat and anticheat side has genuinely deep Windows internals knowledge (admittedly somewhat lopsided, but deep nonetheless)
Re:AI Is Solving CTF Challenges in Minutes
on Wednesday August 12, 2026 @09:29AM (#49272123)
OK, but is that fun for people who don’t wanna clankermaxx? In addition this does not address the paytowin aspect of clankermaxxed CTFs