Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by john_moscow | Hacker News Reader

Full thread

john_moscow·

>public NT kernels from as early as November have begun to implement the same technique.

Does the author refer to ReactOS, or has Microsoft really open-sourced parts of the NT kernel?

View on HN

I seems that someone discovered KASLR from NT kernel. https://twitter.com/aionescu/status/930412525111296000

Reverse engineers pretty much know how everything in NT works. Msft publishes enough symbols that it's even possible to automatically decompile much of the code. Something like page table splitting would be obvious.

And the source of an older version of NT leaked a while back.

I think that was NT 4. I don’t think there’s much of that 20-year old code left in the kernel.

I'd actually be surprised if there weren't quite a bit of it still in the kernel.

Actually given the horror stories that have been told about the windows source code over the years, I'd be very, very surprised if there wasn't 20 year old code in a lot of places.

Hell there's still 20 year old code running in the Linux kernel

The source code of the kernel of Windows server 2003 and Windows XP Pro x64 was available to universities for education purposes. Someone leaked the code on internet years ago which is now everywhere on github (search WRK-v1.2). The code doesn't include the ntfs module.

https://web.archive.org/web/20120412091908/http://www.facult...

You would be very surprised.

The author of that citation (Alex Ionescu) is known for reverse engineering the NT kernel, and in some cases, implementing features for ReactOS accordingly. He would have been referring to the NT kernel, which he seems to disssemble and comment on with every update.

Reply on news.ycombinator.com