greenn

With the current model kernel level access is required. Real security products have to be able to operate above userland. Ideally in the future there can be a layer in between userland and kernel for this sort of thing. Maybe we use some of those extra protection rings?

Oh you're totally right about the driver APIs. A fair amount has been added, but that stuff gets a new export to avoid breaking anything. For example, there's a dozen different `ExAllocate`s now. I wouldn't call myself a driver-writing expert but I'm sure that same driver for Vista could be made to target Windows 10 with little effort.

I'm talking about the kernel space itself, not the APIs exposed to userland to interface with the kernel from your application. Internal APIs and behaviors are mostly identical over the past ~20 years, and any changes are usually moved to a new export. I don't think this should be taken for granted.

A fair amount has been changed or added, I'd say. I recommend the Windows Internals book if you're interested in learning about the Windows kernel. The 7th edition just came out.

Until I started working at a SaaS company shipping to Windows enterprise customers I thought PowerShell wasn't used by anyone. Now I see it all the time. It's not fantastic, but if you're in the Windows world it beats writing CMD scripts.

As an end user though I imagine most people use bash or some other unix-world shell, especially post WSL. The "Git Bash" distribution is surprisingly useful as an everyday Windows shell.

I haven't profiled our Windows kernel driver across different kernel versions (maybe I should!) but I'd like to offer this perspective: the kernel is incredibly stable from my driver development point of view. The biggest reason we ship different drivers for Windows 7/8/10 is just that newer WDKs don't support anything older than 10. The kernel has remained remarkably consistent while still offering new features we can take advantage of on non-legacy systems.

I'm not sure emacs modes offer this level of extensibility, but I'll check them out.

As a baseline solution "language" could be substituted for "unicode range".

Re "use a better font": fonts are something I enjoy and I try new ones frequently.

Alignment could definitely be a challenge. Perhaps a better personal solution would be to write something to combine two fonts in a way that also solves alignment. Not a very "accessible" solution but definitely easier.

This is applying a font for an entire window/frame/buffer, right? Not applying two fonts for different characters within the same buffer.

pannen's commentated videos are always a treat. He started uploading again this year after a long hiatus (that started after this video) and I can't wait for more.

If you're interested in Super Mario 64 speedruns, the video[0] "The Story of the Greatest Super Mario 64 Speedrunners" is great.

[0]: https://www.youtube.com/watch?v=PdLj5OrTOdY

Linux desktop users specifically don't have to worry about malware or ransomware until it gets significant usage. Just like people used to say Macs don't get viruses until enough people used them.

Last time I checked (could be very out of date) Linux doesn't have any way to enforce code signing requirements, even in the kernel.

The difference might be that workers have an interest in maintaining the business so they still have well paid jobs while CEOs do not necessarily have an interest in unions' well-being.

Did you mean to link to https://nuclearsecrecy.com/nukemap/ ?

Cool! I'm relatively young, so the only interaction I've ever had with a rotary phone was my dad finding one in a box at my grandparents' house. Still, this seems like fun. Cool that you can communicate with the cell modem directly.

Third parties are perfectly capable of making replacement parts that match the OEM parts in functionality and quality. This has no effect on integration. The other parts of the phone don't care who manufactured the part, unless they were programmed to, as long as they are functionally equivalent. The user certainly doesn't care who manufactured the part as it does not effect the user experience.

In the Super Smash Bros. Melee competitive scene we still use CRTs for in-person tournaments because of the input lag on LCDs. Most original hardware available to play the game doesn't have a digital display output unless you have an early model GameCube and purchase a ~$100 HDMI adapter. Even if you get the hardware setup for modern digital output, most LCD monitors still have poor response times without spending the extra money for a "gaming" monitor.

There has been a lot of work by modders to reduce the input lag introduced by the game engine itself to offset the lag introduced by LCD monitors, but I hope someday LCDs can catch up in this last metric.

The T runs mostly on a separate rail, but there are a number of places in city limits where it runs with cars on the street. Check out Arlington Avenue in Allentown (the Pittsburgh neighborhood, not the city).

If I understand correctly, this is just a kernel-mode snippit to copy the System process token to your target process. It assumes you've already found a vulnerable driver to execute code in the kernel. If you can execute code in the kernel then yeah, you can give processes privileges they didn't have before.

I wish nobody did. I work for a security company writing Windows kernel drivers and I still have to support Windows 7 / Server 2008 R2. There's been talk of porting to Vista!

Great collection, this channel is what got me into Amiga music. One late work night a coworker and I played these mixes in the office!

Malware / ransomware / security products have been doing this for many years, especially to Windows modules like kernel32.dll and ntdll.dll.

> Most of the listeners hearing the unfactual, misleading and false COVID information on Spotify are 24 years old, impressionable and easy to swing to the wrong side of the truth. These young people believe Spotify would never present grossly unfactual information.

Hello, 23 but close enough. This is not how I think. Spotify is not the creator of the content, they just host it. Is what Roe Rogan and his guests are saying so awful that you have to bully his host? I must be missing something.

Sounds like this idea is limited to the curl tool and wouldn't add anything to libcurl, which is great. I'd prefer libcurl leaving JSON to other libraries.

I use bash variables inside JSON with curl all the time, which leads to string escape screw ups. I know there are alternatives that make testing REST + JSON easier, but since our software uses libcurl in production I prefer to test with curl to keep things consistent.

If the purpose of defer is to replace the `goto single_exit`, I think the value captures are unnecessary. Any single_exit I've implemented uses the value at the time of function exit, so that I can realloc in the middle of the function.

It would be a shame if this defer was limited to function scope. It would be very useful in nested blocks as well. But, I would still appreciate it.

defer and auto are the only things I would love to see in C.

Honestly asking, isn't this stuff usually Japanese characters? I dunno if theres even "data" they could use for other skin tones

Huh, guess I'm "right" then. Weird that my voting history would indicate otherwise, but I don't like city living so ¯\_(ツ)_/¯

That crypto has to become real money at some point. If the ransom is in something like bitcoin (very common) then identification is just a waiting game for that conversion

20 year old cars hit the sweespot for me. They're repairable and reliable (given a reputable model), and they're new enough to have airbags.

I hope electric cars take advantage of their simplicity and become very repairable, but I'm worried given Tesla's behavior.

I don't know if I'd say obsolete, but a question mark in the tweet, at least for me, would not have clarified or added anything