The Old New Thing

Adventures in application compatibility: Querying for an internal interface

January 13, 2023 Jan 13, 2023 01/13/23

Raymond Chen

Reaching in and fiddling the internal knobs.

How should I interpret the various values of NLM_CONNECTIVITY?

January 12, 2023 Jan 12, 2023 01/12/23

Raymond Chen

Different levels of connectedness.

What does it mean when I get a mismatch from MSVC for _COROUTINE_ABI?

January 11, 2023 Jan 11, 2023 01/11/23

Raymond Chen

The two different kinds of coroutine interfaces shouldn't be mixed and matched.

It rather involved being on the other side of this airtight hatchway: Administrator attacking a domain account on the local system

January 10, 2023 Jan 10, 2023 01/10/23

Raymond Chen

You don't gain control over any other systems.

On leading underscores and names reserved by the C and C++ languages

January 9, 2023 Jan 9, 2023 01/9/23

Raymond Chen

The rules laid out.

Dubious security vulnerability: Granting access to SIDs that don’t exist yet

January 6, 2023 Jan 6, 2023 01/6/23

Raymond Chen

You can put anyone you like on your guest list, even if they don't exist.

How can I force a user to have a specific SID prefix, so that they go into a particular group?

January 5, 2023 Jan 5, 2023 01/5/23

Raymond Chen

The prefix doesn't define group membership.

Using perfect (and imperfect) forwarding to simplify C++ wrapper classes

January 4, 2023 Jan 4, 2023 01/4/23

Raymond Chen

Just call that other thing the same way you called this thing.

It rather involved being on the other side of this airtight hatchway: Gaining code execution from a Trojan horse

January 3, 2023 Jan 3, 2023 01/3/23

Raymond Chen

You already have code execution, so it's not surprising that you can gain code execution.

Opinionated notes on the Windows.Data.Json namespace

January 2, 2023 Jan 2, 2023 01/2/23

Raymond Chen

It's available if you need it, but there are some tricks and pitfalls, and you may very well have better options.