Under what conditions can SetFocus crash? Another debugging investigation
May 29, 2015May 29, 201505/29/15SetFocus is the symptom, not the cause.
May 29, 2015May 29, 201505/29/15May 29, 2015May 29, 201505/29/15When designing your user interface, be mindful of the selection-readers
May 28, 2015May 28, 201505/28/15Also the double-click readers, the hover-readers, and the margin-click readers.
Dubious security vulnerability: Luring somebody into your lair
May 27, 2015May 27, 201505/27/15Constructing an insecure directory.
The tadpole operators explained
May 26, 2015May 26, 201505/26/15Combining two things in an unintuitive way.
New C++ experimental feature: The tadpole operators
May 25, 2015May 25, 201505/25/15Give it a whirl.
So you decided to call SHFileOperation from a service, at least remember to disable copy hooks
May 22, 2015May 22, 201505/22/15Mitigating the disaster.
If you can set enforcement for a rule, you can set up lack of enforcement
May 21, 2015May 21, 201505/21/15An exeption to a rule is just another rule.
When you inadvertently become a collector of something you really aren't all that into
May 20, 2015May 20, 201505/20/15As I was heading home at the end of the day, I ran into one of my colleagues who was also going home, and he was carrying a Star Wars-themed metal lunchbox similar to this one. For those who didn’t grow up in the United States,
It rather involved being on the other side of this airtight hatchway: Code injection via QueueUserAPC
May 19, 2015May 19, 201505/19/15But you already pwn that thread.
Determining programmatically whether a file was built with LAA, ASLR, DEP, or OS-assisted /GS
May 18, 2015May 18, 201505/18/15Sucking the flags out of the header.