The chain reaction started when a customer’s line of business application doesn’t work with UNCs
May 31, 2016May 31, 201605/31/16Fighting over a registry key.
May 31, 2016May 31, 201605/31/16May 31, 2016May 31, 201605/31/16Printing the name and position of the focused item on the desktop
May 30, 2016May 30, 201605/30/16You already know how to get the view, so ask the view.
Diagnosing a crash in unloaded_something.dll
May 27, 2016May 27, 201605/27/16Find out what used to be loaded there.
Debugging session: Which of the many things happening in this single line of code is the one that crashed?
May 26, 2016May 26, 201605/26/16Let’s go to the disassembly.
How can I generate a stack backtrace that is independent of ASLR?
May 25, 2016May 25, 201605/25/16Use module offsets rather than absolute addresses.
How do I create a directory where people can create subdirectories but cannot mess with those created by other users?
May 24, 2016May 24, 201605/24/16Advanced ACL games.
Security through lying
May 23, 2016May 23, 201605/23/16Factual errors make it harder for the good guys.
How long do I have to keep the SECURITY_ATTRIBUTES and SECURITY_DESCRIPTOR structures valid after using them to create a file?
May 20, 2016May 20, 201605/20/16Once CreateFile returns, they aren’t needed any more.
Why did the friendly name for the Network Service account change?
May 19, 2016May 19, 201605/19/16Nobody promised it wouldn’t.
Why doesn’t RevertToSelf undo the most recent SetThreadToken?
May 18, 2016May 18, 201605/18/16It removes all impersonation; it doesn’t restore it.