The Old New Thing

Assessing a read-after free for security implications: The string comparison

June 3, 2022 Jun 3, 2022 06/3/22

Raymond Chen

Can you get elevation? What are you disclosing?

Now that computers have more than 4MB of memory, can we get seconds on the taskbar?

April 11, 2022 Apr 11, 2022 04/11/22

Raymond Chen

Letting the CPU go to sleep.

Why is every other line of my file mysteriously changed to nonsense Chinese characters?

March 28, 2022 Mar 28, 2022 03/28/22

Raymond Chen

Decoding another type of mojibake.

Why does the Windows debugger engine show a bunch of hex digits after one of the DLL names?

January 31, 2022 Jan 31, 2022 01/31/22

Raymond Chen

It's trying to disambiguate name collisions.

2021 year-end link clearance

December 31, 2021 Dec 31, 2021 12/31/21

Raymond Chen

Another trip around the sun.

Dubious security vulnerability: Accessing information across accounts after changing email address

December 13, 2021 Dec 13, 2021 12/13/21

Raymond Chen

It's still you, just with a different online façade.

It rather involved being on the other side of this airtight hatchway: Producing malicious data in a kernel driver

December 7, 2021 Dec 7, 2021 12/7/21

Raymond Chen

Sure, you can fool other people, but you can do far more than that already.

Every business process secretly wants to fail

November 23, 2021 Nov 23, 2021 11/23/21

Raymond Chen

At least, that's how it looks from the outside.

If your domain name parser can’t handle internationalized domain names, then maybe that’s your parser’s problem

November 9, 2021 Nov 9, 2021 11/9/21

Raymond Chen

Don't blame someone else for letting strange domain names reach you.