The Old New Thing

It rather involved being on the other side of this airtight hatchway: Attacking a user by modifying that user’s files

January 18, 2023 Jan 18, 2023 01/18/23

Raymond Chen

You're just attacking yourself.

A trio of dubious denial-of-service security vulnerability reports which are just style points piled on top of nothing

January 17, 2023 Jan 17, 2023 01/17/23

Raymond Chen

You could have accomplished the same thing with a garbage file.

Adventures in application compatibility: Querying for an internal interface

January 13, 2023 Jan 13, 2023 01/13/23

Raymond Chen

Reaching in and fiddling the internal knobs.

It rather involved being on the other side of this airtight hatchway: Administrator attacking a domain account on the local system

January 10, 2023 Jan 10, 2023 01/10/23

Raymond Chen

You don't gain control over any other systems.

How can I force a user to have a specific SID prefix, so that they go into a particular group?

January 5, 2023 Jan 5, 2023 01/5/23

Raymond Chen

The prefix doesn't define group membership.

It rather involved being on the other side of this airtight hatchway: Gaining code execution from a Trojan horse

January 3, 2023 Jan 3, 2023 01/3/23

Raymond Chen

You already have code execution, so it's not surprising that you can gain code execution.

2022 year-end link clearance

December 30, 2022 Dec 30, 2022 12/30/22

Raymond Chen

Closing the book on another year.

On the large number of ways of expressing Microsoft Visual C++ compiler versions

December 19, 2022 Dec 19, 2022 12/19/22

Raymond Chen

So many version numbers.

Why doesn’t Windows use the 64-bit virtual address space below 0x00000000`7ffe0000?

December 16, 2022 Dec 16, 2022 12/16/22

Raymond Chen

It does use it, although it doesn't look like it.