@weezerOSINT >LSASS is wide open at SYSTEM
This is not true if VBS/Credential Guard is enabled which should be the case on most (if not all) machines
English
CreepNT
336 posts
what can someone actually do with this?
dump every password on the machine. LSASS is wide open at SYSTEM. domain admin hashes, kerberos tickets, service accounts. lateral movement across your entire network. domain controller in minutes
or skip all that. delete shadow copies and encrypt everything. ransomware from a standard user account in seconds because defender handed them the keys
this is live and unpatched right now. the thing protecting your PC is the thing that compromises it
English
Windows defender has been compromised.
right now there is a public unpatched exploit that gives any app on your windows PC full system admin access. no password. no popup. nothing
your antivirus doesnt stop it. your antivirus IS the exploit. windows defender is the attack vector
ransomware gangs can use this to encrypt your entire machine and steal every saved password, browser session, and discord token you have. fully patched windows 11. real time protection on
thread
English
CreepNT がリツイート
I'm completely convinced at this point that the "Command Palette" is a fundamental UI concept, and should be in all applications. It should also be a built in browser concept, there should be an API for websites to push items to the command palette ("new post", "muted words" etc)
English
@NearestCommit Windows 9x is probably the best example of the former. I can't think of any examples of the latter. OSes must be programmer-friendly and user-friendly; if the developers can afford a robust kernel, they can afford a friendly and robust userspace.
English
Bad kernel on top of a good userland or a bad userland on top of a good kernel
English
@Flipacholas Or maybe I'm getting ahead of myself and the board's back is planned for part 2? 😆
roughly annotated back face (pic not mine, from iFixit)
English
@Flipacholas Off-topic but this made me revisit the Vita article and
☝️🤓 the "I/O Controller" - codename Barkley, a.k.a. "Motion" - is rather a "sensor hub": it gathers data from an accelerometer, gyro and compass and sends them to Kermit over SPI.
Would be nice to have board behind too 🙂
English
@timschuerewegen What is the code in screenshot even used for?
Seems to checksum the flash, but ends in an infinite loop anyways... so what's the point?
(and I assume screenshot is unrelated to the actual bug?)
English
The Nintendo Talking Flower firmware does not check the size of the language index table when loading it from SPI flash into RAM, allowing me to corrupt the stack, execute arbitrary code, and dump the protected STM32 firmware🤣
(SHA1 51ec2ee3bbc12772cd4abed1bf2d26b02e541e14)
English
@ilua_linerin @beeeemooooo @Gaming4all98 The "porting is difficult" point is even mooter when said PS2 games have already been ported to PS3/Vita (esp. latter whose programming model is basically a phone's): the bulk of the porting process is done, you "just" need new GFX/SFX/input backends for %PLATFORM%
English
@beeeemooooo @Gaming4all98 They have the source code, and the tools to make it happen, in fact Capcom is pioneering with static recompilations with their Megaman collections (yeah, they ain't emulation).
And we ported Sonic Unleashed with no source code from 360 to x86 and now to ARM, WITH NO SOURCE CODE.
English
Not nearly as bad but function `sceIoSchedulerExecuteIoCommand` of the PS Vita kernel is around/at least 700 lines long. (though, it seems Sony used a coding style with lots of almost-empty lines)
The Internet Fish@TheInternetFish
English
CreepNT がリツイート
I ported Linux to the PS5 and turned it into a Steam Machine. Running GTA 5 Enhanced with Ray Tracing. 🤯
English
@2dsexbot @nicbarkeragain spinlocks in uniprocessor configurations (they should degenerate into mere `irq_disable()`/`irq_enable()` and occupy no space, but can't in C++ due to that)
English
@nicbarkeragain provide a code example where this would have any cost. oh you cant? then sybau
English
Grand Club Icarus was a truly one-of-a-kind experience. The carefully curated setlist, the various remixes (Verified Beauty Rock Ver. in particular) and the pre-show+VCR DJ mixsets made this an intense show I'll never forget!
Looking forward to more of #hellolive_ARTMS !
English
Reminds me that for a few builds of the PS Vita operating system, second_loader contained hardcoded string “Donate2Fukushima”
paige : STORIES 3 HYPE!!@gandalfsoda
When source code leaked in 2020 it was discovered that Pokemon Diamond and Pearl are programmed to decrease encounter rates by 10% on days such as September 11th, August 6th / 9th, the bombings of Hiroshima and Nagasaki, New Year’s Day, and the equinoxes.
English
@taxidriver1968 @Eddystone506 @LoftusSteve There are only two types of plugs across all EU which *are compatible with each other anyways*. (The only exception is Italy which has its own custom **grounded** plugs, but note that 2-prong cables from anywhere else are *also* compatible with these plugs)
What is your point?
English
The chef's kiss example of what's wrong with the EU.
They celebrate this as some great achievement when it will take 5 years from inception to completion, stifle innovation, and almost certainly be obsolete by the time it's law. Then need doing all over again.
European Commission@EU_Commission
One port, one cable, one Europe. This holiday, unwrap the power of one: USB-C for all. Yes, not just phones, tablets, and laptops. In three years, every charger will be under the same tree. Because less waste, smarter choices, mean more for everyone, all year long. link.europa.eu/QDMFTh
English
@Poshaa__ @JulienTechInvst @JeffreyPastel Mais ça n'a rien à voir de toute façon, Nvidia fait des produits à base de ARM Cortex-A (microprocessurs) alors que STMicroelectronics fait des produits à base de ARM Cortex-M (microcontrôleurs), ce n'est pas du tout la même chose et le même marché.
Français
@JulienTechInvst @JeffreyPastel Toutes les switch sont sous chips NVIDIA deja, mais c'est sur que c'est pas la même chose que le mastodonte pour l'IA
Français
Voilà le niveau journalistique de BFM business... Comparer Nvidia, qui fait des GPUs pour l'IA, à STMicroelectronics, qui fait des semiconducteurs pour l'automobile...
BFM Business@bfmbusiness
En difficulté face au géant américain Nvidia, le fabricant de semi-conducteurs STMicroelectronics obtient un nouveau financement européen de 500 millions d'euros l.bfmtv.com/JMEf
Français
> But that's a project that if it dies tomorrow,
> there's no impact in the industry we live in.
There will be impact, these vendors will have huge problem:
- Netflix
- Sony (PlayStation)
- Nintendo (Switch)
- NetApp
- EMC (Isilon)
- Juniper
- Beckhoff
- WhatsApp
... many more.
Arthas@ArthasLich
I understand that. But that's a project that if it dies tomorrow, there's no impact in the industry we live in. Even TrueOS has a Linux distro with ZFS that can do more than its BSD version. I'm not saying this lightly. It's actually sad since I was a FreeBSD user since 2.2.5 and due to its lack of innovation lost the UNIX/UNIX-like wars for Linux. And it will never catch up.
English
@official_artms It's difficult to avoid spoilers but I know it's worth the wait - it'll be the best day of the year, and it can't come soon enough!
#Grand_Club_Icarus_Europectation
English
한국어
As awkward as the mixing may be, this perfectly encapsulates the word “despair”, spiked with a dose of hope - waiting for rescue by the sav-Hee-or while at your lowest.
#ARTMS #HeeJin #희진 #sAvioR #sAvioR_Streaming_Event open.spotify.com/intl-fr/track/…
English