Ken Sykes

177 posts

Ken Sykes

Ken Sykes

@KensyAtMS

Microsoft, Windows 3.0 developer, Time Travel developer, Husband, Father, Grandfather, Christian

Katılım Ocak 2023
29 Takip Edilen206 Takipçiler
Ken Sykes
Ken Sykes@KensyAtMS·
@GabrielLandau Once injected the IPC protocol should not write into the target process, but yes, we are not able to inject into PPL processes.
English
0
0
0
27
Gabriel Landau
Gabriel Landau@GabrielLandau·
Thanks for the response. That sample uses ShellExecute to launch TTD.exe (which may launch TTDInject.exe). Neither can open our PPL process to perform the DLL injection. On top of that, there's the DLL signing requirements which block the DLLs from loading into PPL. We could work around both of these by ELAM-signing the TTD binaries and running them as AM-PPL, but then there's the concern about potential compromises of the PPL security model if the TTD IPC protocol allows arbitrary writes (or similar) into the target process.
English
1
0
1
84
Ken Sykes
Ken Sykes@KensyAtMS·
Do you wish Time Travel Debugging was faster and more lightweight? Our latest version lets you decide exactly what you want recorded! Select modules to record or use the API for full control. Get your recording just the way you like it. Crusts optional. aka.ms/ttd
Ken Sykes tweet media
English
3
25
81
53.1K
Ken Sykes
Ken Sykes@KensyAtMS·
@GabrielLandau This will let you start and stop recording on yourself, without requiring injection. The link didn't work so search for WinDbg-Samples in github and look under the TTD folder.
English
1
0
1
95
Ken Sykes
Ken Sykes@KensyAtMS·
@GabrielLandau The PPL subsystem doesn't offer a way for us to get in and record (kind of understandable given what PPL is). If you are building the code you want to record, the Live Recording API might work: WinDbg-Samples/TTD/LiveRecorderApiSample at master · microsoft/WinDbg-Samples
English
1
0
0
78
Ken Sykes
Ken Sykes@KensyAtMS·
Have you ever wanted to open a TTD trace and analyze it for yourself, at the speed of .Calls()/.Memory() in WinDbg? Your wish has been granted! We have released an experimental version of our Replay API for you to use. See aka.ms/ttdsdk for documentation and samples.
English
0
16
61
6K
Ken Sykes
Ken Sykes@KensyAtMS·
Everything I need to know about VI I learned from a meme (forgot to configure the git editor and paid the price)
Ken Sykes tweet media
English
0
0
1
213
Ken Sykes
Ken Sykes@KensyAtMS·
New WinDbg just dropped in the Microsoft Store! Faster downloads for large PDB files and console debuggers are part of the package! Note the architecture is part of the exe name. aka.ms/windbg.
Ken Sykes tweet media
English
0
21
79
7.4K
Ken Sykes
Ken Sykes@KensyAtMS·
Hey there - if you use windbg I would love to know if you have one of these tools installed as well (if more than one, choose the one you use most frequently)
English
0
0
0
206
Ken Sykes
Ken Sykes@KensyAtMS·
@LundukeJournal Under what authority are they able to delete forks? Is there something in the license?
English
1
0
0
130
The Lunduke Journal
The Lunduke Journal@LundukeJournal·
Open Source People are Fighting to Kill Open Source Projects A large portion of the people in "Open Source" -- including Red Hat -- have been moving, rather dramatically, away from some of the core ideals of "Open Source".
English
42
76
464
9.9K
Ken Sykes
Ken Sykes@KensyAtMS·
@timmisiak AFAIK it is still maintained by MS internal community
English
0
0
2
116
Tim Misiak
Tim Misiak@timmisiak·
Anyone know if the MEX debugger extension is still being maintained?
English
4
0
5
1.6K
Ken Sykes retweetledi
William R. Messmer
William R. Messmer@wmessmer·
If you update WinDbg today (1.2504.15001.0), you might notice another icon in the View tab of the ribbon, one called "Parallel Stacks". While incredibly useful in its own right, this isn't just a parallel stacks view. It's the introduction of graph visualization for extensions!
William R. Messmer tweet media
English
4
60
178
20.9K
Ken Sykes
Ken Sykes@KensyAtMS·
@gregthelaw Just get rid of the public keyword, that will make it safe ;)
English
0
0
0
39
Greg Law
Greg Law@gregthelaw·
Latest on memory safety: "The new US administration has removed everything from the White House web site and fired most of the CISA people who worked on memory safety." tbf, memory safety is pretty woke. hubs.ly/Q038Yn1h0
English
1
0
2
240
Axel Souchet
Axel Souchet@0vercl0k·
The latest TTD release includes some pretty cool changes; you can now 'break on registers' (!tt br) & navigate to the next module boundary (!tt bm) and more! 🔥 learn.microsoft.com/en-us/windows-…
GIF
Axel Souchet tweet media
English
1
21
83
6.1K
Ken Sykes
Ken Sykes@KensyAtMS·
@0vercl0k Thanks for the shout out - I am behind on sending out an announcement. We also fixed that .Heap() error you were seeing :)
English
1
0
2
157
James McNellis
James McNellis@JamesMcNellis·
Our team morale events when my teammates plan them: Escape rooms, VR experiences, laser tag. Our team morale events when I plan them: Dinner and a pilgrimage to see the San Francisco Symphony.
English
2
0
5
733
Ken Sykes
Ken Sykes@KensyAtMS·
@lefticus Was the USB key plugged in when you rebooted?
English
1
0
0
41
Jason Turner
Jason Turner@lefticus·
#TIL that simply booting into Linux from a USB drive is enough to trigger the "enter your bitlocker key" prompt for Windows! Fortunately I had literally just 1 hr before backed up the key.
English
2
0
9
1.6K
Ken Sykes
Ken Sykes@KensyAtMS·
@JamesMcNellis Three months later: I should start writing the slides. 😄
English
1
0
1
49
James McNellis
James McNellis@JamesMcNellis·
I’m back in Karlsruhe this evening for Tosca. I won’t miss the surtitles tonight; I’m pretty sure I could sing most of it myself from memory (thankfully for everyone I don’t think that will be necessary.)
English
1
0
3
295
Jason Turner
Jason Turner@lefticus·
Actual interaction I had awhile back: Them: I'd watch C++ Weekly, but I usually don't have enough time Me: Each episode is 5-10 minutes... Them: Oh! I just assumed they were like 30 minutes! Me: ... @cppweekly" target="_blank" rel="nofollow noopener">youtube.com/@cppweekly
English
10
2
120
6.8K
Ken Sykes
Ken Sykes@KensyAtMS·
@JamesMcNellis If it's anything like Star Wars Episode 9 I would go to the dinner 😊
English
0
0
1
31
James McNellis
James McNellis@JamesMcNellis·
I have a hard choice to make… Next week I have a reservation at a Michelin restaurant I’ve been looking forward to, but I’ve just now learned there’s a Beethoven concert that night that I could get tickets to. Decisions, decisions.
English
2
0
0
338