Michail

🍉

@NetEaseGames_JP @NetEaseGames_EN @NetEase_Global @MarvelRivals What's the reason you guys drop a vulnerable and exploitable driver called WinRing0 (version 1.2.0.5) on everyone's machine and try to hide it as powershell.sys in a legitimate powershell system folder?

@yarden_shafir 50%: really nice feature! 50%: there is a new windbg??

In the new version windbg opens a suggestions box when you type "!" with all the optional extensions

@ItsGamerDoc One more blog about quirky ways to punish cheaters ‘aughtta do it.

This ain't even funny just incredibly sad and incredibly infuriating to see as someone who works within this industry.

@daaximus @Activision @CallofDuty Activion includes “Decompiling or Reverse Engineering” as ban reasons and will ban for having IDA: support.activision.com/articles/call-… Also a new PC doesn't mean much these days. They probably include gateway mac in hwid.

At what speed did y'all collide your last 2 brain cells to come up with the design for your anti-cheat? Entirely new PC, no bans on account, can play other CoD just fine, never played this game, immediate ban. @Activision @CallofDuty The last time it was for opening System Informer to kill your game because it was frozen on a black screen. Smh. I'm not the only one it seems... Great work. reddit.com/r/blackops6/co… reddit.com/r/blackops6/co… reddit.com/r/blackops6/co…

@PetrBenes The read operation stops extending once it finds a resident page, or hits the end of the mapping. In your case, it’ll fail to expand in either direction and will only page in the faulting page.

@PetrBenes The read operation will extend forwards and backwards from the faulting PTE as much as allowed by the cluster size, unless the thread has page fault clustering disabled.

How smart are the page-fault handlers? On Windows, specifically, but I would like to know in general. If I touch a first swapped out page of a multi-page region (virtually contiguous), will it swap in just that one page, or will it swap in more of the range?

@ItsGamerDoc get ‘em

I have been promoted to anti-cheat staff analyst. I don't know why they keep promoting me for just downloading loaders I also now have my own desk 🦅🇺🇲

Anyone can now build a trusted app in VBS enclaves in Windows 11 learn.microsoft.com/en-us/windows/…

“Previously available to Windows security features only, VBS enclaves are now available to third-party application developers” Very cool. Waiting for more details :)

Noted ✅

vanguard 2 now on league of legends, cheating to be deprecated this patch leagueoflegends.com/en-au/news/gam…

@dillonloomis @Tesla_AI I think you’d agree we’d all take 30M unsupervised miles over 1B nagging miles.

@Tesla_AI Waymo around 20M 🤔

really enjoyed my interview with @RKRigney, especially being included amongst titans like @arkem and @ClintByfron. maybe give it a read over lunch.

TIL: the 0xBACCD00B cpuid function scattered around various AMD firmware is actually just an AMD SimNow breakpoint😇 Originally spotted it in prod SMM supervisor module on my lenovo thinkpad but now realizing they're everywhere.

I got time to update a draft that should've been published long ago. Here is a fun PG-compliant hooking mechanism, and the example covered in the article is system-wide SYSCALL hooks in a PG-compliant manner. revers.engineering/fun-with-pg-co…

We're committed to supporting our developers maintain integrity over their experiences. This is just the beginning 😁. Plenty more to come from us!

I’ve decided to leave Munro, @live_munro @MunroAssociates. Not sure what’s ahead for me, but I’m excited for the journey! Would love to hear ideas and advice as I move onward!