Mark Jansen

#ReactOS now has a Certificate Manager! Courtesy of our developer @learn_more.

Longplay of Serious Sam on real hardware. 2560x1440p, 4x Multisample AA, 16x Anisotropic Filtering. All achieved with #ReactOS!!! Watch the test by @AotoriHibiki here: youtu.be/7PNlxHqw-bA

@LinuxWelt @LundukeJournal Uninformed people like you are what makes misinformation campaigns a success. Do you also answer all spam / scam emails?

@LundukeJournal ReactOS is not a good system. It is now a Kremlin-Project, with funds meant for the Russian Scouts going into this. Considering the leak on the Windows 2000 source-code in 2004, it is a sad state of affairs. Bryan Lunduke drums up bullshit for grift.

ReactOS at 30 Years Old: Like Windows ME, Only Buggier ReactOS, the open source attempt to build a Windows 2000 compatible system, turns 30. Which, coincidentally, his how many times it crashed on me in the last hour.

Today marks 30th year of #ReactOS. Happy Birthday ReactOS! We would like to thank everyone for supporting us along our long journey of building a Windows-compatible, free and open source OS! Read our 30th year blog post here: reactos.org/blogs/30yrs-of…

Starting 2026 with a new blog! I've really been enjoying my Windows on ARM machine - so my post is about interrupts for WoA. This includes x64/ARM differences, virtual interrupts, Hyper-V's synthetic controller, and Secure Kernel interrupts/intercepts connormcgarr.github.io/windows-arm64-…

New year present from Timo! After months of preparatory work, MSVCRT in #ReactOS has just been synced with Wine-10.0! Overall 30% decrease in API test failures, newly working/improved apps and... Another major step for NT6 compatibility bringup achieved!!!

Our developer @cbialorucki1 has posted an update about his work on API tests for #ReactOS Read it here, and share: reactos.org/blogs/cbialoru…

The future is coming. As we shift our focus towards more modern Windows versions, our developer @The_DarkFire__ has written a blog post about researching WDDM on #ReactOS. You can read it here, and share! reactos.org/blogs/investig…

Welcome back Hasherezade (@hasherezade) to our RE//verse review board! Hasherezade, a malware analyst and software engineer from Poland, is known for her impactful work in cybersecurity and reverse engineering. @hasherezade has created several open source tools including PE-bear, PE-sieve, and HollowsHunter that are extensively used by analysts and incident responders. She helps share her knowledge with the industry through articles, talks, and trainings on topics including malware analysis, process injection, and memory forensics. AND she’s helping curate the RE//verse 2026 lineup! So be sure to submit your talks before November 14: sessionize.com/reverse-2026

Looks like this SDB policy flag in 25H2 might block EasyAntiCheat.sys on systems with HLAT because of the driver's page table tampering

Skipping Winsock - AFD.sys for-the-win! A series of posts by Mateusz Lewczak (@MateuszLewczak) on how to use afd.sys driver to implement custom network connectivity. Highly recommended! Source: leftarcode.com/posts/afd-reve… #redteam #maldev #malwaredevelopment

this is my short analysis of a little-known security feature built into Windows that inadvertently broke one of our authenticode signatures recently elastic.co/security-labs/…

Stack tracing and symbol resolution now working side-by-side with the secure call data itself! Going to clean this up a bit more and publish soon.

Our developer @cbialorucki1 has been hired to work on #ReactOS API test suite! In addition of fixing test infrastructure, his effort will help future NT6 (Vista and newer) compatibility works! Read the news here: reactos.org/blogs/cbialoru…

"Going Native - Malicious Native Applications" - by Protexity: protexity.com/post/going-nat… - interesting read about using applications with Subsystem: Native for offense

New #TinyTracer (v3.0) is out - with many cool features: github.com/hasherezade/ti… - check them!

What if we traced local functions just like we trace the exported APIs? 👀Coming soon in #TinyTracer...

I haven't been publishing much lately, but not because I haven't been doing research -- in fact, I've done more than ever in the past five years. My ~200KLOC backlog will soon begin trickling out into the IDA/Hex-Rays ecosystem.

I read this article about software development, which I knew about because I saw Prime reacting to it: notashelf.dev/posts/curse-of… For the most part I think it is fine: a relatively young programmer is doing the healthy work of introspecting on what he should really be doing. But there's one part of the article that I think is a deep mistake, and the author doesn't know it's so wrong because he has never experienced the alternative: "Software doesn’t stay solved. Every solution you write starts to rot the moment it exists. Not now, not later, but eventually. Libraries deprecate. APIs change. Performance regressions creep in. Your once-perfect tool breaks silently because libfoo.so is now libfoo.so.2. 2 I have had scripts silently fail because a website changed its HTML layout. I have had configuration formats break because of upstream version bumps. I have had Docker containers die because Alpine Linux rotated a mirror URL. In each case, the immediate emotional response was not just inconvenience but something that moreso resembles guilt." Yes, this is true in much of the programming world. But there is another world in which people build things that last much longer. I have done it many times. I shipped a binary for this game Braid in 2009 that you can still download and play on Steam 16 years later. If you are pretty young (like 35), you can run binaries on Windows that were compiled before you were even born, which is amazing given how hard they have been trying to f up Windows lately. On an emulator like MAME, you can play arcade games programmed in 1979. If today's software "technology" is so much better, why does it fall apart like tissue paper? The author is not wrong about the cited decay. But this decay is not inherent to the practice of software. It's due to choices made, usually foolishly, by the people designing the systems being interacted with. And, it's due to a lack of knowing better, non-exposure to the sector of programmers who are very concerned with their code lasting a long time, actually. The way you make code last a long time is you minimize dependencies that are likely to change and, to the extent you must take such dependencies, you minimize the contact surface between your program and those dependencies. The actual algorithms you program, the actual functioning machinery you build, is a mathematical object defined by the semantics of your programming language, and mathematical objects are eternal, they will last far longer than your human life. The goal then is to avoid introducing decay into the system. You must build an oasis of peace that is insulated from this constant bombardment of horrible decisions, and only hesitantly interface into the outside world. This means, for example: If you are shipping on iOS, you only reluctantly use any functions iOS gives you, because when you use them, Tim Apple will come along and break your program next year for arbitrary pointless reasons, because Tim Apple does not respect you or anyone you know. This means a program cannot last forever on iOS, because Tim Apple likes breaking your things and watching you submissively clean them up. But the core of your program, which could be 95% of the code, is fine, and you can deploy it elsewhere. This means you have to insulate from Linux userspace, because of all the jackass decision making that introduces constant incompatibilities while somehow never making the system better. Using a library dependency to do font rendering or sparse matrix math? That dependency gets checked into your source tree, a copy of exactly the version you use. Ten years later you can pull down that source and recompile, and it works, because your program is a mathematical object. If you want to upgrade to something newer that has bug fixes and so forth, you are free to do so, but you are also free not to do so, and your program still works. (And how many of these bug fixes do you really need? Your program worked correctly when you shipped it to the greatest extent you could measure, because you are a skillful software engineer who wants to ship things of a high quality). Everyone who got into programming for the joy of it knows, at some level, that the magic of programs is that they represent complexity that is replicable over time (and thus they exist outside of time). But the trashy programmer culture of the past 20 years stopped aspiring to this, and now has forgotten it is even possible. And so long as people have forgotten, decisions will continue to be made that make the problem worse. There are programmers who only write glue code, and who think that's what programming is; to these people what I have written above will not make sense. But the good news for that contingent is, they can always just stop writing glue code and start doing something else! If today's software "technology" is so good, why do you think it needs so much glue? Maybe there is a stylistic problem. So if you are looking for what to do in the world of software that can represent a lasting contribution, maybe this is food for thought. @NotAShelf @ThePrimeagen