5 ms·
> The mod injects only in the process Winlogon.exe, and exits once the handle of the memory area is closed. It does not hook any functions. Yep. Sure. Going to
by Veliladon 10mo ago
> The mod injects only in the process Winlogon.exe, and exits once the handle of the memory area is closed. It does not hook any functions.
Yep. Sure. Going to let a Russian utility fuck with winlogon.exe. Excellent idea.
- vunderba 10mo agoThat was my first concern too, but it does look like you can build the binary from source: https://github.com/ramensoftware/windhawk https://github.com/ramensoftware/windhawk
- icapybara 10mo agoDoesn't mean it's safe.
- moron4hire 10mo agoYeah, I would probably delete this updater if I were to try this: https://github.com/ramensoftware/windhawk/blob/main/src/windhawk/app/update_checker.h https://github.com/ramensoftware/windhawk/blob/main/src/wind...
- baq 10mo agoas opposed to any other updater on your system...? > Tech Enthusiasts: Everything in my house is wired to the Internet of Things! I control it all from my smartphone! My smart-house is bluetooth enabled and I can give it voice commands via alexa! I love the future! > Programmers / Engineers: The most recent piece of technology I own is a printer from 2004 and I keep a loaded gun ready to shoot it if it ever makes an unexpected noise. — https://imgur.com/6wbgy2L https://imgur.com/6wbgy2L (actually a tweet from someone else, but apparently it's private now)
- moron4hire 10mo agoIt's actually not completely outside of my threat profile. Honestly, with the prevailaince of ransomware attacks, unless you're a literal hermit, it shouldn't be out of anyone's threat profile.
- baq 10mo agoAbsolutely. Sufficiently capable LLMs can mass produce exploits against whole ecosystems; recent Anthropic post moves the risk needle from ‘theoretical’ to ‘realized’. Any auto-updating software is running a risk of its cdn and/or build forge being compromised. Scary times.
- deleted 10mo ago[deleted]
- m417z 10mo agoThis is not an updater. Due to the sensitive nature of Windhawk, it has no auto-updating mechanism, only update notifications (this file is part of that).
- vunderba 10mo agoI didn't say it was. But having the source means you (and others) can vet the code if that's a concern.
- zerr 10mo agoWhy such a simple UI utility app needed a VSCodium/Electron UI? The author seems to be well versed in Win32 API, so why not just learn the GUI part as well? It's not that hard.
- hackernudes 10mo agoI 100% agree with this sentiment
- m417z 10mo agoThe reason the Windhawk UI is based on VSCodium is mainly for the mod editing functionality. VSCodium with clangd are used for C++ intellisense out of the box. You might say that many users don't care about mod development and don't need it. I agree, and I have it on my list to create a lite Windhawk version which doesn't depend on VSCodium. Note that VSCodium is only used for the UI. When Windhawk is running in the background, its memory consumption is a couple of MB.
- sph 10mo agoAnd the author is a security/malware researcher. Yeah, you might want to pass.
- gruez 10mo ago>fuck with winlogon.exe. Excellent idea. That's mostly irrelevant because all the thing baddies want to do with your computer, they can do without touching winlogon or even getting admin. https://xkcd.com/1200/ https://xkcd.com/1200/
- remix2000 10mo agoYeah, it would be so much better if it was American-made, because as everyone knows there are no corrupt people in the US and every person of Russian descent is a spy for their motherland's government (:
- Muromec 10mo agoYes, it would be better if it was American made, because the US government has lesser capability to compell otherwise independent developers to do their bidding.
- remix2000 10mo agoYou missed my point, which is that all governments exist to oppress by design, it's literally what governments are, they are businesses that monopolize violence. Some people, esp. people of the Western world are too arrogant to admit it. Personally, I would honestly rather trust someone who is aware of that fact over someone who isn't.
- Muromec 10mo agoLook, I'm as much an enjoyer of Kropotkin and von Mises as the other guy and torched more then zero regional police HQs in my life. You are right in principle, but there is a varying degree to which different governments actually oppress people and there are certain patterns of what to expect from which. I would not trust american company, like msft to not snitch to me to US government either, but the likehood of random shmuk being coopted is much more likely in one case as opposed to another.
- remix2000 10mo ago> the likehood of random shmuk being coopted is much more likely in one case as opposed to another. I don't think Russians actually live in fear of the big brother, I wouldn't be friends with so many Russian femboys if that really was the case. But what do I know, it could all be a conspiracy. Edit: I also don't understand how torching police hqs makes the world a better, more peaceful place. At best, you'll just end up creating another monopoly on violence… @.@
- carlosjobim 10mo agoLook at the top of this page. It says "hacker news".
- Muromec 10mo agojust add the r===ain keyboard to input sources and you will be fine.
- Anixx1 10mo agoBoth the mod's author and Windhawk's autor live in Israel, if it makes you feel more safe.