Hacker News new | ask | show | jobs
by poizan42 877 days ago
No, the "nefarious" means they are simply using APIs like WriteProcessMemory/ VirtualProtectEx/CreateRemoteThreadEx to modify the memory of runing programs or use SetWindowsHookEx to install global hooks (which inject your dll into every process for the non low-level events)
1 comments

Is this any different than what a virus would do?
Yes. Intent matters.
Is these APIs are only used by viruses, why do they exist?
Because they are also used by debuggers, security tools, and other flavors of "keep the world humming along despite its best efforts to kill itself."
We might add to the list "tools and utilities desired by power users".
Sure, but if you use/build a tool that modifies how Windows runs by trawling through and manipulating internal process memory that explicitly is not meant to be modified by anything else, that's on you.

It's like asking why Nintendo won't support the NES you desoldered the CPU from and replaced with a higher clock capable CMOS 6502 and new crystal

"Nintendo is such a bad company, I upgraded my NES and now it can't play anything"

No buddy, you broke the machine!

I don't remember anybody in this thread making any claims about what Microsoft should or should not support.