Hacker News new | ask | show | jobs
by Veliladon 211 days ago
> The mod injects only in the process Winlogon.exe, and exits once the handle of the memory area is closed. It does not hook any functions.

Yep. Sure. Going to let a Russian utility fuck with winlogon.exe. Excellent idea.

7 comments

Yeah, it would be so much better if it was American-made, because as everyone knows there are no corrupt people in the US and every person of Russian descent is a spy for their motherland's government (:
Yes, it would be better if it was American made, because the US government has lesser capability to compell otherwise independent developers to do their bidding.
> US government has lesser capability to compell otherwise independent developers to do their bidding.

Are you sure about this? The US, like most countries with extensive intelligence capabilities, does not have a good track record of convincing their citizens of doing shady things [1].

1. https://en.wikipedia.org/wiki/COINTELPRO

You missed my point, which is that all governments exist to oppress by design, it's literally what governments are, they are businesses that monopolize violence. Some people, esp. people of the Western world are too arrogant to admit it. Personally, I would honestly rather trust someone who is aware of that fact over someone who isn't.
Look, I'm as much an enjoyer of Kropotkin and von Mises as the other guy and torched more then zero regional police HQs in my life.

You are right in principle, but there is a varying degree to which different governments actually oppress people and there are certain patterns of what to expect from which.

I would not trust american company, like msft to not snitch to me to US government either, but the likehood of random shmuk being coopted is much more likely in one case as opposed to another.

> the likehood of random shmuk being coopted is much more likely in one case as opposed to another.

I don't think Russians actually live in fear of the big brother, I wouldn't be friends with so many Russian femboys if that really was the case. But what do I know, it could all be a conspiracy.

Edit: I also don't understand how torching police hqs makes the world a better, more peaceful place. At best, you'll just end up creating another monopoly on violence… @.@

>I don't think Russians actually live in fear of the big brother, I wouldn't be friends with so many Russian femboys if that really was the case.

I'm not sure what it has to do with anything, other than you own ideas about what oppressive governments are up to.

>makes the world a better, more peaceful place.

the chain has to be yanked from time to time, otherwise the thing at the end of it tends to forget you are holding it.

That was my first concern too, but it does look like you can build the binary from source:

https://github.com/ramensoftware/windhawk

Why such a simple UI utility app needed a VSCodium/Electron UI? The author seems to be well versed in Win32 API, so why not just learn the GUI part as well? It's not that hard.
The reason the Windhawk UI is based on VSCodium is mainly for the mod editing functionality. VSCodium with clangd are used for C++ intellisense out of the box.

You might say that many users don't care about mod development and don't need it. I agree, and I have it on my list to create a lite Windhawk version which doesn't depend on VSCodium.

Note that VSCodium is only used for the UI. When Windhawk is running in the background, its memory consumption is a couple of MB.

I believe those who write C++ have already installed their favorite IDE or editor.
Sounds like a reasonable trade off to me. Improves your dev experience and users still get a fast binary.

Thanks for this by the way. Carrying the torch of Windows modding in the future!

I 100% agree with this sentiment
Doesn't mean it's safe.
Yeah, I would probably delete this updater if I were to try this: https://github.com/ramensoftware/windhawk/blob/main/src/wind...
as opposed to any other updater on your system...?

> Tech Enthusiasts: Everything in my house is wired to the Internet of Things! I control it all from my smartphone! My smart-house is bluetooth enabled and I can give it voice commands via alexa! I love the future!

> Programmers / Engineers: The most recent piece of technology I own is a printer from 2004 and I keep a loaded gun ready to shoot it if it ever makes an unexpected noise.

https://imgur.com/6wbgy2L (actually a tweet from someone else, but apparently it's private now)

It's actually not completely outside of my threat profile.

Honestly, with the prevailaince of ransomware attacks, unless you're a literal hermit, it shouldn't be out of anyone's threat profile.

Absolutely. Sufficiently capable LLMs can mass produce exploits against whole ecosystems; recent Anthropic post moves the risk needle from ‘theoretical’ to ‘realized’. Any auto-updating software is running a risk of its cdn and/or build forge being compromised. Scary times.
This is not an updater. Due to the sensitive nature of Windhawk, it has no auto-updating mechanism, only update notifications (this file is part of that).
I didn't say it was. But having the source means you (and others) can vet the code if that's a concern.
And the author is a security/malware researcher. Yeah, you might want to pass.
Both the mod's author and Windhawk's autor live in Israel, if it makes you feel more safe.
just add the r===ain keyboard to input sources and you will be fine.
>fuck with winlogon.exe. Excellent idea.

That's mostly irrelevant because all the thing baddies want to do with your computer, they can do without touching winlogon or even getting admin.

https://xkcd.com/1200/

Look at the top of this page. It says "hacker news".