not_a9

4 ms·

31.
by not_a9 3mo ago
5.6-Sol is a lot more permissive than Opus/Fable even w/ CVP (once you sign your soul away to Palantir via Persona, anyway), while maintaining better capabilities
32.
by not_a9 3mo ago
> Opus 5’s safeguards match those of Claude Fable 5’s, with one change: it now permits source-code vulnerability discovery at all access levels. This means that the model can support defensive cybersecurity work while still blocking vuln
33.
by not_a9 3mo ago
Are the other Zero IT Lab products like their code virtualizer of similar quality to Theia? My only exposure has been that one RE//verse presentation and shitposts on UC.
34.
by not_a9 3mo ago
While the page decryption trick should work in Wine just fine (ZeroIT Lab Theia does that too, right?), I don’t remember if Wine provides workingset info like Windows.
35.
by not_a9 3mo ago
EAC is a kernel mode anti-cheat on Windows, though? And given the whining on UC it seems to be fairly effective.
36.
by not_a9 3mo ago
Wine doesn't provide every userspace facility Windows does.
37.
by not_a9 3mo ago
Do humans often repeat JSON spewed by integrations? It’s still very much a LLM.
38.
by not_a9 3mo ago
Given 5.6 and K3 I’m sure the window will be extended again. Have to maintain being somewhere on the frontier. Shame Fable is completely useless for me due to security classifiers.
39.
by not_a9 3mo ago
They’d need to either poach folks from other firms or go for a third party solution. Cursed timeline: Valve pays Epic for good EAC build on CS2 + whatever encryption solution they have for Fortnite executable, 99.9% P2Cs disappear day 1
40.
by not_a9 3mo ago
https://github.com/vtil-project/VTIL-Core https://github.com/can1357/selene
41.
by not_a9 3mo ago
> no more cancerous giant Electron app to move a few sliders and set an RGB hex code That will also ship vulnerable drivers.
42.
by not_a9 3mo ago
Presumably for much the same reason glibc has all the heap protections?
43.
by not_a9 4mo ago
Interesting exercise. Why does 1/1 matching to original asm matter, though? Maintaining same timing as original game?
44.
by not_a9 4mo ago
There’s also fun stuff like VEH hooking and SLAT hooking, though SLAT hooks are not very useful in this case.
45.
by not_a9 4mo ago
> kernel level spyware What does it spy on? I can only assume you’ve fully devirtualized and reversed Easy Anti-Cheat to be making such statements > full access to your operating system Man Epic Games must be cooking if they can poke
46.
by not_a9 4mo ago
The slop engine can drive IDA just fine. Does hitch a bit on obfuscated code, but with some poking it does fine there too.
47.
by not_a9 4mo ago
Lolzteam et al still exist. Buying a Steam account is one click or so.
48.
by not_a9 4mo ago
OK. What if I want to mod my singleplayer game? Or, God forbid, make mods for it?
49.
by not_a9 4mo ago
> for people who want to play PC games with a console-like experience, without any hassles of manual setup and tweaking that the hacker crowd normally are into. Until they want to play Fortnite/Roblox/whatever else.
50.
by not_a9 4mo ago
> Steam is in the unique position to create a kernel anti-cheat Valve has a long-term policy of being utter trash at game security. > I know that's not popular. But they are the only ones with the install base AND ability to pull
51.
by not_a9 4mo ago
Maybe some KVM patching to use SLAT for breakpoints/watchpoints would fit your bill? Not sure.
52.
by not_a9 4mo ago
This does not fit DRM/anticheat threat model anyway.
53.
by not_a9 4mo ago
Maybe kinda sorta https://github.com/momo5502/sogen ? It can even virtualize Modern Warfare 2 these days.
54.
(Re//Verse 2026) Taxonomy and Deobfuscation of a Real World Binary Obfuscator [pdf](github.com)
27 points by not_a9 4mo ago|1 comments
55.
by not_a9 4mo ago
The actual presentation: https://www.youtube.com/watch?v=3LtwqJM3Qjg . An interesting look at what modern code obfuscation looks like, the example used being Riot Vanguard's kernel mode component.
56.
by not_a9 4mo ago
They include a fun follow-up with a stronger obfuscator: https://www.youtube.com/watch?v=3LtwqJM3Qjg
57.
by not_a9 4mo ago
You can still hit guardrails with this enabled for your account. Had a silly moment a day or so ago when Claude Code hit the guardrail after a web search (presumably because the websearch contained badbad anticheat stuff like https:/&
58.
by not_a9 4mo ago
> only ppl using AI are shops with clueless ppl getting flooded in nonsense. Are Hex-Rays and Vector35 clueless?
59.
by not_a9 4mo ago
> There is undoubtedly AI-written code in the Linux kernel now You can grep commit logs by “Assisted-By” these days and there sure is a whole bunch of LLMs.
60.
by not_a9 5mo ago
Visual Studio and Visual Studio Code are different beasts.

More ›