Remix.run Logo
Veliladon 12 hours ago

> The mod injects only in the process Winlogon.exe, and exits once the handle of the memory area is closed. It does not hook any functions.

Yep. Sure. Going to let a Russian utility fuck with winlogon.exe. Excellent idea.

remix2000 11 hours ago | parent | next [-]

Yeah, it would be so much better if it was American-made, because as everyone knows there are no corrupt people in the US and every person of Russian descent is a spy for their motherland's government (:

Muromec 8 hours ago | parent [-]

Yes, it would be better if it was American made, because the US government has lesser capability to compell otherwise independent developers to do their bidding.

remix2000 8 hours ago | parent [-]

You missed my point, which is that all governments exist to oppress by design, it's literally what governments are, they are businesses that monopolize violence. Some people, esp. people of the Western world are too arrogant to admit it. Personally, I would honestly rather trust someone who is aware of that fact over someone who isn't.

Muromec 7 hours ago | parent [-]

Look, I'm as much an enjoyer of Kropotkin and von Mises as the other guy and torched more then zero regional police HQs in my life.

You are right in principle, but there is a varying degree to which different governments actually oppress people and there are certain patterns of what to expect from which.

I would not trust american company, like msft to not snitch to me to US government either, but the likehood of random shmuk being coopted is much more likely in one case as opposed to another.

remix2000 6 hours ago | parent [-]

> the likehood of random shmuk being coopted is much more likely in one case as opposed to another.

I don't think Russians actually live in fear of the big brother, I wouldn't be friends with so many Russian femboys if that really was the case. But what do I know, it could all be a conspiracy.

Edit: I also don't understand how torching police hqs makes the world a better, more peaceful place. At best, you'll just end up creating another monopoly on violence… @.@

Muromec 6 hours ago | parent [-]

>I don't think Russians actually live in fear of the big brother, I wouldn't be friends with so many Russian femboys if that really was the case.

I'm not sure what it has to do with anything, other than you own ideas about what oppressive governments are up to.

>makes the world a better, more peaceful place.

the chain has to be yanked from time to time, otherwise the thing at the end of it tends to forget you are holding it.

Anixx1 9 minutes ago | parent | prev | next [-]

Both the mod's author and Windhawk's autor live in Israel, if it makes you feel more safe.

vunderba 12 hours ago | parent | prev | next [-]

That was my first concern too, but it does look like you can build the binary from source:

https://github.com/ramensoftware/windhawk

zerr 12 hours ago | parent | next [-]

Why such a simple UI utility app needed a VSCodium/Electron UI? The author seems to be well versed in Win32 API, so why not just learn the GUI part as well? It's not that hard.

m417z 11 hours ago | parent | next [-]

The reason the Windhawk UI is based on VSCodium is mainly for the mod editing functionality. VSCodium with clangd are used for C++ intellisense out of the box.

You might say that many users don't care about mod development and don't need it. I agree, and I have it on my list to create a lite Windhawk version which doesn't depend on VSCodium.

Note that VSCodium is only used for the UI. When Windhawk is running in the background, its memory consumption is a couple of MB.

zerr 8 hours ago | parent | next [-]

I believe those who write C++ have already installed their favorite IDE or editor.

accrual 9 hours ago | parent | prev [-]

Sounds like a reasonable trade off to me. Improves your dev experience and users still get a fast binary.

Thanks for this by the way. Carrying the torch of Windows modding in the future!

hackernudes 12 hours ago | parent | prev [-]

I 100% agree with this sentiment

icapybara 12 hours ago | parent | prev [-]

Doesn't mean it's safe.

vunderba 12 hours ago | parent | next [-]

I didn't say it was. But having the source means you (and others) can vet the code if that's a concern.

moron4hire 12 hours ago | parent | prev [-]

Yeah, I would probably delete this updater if I were to try this: https://github.com/ramensoftware/windhawk/blob/main/src/wind...

baq 12 hours ago | parent | next [-]

as opposed to any other updater on your system...?

> Tech Enthusiasts: Everything in my house is wired to the Internet of Things! I control it all from my smartphone! My smart-house is bluetooth enabled and I can give it voice commands via alexa! I love the future!

> Programmers / Engineers: The most recent piece of technology I own is a printer from 2004 and I keep a loaded gun ready to shoot it if it ever makes an unexpected noise.

https://imgur.com/6wbgy2L (actually a tweet from someone else, but apparently it's private now)

moron4hire 10 hours ago | parent | next [-]

It's actually not completely outside of my threat profile.

Honestly, with the prevailaince of ransomware attacks, unless you're a literal hermit, it shouldn't be out of anyone's threat profile.

baq 9 hours ago | parent [-]

Absolutely. Sufficiently capable LLMs can mass produce exploits against whole ecosystems; recent Anthropic post moves the risk needle from ‘theoretical’ to ‘realized’. Any auto-updating software is running a risk of its cdn and/or build forge being compromised. Scary times.

10 hours ago | parent | prev [-]
[deleted]
m417z 9 hours ago | parent | prev [-]

This is not an updater. Due to the sensitive nature of Windhawk, it has no auto-updating mechanism, only update notifications (this file is part of that).

sph 12 hours ago | parent | prev | next [-]

And the author is a security/malware researcher. Yeah, you might want to pass.

Muromec 9 hours ago | parent | prev | next [-]

just add the r===ain keyboard to input sources and you will be fine.

gruez 11 hours ago | parent | prev | next [-]

>fuck with winlogon.exe. Excellent idea.

That's mostly irrelevant because all the thing baddies want to do with your computer, they can do without touching winlogon or even getting admin.

https://xkcd.com/1200/

carlosjobim 9 hours ago | parent | prev [-]

Look at the top of this page. It says "hacker news".