Feb. 23rd, 2005

mithriltabby: Serene silver tabby (Zort)
So in an effort to cut down on buggy drivers crashing Windows, Microsoft have created test suites to hammer on drivers to help shake out bugs. This is a good idea. One of the first things the DC2 utility does, though, is call ZwQueryObject() to obtain ObjectNameInformation about your driver. Where did I find documentation about this function? Not in MSDN. Not in the documentation for the Windows DDK and IFS kit. I wound up finding a web site called— I kid you not— undocumented.ntinternals.net. They even have all their information in a handy CHM-formatted file. Why are Microsoft mentioning the result of this in their test code if they’re not going to document the API by which you can make your code pass the test?
mithriltabby: Graffito depicting a penguin with logo "born to pop root" (Hack)
I now know why people write Windows viruses. I was briefly marveling at how often how-to guides by people studying ways to write viruses turn up on search results when I’m looking at driver-writing topics (e.g. Ring0 under WinNT/2k/XP and Rootkit) when I suddenly experienced a moment of clarity: these people are hurting, and they’re just responding to the horror of wrapping their brains around the internals of 32-bit Windows. Writing a fast-propagating worm that brings corporate networks to their knees is just a cry for help.

October 2024

S M T W T F S
  12345
6789 101112
13141516171819
20212223242526
2728293031  

Most Popular Tags

Style Credit

  • Style: Midnight for Heads Up by momijizuakmori

Expand Cut Tags

No cut tags
Page generated Jul. 10th, 2025 02:00 am
Powered by Dreamwidth Studios