Live data from Hacker News

I ruined my vacation by reverse engineering WSC

blog.es3n1n.eu

91–100 of 196 posts

Re: I ruined my vacation by reverse engineering WSC

#91

> As you might still remember, I was working on an arm64 macbook and there currently is no sane solutions how to emulate x86 windows on arm macbooks. What about UTM? Also Parallels recently added initial support for Intel VMs as well.

I tried UTM and it's unusable for x86 Windows.

Maybe command line Linux would be acceptably slow, but anything with a GUI isn't.

You can run arm64 Windows pretty well, but that's not x86 Windows and won't help with reverse engineering an x86 system component.

Re: I ruined my vacation by reverse engineering WSC

#92

Earlier quoted context omitted.

As someone who moved to Linux 10 years ago, this comment chain shows Windows became the real hacker distro

In a sense, it has been for a long time. With Linux, there's often a good clean way to do a thing, and then there are weird hacks. On Windows, it often starts with weird hacks, as Microsoft is further enclosing its ecosystem. (I use Windows mostly for gaming and VR, and still have to constantly fiddle with the system to keep it working on a basic level, sad face emoji. Who would've thunk that merely playing a 8K Euro…

> Who would've thunk that merely playing a 8K European documentary in VR would require configuring DirectShow filters found on GitHub.

Dios Mio, get mpv, enable gpu-hq

Re: I ruined my vacation by reverse engineering WSC

#94
post #68

Earlier quoted context omitted.

It’s my hardware. I’ll do what I want with it, m8. Simple as that.

Well this is a straightforward sentiment with a real "my body, my choice" ring to it, isn't it? Until it isn't. Perhaps your hardware, when connected to a network, has real effects on the rest of that network. What if your system joined a botnet and began DDOS activities for payment? What if your system was part of a residential proxy network, and could be rented in the grey market for any kind of use or abuse of oth…

There's the "Malicious Software Removal Tool" for that case.

Re: I ruined my vacation by reverse engineering WSC

#95

For those wondering: WSC stands for Windows Security Center. I had to look it up as well

> The part of the system that manages all this mess is called Windows Security Center - WSC for short. It’s in the article

true, but you have to read until the 4th paragraph to find it. Putting it in the title would have been better

Re: I ruined my vacation by reverse engineering WSC

#96
post #91

> As you might still remember, I was working on an arm64 macbook and there currently is no sane solutions how to emulate x86 windows on arm macbooks. What about UTM? Also Parallels recently added initial support for Intel VMs as well.

I tried UTM and it's unusable for x86 Windows. Maybe command line Linux would be acceptably slow, but anything with a GUI isn't. You can run arm64 Windows pretty well, but that's not x86 Windows and won't help with reverse engineering an x86 system component.

I hadn’t tried it myself I just knew it could run it, sucks to hear it’s so unusable.

Re: I ruined my vacation by reverse engineering WSC

#97

Earlier quoted context omitted.

> The part of the system that manages all this mess is called Windows Security Center - WSC for short. It’s in the article

true, but you have to read until the 4th paragraph to find it. Putting it in the title would have been better

Fair point

Re: I ruined my vacation by reverse engineering WSC

#98
post #45

Earlier quoted context omitted.

This is a somewhat useful feedback, however I am not too sure how this can be fixed given the structure of my blog post. Do you think if I just add a line `*WSC is short for Windows Security Center` in the first paragraph this will be enough?

Just wondering is this Slack? Just wondering what kind of logging flow you’re using. https://blog.es3n1n.eu/posts/how-i-ruined-my-vacation/pics/p...

Looks like Discord.

Re: I ruined my vacation by reverse engineering WSC

#99

Earlier quoted context omitted.

It's weird that windows wouldn't have a signed manifest that would detect that

It does have that. Windows uses code signing and either DISM or SFC to do that. But this isn't about the binaries. It's where definitions and configuration are stored. It's C:\ProgramData, not C:\Program Files. The system also can't object too severely. Third party endpoint protection exists.

> Third party endpoint protection exists.

much to everyone's dismay. :/

Re: I ruined my vacation by reverse engineering WSC

#100
post #68

Earlier quoted context omitted.

It’s my hardware. I’ll do what I want with it, m8. Simple as that.

Well this is a straightforward sentiment with a real "my body, my choice" ring to it, isn't it? Until it isn't. Perhaps your hardware, when connected to a network, has real effects on the rest of that network. What if your system joined a botnet and began DDOS activities for payment? What if your system was part of a residential proxy network, and could be rented in the grey market for any kind of use or abuse of oth…

Geez what a cluster* of a comment. You mix in a bunch of theoreticals you came up with in 5 seconds that cover different domains and then don't actually go to the effort of critically examining your own statements, which is appreciated and makes for much higher quality comments.

>Perhaps your hardware, when connected to a network, has real effects on the rest of that network. What if your system joined a botnet and began DDOS activities for payment? What if your system was part of a residential proxy network, and could be rented in the grey market for any kind of use or abuse of others' systems?

This at least is "you, affecting others". But the obvious immediate response is that such things done via the network can be mitigated or blocked at the network layer, and indeed must be anyway since attackers are doing such things from across the world 24/7 regardless. I'd fully support ISPs having to throttle or even potentially block-until-fixed any customers who participate in active network attacks, and other parts of the internet throttling or black listing ISPs that refused to cooperate. But making someone deal with the consequences of their choices is no reason to deny them the choices in the first place, given that most of those making such choices are not, in fact, actually going to end up doing any of what you listed.

>What if your system became a host for CSAM or copyright-violating materials, unbeknownst to you, until the authorities confiscated it?

Here (and seriously ZOMG THINK OF THE CHILDREN, lol really? on HN, in 2025?) you veer off into personal consequences to the person making the choice, as opposed to them being part of an attack on others. This is just saying "there could be risks to you if you mess it up!" which is a complete non-statement.

>And what if your hardware had a special privileged location on a corporate network, or you operated a VPC with some valuable assets, and that was compromised and commandeered by a state-level threat actor? Is it still "your hardware, your choice"? Or do your bad choices affect other people as well?

Um. Hello? Why is corporate IT allowing you to BYOD to a special privileged location on the corporate network without even so much as any sort of management agreement or contractual responsibilities? At this point you've veered off the road of reality. Because in actual reality you don't own hardware in special privileged locations or at least don't have full choice over it by your own agreement. And if that's not the case hooboy is there a kind of a lot of other fundamental issues there. That's not an argument for a blanket universal policy.

Post reply on HN