carter retweeted
Tired of noobs complaining the WINAPI for malware development is weird. It's not.
How do you create a file?
The CreateFile function.
How do you open a file for reading?
The CreateFile function.
How do you open a file for writing?
The CreateFile function.
How do you get a handle to a directory?
The CreateFile function.
How do delete a file?
The CreateFile function.
How do you get access to a physical disk?
The CreateFile function.
How do you get access to a file stream?
The CreateFile function.
How do you get access to the console buffer?
The CreateFile function.
How do you get access to pipes?
The CreateFile function.
How do you perform interprocess communication?
The CreateFile function.
Just make sure you use the appropriate version of CreateFile (CreateFileA for ANSI, or CreateFileW for wide characters).
Alternatively, you can use CreateFile2 which is the same as CreateFile except the parameters are passed as a data structure named CREATEFILE2_EXTENDED_PARAMETERS. However, be aware CreateFile2 only works on Windows 8 and above and designed more or less for programs running from the Windows app store.
Alternatively, alternatively, you could use CreateFile3 which is nearly identical to CreateFile2 except it uses the CREATEFILE3_EXTENDED_PARAMETERS structure and is more or less designed for sandboxed packaged applications. However, be aware CreateFile3 only works on Windows11 24H2 and above.
It's shrimple, honestly.
carter retweeted
The entire idea of AI code generation is based on the assumption that a "prompt" can express your technical intention. But as soon as you start to get good at programming you stop thinking about it in english and instead switch to some abstract mental representation.
carter retweeted
Up until just recently, some metrics of Microsoft Azure Attestation were completely vulnerable to spoofing in some circumstances, and would accept attacker controlled measurements. SecureBoot in this case, spoofed as ON from a malicious bootkit. see CVE-2026-45642
carter retweeted
COMPLETELY unrelated to any current events, this is a friendly reminder that @OBSProject is largely volunteer driven with only 4 full-time staff.
Most people don't even know they can support OBS directly 😶🌫️
obsproject.com/contribute
carter retweeted
not sure why, but releasing Pyre - Ghidra's decompiler running fully in your browser. Drop an ELF / Mach-O / PE / wasm, navigate decompiled C with cmd-click + xrefs in Monaco. No server, no upload, binaries must never leave the page...
source. github.com/ant4g0nist/pyre
deployed at: pyre.fuzzing.science
carter retweeted
Zoomer surgeon doing CS:GO knife inspect animations with a scalpel during brain surgery
carter retweeted
This is smart but they need to make inflatable fake hospitals and schools to really throw off the US and Israel
Lord Bebo@MyLordBeboMar 12North America!
North AmericaConnected via Europe App StoreLocation may be affected by a proxy or VPN.Account-level information, not a live location or per-post device.
Chinese inflatable fake weapons with heat signature.
Can the fool missiles and drones?
carter retweeted

Casey Muratori@cmuratoriFeb 25
United States
United StatesConnected via Sweden Android AppAccount-level information, not a live location or per-post device.
I like how they called them "attacks". Do they also call it an "attack" when Anthropic does the stealing? Or is it only when someone else steals their IP that it goes from "fair use" or "downloading data for research purposes" to being an "attack"?
























