Windows Internals, 7th Edition | Hacker News Reader

Windows Internals, 7th Edition

alex-ionescu.com

174 pointsctoth24 comments

If Alex happens to drop by: what happened to DriverMon? Clearly Alex has been very busy but he mentioned the GUI-fication of the tool was being handled by his co-worker Robin Keir.

"Abusing the NT Kernel Shim Engine" by Alex Ionescu at REcon 2016 (October)

https://www.youtube.com/watch?v=qCa9icMqBNM?t=48m55s

a tool called DriverMon is planned for release at the conference, which uses the KSE to provide ProcMon for Drivers

Will be available from https://www.crowdstrike.com/resources/community-tools/

Will announce release on Twitter in a few weeks

Waiting for this has reinforced my belief that vaporware (or whatever is preventing the release of this tool) has served as the best deterrent preventing anyone else from running with this undocumented tech!

Maybe it's just me but when I glance at the cover it looks like the book is about Windows 7 Internals only. I'm wondering how many others would think the same when seeing it on a bookshelf. It looks like the same layout was used for the 6th edition, I want to suggest the use of a different layout for the next editions.

It does look as if the title is Windows 7 Internals. Note that it was the preceding edition that covered Windows 7 (Windows NT 6.1). This edition has been updated to cover Windows NT 10.

Not the way I read it - it is "Windows Internals - 7 (seventh edition)". It is not even ambiguous IMHO because "7" is not vertically aligned with "Windows". But at a glance, yeah, someone could misunderstand it...

You can't say it's not ambigous if you're replying to two persons that found it confusing. :) I also read Windows 7 Internals, for one.

I guess if you only look at books at a glance, you are not the target market for this one anyway.. ;)

This problem gets a lot worse when all you see is a thumbnail of the cover. At least the image on his blog post is large enough that you can figure out what it means if you take a second. But in search results, the text "Seventh Edition" is nearly invisible.

> Surface Aggregator Module (SAM) Internals - a little chip on your Surface Pro/Laptop/Book that you probably didn’t know was there

Nobody on the Internet seems to know what it is (based on my 5 minutes of looking). Does anyone on HN know?

Based on this[1] tweet, "System Aggregator Module" firmware on Surface Pro is similar to Macbook's "System Management Controller"[2].

[1] https://twitter.com/aionescu/status/815878947200077824?lang=...

[2] https://en.wikipedia.org/wiki/System_Management_Controller

> System Aggregator Module

> System Management Controller

It's like the worst Java naming patterns (FactoryControlerBridgeAdapterManagerAdapter), but in hardware.

For those having trouble accessing the page:

https://web.archive.org/web/20170512030315/http://www.alex-i...

And here's Amazon's Kindle edition, listed for me at $31.19:

https://amzn.com/dp/B0711FDMRR

45% off currently.

Was ~$19 AUD ($14 USD)

Can you share the link?

Code INTERNALS gives 40% off the pBook or eBook price on the MS Press Store. Just used the code for the bundle and it worked!

https://www.microsoftpressstore.com

What's the modern equivalent for the Linux kernel these days?

The Linux Kernel Programming Interface maybe? https://www.nostarch.com/tlpi

Unless my search skills have gone to hell, the Linux equivalents seem to be significantly out of date. You might consider trying The Design and Implementation of the FreeBSD Operating System by Kirk McKusick et. al..

https://www.amazon.com/Linux-Kernel-Development-Robert-Love/... is very good, as is https://www.amazon.com/Mac-OS-iOS-Internals-Apples/dp/111805...

Amit Singh's book on MacOS is quite interesting, too. But gtirloni did ask about Linux, for which neither MacOS book is really appropriate.

Is the book released? Where can i buy it? What about part 2? So many questions...

The Amazon page makes it look like its not ready yet, but I just got part 1 on kindle.

Book is released on May 15. http://a.co/hC9N59E

Wow, awesome. I've been checking Amazon every few months waiting on this. I was starting to think it'd never come. Also, just to echo xurukefi, what about part 2?

Reply on news.ycombinator.com