Andoryuuta

Having "cc" as a sub-command with a space has caused some issues with Go (cgo), make, autotools, etc [0].

The latest proposal from andrewrk is a new zig subcommand which would automatically generate wrappers ("zig-cc", "zig-c++", etc) for for the target, then set them in the current env ("CC=zig-cc", "CXX=zig-c++") [1].

[0]: https://github.com/ziglang/zig/issues/8716

[1]: https://github.com/ziglang/zig/issues/8973

Alongside the Audacity changes, the Muse group has also performed some highly questionable actions in the context of MuseScore, such as falsely claiming that a downloader script was illegal, and that they owned copyright of all sheet music on their site. Going as far as to state that they will "cooperate with github.com and Chinese government to physically find you and stop the illegal use of licensed content." [0].

Unfortunately, I don't believe the general users of audacity will ever hear about the groups actions, and will continue to use the audacity without knowledge of what has changed.

[0]: https://github.com/Xmader/musescore-downloader/issues/5

There are even two actually! Yuzu and Ryujinx. They are both unique codebases and both support games to differing degrees.

To be honest, we are well beyond hundreds of maintainers that will need to clean up their repos. I've been crawling the "Improve Docs" spam issues since they started appearing.

As far as I'm aware, there are already 4500+ repos which have had a low quality, single-line-change, "Improve Docs" PR opened in the past two days.

Just to pull out a few repos out for example purposes:

* 7 spam - https://github.com/seductivegeese/softi.es

* 8 spam - https://github.com/easydepot/websiteSwallower/pulls

* 8 spam - https://github.com/tokio-rs/website

* 13 spam - https://github.com/phpmyadmin/website

* 15+ spam - https://github.com/pyvec/elsa

* 15+ spam - https://github.com/justicedemocrats/candidate-website

* 15+ spam - https://github.com/Salamek/blacklist

* 20+ spam - https://github.com/openmaptiles/www.openmaptiles.org

* 25+ spam - https://github.com/blitz-js/blitzjs.com

* 60+ spam - https://github.com/EdmontonPy/edmontonpy

Heck, take look at the PRs and commit history of https://github.com/azmat21/UyghurWebsiteCrawler. It's been two days into October, and this repo has gotten 55 PRs. It hasn't ever gotten a single PR before this as far as I can tell.

To add to the mentions of anti-cheat software, there are also multiple binary packers/protectors, such as VMProtect[1], which use system calls directly to protect and/or obfuscate themselves.

[1]: https://lifeinhex.com/use-of-syscall-and-sysenter-in-vmprote...

This was a troll post of some sort. See the gist by the (verifiable) MicroG maintainer [1].

[1]: https://gist.github.com/mar-v-in/ad8d220ea4220638c0e5861cf06...

This not quite true, especially with current state-of-the-art tools like Ghidra, IDA pro (with Hex-rays), etc.

In fact, Rolf Rolles wrote a wonderful guest post[1] for the Hex-Rays blog about automating the reversal of this exact obfusactor, though he wasnt aware of it's origins at the time.

[1]: https://www.hex-rays.com/blog/hex-rays-microcode-api-vs-obfu...

This is very neat. The whole idea of having multiple ongoing conversations in the same world that you can just walk closer to hear reminds a lot of Sun's Project Wonderland from ~10 years ago.

There was also a related discussion earlier, "GitHub blocked my account and they think I’m developing nuclear weapons", though it has since been flagged.

[1]: https://news.ycombinator.com/item?id=20537841

AFAIK, they arrested him because of the creation and sale/distribution of the Kronos and "UPAS Kit" malware [1].

[1]: https://www.justice.gov/usao-edwi/pr/marcus-hutchins-pleads-...

Downloading Docker CE for mac or windows requires an account.

https://github.com/docker/docker.github.io/issues/6910

It seems like some of the C++ library features are special-cased.

From the Q&A section of the readme:

"Which notable features are not implemented yet?

    > Object-oriented features"

"Which libraries are supported?

    > iostream (only cin and cout and endl)"

Yeah.

There is a link on the download page to a zip of the files, without an installer (or the installCore adware/bundleware).

>"For those that want to have Cheat engine without automated installer and installCore recommendation during installation, click here"

I agree that something is up with the stars. It was <10k some weeks ago, which was the last time I was on the GitHub page. Also, it seem that new issues on the tracker are being flooded with spam (https://github.com/x64dbg/x64dbg/issues/1864).

With that being said, the x64dbg project itself is definitely not just some spam project. I've been using it in place of OllyDbg for about 2 years now and I like it alot. IMO, it's basically a modern open-source successor to OllyDbg. Also, the project blog has some really neat posts like weekly digests of what has changed in the project (Though, I think these might have stopped sadly), unpacking windows kernel drivers, and a lot of design problems & solutions.

Yes, If any malicious program is running in user land in windows, it can easily bypass UAC. But, as was mentioned when this was being discussed on reddit[0], UAC was never meant to be a fix-all security boundary.

0: https://www.reddit.com/r/netsec/comments/6e1uft/a_poc_demons...

I mean, you can easily bypass the UAC dialog by duplicating the token of a already elevated process. Here is an example of this I saw before in powershell: https://gist.github.com/tyranid/9ffef5962a642d4a1bb8e4ee7e3b...

Ah, yeah. I totally forgot about hopper. I've never used it, but it looks nice, especially for Objective C and Swift.

IMO, I really don't see this as "shameless advertisement". As far as I know, there are really only three worthwhile static analysis tools available right now, Radare2(free), Binary Ninja($99-$300), and IDA pro($500-$5000+). Using Radare2 at the beginning can be very daunting if you are new to RE. IDA is so expensive you can really only obtain it legally through your workplace or college/university, or if you're willing to spend a very large sum of money. That really only leaves Binary Ninja.

With that said there is nothing stopping people from starting with radare2 if they wish to, there is a lot of great tutorials for it available online. But in this case the recommendation of using Binary Ninja was one which the author (Nitrax) made because "due to its low cost .. compared to the functionalities provided", the author even further added "A demo version is available for free and should be enough for beginners."

I can understand the insistence on free and open-source software, but a lot of OSS tools in many fields have simply not caught up to their paid counterparts in all aspects. And to me, it feels much like calling someone a shill for saying "Make sure you use a good drill for this" instead of supplying references to a free & open 3D printable drill schematic.

Just like how "GIF" is supposed to be pronounced "JIF" according to its creator. Hahaha

It's possible to an extent. The disassembler being used is a commercial product called IDA from Hex-Rays [1]. They also sell a decompiler plugin for IDA. While it can generate C-like output, it being 'readable' is debatable. Because of the lack debug symbols, compiler optimizations, and other things in release binaries, the decompiler output has some confusing characteristics. Just to name a few things: improperly guessed calling convention, odd code flow (lots of goto statements, labels, and inverted loops), messy dynamic string creation [2], bit shifts instead of multiplication/division for powers of 2, pointer arithmetic to access struct fields, stack variables reused for multiple purposes, etc. With all that being said, the Hex-Rays decompiler is the best I've seen so far. It's great to have when you want a quick overview of a function you are reverse engineering, if you or your company is willing to pay the exorbitant cost that is.

Additionally, there is open source decompiler called Snowman [2] that is pretty neat also.

[1] https://www.hex-rays.com/index.shtml [2] http://reverseengineering.stackexchange.com/questions/3546/e... [3] https://github.com/yegord/snowman