Hacker News: CSm1n

New comment by CSm1n in "Steam Client is now faster than Epic's new vibe coded launcher"

CSm1n — Fri, 16 Oct 2026 01:30:03 +0000

That’s unrelated. I assume they only switched the webstore part at that time.

The actual move to CEF started in 2018 with the Steam Friends rework.

New comment by CSm1n in "500B tokens later: Letting AI agents decompile a first-person shooter"

CSm1n — Mon, 12 Oct 2026 01:05:22 +0000

This isn't EA, it's the other franchise.

New comment by CSm1n in "Windows 11 Notepad to support Markdown"

CSm1n — Wed, 25 Feb 2026 23:19:28 +0000

Notepad was just a wrapper around some default win32 controls. Judging alone by exe size is not right, although probably a “statically linked” notepad would still be smaller than emacs

New comment by CSm1n in "The Holy Grail of Linux Binary Compatibility: Musl and Dlopen"

CSm1n — Tue, 27 Jan 2026 00:20:41 +0000

> No, you can't. When you use 7-era toolchain (e.g. VS 2012) it sets the minimum client version in PE header to Vista, not XP much less 2k.

Yes, you can! There are even multiple Windows 10 era toolchains that officially support XP. VS 2017 was the last release that could build XP binaries.

New comment by CSm1n in "Breaking SecuROM 7 – A Dissection"

CSm1n — Sun, 28 Jan 2024 23:33:47 +0000

It is a flag that says whether the loader data is initialized or not.

The layout of PEB_LDR_DATA “leaked” long time ago in public PDBs.

More context: It has nothing to do with debugging. However, if you attach to the process early enough, you might see the flag as 0 and eventually it would switch to 1. That is probably what threw him off.

New comment by CSm1n in "What happens if you try to download and install Firefox on Windows"

CSm1n — Sun, 03 Apr 2022 17:07:17 +0000

The repositories shown on the first page of GitHub search are not actual exploits. They all expect to be run through an admin powershell/command line. Under normal conditions (default user and UAC on) you will get a warning before the script is able to gain administrative access. Try to run them again under a normal user and they won't be able to disable/bypass Defender.

It's the same as sudo'ing an unknown script you received in an email. At that point you're begging to be pwned.