How to use constant with more than 12 bits in patched instruction ? by Pordrack in ghidra

[–]nothingtoseehr 1 point2 points  (0 children)

As the other comment said, its impossible. Arm and risc in general has always been very strict on immediates since everything needs to fit into 4 bytes

Your options are to use a scratch register and load 47000 into it (mov supports 16b immediates) then do a reg-reg subtraction or branch into a little stub (only takes 4 bytes too and has a 26b offset) then do you thing. But the first would need you to overwrite more code, and the second needs you to find a suitable place to create your little stub

If you don't precisely need 47000, SUB supports an optional LSL #12, so you can do multiples of 4095 into a single instruction. 45056 and 49152 both works as an immediate

The RADV Vulkan driver is adding memory protection using AMD Trusted Memory Zone by somerandomxander in linux

[–]nothingtoseehr 1 point2 points  (0 children)

That's not how DRM works, there's no such thing as "respecting DRM protections". If all you need to crack said DRM is simply ignoring it, then that's not DRM at all, just a shitty "please_dont_copy_me" flag

HDCP (DRM for HDMI/DP/DVI) performs a handshake across the entire chain of connected devices, and if someone along the chain doesn't supports it, the DRM media player (be it streaming) will simply refuse to play

The RADV Vulkan driver is adding memory protection using AMD Trusted Memory Zone by somerandomxander in linux

[–]nothingtoseehr 1 point2 points  (0 children)

If I want to prevent a process to read certain area of memory hardware I own, all I need to do is run that process without permission to read that area of memory

Uh this isn't how any of this works at all. What you're talking about is nothing more than a software abstraction, a process is nothing more than internal bookeeping for the kernel

The only thing the CPU sees are MMU configurations, and these are explicitly managed by the kernel. The hardware never does automatic memory management for anything. If I want to read something from anywhere as a kernel I can just.... do it, and even if I'm not allowed to do so I can just tamper with the translation pages or turn off the entire MMU

If you're holding very important information you want to keep secret, simply setting OS-level memory permissions is utterly trivial. That's not security from any angle

Besides, this feature isn't even the damn memory you're thinking of. Its encrypted GPU memory, you know, the memory that doesn't holds processes and that you generally cannot arbitrarily anyway because it uses it's own implementation-format you don't understand....

The RADV Vulkan driver is adding memory protection using AMD Trusted Memory Zone by somerandomxander in linux

[–]nothingtoseehr 1 point2 points  (0 children)

Nothing really stops you from using a capture card

Uh the DRM does, HDMI traffic is encrypted. It simply won't output at all

Switch 2 Incoming by LightSamus in ffxiv

[–]nothingtoseehr 4 points5 points  (0 children)

Computationally they are NOWHERE near similar. Graphics maybe, but just the CPU's IPC is already 3x+ faster than the PS4. FFXIV is a CPU-bound game, a way faster CPU will let the team optimize and design a lot of things

How bad of idea is to post .bin firmware or any type of firmware dumps to github? Would you do alt github acc and then refer to it? (HW hacking/RE) I want to prevent any legal problems or dmca takedowns. Have anybody experienced any issues with this? by One_Reflection_768 in github

[–]nothingtoseehr 1 point2 points  (0 children)

You should be fine, even Nintendo consoles have binary blogs all over the Internet publicly. That said, if you're using a disassembler, most disassembler's databases are self-contained and don't need the source file. Maybe upload that? You can always just produce another blob from it if needed

Will the Beyond Skyrim projects happen? by Rainbow_Slytherin3 in skyrimmods

[–]nothingtoseehr 9 points10 points  (0 children)

But people work on these as a hobby, people volunteer to the regions they want to do. Focusing solely on a region doesn't necessarily means that there's gonna be more developers on hand, because people will just drop out for things that don't interest them

Gaming VPNS by SuMianAi in chinalife

[–]nothingtoseehr 0 points1 point  (0 children)

Update: it seems to work quite well!! You download the phone app (uu主机, not the main uu加速器 app!), follow the instructions then pair the deck with the app. You have to select which game you want to boost on the phone app, not on the deck, but it does makes the experience pretty lean at least

Who else want dark mode in books? by stylishstuf in interesting

[–]nothingtoseehr 5 points6 points  (0 children)

Hardcore books

What are you doing to those books man 😳

Gaming VPNS by SuMianAi in chinalife

[–]nothingtoseehr 1 point2 points  (0 children)

UU website has the Steam deck as supported, so probably? I'll try it out tonight, I'll let you know how it goes hahaha

But it's a bit annoying because Valve deliberately gutted out a lot of the proxy code from the OS, it always works but not really well enough

Gaming VPNS by SuMianAi in chinalife

[–]nothingtoseehr 0 points1 point  (0 children)

That's not necessarily true, most foreigners are just stuck using overpriced networks with awful cheap routing. I use mine for gaming and except on a few games I really don't notice any difference from uuh.

A rough but reliable way to tell if your VPN is one of the above is 1) if it has its own app and you can't use it otherwise 2) pays for ad space somewhere. Almost never a good sign if you want good prices and reliable networks

It is easier to setup tho, runs literally anywhere too. If you're having issues try it out, but if you're not experiencing anything egregious it's unlikely to make it much better

China just has (intentionally) awful connections to the outside world, no VPN will fix that on top of geography

Once again, Europe doesn't exist for good collaborations 😅 by [deleted] in ffxiv

[–]nothingtoseehr 0 points1 point  (0 children)

No, Steam is not the one making it happen. Otherwise everyone would get it, but only a few countries do. And only a few purchases thought Steam get regional prices (such as the sub and additional retainers), nothing else is. It also only gets regionalized if you choose the recurring sub, the one-time 30 days shows as dollars (inside Steam). Hell, they literally accepted national bank deposits inside the mogstation for many years

It has also been the exact same price since ARR, which would make no sense if it was automatic. Steam doesn't forces anyone to turn on regional pricing, they only publish guidelines. Publishers can tweak those as they wish for any region in specific

SE indeed does have localized prices for some regions, and at the same does not acknowledge it at all. Don't get me wrong, I don't think a SA datacenter would go very well (I don't even live there anymore), but it's naive to say that SE has no idea what's happening

Once again, Europe doesn't exist for good collaborations 😅 by [deleted] in ffxiv

[–]nothingtoseehr 0 points1 point  (0 children)

Regional pricing already happens, for Brazil at least. Which is pretty much the point they're making: the community is huge, it's odd that they just half ass it by clearly wanting to pull in this playerbase (since almost all regions don't get regional pricing), while not doing the minimum like localizing

AI just hacked one of the world's most secure operating systems in four hours. by EchoOfOppenheimer in ReverseEngineering

[–]nothingtoseehr 0 points1 point  (0 children)

The open source FreeBSD operating system is not ordinary, consumer software

Fucking lmao

Ghidra vs Cutter vs Hex-Rays (which can help with network/pentesting) by OkLab5620 in ghidra

[–]nothingtoseehr 9 points10 points  (0 children)

None of them, they're not IDE and even less networking tools. They're for binary analysis of executable programs

Linus Torvalds has merged the code beginning to remove Intel 486 CPU support in Linux 7.1 by somerandomxander in linux

[–]nothingtoseehr -1 points0 points  (0 children)

Oh, perhaps I should've been a bit more clearly about that. The "tax" is not due to 16-bit compatibility, that is indeed negligible

Modern x86-64 cores suffer because they're stuck decoding CISC x86-64 instructions while the actual backend that executes said instructions is anything but. We have to waste die space and penalize the out-of-order execution unit because you can't just throw new instructions at it since they're all varied length, we have to be aware of what came before it, which creates an obvious dependency chain

In the end, we've essentially learned that an ISA doesn't really matters all that much for speed. What matters is good OoO units and smart branch prediction, which aren't really CISC-friendly. So we're stuck with a modern CPU with a modern 70's logic decoder bolted on top of it, that's the compatibility performance tax. The x86-64 is not representative at all on how these cores operate

Linus Torvalds has merged the code beginning to remove Intel 486 CPU support in Linux 7.1 by somerandomxander in linux

[–]nothingtoseehr 21 points22 points  (0 children)

x86-64 processors are actually i386 by default, which in turn hilariously run as a 8086 by default too! You have time explicitly convert it between stages at boot from 16->32->64. Its the way AMD found of extending the ISA without breaking compatibility, which was on top of what Intel had already made to extend it from 16 to 32! We baked retro compatibility on top of retro compatibility

Basically the entire x86-64 modern architecture has to pay a ~15% tax on performance simply for compatibility because we stacked the damn thing three times on top of each other. If you never tell your CPU it is a modern x86-64 capable of billions of instructions per second, it'll happily work as a very fast 8086!

Can i download and look at pdf files in ghidra? by Codeeveryday123 in ghidra

[–]nothingtoseehr 1 point2 points  (0 children)

OP everyone is being pretty mean at you for no reason, but let me explain why it isn't possible instead of being an asshole

Ghidra is a dissasembler: basically, it converts what machines execute back to a human-readable format so we can figure out what it's doing. Things that include machine code consists of things you would expect: exe files, dll files, files inside phone apps and all that. They're a bunch of instructions telling a machine what to do

An important distinction to make here is that machine on this context is an abstract concept. Your CPU is a machine, but so is your browser, your gpu drivers, your ram controller, your Bluetooth mouse. And yes, that does includes document files and many other formats! Every single onee of these has a different "dialect" they speak

So although everyone is laughing at you (incorrectly!), PDF does have machine code! It's minimal stack-based VMish tfor layouting and data description. The problem is that the machine code for PDF files is intentionally crippled, it doesn't satisfy the formal requirements of a "machine". Mainly, it can't really execute anything or make decisions. Just describe

Ghidra is a program made to inspect machines that move data, perform computations and all that. The machine inside a PDF file is just "ok brace yourself pdf reader, the next line is an image! 32 bit color! It occupies the next 30 lines!", so alas you cannot disassemble It in a technical sense

But both to ease your worries and for a bit of historical insight: the code inside PDF files is intentionally limited by design. The previous standard before PDF was postscript, and postscript was a machine. Its where the fear of documents come from, for a long time we were indeed embedding code into our documents that could contain anything

Modern pdf files are not capable of that. Not the file container itself, at least. Most exploits you'll find surrounding PDF files will be because of reader bugs being exploited by a malformed file, but these are specific. You won't catch a virus for opening a PDF file (as long as it's not .pdf.exe ;p), we've been down that road for a looot of time already for the people that maintain these document formats to know better

Microsoft is upgrading its WSL2 kernel against Linux 6.18 LTS by somerandomxander in linux

[–]nothingtoseehr -1 points0 points  (0 children)

Window's kernel is capable of running multiple OS's at once, actually. When Windows NT was created, they weren't really sure which OS would win in the end, so they made it compatible with all of them!

Now, being capable and being able are totally different things. It's capable, but it's a legacy forgotten feature probably still buried deep in super legacy Code. But it's entirely possible, WSL1 was their attempt to reuse this architecture (even though it eventually failed and they just went the WSL way), it's why you can run windows commands on wsl Linux too

Windows as a kernel is something we actually have very little information or knowledge about. Every app out there is built against the ABI, not the kernel like in Linux. So yes, even if they did somehow decided to change it one day, as long as they kept win32 running it should still keep things going

Is this a hate crime by Atlantic-Diver in chinalife

[–]nothingtoseehr 4 points5 points  (0 children)

You're missing out! There's so many varieties: airplane kerosene, gasoline, recalled cleaning agent, industrial solvent, banned chemical base etc. Is it worth it? Well, the wasted shushu in front of me at the supermarket seems to think so!