No more single-core chips

Intel is phasing out single-core desktop processors. The end of the end of an era!
UPDATE: Ken covered this a while ago regarding a similar decision by AMD.

I guess it depends on what you’re hex editing

Ken and Rich Johnson from MSRC were both extolling the virtues of hiew as a hex editor a few weeks ago. I recently needed to do some hex editing of a pcap file (needed to manually munge some network packets for IM driver testing), and my new laptop didn’t have a hex editor yet, so […]

The return of err.exe

I’ve been working with Karin Meier-Magruder from the SDK team at Microsoft to get everyone’s favorite tool, err.exe, [re-]added to the PSDK. She’s working on getting it done, but meanwhile, as a special treat for Kernel Mustard readers, I have a newly updated err.exe ready for download. There’s a EULA inside the .zip that governs […]

Security lessons from MULTICS

Interesting stuff for OS and security-minded people: Thirty Years Later: Lessons from the Multics Security Evaluation. MULTICS was B2-certified and was considered for re-development into an A1 system.

New Niagra debuts

Sun has announced the latest rev in its Niagra line, the line of highly multi-threaded CPUs that were designed from the ground up with total chip throughput being the most important variable (followed perhaps by power consumption). It’s a really cool design, but at 64 threads per chip, there’s no chance that most current […]

Whence came function hooking?

A friend is digging around trying to find out when function prologue hooking was invented, and who did it. Does anyone out there know of any old-time uses of function prologue hooking?
I’m NOT talking about:

Interrupt hooking
system call hooking
window hooks
VxD service hooking
hot patching
any “architected” hook

I’m interested only in programs that disassemble a C (or similar) function […]

Is it just me…

…or are LookupAccountName and LookupAccountSid named backwards?
Annoying.

A documented way to get loaded modules

This is a new one on me. I just saw this mentioned on NTDEV for the first time yesterday. AuxKlibQueryModuleInformation is a documented way to get the loaded modules, replacing some of the functionality of ZwQuerySystemInformation.
In fact, the entire Auxiliary Kernel-Mode Library Routines section is interesting. I had no idea it existed until […]

Thomas Divine is re-blogging

A mere hour after I ran across Don Burn’s new blog, I read on the PCAUSA network driver development mailing list that Thomas Divine has started blogging again. For those that don’t know Thomas: as nearly as I can tell, he knows everything that is to be known about NDIS. If you do network driver […]

Don Burn is blogging

I just ran across Don Burn’s new(ish) WDK-focused, at http://msmvps.com/blogs/WinDrvr. Don is a longtime contributor to the community and I like the direction he’s gone with his first few posts.
In addition to the basic driver dev stuff, he’s getting into some important higher-level stuff like source control and using undocumented features. I bet I […]