OffensiveCon19 - Alex Ionescu - Keynote - Reversing Without Reversing
Why Hacker News recommends it
Cited in ReactOS threads as an authoritative account of how Windows reverse engineering works and as a rebuttal to claims about ReactOS.
What it is
Alex Ionescu's OffensiveCon 2019 keynote on how reverse engineering is done on Windows without conventional reversing. It covers legal ways to obtain names of variables, exported functions and structures.
Recommended by 1 HN commenters across 1 different months, 2019 to 2021.
What Hacker News said
Recommends tiraniddo · 2019-07 · on “A Kernel Engineer at Microsoft's Answer to “What Do You Think about ReactOS?””
Well that's categorically untrue. Sure they don't release private symbols intentionally but they have done in the past accidentally. At that point it becomes a bit of a grey area, undoubtedly leaked/stolen source code is a no-no but reversing from private symbols when they do leak seem harder to quantify as you still need to reverse engineer the code, just structures/names etc are already known. Private symbols are not the only way of gleaning more information, other examples I can think of are: * Checked builds (prior to Win10). These builds shipped de-optimized kernels (e.g. no inlines) typically with copious debug strings which gave away important details. For example I gleaned a lot of k
Cites dingby · 2019-07 · on “A Kernel Engineer at Microsoft's Answer to “What Do You Think about ReactOS?””
The more you write in these threads the more you sound like a fool. [this video] Start around the 9 minute mark.
Cites jeditobe · 2019-07 · on “A Kernel Engineer at Microsoft's Answer to “What Do You Think about ReactOS?””
Well, now please re-read your statement Do you understand that internal data structures entirely from the NT kernel, including (why?) their names != verbatim code from NT in your source The program code is logic first of all. For the similarities of names and structures itself - the answer is in this already mentioned video [this video] from the 9:53 moment of time. TL:DW there are a lot of legal ways of obtaining names of variables, exported functions and structures
Cites dvfjsdhgfv · 2020-10 · on “ReactOS (Free and Open Source Windows): Jérôme Gardou hired to work full-time”
> Last time ReactOS came up here some folks were concerned about legality too, and I think there even was a salty Microsoft employee ranting about stolen code from the source leaks. Link to the actual dicussion here with the comments of the MS employee: [LINK] ReactOS developer's explanation on how they work: [this video]
Cites MikusR · 2021-02 · on “ReactOS Updates”
It was by one "I am very smart. Nobody can be as smart as me" Microsoft programmer. Who completely dismissed this explanation [this video]