<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: 2013 Will not Be The Year of M$</title>
	<atom:link href="http://mrpogson.com/2012/10/08/2013-will-not-be-the-year-of-m/feed/" rel="self" type="application/rss+xml" />
	<link>http://mrpogson.com/2012/10/08/2013-will-not-be-the-year-of-m/</link>
	<description>One man. Closing, all the windows.</description>
	<lastBuildDate>Sun, 19 May 2013 06:46:47 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>By: oiaohm</title>
		<link>http://mrpogson.com/2012/10/08/2013-will-not-be-the-year-of-m/#comment-100381</link>
		<dc:creator>oiaohm</dc:creator>
		<pubDate>Thu, 18 Oct 2012 16:04:43 +0000</pubDate>
		<guid isPermaLink="false">http://mrpogson.com/?p=14877#comment-100381</guid>
		<description><![CDATA[That Exploit Guy there is sample code out there of it.  It is a different class of bug completely.  To what Dan Rosenberg talks about.  The bug I am talking about is the NT object base permission system that is even around memory allocation.

You have two permissions on the same memory allocation object.  What one wins.  The one that will allow access.  Placing a kernel code in a exe resource then loading it from there(in places where the windows ABI stupidly allows it)  Results in 1 shared block of memory between kernel space and userspace with 2 object permissions applied to the memory segment and the memory management unit will obey commands from both.

Yes this creates a rwx segment.  In fact it creates a segment where you can crash windows by applying NX to the driver then triggering a function to enter the driver.  This is basically not just a RWX segment of memory but a segment of memory where you have full control over what permission bits are applied from userspace even that its in kernel space.

That Exploit Guy its a complete different class of bug fairly much Windows unique.]]></description>
		<content:encoded><![CDATA[<p>That Exploit Guy there is sample code out there of it.  It is a different class of bug completely.  To what Dan Rosenberg talks about.  The bug I am talking about is the NT object base permission system that is even around memory allocation.</p>
<p>You have two permissions on the same memory allocation object.  What one wins.  The one that will allow access.  Placing a kernel code in a exe resource then loading it from there(in places where the windows ABI stupidly allows it)  Results in 1 shared block of memory between kernel space and userspace with 2 object permissions applied to the memory segment and the memory management unit will obey commands from both.</p>
<p>Yes this creates a rwx segment.  In fact it creates a segment where you can crash windows by applying NX to the driver then triggering a function to enter the driver.  This is basically not just a RWX segment of memory but a segment of memory where you have full control over what permission bits are applied from userspace even that its in kernel space.</p>
<p>That Exploit Guy its a complete different class of bug fairly much Windows unique.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: That Exploit Guy</title>
		<link>http://mrpogson.com/2012/10/08/2013-will-not-be-the-year-of-m/#comment-99645</link>
		<dc:creator>That Exploit Guy</dc:creator>
		<pubDate>Thu, 11 Oct 2012 10:34:26 +0000</pubDate>
		<guid isPermaLink="false">http://mrpogson.com/?p=14877#comment-99645</guid>
		<description><![CDATA[@oiaohm

&lt;i&gt;&#039;That is not by Dan Rosenberg. That is a bug I reported to Microsoft with demonstration code. That is not fixed.&#039;&lt;/i&gt;

Oh, really? Lemme guess - somehow you have also signed an NDA and handed over &lt;b&gt;your demo code copyright even though you have had absolutely no reason or obligation to do so. Am I correct?

You sure are one heck of a one-trick pony, aren&#039;t you?

Also, you still don&#039;t realise what&#039;s giving you away there, do you?&lt;/b&gt;]]></description>
		<content:encoded><![CDATA[<p>@oiaohm</p>
<p><i>&#8216;That is not by Dan Rosenberg. That is a bug I reported to Microsoft with demonstration code. That is not fixed.&#8217;</i></p>
<p>Oh, really? Lemme guess &#8211; somehow you have also signed an NDA and handed over <b>your demo code copyright even though you have had absolutely no reason or obligation to do so. Am I correct?</p>
<p>You sure are one heck of a one-trick pony, aren&#8217;t you?</p>
<p>Also, you still don&#8217;t realise what&#8217;s giving you away there, do you?</b></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: oiaohm</title>
		<link>http://mrpogson.com/2012/10/08/2013-will-not-be-the-year-of-m/#comment-99644</link>
		<dc:creator>oiaohm</dc:creator>
		<pubDate>Thu, 11 Oct 2012 10:11:54 +0000</pubDate>
		<guid isPermaLink="false">http://mrpogson.com/?p=14877#comment-99644</guid>
		<description><![CDATA[That Exploit Guy  Just because I wrote something using the terms you know does not mean I copied it.  Find where Dan Rosenberg covers the resource mapped to kernel space bug in windows.

So that author has nothing todo what what I was talking about.]]></description>
		<content:encoded><![CDATA[<p>That Exploit Guy  Just because I wrote something using the terms you know does not mean I copied it.  Find where Dan Rosenberg covers the resource mapped to kernel space bug in windows.</p>
<p>So that author has nothing todo what what I was talking about.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: oiaohm</title>
		<link>http://mrpogson.com/2012/10/08/2013-will-not-be-the-year-of-m/#comment-99643</link>
		<dc:creator>oiaohm</dc:creator>
		<pubDate>Thu, 11 Oct 2012 10:08:42 +0000</pubDate>
		<guid isPermaLink="false">http://mrpogson.com/?p=14877#comment-99643</guid>
		<description><![CDATA[That Exploit Guy there is a real bug there when loading a kernel part from a resource segment inside a .exe file.

That is not by Dan Rosenberg.  That is a bug I reported to Microsoft with demonstration code.  That is not fixed.

That Exploit Guy the so call offending comment is completely mine.

Sorry you would be the one expelled for this.  This is not the only bug in WFP as well.]]></description>
		<content:encoded><![CDATA[<p>That Exploit Guy there is a real bug there when loading a kernel part from a resource segment inside a .exe file.</p>
<p>That is not by Dan Rosenberg.  That is a bug I reported to Microsoft with demonstration code.  That is not fixed.</p>
<p>That Exploit Guy the so call offending comment is completely mine.</p>
<p>Sorry you would be the one expelled for this.  This is not the only bug in WFP as well.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: That Exploit Guy</title>
		<link>http://mrpogson.com/2012/10/08/2013-will-not-be-the-year-of-m/#comment-99637</link>
		<dc:creator>That Exploit Guy</dc:creator>
		<pubDate>Thu, 11 Oct 2012 08:35:25 +0000</pubDate>
		<guid isPermaLink="false">http://mrpogson.com/?p=14877#comment-99637</guid>
		<description><![CDATA[@oiaohm

&lt;i&gt;&#039;That Exploit Guy go back and read carefully Dan Rosenberg does he list the bits as R W NX ring. In the real registers there is no X bit. There is only a NX bit.&#039;&lt;/i&gt;

This is your offending &lt;a href=&quot;http://mrpogson.com/2012/09/30/more-stats/#comment-99019&quot; rel=&quot;nofollow&quot;&gt;comment&lt;/a&gt; from not long ago:

&lt;i&gt;&#039;When you push by WFP to kernel mode from a EXE resource. The problem is that EXE resource rw stats owns to the EXE. Basically WFP contains nice simple way to craft a rwx memory zone that you know exactly where it is since the application created it. This is a API/ABI design fault.&#039;&lt;/i&gt;

Your feeble grasp of the subject matter aside, this is by far one of the most brazen attempts to plagiarise without understanding the source material and without acknowledging its author. I am sorry, but if you want the fastest way to get expelled from university, &lt;b&gt;this is it&lt;/b&gt;.]]></description>
		<content:encoded><![CDATA[<p>@oiaohm</p>
<p><i>&#8216;That Exploit Guy go back and read carefully Dan Rosenberg does he list the bits as R W NX ring. In the real registers there is no X bit. There is only a NX bit.&#8217;</i></p>
<p>This is your offending <a href="http://mrpogson.com/2012/09/30/more-stats/#comment-99019" rel="nofollow">comment</a> from not long ago:</p>
<p><i>&#8216;When you push by WFP to kernel mode from a EXE resource. The problem is that EXE resource rw stats owns to the EXE. Basically WFP contains nice simple way to craft a rwx memory zone that you know exactly where it is since the application created it. This is a API/ABI design fault.&#8217;</i></p>
<p>Your feeble grasp of the subject matter aside, this is by far one of the most brazen attempts to plagiarise without understanding the source material and without acknowledging its author. I am sorry, but if you want the fastest way to get expelled from university, <b>this is it</b>.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: That Exploit Guy</title>
		<link>http://mrpogson.com/2012/10/08/2013-will-not-be-the-year-of-m/#comment-99635</link>
		<dc:creator>That Exploit Guy</dc:creator>
		<pubDate>Thu, 11 Oct 2012 08:16:50 +0000</pubDate>
		<guid isPermaLink="false">http://mrpogson.com/?p=14877#comment-99635</guid>
		<description><![CDATA[@oiaohm

&lt;i&gt;&#039;You should have no problem finding the university appeals processes if you are so cleaver&#039;&lt;/i&gt;

So with all that alleged study you have undertaken at university, you have absolutely no concept whatsoever of &lt;a href=&quot;http://academicintegrity.curtin.edu.au/global/checklist.cfm&quot; rel=&quot;nofollow&quot;&gt;academic integrity&lt;/a&gt;. It is &lt;a&gt;your&lt;/a&gt; responsibility, as the author your work, to provide a reference to other people&#039;s works you have used in your writing. This is not about whether someone is being &quot;cleaver&quot; [sic] or not; it&#039;s about &lt;b&gt;honesty&lt;/b&gt;, which you are sorely lacking at this point.

Every university you go will tell you the exact same thing. &lt;b&gt;There is no excuse.&lt;/b&gt;]]></description>
		<content:encoded><![CDATA[<p>@oiaohm</p>
<p><i>&#8216;You should have no problem finding the university appeals processes if you are so cleaver&#8217;</i></p>
<p>So with all that alleged study you have undertaken at university, you have absolutely no concept whatsoever of <a href="http://academicintegrity.curtin.edu.au/global/checklist.cfm" rel="nofollow">academic integrity</a>. It is <a>your</a> responsibility, as the author your work, to provide a reference to other people&#8217;s works you have used in your writing. This is not about whether someone is being &#8220;cleaver&#8221; [sic] or not; it&#8217;s about <b>honesty</b>, which you are sorely lacking at this point.</p>
<p>Every university you go will tell you the exact same thing. <b>There is no excuse.</b></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: oiaohm</title>
		<link>http://mrpogson.com/2012/10/08/2013-will-not-be-the-year-of-m/#comment-99622</link>
		<dc:creator>oiaohm</dc:creator>
		<pubDate>Thu, 11 Oct 2012 03:52:08 +0000</pubDate>
		<guid isPermaLink="false">http://mrpogson.com/?p=14877#comment-99622</guid>
		<description><![CDATA[That Exploit Guy you are such a good research at finding documents that I have never seen before you showed to them that I am ment to have plagiarised.

You should have no problem finding the university appeals processes if you are so cleaver..]]></description>
		<content:encoded><![CDATA[<p>That Exploit Guy you are such a good research at finding documents that I have never seen before you showed to them that I am ment to have plagiarised.</p>
<p>You should have no problem finding the university appeals processes if you are so cleaver..</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: oiaohm</title>
		<link>http://mrpogson.com/2012/10/08/2013-will-not-be-the-year-of-m/#comment-99621</link>
		<dc:creator>oiaohm</dc:creator>
		<pubDate>Thu, 11 Oct 2012 03:47:20 +0000</pubDate>
		<guid isPermaLink="false">http://mrpogson.com/?p=14877#comment-99621</guid>
		<description><![CDATA[That Exploit Guy go back and read carefully Dan Rosenberg does he list the bits as R W NX ring.  In the real registers there is no X bit.  There is only a NX bit.  You will find I only used RWX after I had seen Dan Rosenberg blog that you displayed.

You will also find the auther of PaX blog uses like me.  X bit does not exist.  Since all memory starts executable before being turned NX.  There is direct evidence that you claim of me copying Dan Rosenberg is crap.]]></description>
		<content:encoded><![CDATA[<p>That Exploit Guy go back and read carefully Dan Rosenberg does he list the bits as R W NX ring.  In the real registers there is no X bit.  There is only a NX bit.  You will find I only used RWX after I had seen Dan Rosenberg blog that you displayed.</p>
<p>You will also find the auther of PaX blog uses like me.  X bit does not exist.  Since all memory starts executable before being turned NX.  There is direct evidence that you claim of me copying Dan Rosenberg is crap.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: That Exploit Guy</title>
		<link>http://mrpogson.com/2012/10/08/2013-will-not-be-the-year-of-m/#comment-99620</link>
		<dc:creator>That Exploit Guy</dc:creator>
		<pubDate>Thu, 11 Oct 2012 03:46:28 +0000</pubDate>
		<guid isPermaLink="false">http://mrpogson.com/?p=14877#comment-99620</guid>
		<description><![CDATA[@oiaohm

&lt;i&gt;&#039;Get most of the Australian University appeal processes...&#039;&lt;/i&gt;

Nope, no sample there. Why am I not surprised?]]></description>
		<content:encoded><![CDATA[<p>@oiaohm</p>
<p><i>&#8216;Get most of the Australian University appeal processes&#8230;&#8217;</i></p>
<p>Nope, no sample there. Why am I not surprised?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: oiaohm</title>
		<link>http://mrpogson.com/2012/10/08/2013-will-not-be-the-year-of-m/#comment-99618</link>
		<dc:creator>oiaohm</dc:creator>
		<pubDate>Thu, 11 Oct 2012 03:36:22 +0000</pubDate>
		<guid isPermaLink="false">http://mrpogson.com/?p=14877#comment-99618</guid>
		<description><![CDATA[That Exploit Guy
--Before you go and spin even more yarn on the subject manner, would you care to provide a sample of such alleged assessment criteria whereby a student must produce a piece of work that he/she has no feasible means to access and no right to dispute errenous grading?--
Get most of the Australian University appeal processes.  Use of non approved software voids you appeal at every one using automated marking.

So no you cannot appeal a automatically marked failed and you were not using the software listed for the course.  Because not using the approved software is a fail anyhow.

That Exploit Guy In fact I did not copy Dan Rosenberg at all on kernel protection.  Before you mentioned him I had never seen his blog.

The female author of PaX blog I have read even attended her conference presentations.  Really I think Dan Rosenberg mostly rewrites PaX.  Since finer details are missing.  We both look simpler because we are from the same source material.

That Exploit Guy you have just accused me of coping someone I have not copied.  Author of PaX that might have been a different matter.

That Exploit Guy using the same source material is not plagiarism.

You are a idiot human who cannot spot plagiarism because if what I did was plagiarism so is what Dan Rosenberg did.]]></description>
		<content:encoded><![CDATA[<p>That Exploit Guy<br />
&#8211;Before you go and spin even more yarn on the subject manner, would you care to provide a sample of such alleged assessment criteria whereby a student must produce a piece of work that he/she has no feasible means to access and no right to dispute errenous grading?&#8211;<br />
Get most of the Australian University appeal processes.  Use of non approved software voids you appeal at every one using automated marking.</p>
<p>So no you cannot appeal a automatically marked failed and you were not using the software listed for the course.  Because not using the approved software is a fail anyhow.</p>
<p>That Exploit Guy In fact I did not copy Dan Rosenberg at all on kernel protection.  Before you mentioned him I had never seen his blog.</p>
<p>The female author of PaX blog I have read even attended her conference presentations.  Really I think Dan Rosenberg mostly rewrites PaX.  Since finer details are missing.  We both look simpler because we are from the same source material.</p>
<p>That Exploit Guy you have just accused me of coping someone I have not copied.  Author of PaX that might have been a different matter.</p>
<p>That Exploit Guy using the same source material is not plagiarism.</p>
<p>You are a idiot human who cannot spot plagiarism because if what I did was plagiarism so is what Dan Rosenberg did.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
