Thread #108293481
HomeIndexCatalogAll ThreadsNew ThreadReply
H
How come Windows 7 enthusiasts don't band together to release FOSS security patches and feature updates like hacker groups release mods for video games with a long-standing enthusiast community? It's been more than a decade, surely people have looked at the MicroSlop landscape and determined that we're never going back to the halcyon days. There's an opportunity to make W7 the secure and performant platform it should always have been.
+Showing all 69 replies.
>>
>>108293481
>how come people dont write open source code for closed source code?

........
>>
W7 is garbage
>>
https://github.com/i486/VxKex
there's not exactly a lot of people still using windows 7 today, anon, much less people willing to spend time trying to make it work with newer software
>>
>>108293481
You do realize that ESU updates only stopped last month and there are no major security holes yet?
>>
>>108293481
Firstly, operating systems are incredibly difficult to hack on since any mistake brings down the entire system, and debugging is almost impossible. Secondly, being closed source greatly limits the changes you can make.
>>
Wish XP source code took off
>>
>>108293579
Games are closed source. Mods exist. Hex that shit.
>>
>>108293481
>FOSS security patches
technically there's 0patch, but I can't remember the last time I saw someone in the wild paying for it, and I think it's obvious by now that legacy holdouts don't give a shit about current year security theater
>feature updates like hacker groups release mods for video games
what you're describing has already existed for years, but it's mostly limited to compatibility forks like Supermium and fucking r3dfox lmao, and API/DLL extenders such as Second System (which is paywalled) and VxKex (which is split between three forks). There have admittedly been a few projects that unfuck Windows 10 and 11's shell in various ways (Windhawk, OpenGlass, explorer7, ExplorerPatcher, etc.), but 11 24H2+ is so cartoonishly awful that I think they're getting ready to throw in the towel
the tragic irony in all of this is that Windows is more suited to being extended for modern software compatibility than seemingly any other OS, but it's closed-source and horribly documented so few autists have bothered doing anything with it. ReactOS is perpetual vaporware and Linux + Wine would be an inferior substitute even if it wasn't getting raped to death by Red Hat
>>
>>108294593
0patch isn't even secure, the way it loads its patches is actually an attack vector
>>
Ricing linux so it looks like Windows 7 is way easier
>>
>>108294401
How many of these mods alter game in any meaningful way and stay stable after that? Even mod friendly Elder scrolls series can't manage that
>>
>>108295228
It's a common misconception that modded Bethesda games are unstable, but the reality is it's usually shitty coding in a mod's script (blame the mod author), the user not removing ITMs and cleaning all their plugins with TESVedit like they should be, the user not resolving conflicts in TESVedit or the user not generating a bash/smash patch (this is not, in fact, optional)
>>
It's bizarre to me how people cling to age old operating systems all to avoid having to go into unfamiliar territory.
>>
>>108295250
Yeah that's what I said that even mod friendly games like Skyrim is closed off enought that modders can't really pull it off
>>
>>108293481
No need to.
You could waste your time with patching a closed source OS or you could do something fun an hack a closed source firmware drone, a car or optical drive or yada yada
>>
>>108293481
VX-Kex and Simplix Update Pack are just that
>>
>>108294982
>the way it loads its patches is actually an attack vector
I mean I was going to say that this doesn't really matter when we're dealing with unsupported OSes and that pretty much all of the solutions I listed are untrustworthy in some way (they use DLL injection/sideloading, they're unaudited hobbyist projects, Second System is proprietary, etc.), but I forgot that 0patch literally relies on a fucking kernel-mode driver and proprietary agent software to function. Imagine paying $30 a year for this shit
Even then. recent incidents like xz-utils, CrowdStrike and Notepad++ have only reinforced my conviction that the forced security updoot treadmill is a meme and that anyone with a brain cell is better off hunkering down on old software, disabling auto-updates, making backups and prioritizing methods like aggressive application-level firewalls and sandboxing instead. I try to keep browsers and other internet-facing stuff like yt-dlp up-to-date for obvious reasons, but that's it lol. It's impossible to take cybersec spergs seriously anymore when Silicon Valley's gotten away with peddling literal spyware for the last decade
>>
>>108295278
It's not about familiarity, it's just that everything else is inferior.
>>
>>108295626
This is why I've been on ubuntu LTS for over a decade
>>
>>108295626
Personally, when people start making a big deal of some vulnerability, I read the CVE carefully.
Half of them are clown shit. Like that recent Unity "vulnerability." On every platform it's a nothingburger, though for entirely different reasons on mobile platforms versus PC.
Like, wowie, so you're telling me that passing crafted command line arguments allows me to run code inside the application? How utterly terrifying, it's not like I'd already need to have access to the local user account to do that, no-sirree. And it's also not like I could just dump bepinex next to the game and load arbitrary plugins.
And on Android, it would literally require downloading code assets over plain HTTP with no certificate pinning. Which is already a pwn without the argument parsing issue.
>>
>>108294401
Most games that have mods have infrastructure to support mods, modding games that don't support mods at all - specially if they aren't easy stuff like Unity (mono) is actual reverse engineering required tier modding. It's not easy, it can take years to mod even a fairly simple game.

Windows does not have modding support, if you want to do anything, you're gonna be reverse engineering.
>>
>>108296740
Actually, that's not entirely true, Microsoft does offer symbols for unchecked builds of Windows and also checked builds. There's also detours builtin to a lot of function prologues so they can be hotpatched if needed.
>>
what security patches? most of the patched stuff is either disabled/bricked or irrelevant.

leave all hopes, it is a dead software, but it is kinda finished and fits a wide range of applications.
>>
>>108293481
If someone could make security patches and feature updates for a closed source OS they'd be better off just making a completely new OS instead.
>>
I've seen numerous people on this board, even over the past few months, claiming to use Windows 7 as their daily driver still.
I'm wondering, how are they doing that? Windows 7 was my favorite OS and I'm honestly considering going back to it still.
But after reading this thread, it doesn't seem like there are many fixes or patches to bring it up to date.
Wont newer software just refuse to work? I've seen people running Steam on Windows 7 before though and I have to assume they're using it to play games still.
>>
>>108297148
w7 daily driver here since mid 2010
never swapped

most things work fine, otherwise you'll have to stick with older software or use extension projects like vxkex or second system

the only hard limitations I've run into are those hardcore gameguards for shit games I'm not playing anyway, so whatever
>>
>>108297148
This month's patch Tuesday will be the first with no security rollup for Windows 7, but regardless there are currently no CVEs for a fully ESU updated Windows 7.
There's VxKex/Second System to deal with most current incompatibilities. As for DirectX12, you do the same thing you do on Linux and wrap it with vkd3d to Vulkan, which 7 does support (although some games provide d3d12onw7, a microsoft implementation of directx12 that works somewhat similarly.) There's a few other miscellaneous things like copying xinput1_2 to xinput1_3 so anything linked against newer xinput works, but basically everything still works for now.
>>
File: Untitled.png (482.7 KB)
482.7 KB
482.7 KB PNG
>>108293481
>security patches
OS security is pretty much unnecessary if you're not connecting directly to the internet. your router/browser handles everything inbound. firewall everything else. problem?
>>
>>108297237
You shouldn't have a gateway set in your internet settings if you haven't applied the ESU rollups. There's like three RCEs that only require outbound connections.
>>
>>108293481
Because Linux is better
>>
>>108297148
You can run most things with only a few tweaks. Some stuff requires vxkex to work but they work flawlessly with it. Drivers and the like are the biggest problem. dx12 works with vulkan but I haven't discovered a solution to .net versions.
>>
>>108297272
>ESU
for windows 7/10 just use simplewall and turn off services like netbios if youre worried
>>
>>108297291
.NET also got ESU rollups until last month.
For .NET core both the 10.0 LTS and 8.0 LTS work. Except, you have to install ESU Windows updates, otherwise you're stuck with 6.0 and those versions won't work.
>>108297350
You literally can get owned by simply rendering a font if it doesn't go through a third party library like freetype. That's bad advice. You really DO want the ESU updates.
>>
>>108297280
especially i like microkernel GUI rendering architecture on monokernel NIX. ideal design decision that secures Linux victory.
>>
>>108297371
>You literally can get owned by simply rendering a font
simplewall disables webclient by default. i assume you are thinking of the old adobe type 1 font exploits from 2020. turning off this service was the original workaround suggested by microslop back
>>
>>108293845
This. What the fuck is wrong with slavs and chinks?
>>
Does Parsec work with vxkex? Or is there an alternative that works on 7?
>>
>>108293481
Mod maker here.
trust me bro, making pic related is not the same like editing/fixing a OS.
>>
>>108293481
I don't know how people did not just make a Windows 7 clone at this point that supports all Windows apps.
ReactOS seems like it had potential but it's so buggy and behind
>>
>>108300169
you make it sounds so easy
>>
>>108293481
Because there is a Windows 10 LTSC made and Massgrave literally everything works there.
>>
>>108295636
If it's so superior why are you begging 4chan for an unofficial update?
>>
>>108293481
why put effort into such a dead, irrelevant OS?
>>
>>108293481
windowsfags are illiterate
>>
they already make extended kernels. as for updates, you can backport them from server 2008 r2 and windows embedded 7 or just install one of those OSes. it's a lower priority than to get modern software running
http://thrashnet.org/projects/windows-7-kernelmode-extensions/
>>
>>108301316
How the fuck did you even find this?
>>
>>108300372
Because a lack of update/support makes it outdated and unusable. If it had the capability to use modern hardware and software, it would be vastly superior to any recent OS.
>>
>>108293636

How do people learn this level of stuff? Please don't bash me, I'm asking this as a clueless beginner with some enthusiasm. I mean when you go try to learn "programming" the standard treatment you'll get is pretty lame. All you do is to learn the syntax of a programming language with isolated exercises. Then there are people who do stuff like this. There is a huge part missing, for me, in the middle. How do you go from learning variables to this?
>>
>>108301919
You should read actual textbooks instead of the programming-for-dummies books you can buy at a barnes and noble.
>>
>>108300398

Iran's population is 90 millions, 0.14% of them are hardcore islamists, hehehe
>>
>>108293845
you really can't do much with it without getting absolutely raped by Microsoft
>>
rust without any unsafe blocks isn't turing-complete
you have willingly memed yourself into writing code in an esolang
>>
>>108302152
you can, but it will be a great burden, justified by someone's "wish" or "hope".. not nice.
>>
>>108295636
Surely you run into tons of capatability issues at this point in it's lifespan.
>>
>>108293605
saar.jpg
>>
>>108293481
>security patches
Drivers are a bigger concern here.
>>
>>108301957
But they also say things like you don't learn shit from books, stop reading books etc.
>>
>>108302639
Who is "they"?
CS classes are arguably worthless, but the textbooks are in general invaluable resources, especially in this unfortunate new world where search engines are worse than useless.
>>
>>108300398
you think relevancy is a good metric to judge an OS on?
>>
File: ReactOS.png (73.4 KB)
73.4 KB
73.4 KB PNG
One day...
>>
>>108303535
you can have it now (take those XP,win7..), whats the justification
>>
>>108303535
ReactOS will never be viable until they fix their broken development strategy. Fixing reactos requires two things, firstly completely drop gcc support, target msvc only. Secondly, stop testing the entire OS, its a broken mess that never gets better because the inaccuracies in one component infect all the others. Each component should be individually tested by replacing the matching component in win2k3.
>>
>>108304017
msvc is retarded, it doesnt have VLAs. clang or TCC only. imo components should be re-written with a runtime. then it will be technically justifiable / novel.
>>
>>108303535
Maybe when we're all in the retirement home kek.
>>
>>108304205
msvc is a far superior compiler to gcc. It can actually be trusted to emit correct assembly, which is highly desirable for developing an operating system. Also, only msvc has the features to properly develop NT.
>>
>>108293764
Is there an open source ESU activator that you can easily audit the code of and isn't locked on some gay clique website?
>>
>>108293579
xp has had its source code leaked, I'm in the discord, but the only development is ricing themes and splash screens. I was also in serenity and the development centered around using x api set because it was cool and new and flashy, there was no set goal or set idea of what it should be. No one takes this seriously, if they do they're getting paid at a real job or they don't even use computers anymore
>>
>>108304253
yes, but first we must set 250% zoom to this site, so everybody gain +10 IQ points
>>
>>108304606
gcc and clang are two sides of the same coin. And as for TCC that is not ever going to be used, also, it lacks c++ support which windows uses extensively.

Reply to Thread #108293481


Supported: JPG, PNG, GIF, WebP, WebM, MP4, MP3 (max 4MB)