Thread #108293481
File: Windows_7_SP1_screenshot.png (252 KB)
252 KB PNG
How come Windows 7 enthusiasts don't band together to release FOSS security patches and feature updates like hacker groups release mods for video games with a long-standing enthusiast community? It's been more than a decade, surely people have looked at the MicroSlop landscape and determined that we're never going back to the halcyon days. There's an opportunity to make W7 the secure and performant platform it should always have been.
69 RepliesView Thread
>>
>>
>>
>>
>>
>>108293481
Firstly, operating systems are incredibly difficult to hack on since any mistake brings down the entire system, and debugging is almost impossible. Secondly, being closed source greatly limits the changes you can make.
>>
>>
>>
File: secondsystem_win8.png (187.4 KB)
187.4 KB PNG
>>108293481
>FOSS security patches
technically there's 0patch, but I can't remember the last time I saw someone in the wild paying for it, and I think it's obvious by now that legacy holdouts don't give a shit about current year security theater
>feature updates like hacker groups release mods for video games
what you're describing has already existed for years, but it's mostly limited to compatibility forks like Supermium and fucking r3dfox lmao, and API/DLL extenders such as Second System (which is paywalled) and VxKex (which is split between three forks). There have admittedly been a few projects that unfuck Windows 10 and 11's shell in various ways (Windhawk, OpenGlass, explorer7, ExplorerPatcher, etc.), but 11 24H2+ is so cartoonishly awful that I think they're getting ready to throw in the towel
the tragic irony in all of this is that Windows is more suited to being extended for modern software compatibility than seemingly any other OS, but it's closed-source and horribly documented so few autists have bothered doing anything with it. ReactOS is perpetual vaporware and Linux + Wine would be an inferior substitute even if it wasn't getting raped to death by Red Hat
>>
>>
>>
>>
>>108295228
It's a common misconception that modded Bethesda games are unstable, but the reality is it's usually shitty coding in a mod's script (blame the mod author), the user not removing ITMs and cleaning all their plugins with TESVedit like they should be, the user not resolving conflicts in TESVedit or the user not generating a bash/smash patch (this is not, in fact, optional)
>>
>>
>>
>>
>>
File: common_sense_antivirus.png (567.9 KB)
567.9 KB PNG
>>108294982
>the way it loads its patches is actually an attack vector
I mean I was going to say that this doesn't really matter when we're dealing with unsupported OSes and that pretty much all of the solutions I listed are untrustworthy in some way (they use DLL injection/sideloading, they're unaudited hobbyist projects, Second System is proprietary, etc.), but I forgot that 0patch literally relies on a fucking kernel-mode driver and proprietary agent software to function. Imagine paying $30 a year for this shit
Even then. recent incidents like xz-utils, CrowdStrike and Notepad++ have only reinforced my conviction that the forced security updoot treadmill is a meme and that anyone with a brain cell is better off hunkering down on old software, disabling auto-updates, making backups and prioritizing methods like aggressive application-level firewalls and sandboxing instead. I try to keep browsers and other internet-facing stuff like yt-dlp up-to-date for obvious reasons, but that's it lol. It's impossible to take cybersec spergs seriously anymore when Silicon Valley's gotten away with peddling literal spyware for the last decade
>>
>>
>>
>>108295626
Personally, when people start making a big deal of some vulnerability, I read the CVE carefully.
Half of them are clown shit. Like that recent Unity "vulnerability." On every platform it's a nothingburger, though for entirely different reasons on mobile platforms versus PC.
Like, wowie, so you're telling me that passing crafted command line arguments allows me to run code inside the application? How utterly terrifying, it's not like I'd already need to have access to the local user account to do that, no-sirree. And it's also not like I could just dump bepinex next to the game and load arbitrary plugins.
And on Android, it would literally require downloading code assets over plain HTTP with no certificate pinning. Which is already a pwn without the argument parsing issue.
>>
>>108294401
Most games that have mods have infrastructure to support mods, modding games that don't support mods at all - specially if they aren't easy stuff like Unity (mono) is actual reverse engineering required tier modding. It's not easy, it can take years to mod even a fairly simple game.
Windows does not have modding support, if you want to do anything, you're gonna be reverse engineering.
>>
>>108296740
Actually, that's not entirely true, Microsoft does offer symbols for unchecked builds of Windows and also checked builds. There's also detours builtin to a lot of function prologues so they can be hotpatched if needed.
>>
File: 1772576429383890.jpg (153.5 KB)
153.5 KB JPG
what security patches? most of the patched stuff is either disabled/bricked or irrelevant.
leave all hopes, it is a dead software, but it is kinda finished and fits a wide range of applications.
>>
>>
File: 1760764737487844.jpg (57.6 KB)
57.6 KB JPG
I've seen numerous people on this board, even over the past few months, claiming to use Windows 7 as their daily driver still.
I'm wondering, how are they doing that? Windows 7 was my favorite OS and I'm honestly considering going back to it still.
But after reading this thread, it doesn't seem like there are many fixes or patches to bring it up to date.
Wont newer software just refuse to work? I've seen people running Steam on Windows 7 before though and I have to assume they're using it to play games still.
>>
>>108297148
w7 daily driver here since mid 2010
never swapped
most things work fine, otherwise you'll have to stick with older software or use extension projects like vxkex or second system
the only hard limitations I've run into are those hardcore gameguards for shit games I'm not playing anyway, so whatever
>>
>>108297148
This month's patch Tuesday will be the first with no security rollup for Windows 7, but regardless there are currently no CVEs for a fully ESU updated Windows 7.
There's VxKex/Second System to deal with most current incompatibilities. As for DirectX12, you do the same thing you do on Linux and wrap it with vkd3d to Vulkan, which 7 does support (although some games provide d3d12onw7, a microsoft implementation of directx12 that works somewhat similarly.) There's a few other miscellaneous things like copying xinput1_2 to xinput1_3 so anything linked against newer xinput works, but basically everything still works for now.
>>
File: Untitled.png (482.7 KB)
482.7 KB PNG
>>108293481
>security patches
OS security is pretty much unnecessary if you're not connecting directly to the internet. your router/browser handles everything inbound. firewall everything else. problem?
>>
>>
>>
>>108297148
You can run most things with only a few tweaks. Some stuff requires vxkex to work but they work flawlessly with it. Drivers and the like are the biggest problem. dx12 works with vulkan but I haven't discovered a solution to .net versions.
>>
>>
>>108297291
.NET also got ESU rollups until last month.
For .NET core both the 10.0 LTS and 8.0 LTS work. Except, you have to install ESU Windows updates, otherwise you're stuck with 6.0 and those versions won't work.
>>108297350
You literally can get owned by simply rendering a font if it doesn't go through a third party library like freetype. That's bad advice. You really DO want the ESU updates.
>>
>>
>>108297371
>You literally can get owned by simply rendering a font
simplewall disables webclient by default. i assume you are thinking of the old adobe type 1 font exploits from 2020. turning off this service was the original workaround suggested by microslop back
>>
File: 1707148936144693.gif (3.1 MB)
3.1 MB GIF
>>108293845
This. What the fuck is wrong with slavs and chinks?
>>
>>
File: 1768876644733478.webm (837.2 KB)
837.2 KB WEBM
>>108293481
Mod maker here.
trust me bro, making pic related is not the same like editing/fixing a OS.
>>
>>
>>
>>
>>
File: 1768356059709987.png (9.3 KB)
9.3 KB PNG
>>108293481
why put effort into such a dead, irrelevant OS?
>>
>>
they already make extended kernels. as for updates, you can backport them from server 2008 r2 and windows embedded 7 or just install one of those OSes. it's a lower priority than to get modern software running
http://thrashnet.org/projects/windows-7-kernelmode-extensions/
>>
>>
>>
File: 43567435432543543543.png (142.8 KB)
142.8 KB PNG
>>108293636
How do people learn this level of stuff? Please don't bash me, I'm asking this as a clueless beginner with some enthusiasm. I mean when you go try to learn "programming" the standard treatment you'll get is pretty lame. All you do is to learn the syntax of a programming language with isolated exercises. Then there are people who do stuff like this. There is a huge part missing, for me, in the middle. How do you go from learning variables to this?
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
File: ReactOS.png (73.4 KB)
73.4 KB PNG
One day...
>>
>>
>>108303535
ReactOS will never be viable until they fix their broken development strategy. Fixing reactos requires two things, firstly completely drop gcc support, target msvc only. Secondly, stop testing the entire OS, its a broken mess that never gets better because the inaccuracies in one component infect all the others. Each component should be individually tested by replacing the matching component in win2k3.
>>
>>
>>
>>108304205
msvc is a far superior compiler to gcc. It can actually be trusted to emit correct assembly, which is highly desirable for developing an operating system. Also, only msvc has the features to properly develop NT.
>>
>>
>>108293579
xp has had its source code leaked, I'm in the discord, but the only development is ricing themes and splash screens. I was also in serenity and the development centered around using x api set because it was cool and new and flashy, there was no set goal or set idea of what it should be. No one takes this seriously, if they do they're getting paid at a real job or they don't even use computers anymore
>>
File: 250%-gain-iq-now.png (2.9 KB)
2.9 KB PNG
>>108304253
yes, but first we must set 250% zoom to this site, so everybody gain +10 IQ points