endrift

endrift

@endrift.com

Professional Cyberentomologist, Hobbyist Emulator Developer. Creator and lead developer of mGBA. she/they

436 followers15 following81 posts

endrift
@endrift.com

I need to actually start selling some of the 3D printed knickknacks I've been making. I've been planning to do it for mooonths. But then again, I've been hoping to release mGBA 0.11.0 "this month" for most of the year...

endrift reposted

Joakim "konjak" Sandberg
@konjak.org

If they can get you addicted to it, they feel they can make you subscribe to it as a background fee in your life. That's their remaining play. bsky.app/profile/jame...

jess m. ☕🍂@jametc.bsky.social

I cannot stress enough: the AI bubble has already popped it is just being kept on life support by corporations trying to squeeze even a dollar more out of their shit investment, and tech bros doing the same before abandoning their shit company startups. keep hating on AI, you're winning

endrift
@endrift.com

It's been a few months now and I don't log into Bluesky very often but I think it's safe now to say that the situation with Limited Run Games has been amicably resolved. Once I managed to get in contact with the right people we sorted everything out, so it shouldn't be a problem going forwards.

endrift reposted

Amber Cyprian (They/Them) @ Home
@ambercyprian.bsky.social

I am trying to turn this off via the desktop mode site on mobile and it straight up WILL NOT STAY OFF. I turn it off, swap settings tabs, go back, and it's back on. It's actually asinine. The button isn't even available on the mobile app, either. Fuck Twitch, seriously.

218vt@218vt.powerupwithpri.de

Heads up, I had to uncheck the box TWICE, because it didn't save the first time. I see others in the comments on this post experiencing the same thing. Keep a look-out.

endrift reposted

JCog
@jcog.dev

note that even if you opt your channel out, your chat messages will still be used to train twitch/amazon's generative AI models if you chat in someone's stream who hasn't opted out. my advice is to be annoying about asking. any streamer who's opted out will be glad to tell you so.

Zach Bussey 🍁@zachbussey.tos.gg

Twitch now uses your channel to train generative AI by default. You can opt out of some training here: www.twitch.tv/settings/sec...

endrift
@endrift.com

Damn, the assembled case I printed for the BC-250 (cut down PS5 board designed for cryptomining but decent at gaming) is really big. Steam Machine for scale.

endrift reposted

Hit Save!
@hitsave.org

Happy birthday to the Game Boy Advance, which released in the USA on this day in 2001! Can you believe Nintendo's potent little handheld is a quarter-century old this year? We feel old.

endrift
@endrift.com

I got a new laptop after my old one broke and it's been a constant stream of issues, from things like horrible color issues on the monitor (EVEN AFTER AN RMA), to shutdown straight up not always turning off entirely, to the keyboard straight dying until I rebooted last night.

View full thread
endrift
@endrift.com

It's unconscionable that they'd sell a laptop that cost over $2000 yet is this fundamentally broken. Lenovo fucking owes me.

endrift
@endrift.com

I got a new laptop after my old one broke and it's been a constant stream of issues, from things like horrible color issues on the monitor (EVEN AFTER AN RMA), to shutdown straight up not always turning off entirely, to the keyboard straight dying until I rebooted last night.

endrift
@endrift.com

The screen had horrible issues that looked like backlight leak despite being an OLED. What the fuck! RMAed it and it's still happening, but in a different region of the screen! Shutdown being probabilistic is something I haven't heard of in like 30 years! Even suspend fails to resume sometimes!

endrift
@endrift.com

I have every reason to believe VBA-M is largely vibe coded these days, based on evidence of Squall ramping up posting LLM-generated slop in comments. So I'm going to downgrade it from "not that bad, really" to "slop". mGBA will never be vibe coded, full stop.

endrift
@endrift.com

Squall, for the record, has always been useless and is partially responsible for me deciding not to work on VBA and start mGBA instead. He speaks authoritatively but is so wrong so often.

endrift
@endrift.com

Once every few dozen times I load mGBA on 3DS it runs significantly faster than normal but I've never been able to pin down what's happening. If you've had this happen to you and you're confused and question your memory of it: it's absolutely a thing that happens and you're not imagining it.

endrift
@endrift.com

I'm pretty sure it has something to do with random changes to alignment improving cache locality but it happens so infrequently that I've never really had a chance to properly inspect it. And if I reload it to try to get something to compare against, I can't go back!

endrift reposted

nat is scared.
@natclayton.bsky.social

It, again, truly doesn't matter whether vibecoding actually caused the outages or not - when you start bragging about how claude is making every engineer on staff more productive and the site goes through months of persistent downtime, that's a Statement.

endrift
@endrift.com

Man, the character limit is really killing me here in bsky. I had to split that thread into like twice as many posts as it was originally on Masto

endrift
@endrift.com

...which I think specifically is to bypass the Anti-Malware Scan Interface by replacing a reference to amsi.dll with ansi.dll. And then it invokes the payload in the process itself using LdrCallEnclave, I think.

endrift
@endrift.com

Anyway yeah if a malware analyst follows me and wants any of the stages involved, from the raw Python script to the machine code payload lmk

endrift
@endrift.com

...which I think specifically is to bypass the Anti-Malware Scan Interface by replacing a reference to amsi.dll with ansi.dll. And then it invokes the payload in the process itself using LdrCallEnclave, I think.

endrift
@endrift.com

I don't think it actually injects this machine code as a payload actually, it just loads it into memory as a bytestring in Python, remaps the memory as executable, and then calls directly into it, with some malware-prevention bypass stuff in the middle.

endrift
@endrift.com

But I really don't feel like tossing the blob into ghidra. SHA-256 of the machine code blob is 64f70a4cfdf24b817c795ea28b90cad23af92f640c616464bbea365d4c1c89aa.

endrift
@endrift.com

Ok, it looks like it starts the CLR...in the Python process I think? Some code is run next that I don't know exactly what that does, but it seems to monkeypatch the clr DLL in the current process.

endrift
@endrift.com

I suspect this stage is just a payload injector that is installed into something else. The payload itself is a 781579 byte blob of x86 machine code. I suspect that payload isn't even the main payload but instead an encrypted blob and decryption stage for the final payload.

endrift
@endrift.com

The malicious script names itself node_modules.asar to attempt to blend in. It's a base85-encoded Python program which itself is a base64-encoded zlib compressed Python program that contains the actual Python program.

endrift
@endrift.com

The program itself is heavily Windows-specific to a degree I don't understand. It appears to inject a block of machine code (I see a nop sled at the beginning of the bytestring) into something but I'm out of my depth here.

endrift
@endrift.com

It's a doubly-obfuscated Python program that I think is being used in the current Discord credential stealing campaign. It installs itself into AppData/Roaming/Google/Runtime/CLRHost/[hex garbage]/ and names the Python binary as ls_crashpad_handler.exe.

endrift reposted

The Emotion Engine
@emotion-engine.bsky.social

An extremely funny thing about retro rereleases that use unlicensed emulators is that you are basically committing the exact same crime (using software outside of the terms of its license) that has you so scared of downloading roms in the first place but now someone has monetized it.

Ilya@13xforever.mobobe.com

In case you needed another reminder that Limited Run Games are shady as fuck social.treehouse.systems/@endrift/116...

endrift
@endrift.com

I clicked on someone's bio and was met with this. I see Bsky is a very functional platform, too. I hear all the cool kids on bsky are blaming vibe coding, which I am on board with