Hacker Newsnew | past | comments | ask | show | jobs | submit | not_a9's commentslogin

OK, but is that fun for people who don’t wanna clankermaxx? In addition this does not address the paytowin aspect of clankermaxxed CTFs

The talk about DEFCON CTF this year on Twitter seems to imply having LLMs allowed in CTF (or, at least, allowing autoslopping without significant restrictions) kinda kills the game. There’s a ton of sentiment about CTF being effectively dead.

Outside of DEFCON I think this is an interesting article: https://osec.io/blog/save-ctfs-fund/


Safeguards don’t really trigger for CTF stuff. I’m sure most people are on the subscription plans instead of suffering through API pricing

To the best of my knowledge: doesn’t the current build of Claude Code use the Rust port of Bun?

Generally binary rewriters will add a new section for the rewritten code/other stuff that needs regeneration (relocations, exception info, the like)

back.engineering folks seem to imply that Denuvo is another case of virtualization based obfuscator being vulnerable to a symbolic execution/optimization approach.

> As AI assisted static deobfuscation continues to improve we will see more virtual machine based obfuscators fold away. In an upcoming article we will publish details on how we fully statically devirtualized Denuvo anti(tamper/cheat). One of the most attacked pieces of software second only to anticheats.

…or you can not bother with analyzing at all and just feed correct CPUID/shared data/whatever values to Denuvo, like the hypervisor thing does.

https://back.engineering/blog/31/07/2026/


To add to this, the obfuscation used for their anticheat seems to be… kinda bad? Worse than Epic’s virtualizer/Griffin probably

https://k0mkc.hatenablog.com/entry/2026/08/06/032440

Mind you, odds are their anti-tamper/DRM is a different case.


Out of idle curiosity: can NASM emit Windows unwind information? For the matter, can any assembler do so automatically?

The service where Counter-Strike actually gets played competitively, FaceIT, does not work on Linux.


It's not terribly surprising to me that a third-party mod that requires the use of a special kernelspace program only works on Windows.

FWIW, Valve doesn't require use of that system for tournament play and is of the opinion that VAC is sufficient to run a Counterstrike tournament. [0][1]

[0] <https://github.com/ValveSoftware/counter-strike_rules_and_re...>

[1] See section 3.4 of the license you have to agree to to run an official tournament <https://store.steampowered.com/tourney/limited_license>


Kinda offtopic, but I was somewhat surprised by Assembly having an “exclusive AI partner” this year.


Sandboxie/WinFSP/KVM guest drivers for Windows are open source too

I’m sure there are more open source examples. A newer one is https://github.com/namazso/PawnIO/tree/master I guess?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: