<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[井底之蛙]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/better0332</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; better0332]]></copyright><item><title><![CDATA[fedora16下安装mysql的问题]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/8208830</link><guid>https://blog.youkuaiyun.com/better0332/article/details/8208830</guid><author>better0332</author><pubDate>Wed, 21 Nov 2012 17:00:45 +0800</pubDate><description><![CDATA[目前在fedora16下，yum安装mysql的最新版本是5.5.28，不幸的是在systemctl start mysqld.service阶段会报错。这是一个bug，不过还好有两个解决方法：
1.  yum update systemd，然后重新安装即可。
2. 先修改/lib/systemd/system/mysqld.service，把里面的PrivateTmp=true注释掉，或者改]]></description><category></category></item><item><title><![CDATA[一个禁止任何ring3调试的驱动]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/6698110</link><guid>https://blog.youkuaiyun.com/better0332/article/details/6698110</guid><author>better0332</author><pubDate>Thu, 18 Aug 2011 14:05:17 +0800</pubDate><description><![CDATA[#include 

#define MAKELONG(low, high) \
((ULONG)(((USHORT)((ULONG)(low) & 0xffff)) | ((ULONG)((USHORT)((ULONG)(high) & 0xffff))) << 16))

#]]></description><category></category></item><item><title><![CDATA[检测调试器（过StrongOD）]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/6694857</link><guid>https://blog.youkuaiyun.com/better0332/article/details/6694857</guid><author>better0332</author><pubDate>Wed, 17 Aug 2011 14:34:35 +0800</pubDate><description><![CDATA[放码(⊙_⊙)~~
方法一：

//GetCursorPos,WindowFromPoint
POINT point;
if (GetCursorPos(&point))
{
  char buf[256];
  HWND hwnd = WindowFromPoint(po]]></description><category></category></item><item><title><![CDATA[StrongOD hook的API]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/6667561</link><guid>https://blog.youkuaiyun.com/better0332/article/details/6667561</guid><author>better0332</author><pubDate>Sun, 07 Aug 2011 20:46:49 +0800</pubDate><description><![CDATA[好久没写东西了~~：
>SSDT State
NtClose
Actual Address 0xF0389268
Hooked by: C:\OllyDBG\plugin\whlsod.sys

NtCreateProcess
Actual Address 0xF0]]></description><category></category></item><item><title><![CDATA[Copy-On-Write机制，全局hook（二）]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/5914971</link><guid>https://blog.youkuaiyun.com/better0332/article/details/5914971</guid><author>better0332</author><pubDate>Wed, 29 Sep 2010 19:56:00 +0800</pubDate><description><![CDATA[    如果仔细阅读前一篇文章的话，就知道只要PTE的write(bit 1)位置1，就废掉了Copy-On-Write机制(解释一下，因为不可能产生异常了嘛)，为了不影响系统的运行，我找了ntdll的文件头(7c800000)做实验：
!process 0 0
.
PROCESS 811ae9e0  SessionId: 0  Cid: 015c    Peb: 7ffde000  ParentCid: 036c
    DirBase: 0997f000  ObjectTable: e15114]]></description><category></category></item><item><title><![CDATA[Copy-On-Write机制，全局hook（一）]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/5912585</link><guid>https://blog.youkuaiyun.com/better0332/article/details/5912585</guid><author>better0332</author><pubDate>Tue, 28 Sep 2010 18:29:00 +0800</pubDate><description><![CDATA[    我本来想在ring3下全局hook，大约有这么几种方法：

1: 用SetWindowsHookEx，安装的钩子类型，如WH_GETMESSAGE，WH_KEYBOARD等，但这种方法只能挂接系统中的所有GUI线程。

2: 还有一种通过插入注册表来实现 HKEY_LOCAL_MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Windows/AppInit_DLLs,这种方法简单，但是还是只能挂钩GUI 程序，并且这个键值已经被广大HI]]></description><category></category></item><item><title><![CDATA[source insight分析WRK源码]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/5689193</link><guid>https://blog.youkuaiyun.com/better0332/article/details/5689193</guid><author>better0332</author><pubDate>Wed, 23 Jun 2010 14:15:00 +0800</pubDate><description><![CDATA[    source insight是一个出色的程序编辑器和代码浏览器，利用好它会给编写和阅读源代码带来极大的方便。想要配置好source insight可不是一件轻松的事，我比较喜欢深色背景有利于保护眼睛，但同时也必须更改代码颜色来匹配背景色，source insight的很多窗口、选项都可以指定字体、颜色，实在让人犯晕！最麻烦的是源码窗口的配置了，这里简单提一下，source insight的最终配色是由style Properties决定的（右键菜单-->style Properties）左边一栏是风]]></description><category></category></item><item><title><![CDATA[C语言有bool类型吗]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/5676294</link><guid>https://blog.youkuaiyun.com/better0332/article/details/5676294</guid><author>better0332</author><pubDate>Thu, 17 Jun 2010 19:32:00 +0800</pubDate><description><![CDATA[我到今天终于发现原来C语言是没有bool类型的，汗死……原来C++中才有，不过C99中新增的_Bool关键字可以表示布尔类型。

C99关键字（ISO/IEC 9899:1999）
auto
break
case
char
const
continue
^^^^^]]></description><category></category></item><item><title><![CDATA[再次回想C库函数链接]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/5653505</link><guid>https://blog.youkuaiyun.com/better0332/article/details/5653505</guid><author>better0332</author><pubDate>Mon, 07 Jun 2010 17:23:00 +0800</pubDate><description><![CDATA[<br />最近又开始瞎折腾起来了，有点弄不清对C库的链接。C Run-Time Libraries (CRT)<br /><br />The following libraries contain the
 C run-time library functions.
              C run-time library (without iostream or standard C++ 
library)
            
              Associated D]]></description><category></category></item><item><title><![CDATA[emacs配色]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/5611578</link><guid>https://blog.youkuaiyun.com/better0332/article/details/5611578</guid><author>better0332</author><pubDate>Thu, 20 May 2010 16:11:00 +0800</pubDate><description><![CDATA[    以前用color-theme感觉很勉强，现在终于配出了像source insight那样的效果，感觉不错。有图有真相： 哈哈，需要color-theme、cedet和zjl-c-hl，在http://emacser.com/上都有详细说明，下面是我的配色相关的lisp代码：(defun my-color-theme ()  "Colo]]></description><category></category></item><item><title><![CDATA[JIT spray]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/5386325</link><guid>https://blog.youkuaiyun.com/better0332/article/details/5386325</guid><author>better0332</author><pubDate>Tue, 16 Mar 2010 17:42:00 +0800</pubDate><description><![CDATA[找了一些JIT spray的资料，网上是这样说的“利用JIT在内存中制造可控可执行代码这个思路的确很有创造性。其意义不亚于Heap Spray，甚至可以和当年的JMP ESP相比较”，JIT spray好像是在黑帽大会上提出来的，据说可以过DEP和ASLR…… http://www.rayfile.com/zh-cn/files/92ab8f17-323e-11df-8b2a-0015c5]]></description><category></category></item><item><title><![CDATA[Emacs、cedet、ecb]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/5263016</link><guid>https://blog.youkuaiyun.com/better0332/article/details/5263016</guid><author>better0332</author><pubDate>Wed, 27 Jan 2010 20:45:00 +0800</pubDate><description><![CDATA[最近在玩Emacs（windows下），总觉得不顺心。按照http://bbs.chinaunix.net/viewthread.php?tid=1014134想玩玩cedet、ecb。emacs的启动速度明显变慢了，听说编译一下el的lisp文件会变快一些，所以就编译了一下cedet、ecbcedet：目前的最新版是1.0pre6但这个版本是没法通过编译的，据说此版windows版本有b]]></description><category></category></item><item><title><![CDATA[空间格局随机化ASLR]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/5262990</link><guid>https://blog.youkuaiyun.com/better0332/article/details/5262990</guid><author>better0332</author><pubDate>Wed, 27 Jan 2010 20:39:00 +0800</pubDate><description><![CDATA[1.     概述在前面安全编码实践中我们介绍过GS编译选项和缓存溢出，以及数据保护DEP。首先，缓存溢出的直接后果就是可能导致恶意代码的远程执行，于是编译器提供了GS保护。但是，GS选项有自身的局限，存在若干方法可以绕过GS选项的保护。于是进一步，操作系统提供了数据执行保护，即DEP，以及与之对应的NXCOMPAT编译选项。那么是不是现在我们就可以高枕无忧了？在安全领域中，系统的攻防是一]]></description><category></category></item><item><title><![CDATA[Python or Ruby]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/5185023</link><guid>https://blog.youkuaiyun.com/better0332/article/details/5185023</guid><author>better0332</author><pubDate>Wed, 13 Jan 2010 12:44:00 +0800</pubDate><description><![CDATA[http://blog.youkuaiyun.com/myan/archive/2008/01/07/2028545.aspxhttp://blog.youkuaiyun.com/gashero/archive/2007/06/03/1636030.aspx 我感觉还是python应用更广一些，Ruby的RoR做Web框架好一些吧，至于perl，现在感觉实在有几分苦涩……]]></description><category></category></item><item><title><![CDATA[语言和女人的关系]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/4880088</link><guid>https://blog.youkuaiyun.com/better0332/article/details/4880088</guid><author>better0332</author><pubDate>Thu, 26 Nov 2009 17:30:00 +0800</pubDate><description><![CDATA[ 有的女人就像Windows 虽然很优秀，但是安全隐患太大 有的女人就像UNIX  她条件很好，然而不是谁都能玩的起 有的女人就像C# 长的很漂亮，但是家务活不行。 有的女人就像C++,她会默默的为你做很多的事情。  有的女人就像JAVA,只需一点付出她就会为你到处服务。  有的女人就像JAVA script，虽然对她处处小心但最终还是没有结果。  有的女人就像汇编 虽然很麻烦，但是有的时候还得求]]></description><category></category></item><item><title><![CDATA[认识4G地址空间的局限----MMIO内存映射的问题]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/4748669</link><guid>https://blog.youkuaiyun.com/better0332/article/details/4748669</guid><author>better0332</author><pubDate>Fri, 30 Oct 2009 16:21:00 +0800</pubDate><description><![CDATA[ 一、4GB地址空间的局限首先我们还必须要先了解两个概念其一是“物理内存”。大家常说的物理内存就是指安装在主板上的内存条，其实不然，在计算机的系统中，物理内存不仅包括装在主板上的内存条(RAM)，还应该包括主板BIOS芯片的ROM，显卡上的显存(RAM)和BIOS(ROM)，以及各种PCI、PCI-E设备上的RAM和ROM。其二是“地址空间”。地址空间就是对物理内存编码(地址编码)的范围。所谓编码]]></description><category></category></item><item><title><![CDATA[Subversion（SVN）使用]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/4538690</link><guid>https://blog.youkuaiyun.com/better0332/article/details/4538690</guid><author>better0332</author><pubDate>Thu, 10 Sep 2009 13:02:00 +0800</pubDate><description><![CDATA[Subversion典型的工作周期是这样的： 更新你的工作拷贝 svn update  做出修改 svn add  svn delete  svn copy  svn move  检验修改 svn status  svn diff  可能会取消一些修改 svn revert  解决冲突（合并别人]]></description><category></category></item><item><title><![CDATA[ReactOS debug（调试）]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/4466893</link><guid>https://blog.youkuaiyun.com/better0332/article/details/4466893</guid><author>better0332</author><pubDate>Thu, 20 Aug 2009 16:24:00 +0800</pubDate><description><![CDATA[       看了N多ReactOS代码，总想调试一下，于是到wiki上去看了一下关于debug的方面的资料。主要有三种调试方式：Kdbg、GDB、WinDBG（http://www.reactos.org/wiki/Debugging）l         Kdbg方式这是ReactOS内建的调试机制，默认就是这种。但是Kdbg的调试客户端是什么呢？网上有篇文章说用fDebug，感觉太麻烦]]></description><category></category></item><item><title><![CDATA[物理学全明星]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/4429797</link><guid>https://blog.youkuaiyun.com/better0332/article/details/4429797</guid><author>better0332</author><pubDate>Mon, 10 Aug 2009 10:15:00 +0800</pubDate><description><![CDATA[]]></description><category></category></item><item><title><![CDATA[MmGetPageOp图示]]></title><link>https://blog.youkuaiyun.com/better0332/article/details/4338502</link><guid>https://blog.youkuaiyun.com/better0332/article/details/4338502</guid><author>better0332</author><pubDate>Fri, 10 Jul 2009 17:27:00 +0800</pubDate><description><![CDATA[ 好看，哈哈……]]></description><category></category></item></channel></rss>