A forum for reverse engineering, OS internals and malware analysis 

Discussion on reverse-engineering and debugging.
 #13171  by redp
 Sat May 12, 2012 8:15 am
aionescu wrote: I am not an MS employee, and never have been
Mark & David are
aionescu wrote: MS Press decides that in 2011, their diagrams will have a new "style"
Metro style :D ?

As you said you are programmer so you should use your engineering skills. You could
* place whole book/all sub-chapters in some kind of CVS and make simple script to detect changed/added areas for editors/reviewers
* for each screenshot image place in CVS AutoIt script so you will able to produce whole set of images on new windows version automatically
* for each citation from windbg you also could place in CVS windbg script and also produce all examples automatically
* etc etc - I am sure there are lots of cases for similar automation
As you see it just some common sence and nothing to patent :lol:

I hope that 7th edition will be released before 2015 :roll:
 #13181  by aionescu
 Sat May 12, 2012 6:32 pm
redp wrote:
aionescu wrote: I am not an MS employee, and never have been
Mark & David are
Mark & David's contribution to 5th and 6th Edition is primarily through their existing work in the earlier editions -- when Mark was not an employee and did not have source access. David is still not an employee, and likely never will be. New content in 5th and 6th Edition is primarily written by me, with no source access. So the point remains: 99% of 5th and 6th Edition was written without source code access/inside access/etc... I cannot speak for earlier as I was not involved.
redp wrote:
aionescu wrote: MS Press decides that in 2011, their diagrams will have a new "style"
Metro style :D ?
Actually, yes.
redp wrote: As you said you are programmer so you should use your engineering skills. You could
* place whole book/all sub-chapters in some kind of CVS and make simple script to detect changed/added areas for editors/reviewers
* for each screenshot image place in CVS AutoIt script so you will able to produce whole set of images on new windows version automatically
* for each citation from windbg you also could place in CVS windbg script and also produce all examples automatically
* etc etc - I am sure there are lots of cases for similar automation
As you see it just some common sence and nothing to patent :lol:
1st suggestion is already done

2nd suggestion works assuming that the way to get to that screenshot hasn't changed. Most of our trouble is how MS re-designs the UI/shortcuts in each new version. So in Vista you right-click on "My Computer" and click "Settings" and then click the "Hardware Tab", in Windows 7 you right-click on "Computer" and choose "Manager" and then click the "Device Manager link". Also Process Explorer UI changes, and in each new book edition there are new fields to describe in text, etc. So it's not that simple unfortunately. There are also subtleties in Windows themes and sizing/fonts, which means that for each screenshot the window must usually be resized to specific sizes/layouts, and columns/rows inside the application must be chosen to convey the best possible information while not showing too much nor too little. These decisions are not automatable.

3rd suggestion is actually pretty good, unfortunately it does not cover the text that describes the experiment. For example if the output of the new extension now has new fields, or fields were removed, the text must also be updated. And if any pointer/values are described in the text, they must now be updated to the experiment output. *Most* of this could be automated with a tool if we used a very fixed style for experiment walkthroughs, I guess, but I'd be concerned to let a script write a book...

So I don't disagree the process could be better but it's not as easy as it sounds especially with 1200 of legacy pages.

And in this case, when MS Press decided to re-do diagrams Metro style, that is not something the authors have any power of, nor something that can be "automated", unless they have an Adobe Illustrator Metro-izer plug-in or something like that.
redp wrote: I hope that 7th edition will be released before 2015 :roll:
I hope so too. Nobody likes how long each revision is taking... but it's not part of some secret plan to piss people off and/or make money, trust me.
 #13184  by Vrtule
 Sat May 12, 2012 9:30 pm
Hello,
And in this case, when MS Press decided to re-do diagrams Metro style, that is not something the authors have any power of, nor something that can be "automated", unless they have an Adobe Illustrator Metro-izer plug-in or something like that.
In my case, my "job" was to write a text and draw the diagrams/pictures. Their actual size (and other characteristics) was not in my power. And I also could not decide where the pictures would lie in the book or how the book will actually look like.

Does similar things apply also in case much bigger publisher as MS Press certainly is? Although my publisher is quite well-known in my countery, I think it is incomparable to MS Press. So, I am interested whether the htings are similar "everywhere" or not.

I hope I am not asking about some secret stuff.
 #13189  by aionescu
 Sun May 13, 2012 4:32 pm
Vrtule wrote:Hello,
And in this case, when MS Press decided to re-do diagrams Metro style, that is not something the authors have any power of, nor something that can be "automated", unless they have an Adobe Illustrator Metro-izer plug-in or something like that.
In my case, my "job" was to write a text and draw the diagrams/pictures. Their actual size (and other characteristics) was not in my power. And I also could not decide where the pictures would lie in the book or how the book will actually look like.

Does similar things apply also in case much bigger publisher as MS Press certainly is? Although my publisher is quite well-known in my countery, I think it is incomparable to MS Press. So, I am interested whether the htings are similar "everywhere" or not.

I hope I am not asking about some secret stuff.
Hey Vrtule,

I will sketch the diagram (sometimes on paper, sometimes only describe it) and then the illustration team will actually draw the final diagram in my specifications, but with their own style. You can have "input" into this process but ultimately the book/style/etc must correspond to strict templates and guidelines from the publisher. But I must say I've found MS Press to be pretty flexible and creative when the need arises.

For existing illustrations, they will go over them and update to whatever new style they might have. For example in this edition they updated all of them to a newer look.

Other than that there are the screenshots, which must be taken with precise parameters. But the final "size", as long as it doesn't exceed maximum/minimums, I can play around with (and is pretty time consuming).

--
Best regards,
Alex Ionescu
 #13193  by Vrtule
 Sun May 13, 2012 5:01 pm
Thank you for the explanation, Alex! It seems that the things works very similarly to my case. From this point of view at least.

EDIT: Fixed obvious grammar rubbish.
 #13205  by rkhunter
 Mon May 14, 2012 7:34 am
aionescu wrote:My turn to ask a question -- did you ever finish writing your code to do IDE access over Port I/O?
FYI: If you interested in this method, look VBA32 Anti-rootkit, it uses this method and stable.
 #13206  by Vrtule
 Mon May 14, 2012 7:38 am
aionescu wrote:My turn to ask a question -- did you ever finish writing your code to do IDE access over Port I/O?
No, I did not. It never entered something like beta stage.
 #13394  by aionescu
 Thu May 24, 2012 8:06 am
rkhunter wrote:
aionescu wrote:My turn to ask a question -- did you ever finish writing your code to do IDE access over Port I/O?
FYI: If you interested in this method, look VBA32 Anti-rootkit, it uses this method and stable.
Source code is not available, correct? I know this mechanism does work -- I just want to implement it into a potential exploit for a presentation without having to re-invent the wheel. So VBA32 won't give me much, unfortunately (other than proving it's doable).