open_safety
xwin
| open_safety | xwin | |
|---|---|---|
| 14 | 5 | |
| 35 | 327 | |
| - | - | |
| 2.6 | 7.4 | |
| almost 2 years ago | about 1 month ago | |
| Rust | Rust | |
| MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
open_safety
-
Any sufficiently advanced uninstaller is indistinguishable from malware
Malware delivered as an email with a link to a zip file containing a .js file is one of the most common methods of delivery, right behind word macros. The "map the .js extension to notepad.exe" is a common security trick with a measurable, immediate drop in malware in large orgs. You can deploy it via GPO or InTune.
Personal promotion, I built this as a better alternative:
https://github.com/technion/open_safety
Note the built in .js parser hasn't basically ever updated, if you're writing for this you're writing like you're targetting IE5.
- How to build windows application clean / virus free for online distribution?
- Security Cadence: Use Default Apps to Help Prevent Accidental Launching of Malicious File Types
- Have you ever been hit with ransomware?
-
Microsoft's Small Step to Disable Macros Is a Win for Security
Allow me to reference my own workaround for those vectors:
https://github.com/technion/open_safety
- Am I the only one who finds Rust to be centered around Linux? Any Windows devs want to share their experience with Rust?
- State-of-the-art EDRs are not perfect, fail to detect common attacks
- Is shipping the produced .exe the only thing one needs to ship in order to ship a Rust program?
-
How to Rapidly Improve at Any Programming Language
https://github.com/technion/open_safety
The time I've spent on the Github actions is substantively higher than the time I've spent on the .rs files. Of course you can't "test actions before commit" in the way you can actual code, so I kept having to make branches, make 15 commits like "try action fix again", followed by squashing them all down and merging.
- To enable trust, install this certificate in the Trusted Root Certification Authorities store.
xwin
-
Because cross-compiling binaries for Windows is easier than building natively
There's tooling that mostly avoids this. https://github.com/Jake-Shadle/xwin
This is a utility that fixes a lot of the cross-compiling issues for windows by giving you a portable, unfucked naming, and not-massive SDK. It's the same SDK you get when you install MSVC but it's only a few hundred megs and the names are consistent even with all of Windows' fucked up tooling.
The only caveat is you need to provide your own compiler, in this case clang is often the best option.
-
cargo-xwinbuild v0.3.0 supports cross compile to Windows with CMake dependency
cargo-xwinbuild is a thin wrapper of xwin provides a Cargo subcommand xwinbuild to make cross compiling to Windows MSVC target just work.
-
Announcing cargo-xwinbuild: Cross compile Cargo project to Windows msvc target with ease
This situation bugs me a lot, and I remembered a blog post about the xwin which makes cross compiling Windows binaries from Linux quite easy, but it requires a lot of manual setup. While using Docker containers make it easier, it's also slower.
-
Am I the only one who finds Rust to be centered around Linux? Any Windows devs want to share their experience with Rust?
I will do you one better. When I do windows development, I work within WSL and use the cross-compiler toolchain to generate windows binaries. I have found "Xwin" to be very useful for this: https://github.com/Jake-Shadle/xwin
-
Blog post: Cross compiling Rust Windows binaries from Linux
I've just pushed a 0.1.1 release that fixes this issue, unsure why the windows crate decided to use screaming case in their link names but I'm sure they're not the only ones.
What are some alternatives?
csv-injection-payloads - 🎯 CSV Injection Payloads
cargo-deny - ❌ Cargo plugin for linting your dependencies 🦀
music-vibes - Desktop app for translating audio output into vibrations
llvm-mingw - An LLVM/Clang/LLD based mingw-w64 toolchain
ntfs - An implementation of the NTFS filesystem in a Rust crate, usable from firmware level up to user-mode.
msvc-llvm-nix
Windows-Sandbox-Utilities - A public repository for useful developments surrounding Windows Sandbox
Stacktribution - A tiny webapp to generate proper attribution to a Stack Overflow's answer.
cargo-xwin - Cross compile Cargo project to Windows MSVC target with ease
dom-expressions - A Fine-Grained Runtime for Performant DOM Rendering
xlsxwriter-rs - Excel file writer for Rust