Opening calc.exe from the S&Box C# sandbox
The article discusses the open-source game development platform S&Box and its use of C# for scripting. It highlights the security concerns associated with executing untrusted C# code and the methods used to mitigate risks. The author shares personal experiences while attempting to run and modify code within the S&Box environment.
- ▪S&Box uses C# for game scripting instead of Lua, which raises security concerns.
- ▪The platform scans code to block the use of certain APIs to enhance security.
- ▪The author shares their experience of modifying the editor and running unsafe code.
Hacker News (Newest) files mainly under programming. We currently carry 5,306 of its stories.
Story provenance
Source · retrieval · rights · ranking — open for full record
inspect →
Attribution is not the same as permission. This drawer separates discovery metadata, excerpts, WeSearch-generated summaries, reuse status, and whether the publisher receives the visit. Nothing here claims a legal grant the publisher has not made.
Record
| Original publisher | Slugcat |
| Canonical URL | https://slugcat.systems/post/26-05-21-how-to-open-calc-exe-from-sbox/ |
| Publication time | Thu, 21 May 2026 20:18:43 +0000 |
| Retrieval time | 2026-05-21T20:31:35.748Z |
| Last seen | 2026-05-21T20:31:35.748Z |
| Headline source | Publisher (no WeSearch rewrite) |
| Excerpt source | publisher body |
| Excerpt method | First ~120 words (~800 chars) of extracted publisher body, fair-use limited. |
| Summary | WeSearch · cerebras-chat (WeSearch summarizer) |
| Summary source text | contentText |
| Citation coverage | Summary is a WeSearch-generated derivative; primary citation is the original publisher URL. |
| Cluster | PLYaPDttjuVb |
| Cluster logic | Grouped by semantic title/content similarity across sources within a rolling window. Same-publisher template collisions are excluded from coverage comparison. |
| Ranking reason | Story pages are not engagement-ranked. Hub feeds use recency, with optional source-diversified chronological ordering (cap consecutive stories per source). No personalized ranking. |
| Publisher visit | Yes — open original |
| Substitutes article? | No — link-out required for full text |
Rights status (four layers)
WeSearch handling by dimension
| Indexing | May the item be indexed (stored, ranked, made findable)? | Allowed |
| Snippet | May a short excerpt of the publisher's text be shown? | Allowed |
| AI summary | May WeSearch generate its own short summary of the article? | Limited |
| Retrieval / RAG | May the content be exposed for third-party retrieval-augmented generation? | Not asserted |
| Model training | May the content be used to train AI models? | Not asserted |
| Commercial reuse | May the content be reused commercially? | Not permitted |
Basis: Derived from the published RSS/Atom feed. Contact: [email protected]. Reviewed: 2026-07-24.
Opening excerpt (first ~120 words) tap to expand
How to open calc.exe from S&Box Thursday May 21, 2026 So, S&Box went “open source”. I don’t personally have any interest in the platform, but I did have interest in how they securely execute C# code… So S&Box is “Garry’s Mod 2”, or maybe it’s Roblox Source 2, I really don’t care about it directly. The thing that’s relevant to me is that instead of using Lua or something, they use full powered C# for game scripting. C#/.NET is not Lua: it is not designed to run untrusted code, so how do they get away with it? The solution is quite simple: they scan your code and block loading it if you use any APIs like File.Open(). Now, is this secure? Well… To be clear: if you are a security-minded person, this is an atrocious idea.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at Slugcat.
Discussion
0 commentsMore from Slugcat
