Week one was despair. Week two, she found a pattern. A 40-byte report descriptor that hid the stick's true identity: 6 axes, 12 buttons, a hat switch, and a PID that Microsoft's own Windows 11 security kernel had flagged as "legacy unsafe."
"What if we certify it? A legacy translation layer. We're getting 10,000 support tickets a month from people with old yokes, steering wheels, and custom arcade panels. Your driver solves a problem we created." Universal Joystick Driver Windows 11
Her driver worked too well. If a malicious device could mimic the Xbox signature, it could inject raw input commands past the security kernel. She had accidentally created a backdoor. Week one was despair
"I'm translating," Mira corrected. "The security risk is in the spec, not my code. The Xbox driver has god-mode access to raw input. You made it that way." A legacy translation layer
driversecurity@microsoft.com Subject: Code Integrity Violation / Potential Shim Vulnerability
Windows 11 recognized none of them.