Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

Forge4D runs on Android – SMS fulfills its promise

The journey 28 days. 41,000 lines of C#. Written, refactored mercilessly, and then thrown away. That's where Forge4D started. We traded 41,000 lines of C# for 19,000 lines of C++. Leaner. Faster. Ours. Along the way we built two things…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!






The journey



28 days. 41,000 lines of C#. Written, refactored mercilessly, and then thrown away.



That's where Forge4D started. We traded 41,000 lines of C# for 19,000 lines of C++. Leaner. Faster. Ours.



Along the way we built two things that didn't exist before:





  • SML – Simple Markup Language. QML-inspired, describes the UI.


  • SMS – Simple Multiplattform Language. Kotlin-like syntax, on keyword for events, compiles to native ARM.



Today, SMS fulfilled its name.









It runs on Android






03-24 13:11:18.522 28650 28682 I godot   : [SMS][info] button clicked






One log line. First event fired on Android. Native ARM. No JVM, no Gradle hell.



Here's the entire app that produced it:



main.sml – the UI




Window {
id: mainWindow
title: "Android Demo"
size: 360, 640

VBoxContainer {
anchors: left | top | right | bottom
padding: 32, 32, 32, 32

Label {
id: heading
text: "Hello from Forge on Android"
fontSize: 40
}
Label {
id: subline
text: "Vertical slice - build with forgecli build android."
fontSize: 25
}
Control { sizeFlagsVertical: expandFill }
Button {
id: btnTest
width: 300
height: 100
text: "Tap me"
fontSize: 25
sizeFlagsHorizontal: shrinkCenter
}
}
}






main.sms – the logic




var tapCount = 0

on mainWindow.ready() {
log.info("android_demo ready")
}

on btnTest.clicked() {
tapCount = tapCount + 1
var btn = ui.getObject("btnTest")
btn.text = "Tapped " + tapCount + " times"
log.info("button clicked")
}






That's the whole app. We tapped 4 times. Thorough testing. 😄









The pipeline






edit SML/SMS  →  forgecli build android  →  adb install






No Gradle. No waiting. Cold start: ~2 seconds release build.



First deploy felt instant. That's because the scripting engine wasn't compiled in yet – no SO, no SMS. That's how we learned it works. 😄









Two platforms. One codebase.



We already had a native Mac app running – almost expected.

Android today was the real test.



Mac ✓


Android ✓



SMS is now genuinely Simple Multiplattform Language. Not a promise. A fact.









Godot under the hood



You might have noticed the log line says godot. That's not a coincidence – Godot is the engine underneath Forge4D. It gives us 3D, physics, particles, animations, and video projection onto surfaces in 3D space. Out of the box.



Tomorrow we start ForgeReader – a tablet book reader with a 3D page-turn animation. With Godot underneath, that's not a feature we have to build. It's just there.









AI writes SMS. Humans can read it.



SMS was designed so a language model can generate it and a human can review it. No magic annotations, no framework-specific patterns to memorize.



You describe what you want. The AI writes SMS. You read it. You ship it.









Secure Sandbox



Forge4D runs inside the Android Secure Sandbox – fully compliant. Apple allows JavaScript, React Native, Flutter. Forge4D would pass their review too.









The Forge ecosystem





  • Forge4D – the framework (C++, SML, SMS, Godot)


  • ForgePoser – 3D animation app, written in 900 lines of SMS


  • ForgeSTA – Speech to Text to Action


  • ForgeCrowdBooks – collaborative book platform (Git/Forgejo/Codeberg, IPFS-ready)


  • ForgeCMS – SML + Markdown + Templates → static HTML


  • ForgeReader – tablet reader/editor for CrowdBooks (starts tomorrow)



Shared underneath: sml-go – a Go implementation of the SML parser, used by ForgeCMS and ForgeCrowdBooks.









Stack




  • ~19,000 lines of C++ (refactored from 41,000 lines of C#)

  • Godot as the engine foundation

  • SML for UI (QML-inspired)

  • SMS for logic (own language, Kotlin-like)

  • Dual license (like Qt)

  • Codeberg: CrowdWare









Forge4D on Mac





We will support

Mac

Android

Linux

Windows



C++ developer? Want to review code or contribute? Reach out.

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification
Syntax validiert (0 Fehler)
title: Detect Exploitation - Forge4D runs on Android – SMS fulfills its promise
id: 0d3f2af6-143e-4b28-a0fa-29b096dcc0e7
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "Forge4D runs on Android – SMS " ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Forge4D runs on Android  SMS fulfills it")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*Forge4D runs on Android  SMS fulfills it*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "Forge4D runs on Android  SMS fulfills it"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph3 Knoten / 2 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Forge4D runs on Android – SMS fulfills i.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Forge4D runs on Android – SMS fulfills its promise

Thematisch verwandte Begriffe: Forge4D, runs, Android, fulfills · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97818 | phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and i…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag