4 ms·

Here we go, I'm betting less than a month until someone finds some vulnerability in that because it was probably designed with security by obscurity in mind. If

Here we go, I'm betting less than a month until someone finds some vulnerability in that because it was probably designed with security by obscurity in mind. If they don't have the binary, they can't find vulnerabilities in that, right?!

runesoerensen 9y ago
> it was probably designed with security by obscurity in mind Anything in particular that makes you think this is probable? There's evidence to the contrary as mentioned in another comment https://news.ycombinator.com/item?id=15040972 https://news.ycombinator.com/item?id=15040972 > If they don't have the binary, they can't find vulnerabilities in that, right? No, vulnerabilities can still be found (and they've had the binary all along). This just allows them to decrypt it and inspect the source code, which makes it easier to identify vulnerabilities than a black box.
- 45h34jh53k4j 9y ago
  > This just allows them to decrypt it and inspect the source code decrypt the firmware and inspect the binaries
- 0x0 9y ago
  I think this wouldn't reveal any source code, but it would reveal the decrypted binary (which they did not have all along), so it can be disassembled and poked at for vulnerabilities.
  - runesoerensen 9y ago
    You're right, thanks!
deleted 9y ago
[deleted]