3 ms·
Technically, it means that any system holding binaries is capable of holding data identifying a user, which has crazy gdpr implications. Practically I don't ex
by themoonisachees 4y ago
Technically, it means that any system holding binaries is capable of holding data identifying a user, which has crazy gdpr implications.
Practically I don't expect this to have any impact beyond state surveillance, where obtaining a binary for a virus (or, you know, drm-defeat code) can identify its creator against any public code they would have posted elsewhere.
- krageon 4y agoAnyone whose job it is to evade detection will pull their output through a scrambler. What this will catch is small-time criminals, probably in minority groups (frequently categorised as "high risk" by police).
- hyperhopper 4y agoBut is a developer a user? I think saying that is quite the jump.
- Test0129 4y agoMost malware is packed and/or obfuscated. I'd imagine this defeats fingerprinting relatively handily since the binary is rewritten. I'm sure this technique is used to catch particularly dumb adversaries, but against anyone with a hint of operational security it wouldn't work at all. Moreover, what's stopping a determined adversary from rewriting the binary with a signature that matches another person? Using this as a targeting method would have a lot of collateral damage.