4 ms·
garble actually sounds like an excellent utility to add some protection around things like keys/secrets in a binary. Is there anything like this for Swift binar
by johnthuss 2y ago
garble actually sounds like an excellent utility to add some protection around things like keys/secrets in a binary. Is there anything like this for Swift binaries?
- cmeacham98 2y agoObfuscation tools like these only slow down attackers, they can never stop them. Even the best in the game, where there are strong financial incentives on the line, fall to attackers typically in a matter of months. As such, you should never use them to protect data that needs to stay secret indefinitely (or for a long time), such as keys.
- Cthulhu_ 2y agoThat was my reasoning as well, I used to work for a company that really wanted code to be obfuscated because they were terrified of corporate espionage. Even though the one I was working on was just a configuration interface, and the configuration was plain text files, and the application didn't do anything special, just complicated (mobile network routing / protocols, lots of domain specific knowledge but as far as I know nothing secret or difficult to reproduce with enough resources).
- saagarjha 2y agoPeople are somehow really convinced their thing is uniquely special and worth stealing.
- recursive 2y agoI think they're more often convinced that their thing is just worth stealing. There are many such things.
- crazygringo 2y agoExactly this. Apps and websites get copied all the time. Somebody throws up a duplicate with ads and steals your traffic and search rankings and customers and whatever. Adding code to prevent your product from working when it's not on the right app/domain, and obfuscating your code to obfuscate those checks, can be sadly necessary. It doesn't need to defeat a determined attacker, but just be hard enough they'll spend their time cloning something else instead. I speak from experience...
- johnthuss 2y agoThere are occasions where you just want to make it a little harder to impersonate an official client where it can be useful to store a secret in the binary. It's still vulnerable but requires intention and actual effort.
- jillyboel 2y agoSure, and those occasions are when you should realize that what you want is a bad idea, and then not do that.
- kokada 2y agoProbably a much better solution would be to store those as environment variables. I can't think any sane way where adding secrets to a binary would be useful unless you want to do something malicious with it.
- vlovich123 2y agoUnless you’re launching the binary with c&c infrastructure receiving remote commands to start the binary, I don’t see how you would obtain the values to inject them into environment variables.
- saagarjha 2y agoI assume they are shipping iOS apps
- kokada 2y agoBut even this case doesn't make much sense. I expect that instead of adding the secrets inside the binary you will go through to the more traditional ensuring that the client is logged in and that the secrets are stored in the server. Unless you want your app to be used anonymously, but then why have secrets?
- johnthuss 2y agoThe use case I have encountered was for anonymous users where the company wanted to prevent unauthorized clients (copies of the app) from relying on the same server-side HTTP API used by the official app. The point wasn't to make it impossible for an unofficial to be used, but to make it harder than "trivial". So the app used a digital signature / request signing with a key that was obfuscated and embedded in the binary. With anonymous users I don't know how else you could avoid use of the private API.
- jayd16 2y agoHow can you read an article on automatic DEobfuscation and think "hey I can store secrets in that"?
- meindnoch 2y agoPlease, anyone reading this: don't do it.