2 ms·
Did you just assume every hacker has all the source code in the world?
by cyanydeez 6mo ago
Did you just assume every hacker has all the source code in the world?
- axoltl 6mo agoHi, security professional here! A lot of the time, we don't need it.
- blueg3 6mo agoMost software in the world has little novelty. You don't really need the source code.
- _jackdk_ 6mo agoThe "open source movement" has proven reasonably effective over the past few decades.
- throwaway-away 6mo agoIf you only rely only on stecurity through obscurity (eg attackers not having the source code) you gonna have a bad time. And even if your source code is not available, you can make a good guess about their dependencies. Find a vulnerability there and chances are your software is also vulnerable.
- ralph84 6mo agoLLMs are very good at reverse engineering binaries. You just have to convince them you're doing defensive security not offensive so they comply.
- zzzoom 6mo agoAnd state actor LLMs probably don't need convincing
- reliabilityguy 6mo agoIt’s good enough to find one known function from libc in programs memory to mount the attack. Moreover, there are automated methods how to leak pointers to functions, etc., without having access to the binary itself.