nekitamo

12 ms·

121.
by nekitamo 11y ago
It has very high insert speeds, and amazing compression (up to 500% in my tests). It's very powerful if you're inserting terabytes of data every day on commodity hardware.
122.
by nekitamo 11y ago
> Apple doesn't serve the same encrypted binary to everyone. Each user has an independent set of FairPlay keys and Apple serves up content encrypted for that particular user. That's kind of the whole point of FairPlay. If Appl
123.
by nekitamo 11y ago
Thank you, I had forgotten about class guard. It's a great tool, but I recall having problems getting it to work on larger applications. It's also possible for you to remove the ObjectiveC metadata from a binary entirely, obfuscat
124.
by nekitamo 11y ago
Iirc Signal is open source, so anyone can simply insert a backdoor into the source code and compile it, and then distribute the modified binary. However, I'm talking about applications for who the source code is not available. If you p
125.
by nekitamo 11y ago
I concede that LLVM bitcode can be obfuscated just like machine code ( with enough effort, and LLVM bugs aside ) . However, you're still losing the ability to self-checksum your code, which in turn means you can't protect against
126.
by nekitamo 11y ago
I am actually looking at that bitcode right now :) You can use this program ( https://github.com/AlexDenisov/bitcode_retriever ) to extract it from the MachO file, then use Xarc to decompress the archive, then use llvm
127.
by nekitamo 11y ago
Actually, before LLVM bitcode, self-checksumming was quite possible on iOS, and is widely used by many commercial obfuscators. Furthermore, self-checksumming is the root of all good anti-tamper schemes. It prevents someone from automaticall
128.
by nekitamo 11y ago
The majority of people might not obfuscate their mobile applications, but I think that's a problem in tooling and awareness. A lot more would if they could, and if they knew how. That being said, there is also a very sizable minority o
129.
by nekitamo 11y ago
I agree, reverse engineering is always possible :) However, reverse engineering with the LLVM bitcode present is much much easier, which is a problem. Also, if Apple requires apps to be submitted as LLVM bitcode, then certain things like in
130.
by nekitamo 11y ago
Sorry, there might be some confusion. This entire time I was referring to code obfuscation/integrity checks, and why bitcode is a problem for people who want to obfuscate their code. I was not referring to apps like Signal at all. As a
131.
by nekitamo 11y ago
I am referring to ObjectiveC metadata, which programs like IDA Pro can use to identify function names/parameters, which give valuable insights to reverse engineers. With LLVM bitcode, it doesn't matter if you don't hand over
132.
by nekitamo 11y ago
Reverse engineering machine code is not trivial if it is obfuscated, has its symbols stripped, and has its ObjectiveC metadata obfuscated/encrypted. LLVM bitcode is much easier to reverse engineer than machine code, and you will be han
133.
by nekitamo 11y ago
There are intellectual property concerns. You are now giving Apple your LLVM IR along with the program symbols. What happens if you have sensitive code in your application that you don't want Apple reverse engineering and having access
134.
by nekitamo 11y ago
IDA Pro used to be one dude. Right now it's at least 3-4 people.
135.
by nekitamo 11y ago
Here is an example that I found on their Twitter: http://dpaste.com/0YA53VR
136.
by nekitamo 11y ago
I would like to note that IDA Pro has a very nice debug server which is a nice alternative to GDB for Android. Also I believe they recently added the ability to debug dalvik bytecode as well. Gikdbg is a free alternative, which I believe is
137.
by nekitamo 11y ago
Sure, and I accept that. But I would at the very least like to be able to open these files in Visual Studio and inspect them. It doesn't even let me to that much. It just gives me a lame error message about how I have to upgrade to Win
138.
by nekitamo 11y ago
Microsoft's big selling point is backwards compatibility with their older OS. Furthermore, according to this source Windows 7 still makes up for the vast majority of Windows installs on consumer desktop computers: http://www
139.
by nekitamo 11y ago
When you try to open the Visual Studio project files, it gives you an error that you need Windows 8.1 installed. That's lame. I'm aware I can open the .js files in a text editor, but that's like saying I could work on a C# pr
140.
by nekitamo 11y ago
Another reason you should cloak your Ollydbg :) https://tuts4you.com/download.php?list.3 https://tuts4you.com/download.php?view.2425
141.
by nekitamo 11y ago
Kind of lame how you can't use any of this, or even open it in Visual Studio, unless you have Windows 8.1 installed.
142.
by nekitamo 11y ago
Yep. I hope they leave this optional for iOS, as we use some proprietary libraries which we don't think the vendor will ship a new version of :(
143.
by nekitamo 11y ago
Agreed, this is an insane requirement. Our app uses commercial libraries from closed source vendors, some of which are no longer distributing newer versions of their libraries. If this becomes a requirement, we will not be able to ship our
144.
by nekitamo 11y ago
I get the impression that YQL is suffering from the same kind of neglect Pipes did. It was down multiple times a week for me, and I had to move to other solutions.
145.
by nekitamo 11y ago
The TokuDB engine for MySQL gives you amazing compression and insert performance compared to Postgres, which is useful for certain workloads.
146.
by nekitamo 11y ago
>If the suicide rate did meet some statistical "norm" then that would be exceptional. Why are kids killing themselves in utopia? Why are some of the worlds most intelligent, rich, and power adults burying their children? Gunn &
147.
by nekitamo 11y ago
Modern journalism in a nutshell.
148.
by nekitamo 11y ago
This only works for Windows Store applications, which is a tiny subset of all the .NET applications out there.
149.
by nekitamo 12y ago
They also have crackmes here: http://tigress.cs.arizona.edu/challenges.html
150.
by nekitamo 12y ago
They released a tool to bypass Safedisc/Safecast, after Macrovision discontinued those protections: http://scenenotice.org/details.php?id=1707

More ›