HackerTrans
TopNewTrendsCommentsPastAskShowJobs

not_a9

51 karmajoined il y a 8 mois
Passionate about silly things.

Submissions

(Re//Verse 2026) Taxonomy and Deobfuscation of a Real World Binary Obfuscator [pdf]

github.com
27 points·by not_a9·le mois dernier·1 comments

Applied Reverse Engineering: Crude T&E for Control-Flow Tracing

revers.engineering
1 points·by not_a9·il y a 3 mois·0 comments

comments

not_a9
·il y a 4 jours·discuss
They’d need to either poach folks from other firms or go for a third party solution.

Cursed timeline: Valve pays Epic for good EAC build on CS2 + whatever encryption solution they have for Fortnite executable, 99.9% P2Cs disappear day 1
not_a9
·il y a 5 jours·discuss
https://github.com/vtil-project/VTIL-Core

https://github.com/can1357/selene
not_a9
·il y a 11 jours·discuss
> no more cancerous giant Electron app to move a few sliders and set an RGB hex code

That will also ship vulnerable drivers.
not_a9
·il y a 12 jours·discuss
Presumably for much the same reason glibc has all the heap protections?
not_a9
·il y a 13 jours·discuss
Interesting exercise. Why does 1/1 matching to original asm matter, though? Maintaining same timing as original game?
not_a9
·il y a 13 jours·discuss
There’s also fun stuff like VEH hooking and SLAT hooking, though SLAT hooks are not very useful in this case.
not_a9
·il y a 15 jours·discuss
> kernel level spyware

What does it spy on? I can only assume you’ve fully devirtualized and reversed Easy Anti-Cheat to be making such statements

> full access to your operating system

Man Epic Games must be cooking if they can poke at VTL1
not_a9
·il y a 15 jours·discuss
The slop engine can drive IDA just fine. Does hitch a bit on obfuscated code, but with some poking it does fine there too.
not_a9
·il y a 18 jours·discuss
Lolzteam et al still exist. Buying a Steam account is one click or so.
not_a9
·il y a 19 jours·discuss
OK. What if I want to mod my singleplayer game? Or, God forbid, make mods for it?
not_a9
·il y a 19 jours·discuss
> for people who want to play PC games with a console-like experience, without any hassles of manual setup and tweaking that the hacker crowd normally are into.

Until they want to play Fortnite/Roblox/whatever else.
not_a9
·il y a 19 jours·discuss
> Steam is in the unique position to create a kernel anti-cheat

Valve has a long-term policy of being utter trash at game security.

> I know that's not popular. But they are the only ones with the install base AND ability to pull it off in a such a fashion that wouldn't be so god-awful.

Epic Games does fine (though they did it by purchasing an anticheat startup).

EDIT: Oh, you're talking about making an anti-cheat focused Linux kernel build? Meh, still would not trust Valve on that front given their long-standing policy of not giving a shit.
not_a9
·il y a 21 jours·discuss
Maybe some KVM patching to use SLAT for breakpoints/watchpoints would fit your bill? Not sure.
not_a9
·il y a 23 jours·discuss
This does not fit DRM/anticheat threat model anyway.
not_a9
·il y a 24 jours·discuss
Maybe kinda sorta https://github.com/momo5502/sogen? It can even virtualize Modern Warfare 2 these days.
not_a9
·le mois dernier·discuss
The actual presentation: https://www.youtube.com/watch?v=3LtwqJM3Qjg.

An interesting look at what modern code obfuscation looks like, the example used being Riot Vanguard's kernel mode component.
not_a9
·le mois dernier·discuss
They include a fun follow-up with a stronger obfuscator: https://www.youtube.com/watch?v=3LtwqJM3Qjg
not_a9
·le mois dernier·discuss
You can still hit guardrails with this enabled for your account. Had a silly moment a day or so ago when Claude Code hit the guardrail after a web search (presumably because the websearch contained badbad anticheat stuff like https://github.com/0avx/0avx.github.io/blob/main/article-3.m...). Codex with the ID verification has no qualms like this.
not_a9
·le mois dernier·discuss
> only ppl using AI are shops with clueless ppl getting flooded in nonsense.

Are Hex-Rays and Vector35 clueless?
not_a9
·le mois dernier·discuss
> There is undoubtedly AI-written code in the Linux kernel now

You can grep commit logs by “Assisted-By” these days and there sure is a whole bunch of LLMs.