If you're in trouble and cannot find an answer to a question which goes beyond Stack Overflow...

If you have a not-so-usual solution for your problems but need to justify it to your boss...

If you like to think on your own rather than blindly follow "common wisdom" and "profound truth"...

...then 'No Bugs' Hare on Soft.ware might be the right place for you.

Your mileage may vary. Batteries not included

Assorted Rants Tagged ‘C/C++’, page 4:

Bot Fighting 201. Part 4. Obfuscating Protocols. Versioning.

posted January 16, 2018 by "No Bugs" Hare

Quote:	“we can handle several Client versions (each with its own obfuscation) with the very same Server.”
Another Quote:	“Then, if/when a zero-day bug is encountered in TLS – our obfuscation does provide additional protection even before the attacker can reach the code with that zero-day vulnerability”
	[→]

posted January 9, 2018 by "No Bugs" Hare

Quote:	“This is all what the-best-available-decompiler was able to do with our obfuscated code”
Another Quote:	“Performance-wise, we can do A LOT of obfuscation per network tick”
	[→]

posted January 2, 2018 by "No Bugs" Hare

Quote:	“However, we can (and SHOULD) do MUCH better than that”
Another Quote:	“With our approach, each and every obfuscation has to be hacked individually..”
	[→]

posted December 26, 2017 by "No Bugs" Hare

Quote:	“Technically, what we’re looking for here, is any kind of bijection; we’ll use this bijection to convert our data from one representation into another one (and as it is a bijection, we can revert it later).”
Another Quote:	“As we’re not writing our obf<> classes manually (instead, we have a code generator doing it for us on each build), the sky is the limit to the obfuscations we can generate.”
	[→]

posted December 16, 2017 by "No Bugs" Hare

Quote:	As Mac laptops are indeed very visible, we can easily review all conference videos on YouTube, and calculate a share of Macs used by speakers
	[→]

posted December 12, 2017 by "No Bugs" Hare

Quote:	“Bingo! We’ve got an executable, which automagically performs TONS of integrity checks, which checks are spread all over the executable, and are extremely non-obvious too.”
Another Quote:	“This approach of ‘not revealing code until attack costs are high’ is certainly not limited to payments.”
	[→]

posted December 5, 2017 by "No Bugs" Hare

Quote:	“it is fundamentally impossible to prevent (or detect) debugging, at least as long we’re staying on one single box.”
Another Quote:	“DON’T spend more than 10% of your overall anti-bot-fighting time budget on system-specific protections.”
	[→]