home.social

#controlflow — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #controlflow, aggregated by home.social.

  1. Прямая без препятствий. Часть 2. Защита мобильных приложений — выход найден?

    В современных мобильных операционных системах нам по умолчанию недоступны права суперпользователя, а более-менее привилегированный доступ для приложений получить просто невозможно без использования уязвимостей. Поэтому невозможно сделать единое приложение, которое будет защищать все мобильное устройство из пользовательского пространства. Остается единственный выход — встраивать защиту прямо в защищаемое приложение. Меня зовут Николай Анисеня, и я продолжаю рассказывать о безопасности мобильных приложений. В предыдущей статье мы подробно поговорили о состоянии защищенности приложений и девайсов на настоящий момент. Если коротко — приятных новостей мало. Но выход есть. В этой статье расскажу о перспективах защиты.

    habr.com/ru/companies/pt/artic

    #pt_maze #уязвимости_мобильных_приложений #sdk #saas #телеметрия #защита_кода #controlflow #анализ_кода #обфускация #zero_trust

  2. Looking into just trying to deobfuscate the older NAC stuff for generating the iMessage validation data...

    Looks like it might be possible? As far as I can tell, it's just MBA + Control Flow Obfuscation.

    I don't totally understand simplifying MBA, but it looks like it can be done with certain tools, and after that undoing the CFO should be easy-er?

    #ReverseEngineering #MixedBooleanArithmetic #FairPlay #ControlFlowObfuscation #ControlFlow #deobfuscation #obfuscation #BinaryNinja #BinaryObfuscation

  3. Looking into just trying to deobfuscate the older NAC stuff for generating the iMessage validation data...

    Looks like it might be possible? As far as I can tell, it's just MBA + Control Flow Obfuscation.

    I don't totally understand simplifying MBA, but it looks like it can be done with certain tools, and after that undoing the CFO should be easy-er?

    #ReverseEngineering #MixedBooleanArithmetic #FairPlay #ControlFlowObfuscation #ControlFlow #deobfuscation #obfuscation #BinaryNinja #BinaryObfuscation

  4. Looking into just trying to deobfuscate the older NAC stuff for generating the iMessage validation data...

    Looks like it might be possible? As far as I can tell, it's just MBA + Control Flow Obfuscation.

    I don't totally understand simplifying MBA, but it looks like it can be done with certain tools, and after that undoing the CFO should be easy-er?

    #ReverseEngineering #MixedBooleanArithmetic #FairPlay #ControlFlowObfuscation #ControlFlow #deobfuscation #obfuscation #BinaryNinja #BinaryObfuscation

  5. Looking into just trying to deobfuscate the older NAC stuff for generating the iMessage validation data...

    Looks like it might be possible? As far as I can tell, it's just MBA + Control Flow Obfuscation.

    I don't totally understand simplifying MBA, but it looks like it can be done with certain tools, and after that undoing the CFO should be easy-er?

    #ReverseEngineering #MixedBooleanArithmetic #FairPlay #ControlFlowObfuscation #ControlFlow #deobfuscation #obfuscation #BinaryNinja #BinaryObfuscation

  6. @danielzenzes I never had a need for breaking out of nested loops.

    On a related note: when you want to break out of a control flow, e.g. when traversing a tree structure with a visitor, you can also use

    std::ops::ControlFlow

    doc.rust-lang.org/std/ops/enum

    It makes breaking out of control flow much more explicit.

    And it can also be used with `?` operator in order to return early when it's value is ControlFlow::Break. :awesome:

    #Rust #RustLang #ControlFlow #ExplicitOverImplicit