On.Security
Developing secure software is a challenge. Writing really secure software is a real challenge.
Here are the articles which touch different security aspects of software, from “what cipher suites are not to be used with TLS”, to certain more or less novel things under ‘Security Research’ subcategory
MOGs: Hacks and Hackers
November 21, 2017 by • “No Bugs” Bunny
Quote:
One of the nastier-for-us features of IDA Pro is so-called F.L.I.R.T.
Another Quote:
All the popular protection methods lag well-behind capabilities of the average-attacker-on-a-100K-simultaneous-player-game.
Filed under: On.SecurityFraud PreventionBook: D&D of MOGs1st beta of Vol. VII-IX
Read moreMerits of Anti-Reverse-Engineering for MOGs
November 14, 2017 by • “No Bugs” Bunny
Quote:
Given enough time, everything can be broken
Another Quote:
in this fight, most of the non-cheating player population will be on our side
Filed under: On.SecurityFraud PreventionBook: D&D of MOGs1st beta of Vol. VII-IX
Read moreAdvocating "Obscurity Pockets" Part III. Code Obfuscation Basics.
February 14, 2017 by • “No Bugs” Bunny
Quote:
C++ is by far the king when it comes to producing obfuscated code.
Another Quote:
inlines and C++ templates are helping to obfuscate things very efficiently
Filed under: On.SecurityResearch
Read moreAdvocating “Obscurity Pockets” as a Complement to Security. Part II. Deployment Scenarios, More Crypto-Primitives, and Obscurity-Pocket-As-Security
February 7, 2017 by • “No Bugs” Bunny
Quote:
In other words – such an Obscured RNG would protect us from Debian RNG disaster(!)
Another Quote:
such a protocol (if properly deployed on the Server Side) – would defeat Heartbleed too (even if all the details of the Client are known)
Filed under: On.SecurityResearch
Read more



