On.Security

Developing secure software is a challenge. Writing really secure software is a real challenge.
Here are the articles which touch different security aspects of software, from “what cipher suites are not to be used with TLS”, to certain more or less novel things under ‘Security Research’ subcategory

MOGs: Hacks and Hackers

November 21, 2017 by “No Bugs” Bunny

Hackers attacking! IDA Pro, Cheat Engine, Hexinator, WinAPIOverride

Quote:

One of the nastier-for-us features of IDA Pro is so-called F.L.I.R.T.

Another Quote:

All the popular protection methods lag well-behind capabilities of the average-attacker-on-a-100K-simultaneous-player-game.

Filed under: On.SecurityFraud PreventionBook: D&D of MOGs1st beta of Vol. VII-IX

Read more

Merits of Anti-Reverse-Engineering for MOGs

November 14, 2017 by “No Bugs” Bunny

DRM bad...

Quote:

Given enough time, everything can be broken

Another Quote:

in this fight, most of the non-cheating player population will be on our side

Filed under: On.SecurityFraud PreventionBook: D&D of MOGs1st beta of Vol. VII-IX

Read more

Advocating "Obscurity Pockets" Part III. Code Obfuscation Basics.

February 14, 2017 by “No Bugs” Bunny

Obfuscating Code

Quote:

C++ is by far the king when it comes to producing obfuscated code.

Another Quote:

inlines and C++ templates are helping to obfuscate things very efficiently

Filed under: On.SecurityResearch

Tagged With: C/C++crazy stuff
Read more

Advocating “Obscurity Pockets” as a Complement to Security. Part II. Deployment Scenarios, More Crypto-Primitives, and Obscurity-Pocket-As-Security

February 7, 2017 by “No Bugs” Bunny

Hacker hit by Obscurity

Quote:

In other words – such an Obscured RNG would protect us from Debian RNG disaster(!)

Another Quote:

such a protocol (if properly deployed on the Server Side) – would defeat Heartbleed too (even if all the details of the Client are known)

Filed under: On.SecurityResearch

Tagged With: crazy stuffCrypto
Read more