Fraud Prevention

While classical security with its best practices can be considered a science – fraud prevention is a kind of art. It is not generally possible to build a system which is 100% protected from frauds and cheats – but at least we can try, even when it requires us to cross the line and go into realm of the security-by-obscurity.

Bot Fighting 201, part 3. ithare::obf: An Open Source Data+Source Randomized Obfuscation Library

January 9, 2018 by “No Bugs” Bunny

Bot Fighting 201, part 3. ithare::obf: An Open Source Data+Source Randomized Obfuscation Library - Post preview image

Quote:

This is all what the-best-available-decompiler was able to do with our obfuscated code

Another Quote:

Performance-wise, we can do A LOT of obfuscation per network tick

Filed under: Book: D&D of MOGs1st beta of Vol. VII-IXOn.SecurityFraud Prevention

Read more

Bot Fighting 201, Part 2: Obfuscating Literals

January 2, 2018 by “No Bugs” Bunny

Bot Fighting 201, Part 2: Obfuscating Literals - Post preview image

Quote:

However, we can (and SHOULD) do MUCH better than that

Another Quote:

With our approach, each and every obfuscation has to be hacked individually..

Filed under: Book: D&D of MOGs1st beta of Vol. VII-IXOn.SecurityFraud Prevention

Read more

Bot Fighting 201: Declarative Data+Code Obfuscation with Build-Time Polymorphism in C++

December 26, 2017 by “No Bugs” Bunny

Bot Fighting 201: Declarative Data+Code Obfuscation with Build-Time Polymorphism in C++ - Post preview image

Quote:

Technically, what we’re looking for here, is any kind of bijection; we’ll use this bijection to convert our data from one representation into another one (and as it is a bijection, we can revert it later).

Another Quote:

As we’re not writing our obf<> classes manually (instead, we have a code generator doing it for us on each build), the sky is the limit to the obfuscations we can generate."<> classes manually (instead, we have a code generator doing it for us on each build), the sky is the limit to the obfuscations we can generate.

Filed under: Book: D&D of MOGs1st beta of Vol. VII-IXOn.SecurityFraud Prevention

Read more

Bot Fighting 103. Code Integrity Checks, Code Scrambling

December 12, 2017 by “No Bugs” Bunny

Bot Fighting 103. Code Integrity Checks, Code Scrambling - Post preview image

Quote:

Bingo! We’ve got an executable, which automagically performs TONS of integrity checks, which checks are spread all over the executable, and are extremely non-obvious too.

Another Quote:

This approach of 'not revealing code until attack costs are high' is certainly not limited to payments.

Filed under: Book: D&D of MOGs1st beta of Vol. VII-IXOn.SecurityFraud Prevention

Read more