News for hackers. Stuff that matters.
Re:New ransomware written in JavaScript discovered by jedicoder107 on Sunday June 19, 2016 @08:48PM (#11935506)
Those variable names though.
Re:New ransomware written in JavaScript discovered by heatish on Sunday June 19, 2016 @11:40PM (#11935916)
When build tools run an uglifier on your code this is what the variables comes out as. Takes all your logically named variables and shortens them like a-z. They can make it "beautified" by un-minifying (not all on 1 line) but you can't get their original variables name without the original source.
Re:New ransomware written in JavaScript discovered by thomasfoster96 on Monday June 20, 2016 @02:15AM (#11936356)
I think they may have been referring to the names right down at the bottom - a minifier wouldn't use "NWvQtGjjfQX" without having used all the two, three four or five letter variable names.
Re:New ransomware written in JavaScript discovered by arcatek on Monday June 20, 2016 @04:02AM (#11936700)
It's probably not so much a minifier than an obfuscator.
Re:New ransomware written in JavaScript discovered by tuananh on Sunday June 19, 2016 @09:58PM (#11935674)
it's beautified from obfuscated code. it's understandable.
Re:New ransomware written in JavaScript discovered by kristofferR on Monday June 20, 2016 @09:30AM (#11937865)
Beautifiers should use something like Gfycat uses for their URLs instead, that would be prettier and simpler/faster to understand.

> Most randomly generated URLs look like this: G1XeD4SwlHReDA. We thought it would be fun to do it differently. Our URLs follow the nomenclature: AdjectiveAdjectiveAnimal This is enough to give us a namespace of billions, while also letting humans write them easier. You’re welcome! https://gfycat.com/about

Re:New ransomware written in JavaScript discovered by stincity on Monday June 20, 2016 @11:49AM (#11938789)
Wouldn't that just make the code more confusing? You'd get some random name that doesn't mean anything to what its intended purpose is. Keeping the simple 'a-z' scheme the beautifier does allows people to not use the variable name as a descriptor of what it handles.