Re:New ransomware written in JavaScript discovered
by jedicoder107 on Sunday June 19, 2016 @08:48PM
(#11935506)
Those variable names though.
[ Parent
| on HN ]
Re:New ransomware written in JavaScript discovered
by heatish on Sunday June 19, 2016 @11:40PM
(#11935916)
When build tools run an uglifier on your code this is what the variables comes out as. Takes all your logically named variables and shortens them like a-z. They can make it "beautified" by un-minifying (not all on 1 line) but you can't get their original variables name without the original source.
Re:New ransomware written in JavaScript discovered
by thomasfoster96 on Monday June 20, 2016 @02:15AM
(#11936356)
I think they may have been referring to the names right down at the bottom - a minifier wouldn't use "NWvQtGjjfQX" without having used all the two, three four or five letter variable names.
Re:New ransomware written in JavaScript discovered
by arcatek on Monday June 20, 2016 @04:02AM
(#11936700)
It's probably not so much a minifier than an obfuscator.
Re:New ransomware written in JavaScript discovered
by tuananh on Sunday June 19, 2016 @09:58PM
(#11935674)
it's beautified from obfuscated code. it's understandable.
Re:New ransomware written in JavaScript discovered
by kristofferR on Monday June 20, 2016 @09:30AM
(#11937865)
Beautifiers should use something like Gfycat uses for their URLs instead, that would be prettier and simpler/faster to understand.
> Most randomly generated URLs look like this: G1XeD4SwlHReDA. We thought it would be fun to do it differently. Our URLs follow the nomenclature: AdjectiveAdjectiveAnimal This is enough to give us a namespace of billions, while also letting humans write them easier. You’re welcome! https://gfycat.com/about
Re:New ransomware written in JavaScript discovered
by stincity on Monday June 20, 2016 @11:49AM
(#11938789)
Wouldn't that just make the code more confusing? You'd get some random name that doesn't mean anything to what its intended purpose is. Keeping the simple 'a-z' scheme the beautifier does allows people to not use the variable name as a descriptor of what it handles.