I Can Crack Your App With Just A Shell (And How To Stop Me)

Re:I Can Crack Your App With Just A Shell (And How To Stop Me) by muppetman on Monday January 17, 2011 @07:36PM (#2114049)

Forgive my numbness, but how does this work? How do you know the right signature to be verifying against? It seems (to my not-much-of-a-programmer mind) that you've got a chicken and egg scenario here.

But that's obviously not the case, so you can explain briefly how it works? Or just paste a link.

Thanks!

[ Parent | on HN ]

Re:I Can Crack Your App With Just A Shell (And How To Stop Me) by jared314 on Monday January 17, 2011 @07:59PM (#2114121)

You move the UI messages into a separate resource file, as you would for language translation. The executable signature is unaffected by the changed UI messages.

[ Parent | on HN ]

Re:I Can Crack Your App With Just A Shell (And How To Stop Me) by stcredzero on Tuesday January 18, 2011 @01:25PM (#2116768)

Alternatively, you could use a broken hash and modify an unneeded string so as to produce a collision with the key you decided ahead of time.

[ Parent | on HN ]