News for hackers. Stuff that matters.

A comment on Reverse Engineering Snapchat (Part II): Debofuscating the Undeobfuscatable.

Re:Reverse Engineering Snapchat (Part II): Debofuscating the... by saagarjha on Sunday June 21, 2020 @11:56PM (#23597232)
I’m surprised that Snapchat doesn’t check for the mere presence of a debugger and instead tries to look for breakpoints. Or perhaps you’ve already found and patched those checks out?
[ Parent | on HN ]
Re:Reverse Engineering Snapchat (Part II): Debofuscating the... by 3eed on Monday June 22, 2020 @07:11AM (#23599003)
It does check for a debugger. But that would be through sysctl, or the csops sys call, which would be trivial to patch and a single point of failure.
[ Parent | on HN ]