News for hackers. Stuff that matters.

A comment on Security by obscurity is underrated. Parent comment

Re:Security by obscurity is underrated by saagarjha on Friday September 11, 2020 @01:55PM (#24445415)
Exactly. If you're running crypto and think getting rid of variable names is going to stop people; it's not. Any off-the-shelf algorithm is usually easy to recognize to an accomplished reverse engineer with a basic background of what kind of things they're looking for.
[ Parent | on HN ]
Re:Security by obscurity is underrated by XMPPwocky on Friday September 11, 2020 @02:00PM (#24445481)
Honestly, the modern JavaScript toolchain is better at giving reverse engineers a headache than 80% of binary obfuscators.
[ Parent | on HN ]
Re:Security by obscurity is underrated by saagarjha on Friday September 11, 2020 @02:03PM (#24445516)
As someone who is not very good at JavaScript reverse engineering, I would tend to agree that minifiers are pretty annoying.
[ Parent | on HN ]
Re:Security by obscurity is underrated by wglb on Friday September 11, 2020 @07:55PM (#24448595)
So the first thing that I do with one of those is to parse it and convert it to s-expressions. Problem solved.
[ Parent | on HN ]