Re:Zoom Deleted Events Discussing Zoom “Censorship”
by samatman on Sunday October 25, 2020 @03:54PM
(#24889362)
> Even function names remain intact in some cases, which I assume would not happen if they had a malicious intent like embedding a backdoor.
For what it's worth, this is a bad assumption.
Someone hiding bad behavior from a reverse engineer wants it to be in friendlyMisnamedFunction, not in lkjwer23_aic. If you remove all the English semantics from the binary, a reverser is free to focus on the behavior; if you don't, you can lure them into a false sense of security.
For what it's worth, this is a bad assumption.
Someone hiding bad behavior from a reverse engineer wants it to be in friendlyMisnamedFunction, not in lkjwer23_aic. If you remove all the English semantics from the binary, a reverser is free to focus on the behavior; if you don't, you can lure them into a false sense of security.