Re:Using LD_PRELOAD to cheat, inject features and investigat...
by vhcr on Friday September 08, 2023 @06:45PM
(#37440252)
If you're shipping something you don't want fiddled with, don't ship it, because it's an impossible task.
[ Parent
| on HN ]
Re:Using LD_PRELOAD to cheat, inject features and investigat...
by ghotli on Friday September 08, 2023 @07:07PM
(#37440405)
Sure. We agree. Cat and mouse. Can you help me understand what value you're adding to the discussion though? Low hanging fruit arguments based on semantics might be best suited elsewhere
Re:Using LD_PRELOAD to cheat, inject features and investigat...
by ed_mercer on Friday September 08, 2023 @07:53PM
(#37440768)
He/she is mentioning that an obtained client can always be hacked, no matter what, and the reader of the original comment may not realize that.
Re:Using LD_PRELOAD to cheat, inject features and investigat...
by sosodev on Friday September 08, 2023 @07:57PM
(#37440794)
I think the vast majority of HN users would realize that. Is it important for the few that don’t? Perhaps
Re:Using LD_PRELOAD to cheat, inject features and investigat...
by GreymanTheGrey on Friday September 08, 2023 @10:43PM
(#37441709)
The original commenter clearly didn't understand it, since they asserted that "statically linked libraries prevent this attack vector".
Which is unambiguously not the case, they merely slow it down by a small margin.
Re:Using LD_PRELOAD to cheat, inject features and investigat...
by LoganDark on Friday September 08, 2023 @11:05PM
(#37441849)
LD_PRELOAD is the specific attack vector that is prevented by static linking. They made no claim that static linking prevents all forms of tampering.
Re:Using LD_PRELOAD to cheat, inject features and investigat...
by arp242 on Friday September 08, 2023 @11:43PM
(#37442067)
It's a true statement; LD_PRELOAD cannot be used with statically linked binaries. You can "fiddle" in other ways, but not by using the LD_PRELOAD attack vector (although personally I wouldn't call it an "attack vector", although in some cases it could be where you can upload a malicious file and control the environment of another program somehow, or something along those lines).
Re:Using LD_PRELOAD to cheat, inject features and investigat...
by alex_smart on Saturday September 09, 2023 @03:02AM
(#37442925)
>Which is unambiguously not the case, they merely slow it down by a small margin.
When you are using shared libaries, it is fairly trivial to hook into the library calls and replace them with whatever you want. When you are using static libraries, the linker and optimizer could for example inline the machine code directly in the application code. What tools do you have to do similar tricks with statically compiled binaries?
Re:Using LD_PRELOAD to cheat, inject features and investigat...
by KeplerBoy on Saturday September 09, 2023 @04:56AM
(#37443458)
messing with executable binaries is undoubtedly harder but not impossible.
Re:Using LD_PRELOAD to cheat, inject features and investigat...
by rewmie on Saturday September 09, 2023 @06:27AM
(#37443853)
> He/she is mentioning that an obtained client can always be hacked, no matter what, and the reader of the original comment may not realize that.
That pointless remark misses the whole point. Even though ideally an attack vector would be eliminated, it's already good enough if it becomes unexploitable by the vast majority of potential attackers. That's why there is a whole field called "app hardening" as in a sliding scale instead of "perfect app protection".
Re:Using LD_PRELOAD to cheat, inject features and investigat...
by SkyPuncher on Saturday September 09, 2023 @01:25AM
(#37442534)
I guess the entire world of online multiplayer games becomes hacker haven.
Re:Using LD_PRELOAD to cheat, inject features and investigat...
by themoonisachees on Saturday September 09, 2023 @04:45AM
(#37443410)
Well, it is. Most popular online games have a large amount of cheaters.