News for hackers. Stuff that matters.

A comment on Skype55 deobfuscated version released. Parent comment

Re:Skype55 deobfuscated version released by skypeopensource on Sunday March 25, 2012 @04:12PM (#3753673)
But how can you test if you protocol/document correct? Yes, Epycs code may have question about legit and some other stuff. But after it going to a beta or stable stage. We can use Epycs protocol documentation to write, for example, epycs.java and make it fully "clean room".
[ Parent | on HN ]
Re:Skype55 deobfuscated version released by dredmorbius on Sunday March 25, 2012 @04:51PM (#3753781)
Look up the term "Chinese Wall".

What's required (for purposes of courtroom defense) is a clearly documented procedure in which those who have access to the source being reimplemented (the spec writers and testers) NOT be the coders, and vice versa.

Another example is the SMB/CIFS reimplementation in the case of Samba. Here, because the protocol was an over-the-wire system, analyzing network packets (not covered by source analysis proscriptions) was sufficient to create a Free Software implementation.

[ Parent | on HN ]
Re:Skype55 deobfuscated version released by skypeopensource on Monday March 26, 2012 @01:34AM (#3755168)
Yeah, we will do it. But now project still at first stage.
[ Parent | on HN ]
Re:Skype55 deobfuscated version released by cwzwarich on Sunday March 25, 2012 @04:17PM (#3753694)
You get someone who is not involved with the reverse engineering to test it.
[ Parent | on HN ]