News for hackers. Stuff that matters.
Re:Creative anti-debugger technique in Spotify for Windows by tptacek on Tuesday May 26, 2009 @03:28PM (#627332)
Per se, anti-debugger traps are an anachronism.

In general, nothing about (say) Bochs obsoletes software protection. Advanced protected code (say) encrypts sensitive blocks, and uses (say) runtime artifacts to decrypt them before executing.

There are software protection schemes that nobody has published breaks for, presumably because they are too much of a pain in the ass to break.

Re:Creative anti-debugger technique in Spotify for Windows by mahmud on Tuesday May 26, 2009 @03:42PM (#627366)
Off the top of your head, what are some hard ones to look at?
Re:Creative anti-debugger technique in Spotify for Windows by tptacek on Tuesday May 26, 2009 @03:51PM (#627387)
If brl is watching, he'll name one that I decided was much too much of a pain in the ass to win a message board bet over. Most of my experience here is NDA'd though.
Re:Creative anti-debugger technique in Spotify for Windows by Create on Tuesday May 26, 2009 @04:31PM (#627449)
Most of my experience here is NDA'd though.

...security through obscurity never really works.

Re:Creative anti-debugger technique in Spotify for Windows by tptacek on Tuesday May 26, 2009 @04:49PM (#627485)
A nonstatement. Just because something is obscure doesn't mean that it hasn't also been secured. More importantly, in this setting, obscurity increases cost. DRM is all about cost.
Re:Creative anti-debugger technique in Spotify for Windows by Create on Wednesday May 27, 2009 @05:20AM (#628222)
A nonstatement. Just because something is obscure doesn't mean that it hasn't also been secured.

A nonstatement. Just because something has also been secured, doesn't mean that it is secure. Obfuscation has no true correlation to true security.

Re:Creative anti-debugger technique in Spotify for Windows by tptacek on Wednesday May 27, 2009 @11:36AM (#628596)
I don't know who's argument that comment was intended to address, but it wasn't mine.