3eed
Joined 10 years ago
Karma
371
Submissions
36
Member since
Jul 19
Recent submissions
Comment · 1 year ago
This is incredibly helpful, kudos to everyone who worked on this.
Comment · 6 years ago
I came across Arybo while working on the binary but I can't remember why I didn't use it, this is vague memory now. Anyway it does the job in one go, I added an edit.
Comment · 6 years ago
That guy gets it
Comment · 6 years ago
It does check for a debugger. But that would be through sysctl, or the csops sys call, which would be trivial to patch and a single point of failure.
Comment · 6 years ago
Are hardware breakpoints even possible on iOS?
And correct, you can't patch the binary because there many anti-tampering measures, you could probably bypass those, but that's going a different route.
Comment · 6 years ago
DeviceCheck on iOS support iOS 11 and up. Which would cut off 7% of users[1], a bit extreme. But when the time comes when you don't have to cut off anyone, it'll be very interesting to see what'll happen on iOS. Someone will bypass it? Death of reverse engineering? Who knows. On Android, an HN user mentioned in the previous post that it's a solved problem[2].
[1]: https://developer.apple.com/support/app-store/ [2]: https://magiskmanager.com/
Comment · 6 years ago
It's true, these posts are for intermediate and upper reverse engineers. It would really take a book to explain it from the ground up it like someone here mentioned. I suggest getting some background in assembly, then reading the OWASP guide (link in my previous HN post), and persistence.
Comment · 6 years ago