ollyfg
Joined 13 years ago
Karma
239
Submissions
39
Member since
Oct 21
Software Developer in New Zealand.
View on Hacker NewsRecent submissions
Comment · 5 years ago
I probably deserve to get downvoted to oblivion for this but... I've deployed JSFuck in production!
We wanted to obfuscate this bit of code, to make life just a little bit harder for reverse engineers. We made this huge function where we pretty much passed in all our application state, and it would run this JSFuck code, and spit out a token. We even made a few tweaks to the code so that you couldn't just reverse it back into JS with something like https://enkhee-osiris.github.io/Decoder-JSFuck/.
Performance was surprisingly alright, and it has never hit an environment where it couldn't execute. All in all, a fun few hours setting it up, and I haven't had to touch it since!
Comment · 5 years ago
Not sure if it's what you mean by blank (not a big keyboard geek, but I just got a Moonlander), but when you buy it there's an option for all of the keys to have "-" on them, so it's effectively blank?
Comment · 7 years ago
Wow! How have I not heard of frida? This should make my normal process much simpler!
1) Decompile App -> smali
2) Decompile App -> Java (non-reversible, but easier to read)
3) Search the app for certificate pinning code (check for network_security.xml or grep for OKHttp pinning functions)
4) Find the code I just found in java, in the smali version
5) Remove the pinning code
6) Recompile smali -> apk
7) Fix whatever was causing the smail not to recompile
8) Recompile again
9) Pray
10) Install on device
11) Run app (that hopefully doesn't crash)
12) Pipe connection through Charles proxy
13) Read api calls!
I'll definitely give it a go.
In general I think there are nowhere near enough resources on decompilation, particularly on a purportedly "open" platform like Android. Really looking forward on the rest of the tutorial coming online.
Comment · 8 years ago
Interesting!
I've switched to using Ian's knot, and have found it to be both faster to tie and easier to set up. I think once you work out how to 'pick up' the laces in the right way, so that they are already in the correct starting position, it gets a lot faster/simpler to think about.
Of course, I haven't been in your shoes - my laces are all the round type and I haven't tried it with flat ones.
To each their own!
Comment · 8 years ago
Looks good! One feature that would definitely get me using this for personal projects is the ability to add/customise axis. You might already have this, but I didn't see it in any of your examples, so if this is present, please advertise it!
My general reaction when seeing a chart without axis is "pretty, but I can't see what it means", where as with decent labelled axis I can dig into it and look at data points, and come to my own conclusions about the data.
Still, this is a useful service that could make life much easier - keep at it!
Comment · 9 years ago
Would you care to share the link to that live stream? Sounds fun ;)
Comment · 10 years ago
Have you tried openshot[1]? I haven't played much with it recently, but when it came out it was the most stable, simple video editor for linux.