Hacker News new | ask | show | jobs
by samatman 2067 days ago
> Even function names remain intact in some cases, which I assume would not happen if they had a malicious intent like embedding a backdoor.

For what it's worth, this is a bad assumption.

Someone hiding bad behavior from a reverse engineer wants it to be in friendlyMisnamedFunction, not in lkjwer23_aic. If you remove all the English semantics from the binary, a reverser is free to focus on the behavior; if you don't, you can lure them into a false sense of security.

1 comments

Are any reverse engineers that stupid?