|
|
|
|
|
by ridafkih
833 days ago
|
|
It's probably a matter of priorities, as well as cost v. benefit. Obfuscation would've had very little effect on the outcome of this experiment, but might've changed the approach to involve dynamic instrumentation a little more. The most effective obfuscation I've seen is VM obfuscation, but that presents a significant performance impact. Obfuscation would also make legitimate debugging harder. Preventing modified binaries is done at the system level, and could feasibly be implemented at the application level and is common, but this functionality itself could be both bypassed, or modifications could simply be implemented after security checks have completed (once again, through dynamic instrumentation libraries like Frida). Engaging in a cat-and-mouse game with reverse engineers probably isn't in Meta's best interest. |
|