← Feed

Posts

• View post

  There are no entries in the certificate transparency logs for these intermediates in that period, indicating that CT-enforcing clients like Firefox, Chrome, Edge and Safari could not have been attacked.

• View post

  I’ve recently seen a suite that has a ready made setup to compare sections of asm to the original. Perfectly matching the full game or even binary isn’t necessary, when you already split the original apart into finer chunks, since you want some better feedback on exactly what sections are wrong. For a basic example though, if you compile to an elf for example you can take out the code section and there’ll be no metadata. Actually gcc already builds reproducibly by default, even with the metad...

• View post

  They closed shop entirely, so there won’t be any new certs signed anyway

• View post

  We have a known compiled output. Simply make sure the decom recompiles to the original game with identical binary, then it can’t be that wrong. And from there you port it to pc by hand. Auditing the patches for the porting also should be manageable.

• View post

  My dude, rsa is fine. This article is talking about a company called rsa, not rsa encryption. I have never heard of doubt about rsa's security, given enough size. The main issue with raa is that it needs to be thousands of bits in size due to not being very efficient. And of course it is not post quantum.