MrQuincleon Hacker News • Recommends
On “JSFuck (2012)”
Makes me think of what might deter a reverse engineer and then this most awesome youtube talk on psychological warfare by Chris Domas link to this video It's so good.
0:00 / 0:00
#repsych#idapro#controlflowgraph
DEF CON 23 - Chris Domas - Repsych: Psychological Warfare in Reverse Engineering
DEFCONConference
419K subscribers • 61 videos on Hallway • Conference channel
- Recommended by 5 people: 4 on Hacker News and 1 curated list.
- A classic. People kept recommending it from 2016 to 2026.
- Presented by Chris Domas, embedded systems engineer and cyber security researcher
Advanced. Deep dive for people who know the field.
172K views10 years ago5 recommendations
SecuritySystems programmingReverse engineeringExploits and vulnerabilities
Chris Domas demonstrates how to generate assembly code that draws misleading or demoralizing control flow graphs in reverse engineering tools.
Your precious 0-day? That meticulously crafted exploit? The perfect foothold? At some point, they'll be captured, dissected, and put on display. Reverse engineers. When they begin snooping through your hard work, it pays to have planned out your defense ahead of time. You can take the traditional defensive route - encryption, obfuscation, anti-debugging - or you can go on the offense, and attack the heart and soul of anyone who dare look at your perfect code. With some carefully crafted assembly, we'll show how to break down a reverse engineer by sending them misleading, intimidating, and demoralizing messages through the control flow graphs of their favorite RE tools - turning their beloved IDA (Hopper, BinNavi, Radare, etc) into unwitting weapons for devastating psychological warfare in reverse engineering. SOeaker bio: Chris is an embedded systems engineer and cyber security researcher, focused on innovative approaches to low level hardware and software RE and exploitation. Twitter: @xoreaxeaxeaxWhy it's here
5 people recommend thisWhat people say. Recommended as an entertaining and highly creative talk on anti-reverse-engineering techniques and control flow graph manipulation.
MattSteelbladeon Hacker News • Recommends
On “Spaghettifying DRAM”
I cannot wait for the accompanying Black Hat talk. Christopher Domas is one of my absolute favorite all-time hackers. He does such a fantastic job of explaining his work. Some of my favorite talks of his: - Psychological Warfare in Reverse Engineering link to this video - The MoVfuscator link - Hardware Backdoors in redacted x86 link
programming-talkscurated list on GitHubRecommends
Under “Security”
Repsych: Psychological Warfare in Reverse Engineering 00:38:48 by **Chris Domas** (2015)
projectdpon Hacker News • Recommends
On “Movfuscator – A single-instruction C compiler”
Saw this recently after reviewing some Defcon 23 videos. The author goes into detail about how it's working and some other fun stuff regarding anti-reverse-engineering. 2015 DEFCON 23 - Chris Domas - Repsych: Psychological Warfare in Reverse Engineering link to this video And a paper by him: link
hulahoofon Hacker News • Recommends
On “Movfuscator – A single-instruction C compiler”
link to this video about 7 minutes in he is chatting about it but all is a good watch - could only find the YT link sorry
u/Condexin r/ProgrammingLanguages • Mentions
On “How do developers protect code on interpreted languages?”
Intellectual property protection is a legal process (for the most part). If you have some interpreted code that needs to be protected, generally, what happens is you get your team of lawyers to figure out a way to sue anyone who misuses the code. Then you very carefully tell your clients that you'll sue them if they misuse your code. Then you charge your clients crazy amounts of money ($10K per license typically is the low end). The only clients who buy software for this amount of money are clients who already have a lot of extra money sitting around. This is good because it means they have something to lose if you need to sue them. And finally then you use your team of lawyers to sue…
shooon Hacker News • Mentions
On “Confessions of an Unreal Engine 4 engineering firefighter”
…i'm also reminded of Chris Domas' defcon talk "Psychological Warfare in Reverse Engineering", where he sets out to construct binaries that cause despair when someone tries to reverse engineer them -- in particular he asks the question: "could i make a binary that draws a particular picture when someone views the binary's control flow graph in IDA" link to this video…
Verdexon Hacker News • Mentions
On “Security by obscurity is underrated”
…ittle or no effort for an attacker to bypass it. Of course, sprinkling a little bit of obscurity on top of a good security solution might provide an incentive for attackers to go someplace else. And I can't help but think of the guy who was trying to think of ways to perform psychological attacks against reverse engineerers 2. 1 - link 2 - link to this video…
lelandbateyon Hacker News • Mentions
On “How do you visualize code?”
…ely large and zoomed out: link From this stackexchange: link 3 Defcon talk by Chris Domas where they demonstrated automate code generation which would cause various binary code analysis tools to generate control-flow graphs which formed specific shapes, shapes meant to offend or demoralize researchers examining the code (quite entertaining): link to this video…
u/ConvolutionKernelin r/C_Programming • Mentions
On “How does one protect against reverse engineering ?”
Chris Domas had a truly entertaining DEF CON talk about his over-the-top methods for preventing reverse engineering: link to this video
He created an obfuscating compiler which produces bytecode using solely mov instructions, and then found ways to make the code itself psychologically torment any reverse engineers.
It’s very impractical and silly, but super creative.