logoalt Hacker News

superxpro12 • today at 3:41 PM • 0 replies • view on HN

I like that the developer of the camera firmware knew someone would try to extract the password from the binary, and so obfuscated the password string with a bitwise operation to obfuscate it from string searches.

But! they forgot to obfuscate the string RIGHT NEXT TO IT... "enter password", which clued the LLM into where to look for the password.

To be clear, i dont credit the LLM for "thinking" to look there. It just digested enough blogs of other people doing this.

But nonetheless, the technique is cool.

The less here is to probably obfuscate ALL strings.