Binary obfuscation used in AAA Games

(blog.farzon.org)

53 points | by noztol 2 days ago

10 comments

  • wincy 1 hour ago
    This is decidedly not what I’d expect to be discussed at Thotcon. That said, super interesting!

    As an avid pirate, I’ll say these days even the Denuvo game which were going years without cracks now have “cracks”, although they rely on hypervisor fixes and disabling secure boot and giving the hypervisor cracks unfettered access to your system to intercept the Denuvo checks. [0] It’s a dangerous game we’re playing to keep these AAA games bottom lines fat.

    [0] https://www.thefpsreview.com/2026/04/03/denuvo-has-been-brok...

    • userbinator 22 minutes ago
      disabling secure boot

      ...making it even more clear what "secure" boot actually secures: the control others have over your own computer.

  • maxwg 59 minutes ago
    Link to the slides (almost missed it when i was reading): https://farzon.org/files/presentations/Thotcon_talk_may_2025...

    Which provides way more information than the article

  • NooneAtAll3 1 hour ago
    > While security researchers love the entropy of randomized function layouts

    I don't think any competent security researcher has anything positive to say about "security through obscurity"

    at best this is lawyer position

    • lm411 4 minutes ago
      I disagree, obscurity wastes attacker resources and easily fools a lot of simple vulnerability scanners.

      Obscurity is totally underrated. Attacker resources are limited.

    • zer0zzz 12 minutes ago
      ASLR (for example) is a pretty standard technique, I thought all commercial OSes enabled this generally. What's the purpose of picking at this portion?
    • hsbauauvhabzb 1 hour ago
      It’s not about security, it’s about wasting a crackers time.

      Some people find cracking them interesting and fun.

  • mahmoudimus 42 minutes ago
    oh fascinating. i just finished reverse engineering Aegis and now working on their newest Eidolon. pretty cool technology.
  • p1necone 1 hour ago
    Echoing the other comments here - why? What is the threat model here and how does this protect you from it?
    • john_strinlai 35 minutes ago
      the threat is people who cheat in games. obfuscation slows them down, but does not offer complete protection and incurs a performance cost. this work is focused on reducing the performance cost.

      - from the slides

      • zer0zzz 14 minutes ago
        Exactly. That and in game currencies. You like competing in games, or for game-bucks? Well you need some level of obfuscation and hardening to make that viable.
  • brcmthrowaway 2 hours ago
    What is the fps hit?
  • djmips 2 hours ago
    why bother?
    • LunicLynx 0 minutes ago
      I guess it’s mainly to sell the technology and the illusion that comes with that.

      So, money, for supposed control. Which is not true of course