I hope these fuckers aren't trying to obfuscate the password by abusing javascript scoping
Notices by Foone🏳️⚧️ (foone@digipres.club), page 3
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Friday, 28-Mar-2025 06:57:02 JST Foone🏳️⚧️
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Friday, 28-Mar-2025 06:57:01 JST Foone🏳️⚧️
finally unencrypted and re-deobfuscated.
and it's got debugging strings in Turkish!
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Friday, 28-Mar-2025 06:57:01 JST Foone🏳️⚧️
my head already hurts enough as it is
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Friday, 28-Mar-2025 06:57:00 JST Foone🏳️⚧️
awfully lot of debugging information printed to console.log by this malware. it really tells you everything it is doing
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Friday, 28-Mar-2025 06:56:59 JST Foone🏳️⚧️
so it also checks your GPU.
You know, because VMs usually have a GPU like "VMware SVGA 3D"
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Friday, 28-Mar-2025 06:56:56 JST Foone🏳️⚧️
ahh, naturally the C&C server is cloudflare.
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Friday, 28-Mar-2025 06:56:55 JST Foone🏳️⚧️
it also fails to run if you have less than 2gb of RAM.
because what regular computer would have less than 2gb of ram in 2025? No one but a VM, that's who
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Friday, 28-Mar-2025 06:56:53 JST Foone🏳️⚧️
they distribute some of the malware through NPM, fun!
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Monday, 24-Mar-2025 11:19:36 JST Foone🏳️⚧️
For my next project I'm going to develop The Modern PC.
It's going to be an exact clone of the IBM 5150 PC from 1981, except it'll use 3.3v instead of 5v
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Sunday, 23-Mar-2025 10:48:54 JST Foone🏳️⚧️
So here's a conversation snippet from the rom, which is expressed as 3 c-strings:
"5NeverMind,$How`sThingsFester?"
"4Miserable!"
"5GladToSeeYou`re$EnjoyingYourself!" -
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Sunday, 23-Mar-2025 10:48:54 JST Foone🏳️⚧️
proud accomplishments:
* triggered the crash handler in the 1995 Super Nintendo game Addams Family Values
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Sunday, 23-Mar-2025 10:48:53 JST Foone🏳️⚧️
So the digits are used to select different character portraits for that line, and the $ turns into a newline.
But notice the really big weird thing about this text?
NO SPACES!
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Sunday, 23-Mar-2025 10:48:52 JST Foone🏳️⚧️
The game is in all caps.
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Sunday, 23-Mar-2025 10:48:52 JST Foone🏳️⚧️
Here's the reason they don't use spaces, and are WikiWording EveryThing:
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Sunday, 23-Mar-2025 10:48:51 JST Foone🏳️⚧️
THEY'RE ENCODING WHERE THE SPACES ARE INTO IF A LETTER IS CAPITAL OR NOT
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Sunday, 23-Mar-2025 10:48:50 JST Foone🏳️⚧️
This isn't how the memory of the game while running is laid out. They have to decode the ROM contents into the all-uppercase contents, adding spaces along the way
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Sunday, 23-Mar-2025 10:48:50 JST Foone🏳️⚧️
"SoASentenceLikeThis"
turns into:
"SO A SENTENCE LIKE THIS" -
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Sunday, 23-Mar-2025 10:48:49 JST Foone🏳️⚧️
but saving AN ENTIRE BYTE of this game's ROM every single time they needed to use a space character, just by only using uppercase for the game?
that's brilliant and stupid in equal measure and I love it.
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Sunday, 23-Mar-2025 10:48:48 JST Foone🏳️⚧️
The game has 9342 bytes of unused space at the end of the 2 megabyte ROM chip it shipped on.
They use this trick 2311 times in the ROM, saving ... 2311 bytes.
NOPE. IT WAS UNNECESSARY!
-
Embed this notice
Foone🏳️⚧️ (foone@digipres.club)'s status on Sunday, 23-Mar-2025 10:48:48 JST Foone🏳️⚧️
but here's the fun part: I have this game's entire script here.
and I've already seen that there's a bunch of unused space at the end of the ROM...
So did they even need this trick? I CAN FIND OUT