alt Hacker NewsI like that the developer of the camera firmware knew someone would try to extract the password from the binary, and so obfuscated the password string with a bitwise operation to obfuscate it from string searches.
But! they forgot to obfuscate the string RIGHT NEXT TO IT... "enter password", which clued the LLM into where to look for the password.
To be clear, i dont credit the LLM for "thinking" to look there. It just digested enough blogs of other people doing this.
But nonetheless, the technique is cool.
The less here is to probably obfuscate ALL strings.
As someone who's written firmware in a corporate environment, I doubt they forgot. We had a security requirement that mandated certain fields be obfuscated. It was a pain in the ass and completely useless given the nature of the device the firmware lived on and the nature of the firmware itself. So we did the bare minimum to pass the stupid scanner someone decided was necessary 10 years ago.
This smells like a similar situation, it's not like they don't have enough horsepower for MD5.