All Your Docs Are Belong To Us
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
The post describes reverse-engineering Kaspersky's macOS anti-virus daemon to understand its encrypted signature updates, then in-memory signature handling, with the aim of composing a new signature that would flag classified documents for collection.