Page 1 of 1

Question about computer security regarding RAM...

Posted: Fri Nov 25, 2011 8:28 pm
by Nickolas
That was probably a bad title but it's a very general question and that was the best I could think... My question is: Theoretically, can anything be retrieved from RAM? If yes, doesn't this mean that anything that can be executed is vulnerable to reverse-engineering (or if it is artwork, steeling)?

Re: Question about computer security regarding RAM...

Posted: Wed Nov 30, 2011 3:54 pm
by m0skit0
Nickolas wrote:Theoretically, can anything be retrieved from RAM?
Without theoretically.
Nickolas wrote: If yes, doesn't this mean that anything that can be executed is vulnerable to reverse-engineering (or if it is artwork, steeling)?
Yes. That doesn't mean RE it will be easy (check polymorphic code for example). And please don't confuse RE with stealing.

Re: Question about computer security regarding RAM...

Posted: Thu Dec 01, 2011 7:04 am
by Nickolas
I didn't mean to offend reverse engineers, it's definitely not stealing. Thanks for answering :) Does this work for any RAM in any device? Were I to reverse engineer an iPhone app for example would I be able to dump the memory and find the app's address?

Re: Question about computer security regarding RAM...

Posted: Thu Dec 01, 2011 11:15 am
by Xian Nox
I have a question about RE in general: is it legal to RE a program that has no license specified, make the resulting source code public, and base a different program on it?

Re: Question about computer security regarding RAM...

Posted: Thu Dec 01, 2011 1:25 pm
by m0skit0
Nickolas wrote:Does this work for any RAM in any device?
For any Von Neumann's architecture-based device (which are 99.999999%), yes.
Nickolas wrote:Were I to reverse engineer an iPhone app for example would I be able to dump the memory and find the app's address?
The point is being able to dump the memory region you want. The own application addresses are easily known. The problem is accessing memory regions your program has no right to.
Xian Nox wrote:is it legal to RE a program that has no license specified, make the resulting source code public, and base a different program on it?
If it has no license specified (which is rare) then yes.