Slashdot Mirror


High Level Coding Language Used To Create New POS Malware (isightpartners.com)

An anonymous reader writes: A new malware framework called ModPOS is reported to pose a threat to U.S. retailers, and has some of the highest-quality coding work ever put into a ill-intentioned software of this nature. Security researchers iSight say of the ModPOS platform that it is 'much more complex than average malware'. The researchers believe that the binary output they have been studying for three years was written in a high-level language such as C, and that the software took 'a significant amount of time and resources to create and debug'.

94 comments

  1. High level? by Anonymous Coward · · Score: 5, Insightful

    C is a high level coding language now?

    I guess contrasted with the way that one guy in last week's Q&A asked Brian Kernighan about "low level languages like Haskell" ?

    1. Re:High level? by GrumpySteen · · Score: 3, Informative

      C is a high level coding language now?

      Depends on how old you are.

    2. Re:High level? by pr0fessor · · Score: 1

      I'm guessing it depends on how much inline assembly you have mixed into it as to whether it's really abstracted.

    3. Re:High level? by hey! · · Score: 5, Insightful

      Speaking as someone who learned C in 1980, C was originally thought of as a low-level language -- a suitable replacement in most cases for assembly language that, while abstracting underlying details like the CPU instruction set and registers, remained relatively small and "close to the hardware". Then later 80s I was asked to take over a course on C, and when I looked at the course description I was surprised to see it described as a "high level language". I asked the person who wrote the description what he meant by "high level language", and he really had no idea. He said he meant it was "powerful", which of course is just as vague when comparing any two Turing equivalent languages.

      Of course "high level" vs. "low level" is relative. C is "high level" in comparison to assembly, or "B", in which the only datatype was a computer word. On the other hand C "low level" in comparison to most other languages that hide away the details of the hardware like instruction set and registers and such. So it depends on what you're comparing to; but in general I think people who describe C as "low level" know more about what they're talking about than those who call it a "high level" language.

      The important thing isn't whether C is "high" or "low" level; it is what makes C work, which is largely about what was left out. It didn't have all the bells and whistles of something like PL/1, which made the language easy to implement, even on a tiny 8 bit microcomputer, and easy to learn, in the form of a slim, almost pamphlet-like book (The C Programming Language, 1st edition was 228 paperback-sized pages long).

      Even so, C has become very slightly more "higher level" over the years. The original K&R C was more weakly typed than the later ANSI C. Particularly when you were dealing with pointers, the declared type of a pointer in K&R C was more of a mnemonic aid to the programmer than anything else.

      --
      Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
    4. Re:High level? by Anonymous Coward · · Score: 0

      It's TheStack press SEO hype-up. The usual from 3-paragraph journalists these days.

    5. Re:High level? by flopsquad · · Score: 1

      C is a high level coding language now?

      I write all my malware in assembly, you insensitive clod!

      --
      Nothing posted to /. has ever been legal advice, including this.
    6. Re:High level? by bcothran · · Score: 1

      Yeah I stick to my low level Visual Basic... It's so complicated at this level, I wonder what a higher level language feels like?

    7. Re:High level? by Anonymous Coward · · Score: 0

      Well, assuming old people are incapable of renormalizing their biases once they've become obsolete, then sure.

      Well, assuming young people don't have a clue...

      Hint 'We already knew that'

      From an old obsolete fart!

    8. Re:High level? by Anonymous Coward · · Score: 0

      I've always considered assembly to be low level, things like C to be mid level, and compiled languages that run in VMs such as C# and java to be high level, with python, JS etc being scripting languages. But hey, that's just my opinion and it's probably as valid as anybody elses classification of languages.

    9. Re:High level? by michelcolman · · Score: 1

      I thought up to now we were relatively safe from hackers because they were all just mucking around with assembler and stuff. But now it turns out these guys have evolved and taken things to a whole new level by using the high level programming language C! That's totally unheard of, that kind of cutting edge technology was always thought to be beyond the abilities of malware programmers, all bets are off now!

    10. Re:High level? by Anonymous Coward · · Score: 0

      I don't usually say "THIS" but when I do...

      That sums up exactly what I was going to reply, probably close to similar verbiage. I scrolled down and I don't need to. I think I might have put bash and Perl as mid-level but that's more for what they are generally used for than for any other reason. So, your opinion isn't entirely unique and I'm inclined to agree.

  2. Heh by Anonymous Coward · · Score: 0

    Someone used a general-purpose programming language such as C to fulfill a particular purpose. By the way, it happened that they did this well. Newsworthy!

  3. I know there are no editors here, but... by Anonymous Coward · · Score: 0

    a ill-intentioned software

    Software is a mass noun, and "a" become "an" before vowels.

    1. Re:I know there are no editors here, but... by Anonymous Coward · · Score: 0

      An before a word with a vowel SOUND, not before a word starting with a vowel. Weird. I before E except after...well, weird.

    2. Re:I know there are no editors here, but... by Anonymous Coward · · Score: 0

      You missed the first part of what was said. Neither "a" or "an" should be present, simply "ill-intentioned software".

    3. Re:I know there are no editors here, but... by Anonymous Coward · · Score: 0

      So in your English, "ill" starts with a silent "i"?

    4. Re:I know there are no editors here, but... by konohitowa · · Score: 1

      No. In his English he is capable of comprehending the use of the indefinite article. Hint: it's not necessary in that particular instance. Apparently your an English has a different rules.

  4. High level or low level? by Anonymous Coward · · Score: 0, Informative

    Usually C is referred to as a "low level" language.

    1. Re:High level or low level? by ole_timer · · Score: 1

      Not to iDefense, er, iPartners, or whoever they are now.

      --
      nothing to see here - move along
    2. Re:High level or low level? by Anonymous Coward · · Score: 2, Informative

      The "level" refers to the level of abstraction away from how the underlying machine operates, it's an inherently relative concept. Relative to the "binary output they have been studying for three years" C is indeed a high level language.

    3. Re:High level or low level? by Anonymous Coward · · Score: 0

      As opposed to the usual malware written by script-kiddies in pure machine code?

    4. Re:High level or low level? by Anonymous Coward · · Score: 0

      > Usually C is referred to as a "low level" language.

      Only by clueless people who don't know what a "low level" language is. Pointers don't make a language "low level."

      I'll give you a hint: if it has variables, data types, data structures, loop and subroutine statements, it ain't low-level.

  5. What's Unusual? by Anonymous Coward · · Score: 0

    So, skilled programmers write a program in C. Isn't that done daily by the thousands?

    1. Re:What's Unusual? by Anonymous Coward · · Score: 0

      Millions me thinks.

    2. Re:What's Unusual? by Anonymous Coward · · Score: 0

      No. Skilled programmers don't use C.

    3. Re:What's Unusual? by SQLGuru · · Score: 1

      I'd probably stick to thousands......there are some programmers out there that really aren't that skilled.....at least not in programming.....cut and paste, maybe.

    4. Re:What's Unusual? by bjb_admin · · Score: 1

      I have a name for them, Google search programmers.

    5. Re:What's Unusual? by plover · · Score: 1

      This new piece of malware shows sophistication of design, but that's not unheard of. Older malware was often customized by compile time switches and definitions; this just abstracts some of that away.

      Many people (i.e. journalists and managers) think of malware authors as pimple-faced script kiddies hacking in their mothers' basements. They think that large, well-designed projects require teams of skilled developers who would only do so for a fat paycheck.

      What's happened now is that vulnerabilities are so profitable that the threat landscape is no longer the exclusive domain of the single hacker - criminal gangs want a piece of it. They can afford to pay team salaries to engineer a solution.

      And malware authors have learned to avoid the biggest risks of getting caught. In the old days a virus writer would also be the distributor. Modern authors get paid by selling their exploit code, along with customization and support contracts, to gangs of attackers. The attackers take on the risks, the developers collect fat checks. In some cases of vertical attacks (ATM skimmers for example), the "owner" of the malware uses cryptography to encrypt the skimmed data, preventing the low-level attackers from profiting from the stolen data. The profits go to the top first, and the paychecks cascade down (assuming honor among thieves.)

      So what's newsworthy here is that they believe this malware to be further evidence of a new breed of well organized criminal software developers.

      --
      John
    6. Re:What's Unusual? by Anonymous Coward · · Score: 0

      I'm curious, is it any better than if they search books for that info? And if that is better, fundamentally, what makes it better looking it up in a book than on google? Is the problem just that google is more efficient?

      Personally I find the problem to be with people who use code without understanding what that code does, regardless of if they found it in a book or on google.

    7. Re:What's Unusual? by Anonymous Coward · · Score: 0

      I think the big problem is that a Google search programmer will create whatever useless stuff the customer wants for a fraction of the cost.
      That makes it bad, for him at least.

    8. Re:What's Unusual? by Anonymous Coward · · Score: 0

      And if that is better, fundamentally, what makes it better looking it up in a book than on google?

      Hopefully there's less chance that the code you find in a book was written by some random idiot who had no idea what they were doing. But maybe I'm just optimistic.

    9. Re:What's Unusual? by rtb61 · · Score: 1

      However standard practice for skilled computer criminals is to release their programs to script kiddies, so that the many script kiddie attacks will help to obfuscate a hide the organised crime attacks.

      This would seem to indicate that programs that contain encrypted elements might well have to be banned as it will make much easier for security programs to simply block the installation of all programs that contain encrypted elements, that the user is blocked from checking with a security program.

      --
      Chaos - everything, everywhere, everywhen
  6. High level coding language? by Anonymous Coward · · Score: 0

    In what world is "someone wrote malware in C" remotely attention-worthy?

  7. C != high level by Anonymous Coward · · Score: 0

    Since when is C a high level language?

    1. Re:C != high level by Anonymous Coward · · Score: 1

      Since it wasn't machine code or assembly language. Anything that needs a compiler is, by definition, a high-level language.

      Interpreted languages and intermediary languages don't rank on this scale at all. They're far above the definition of high-level.

      Seriously, doesn't anybody teach this stuff in Introduction to Computer Shit 101 anymore?

    2. Re:C != high level by Anonymous Coward · · Score: 0

      Well, sure, if you are using the term "high level language" as binary qualifier. But then, it wouldn't really be that noteworthy. Why even point out that it was written in C? A lot of malware is written in a lot of high level languages, all day every day. They make it sound like this is some dissertation-worthy elegance of the highest order, when it sounds to me like something not worthy of an article.

    3. Re:C != high level by Anonymous Coward · · Score: 0

      What? Interpreted languages and intermediary languages? Talk about a gray area in terminology. What ever gave you the idea that these are not considered high-level? Next time I will check with you for exactly what scale it is you are using to rank languages. Meanwhile I will exist in the real-world, where "high-level" refers to "a high degree of abstraction from machine language". C qualifies, minimally, being basically higher level than assembly. Since one is still concerned fundamentally with memory addresses and register access, it is still very much "low-level" in a very meaningful (and ubiquitous) sense of the term.

      Thanks for mentioning CS101, though, it adds to the (already overwhelming) evidence that this is where your formal education began and ended.

    4. Re:C != high level by Anonymous Coward · · Score: 0

      The computing landscape has changed considerably since the term "high-level language" was coined.

      We have lots of intermediate constructs now. Is JVM bytecode a "high-level language" because it's interpreted? I wouldn't call it that.

      K&R described C as a "not very high-level language." I think of HLLs as having abstractions built into the syntax and semantics. The more abstraction, the "higher-level" it is.

  8. I Would Guess POS Means by Anonymous Coward · · Score: 0

    point of sale but in fact, piece of shit would be appropriate.

  9. C is high level? by Dutch+Gun · · Score: 4, Interesting

    I think they're misusing the term "high level" when it comes to programming languages. I suspect what they're trying to get at is that it's sophisticated and competently coded.

    I wonder why they assume it's C and not C++, incidentally, since they're presumably looking at decompiled assembly? I haven't done much C vs C++ side-by-side analysis of the two... is there an obvious difference in the generated assembly? I guess maybe v-table structures would point to C++, where C programmers likely wouldn't invent such constructs.

    --
    Irony: Agile development has too much intertia to be abandoned now.
    1. Re:C is high level? by vux984 · · Score: 5, Interesting

      is there an obvious difference in the generated assembly?

      There would be in most projects that were not outright trying to obscure they were using C++.

      Its been a while since I looked at disassembled code, but you used to be able to easily tell what compiler and even version of that compiler was used just from the boilerplate setup code; the way things were 'arranged', exception handlers etc, and obviously library usage was frequently a dead giveaway. Your not going to see a either an iostream or an STL container in a C program.

    2. Re:C is high level? by Anonymous Coward · · Score: 1

      Nah, "high level programming language" just means it's not machine specific. x86 machine code and assembly are low level languages. C is high level. Python and Java are even higher level. At the binary level, the most obvious sign it's C and not C++ is that function names get mangled in C++ but not in C. Linkage for class methods are different from regular functions as well.

    3. Re:C is high level? by Dutch+Gun · · Score: 1

      I've always heard C referred to as "mid-level".

      Also, good point about the name mangling differences. Totally forgot about that. I have little reason to dip down into assembly these days - and in fact, I've never really studied C-generated assembly at all.

      --
      Irony: Agile development has too much intertia to be abandoned now.
    4. Re: C is high level? by ljw1004 · · Score: 1

      C and C++ look radically different when reverse engineering their assembly. Like, it's easy to reverse engineer C and much harder to do C++ without symbols. The allocators they call are different. Folk seem to use more heap allocation in C++. More calls in C++.

      At least, that's what I assume is going on. Some things I reverse engineer easily in hours. Other things it takes me days before I give up. I believe this difference comes from C vs X++

    5. Re:C is high level? by phantomfive · · Score: 1

      I haven't done much C vs C++ side-by-side analysis of the two... is there an obvious difference in the generated assembly

      Huge differences.....the most obvious are the function names (which are compiled into a binary) being mangled. The C++ name mangling will turn "strcmp" into "__1cGstrcmp6Fpkc1_i_" or something similar (it's not standard by compiler). The parameters types are encoded in the name, so the compiler can know which function to call when the functions are overloaded.

      --
      "First they came for the slanderers and i said nothing."
    6. Re:C is high level? by Xenna · · Score: 1

      Exactly. And this is another gem:

        'much more complex than average malware'

      I would never hire a programmer that would pride himself on the complexity of his software. That's probably the reason the poor slob had to turn to malware to make a buck.

    7. Re:C is high level? by tehcyder · · Score: 1

      Exactly. And this is another gem:

      'much more complex than average malware'

      I would never hire a programmer that would pride himself on the complexity of his software. That's probably the reason the poor slob had to turn to malware to make a buck.

      I think you're confusing 'complexity' with '(unnecessary) complication'.

      If something is complex, you can't simplify it without losing information: if something is (unnecessarily) complicated, then you can.

      --
      To have a right to do a thing is not at all the same as to be right in doing it
  10. Judging from the article... by Anonymous Coward · · Score: 0

    WTF? He seems to think C is a high level language and he judges the code "High Quality".

    Where are these morons coming from, Visual Basic?

    We ALL know real programmers use Assembly.

    He doesn't know shit from apple butter.

    In other news "Apple Butter" is the new high level language.

    'fortune | cowsay'

  11. why is this news? by Anonymous Coward · · Score: 0

    So a very common programming language is used to write a virus: why is this news?

    1. Re:why is this news? by Hognoxious · · Score: 1

      I don't know, but earlier today they'd discovered that an old mechanical computer is in fact a mechanical computer and it's probably quite old.

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  12. Is C so rare in Malware... by cant_get_a_good_nick · · Score: 1

    that you need to call it out?

    With everything going modular these days, I'm sure there's a lot of hand written assembly exploit code that then pulls down modules likely written in C. Not that it's good or bad, just odd to call it out.

    1. Re:Is C so rare in Malware... by Anonymous Coward · · Score: 0

      that you need to call it out?

      Yes. It needs to be called out. C is being used to code malware now. The terrorists will use malware. Therefore, we must ban usage of C everywhere, to stop the terrorists. Long live VB!

    2. Re:Is C so rare in Malware... by cant_get_a_good_nick · · Score: 1

      Have you SEEN Kernighan and Ritchie? BEARDS i say

      Terrorists.

  13. High Quality Coding Work? by Anonymous Coward · · Score: 1

    With paths like this embedded in the binaries, I'd question that statement:

    c:\MyProjects\newplugs\lsass\release\lsass.pdb

  14. High Level Editors Used to Create POS Blog Site by xxxJonBoyxxx · · Score: 1

    High Level Editors Used to Create POS Blog Site Called "SlashDot"

    FTFY

    1. Re:High Level Editors Used to Create POS Blog Site by Anonymous Coward · · Score: 0

      Slashdot a POS site?

      I can't argue with that one.

  15. It would be ironic by Ukab+the+Great · · Score: 4, Insightful

    If the state of software engineering has arrived at the point that so many honest-work programmers are being forced to spend so much time writing quick and dirty garbage to get them past the next sprint that, in order to have a job writing good clean code, they have to go black hat.

    1. Re:It would be ironic by DigiShaman · · Score: 2

      Regardless of the zeitgeist of how ruthless the IT industry intrinsically is, we're all held accountable to our own actions. If you go black hat, nothing *made* you do it. The correct response would be to find another occupation entirely; even if that means digging ditches.

      --
      Life is not for the lazy.
    2. Re:It would be ironic by MarkvW · · Score: 1

      Good luck trying to project that moral reasoning onto others.

    3. Re:It would be ironic by Anonymous Coward · · Score: 0

      Yes, Sartre, we are fully aware that we can always choose to kill ourselves.

      Or less hyperbolistically, we can always choose a worse path, like spending another 4 years and the retirement savings to get schooled in a job that pays half as much. Anyone can do that. Show me a better choice.

    4. Re:It would be ironic by dilvish_the_damned · · Score: 1

      Yes, Sartre, we are fully aware that we can always choose to kill ourselves.

      Or less hyperbolistically, we can always choose a worse path, like spending another 4 years and the retirement savings to get schooled in a job that pays half as much. Anyone can do that. Show me a better choice.

      I can only surmise that you were not speaking to the morality of the choice and by worse you mean less profitable, and by better you mean more profitable.

      So as asked, this may be an option that does not require 4 years, a retirement account, and likely will pay better than half as much. You won't even be forced to write high grade malicious code. By some accounts this could be a better choice.

      I don't know who makes these decisions for you, but they may force you to attend WGU depending on how much your making now. Or perhaps you make these choices yourself and this was just hyperbole?

      --
      I think you underestimate just how much I just dont care.
  16. linux based POS by roman_mir · · Score: 0

    One of the benefits and reasons why we build Linux based systems for retail chain management, store management, supply chain management, e-commerce and such is ability to secure against these types of attacks better. Beyond that we came up with a new way of protecting credit card information by tying it to the location of the user's phone, but we are not a nominal 'fintech' and those guys are too hard to approach (for now at least).

    1. Re:linux based POS by Anonymous Coward · · Score: 0

      Ah yes, roman_mir's mighty software empire that nobody ever uses.

  17. Gun analogy by Dareth · · Score: 1

    C is a high level language, like a 9 mm handgun round is high velocity ammunition.

    --

    I only look human.
    My mother is a halfling and my dad is an ogre, so that makes me an Ogreling
    1. Re:Gun analogy by ColdWetDog · · Score: 3, Funny

      Sure, but they both hurt like hell when you shoot yourself in the foot with them.

      --
      Faster! Faster! Faster would be better!
  18. Some people still contrast HLL with assembly by tepples · · Score: 1

    Until you find an emulator developer who complains that the emulator in a Nintendo product "is incredibly inefficient, written in HLL code, developed by somebody whom knew nothing about emulation nor about ARM nor about Z80/8080 processors." (This refers to C, as early C compilers targeting this product generated inefficient code.) Also a reset mechanism in Nintendo DS hardware "allows the NDS7 debugger to capture accidental jumps to address 0, that appears to be a common problem with HLL-programmers, asm-coders know that (and why) they should not jump to 0."

    1. Re:Some people still contrast HLL with assembly by angel'o'sphere · · Score: 1

      there is nothing wrong in jumping to $0000 if there is code to execute ... no idea what you want to say with your assembly print outs on that web page, though.

      --
      Cost free eBook I read (by iBook/Kobo/Amazon/ObookO/Gutenberg etc.): "The Green Odyssey" by Philip Jose Farmer.
    2. Re:Some people still contrast HLL with assembly by MountainLogic · · Score: 1

      Who bothers with emulators? I just transcompile the GameBoy code by parsing the machine code into C and then compiling the parsed output on the target hwrdware with a native C complier. Much more efficient (10x) over emulators.

  19. Redundant: POS Malware by sconeu · · Score: 2

    By definition, if it's malware, it's a POS. Even if it's written well.

    --
    General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
    1. Re:Redundant: POS Malware by Anonymous Coward · · Score: 0

      Damn! You beat me to it!

    2. Re:Redundant: POS Malware by angel'o'sphere · · Score: 1

      POS used to mean "point of sales", what does it mean now?

      --
      Cost free eBook I read (by iBook/Kobo/Amazon/ObookO/Gutenberg etc.): "The Green Odyssey" by Philip Jose Farmer.
    3. Re:Redundant: POS Malware by sconeu · · Score: 1

      Piece of Shit

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
    4. Re:Redundant: POS Malware by Anonymous Coward · · Score: 1

      And I dare say it's meant Piece of Shit for much longer than it meant Point of Sale.

    5. Re:Redundant: POS Malware by angel'o'sphere · · Score: 1

      Ah, rofl, thanx.

      --
      Cost free eBook I read (by iBook/Kobo/Amazon/ObookO/Gutenberg etc.): "The Green Odyssey" by Philip Jose Farmer.
  20. Just in: must ban high level languages by Anonymous Coward · · Score: 0

    They can be used by criminals to cause harm and thus must be banned immediatley.
    Except to teach girls to code. Sigh

  21. High level languages... by Anonymous Coward · · Score: 0

    Sorry, but I don't consider C, C++, or even Java to be "high level languages". I expect way more abstraction from a high level language. Yes, I know, Java does abstract you away from the hardware and attempts to give you "run anywhere", but realistically, if you take away all the frameworks and just use native Java, it is NOT high level.

    You want a high level "language" use a 4GL like PL/SQL, Wavemaker, or heck even PowerBuilder.

    If you have to write "plumbing" code, it is by definition NOT high level.

    https://en.wikipedia.org/wiki/Fourth-generation_programming_language#Examples

    If you want to go even higher use a 5GL, but unless you're doing AI, a 4GL is where you want to be.

    1. Re:High level languages... by Anonymous Coward · · Score: 0

      Well, maybe because every time you add more abstraction in a new language, the "level" increases, so languages that were "high level" 20 years ago are now "mid-level."

      In any case, C, C++ and Java are all definitely "high level languages" in the original meaning of the term.

  22. Apparently It's A Non-story by Anonymous Coward · · Score: 1

    Since this malware was such a POS, it did no damage.

  23. Re:POS is for cows. by ColdWetDog · · Score: 1

    Do you mind going back to posting in the Federal Register where your comment makes some sense?

    --
    Faster! Faster! Faster would be better!
  24. *an ill-intentioned by Anonymous Coward · · Score: 0

    Honestly, is it so hard to proofread three lines of writing?

    1. Re:*an ill-intentioned by Anonymous Coward · · Score: 0

      It wouldn't be, if it were the case that anyone proofreads anything anymore.

  25. Sophisticated malware platform .. by nickweller · · Score: 1

    What Operating system does this sophisticated malware platform run on?

    1. Re:Sophisticated malware platform .. by AHuxley · · Score: 1

      The idea seems to be hinted at in https://thestack.com/security/...
      "even EMV/Chip-and-pin are unlikely to protect affected systems. In such cases, the report says ‘ModPOS and other malware with RAM scraping techniques can still gain access to card data. Criminals can then reuse card data, even from EMV cards, to make online (card-not-present) transactions.’"

      --
      Domestic spying is now "Benign Information Gathering"
    2. Re:Sophisticated malware platform .. by Dutch+Gun · · Score: 1

      Given the use of .pdb files they mentioned, which is an MS-specific debug symbol format (as far as I know), it suggests the use of Visual Studio, and that in turn suggests the code is possibly targeting embedded Windows.

      Just a guess, of course.

      --
      Irony: Agile development has too much intertia to be abandoned now.
    3. Re:Sophisticated malware platform .. by nickweller · · Score: 1

      You most probably guessed right, if it was OS X, Android or Linux it would be in the headline, instead of the weazly sounding POS malware.

  26. Bad code in any language by edtice1559 · · Score: 1

    Just shows that if you don't have the skills, code you write even in C# will still be a POS. Oh wait.

  27. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  28. names are stripped by Anonymous Coward · · Score: 0

    Is it not common knowledge among slashdolts that debugging symbols are an option, not required? Functions are not first-class in C or C++, so the linker and compiler use decorated names, but the vtables that result don't do *runtime* dispatch between *overloaded* functions - the parameter list and name uniquely identify those for the compiler and linker.

    signal to noise getting precariously low here, maybe it's time to stay soy and drop the dice...

    1. Re:names are stripped by phantomfive · · Score: 1

      You can strip a lot of that stuff out, but you'd be surprised how many people don't bother. The function names for shared libraries won't be stripped out, though, and shared libraries get called a lot in typical software.

      --
      "First they came for the slanderers and i said nothing."
  29. OMG by Anonymous Coward · · Score: 0

    OMFG a high level language! What in the world will we do

  30. Pos? by barbariccow · · Score: 1

    Somebody coded another piece of shit malware?