Brainfuck beware: JavaScript is after you (2012)

I'm curious on what the performance implications are. If I have some JavaScript on a webpage that I want to "obfuscate", would using this accomplish the task?

Re: Brainfuck beware: JavaScript is after you (2012)

#7

Post by Pitarou » Mon, Jun 02, 2014, 5:04 AM UTC

Yet another example of the horrible mess unprincipled automatic type conversion causes.

What prevents language designers from avoiding all these lurking bugs with a generic type-conversion operator? E.g. here's how it might look in a Python-like language:

    >>> x = 1
    >>> y = "2"
    >>> print(x + cast(y))
    3
    >>> print(cast(x) + y)
    "12"
    >>> print(cast(x) + cast(y))
    Exception: ambiguous type

Re: Brainfuck beware: JavaScript is after you (2012)

#8

Post by nirmel » Mon, Jun 02, 2014, 5:05 AM UTC

I am not a programmer so this is part curiosity and part criticism. Why do programmers seem to enjoy creating programs that satisfy some syntactical constraint? Is it a fun mental exercise, or or can you just admit that you're showing off on something that really does not matter?

Re: Brainfuck beware: JavaScript is after you (2012)

#9

Post by tfigment » Mon, Jun 02, 2014, 5:08 AM UTC

nirmel wrote: post #8

I am not a programmer so this is part curiosity and part criticism. Why do programmers seem to enjoy creating programs that satisfy some syntactical constraint? Is it a fun mental exercise, or or can you just admit that you're showing off on something that really does not matter?

He did indicate he is a security researcher and this technique would allow bypassing certain checks. No alphanumerics but then I would guess it would be easy to detect these scripts as malicious anyway if someone wanted to since most of this stuff is questionable in a standard script.

Re: Brainfuck beware: JavaScript is after you (2012)

#10

Post by crazytony » Mon, Jun 02, 2014, 5:13 AM UTC

nirmel wrote: post #8

I am not a programmer so this is part curiosity and part criticism. Why do programmers seem to enjoy creating programs that satisfy some syntactical constraint? Is it a fun mental exercise, or or can you just admit that you're showing off on something that really does not matter?

this can be used to get around some forms of antivirus checkers/content inspectors.