←back to thread

Reverse engineering the obfuscated TikTok VM

(github.com)
412 points xfeeefeee | 4 comments | 21 Apr 25 01:59 UTC | HN request time: 0.859s | source
1. weinzierl ◴[21 Apr 25 07:31 UTC] No.43749255[source]▶
Is there also a VM in their iOS app? I thought a VM would be against Apple's policies?
replies(2): >>43749454 #>>43750264 #
2. xmodem ◴[21 Apr 25 08:07 UTC] No.43749454[source]▶
Apple's policies prevent using JIT compilation, they don't ban VM's outright.
replies(1): >>43750448 #
3. Scaevolus ◴[21 Apr 25 10:26 UTC] No.43750264[source]▶
Their mobile apps have equivalent signature code, but it's compiled to native binaries instead.
4. jacobp100 ◴[21 Apr 25 10:55 UTC] No.43750448[source]▶
This is the correct answer. They even expose JavaScript Core to apps