Using IdaPro to examine the binary, it's not a chess engine.
It's a decryption engine sitting over a giant block of data.
Seems pretty strange for a chess engine of 1.4 MB to consist of 95% data, a decryption engine, and a small set of Winboard commands.
I guess that Uri was right.
Something 'Fishy' about Strelka
Moderators: hgm, Rebel, chrisw
-
- Posts: 12542
- Joined: Wed Mar 08, 2006 8:57 pm
- Location: Redmond, WA USA
Re: Something 'Fishy' about Strelka
I remained silent an read, but now I can openly say, yep, another hoax!Tony Thomas wrote:I was right as well.
Re: Something 'Fishy' about Strelka
I agree 100%. very sad. now the rating lists should stop wasting time testing them I guess..Terry McCracken wrote:I remained silent an read, but now I can openly say, yep, another hoax!Tony Thomas wrote:I was right as well.
Re: Something 'Fishy' about Strelka
Well at least it was discovered fairly quickly, and I'm sure testing has stopped or will stop soon on this very badly put together clone of sorts.Nid Hogge wrote:I agree 100%. very sad. now the rating lists should stop wasting time testing them I guess..Terry McCracken wrote:I remained silent an read, but now I can openly say, yep, another hoax!Tony Thomas wrote:I was right as well.
But there always will be people out there ready to make another one just like there are people who like to write malware/spyware, trojans, worms, and viruses
-
- Posts: 13447
- Joined: Wed Mar 08, 2006 9:02 pm
- Location: Dallas, Texas
- Full name: Matthew Hull
Re: Something 'Fishy' about Strelka
Perhaps there's a way to copy its decrypted address space from RAM to disk.Dann Corbit wrote:Using IdaPro to examine the binary, it's not a chess engine.
It's a decryption engine sitting over a giant block of data.
Seems pretty strange for a chess engine of 1.4 MB to consist of 95% data, a decryption engine, and a small set of Winboard commands.
I guess that Uri was right.
Matthew Hull
-
- Posts: 858
- Joined: Wed Mar 08, 2006 9:24 pm
- Location: Germany
- Full name: Daniel Mehrmann
Re: Something 'Fishy' about Strelka
That isn't so easy. I debugged Strelka a bit and a lot of strings are still cyrpted or compressed. A lot of decompress calls will be done in runtime...mhull wrote:Perhaps there's a way to copy its decrypted address space from RAM to disk.Dann Corbit wrote:Using IdaPro to examine the binary, it's not a chess engine.
It's a decryption engine sitting over a giant block of data.
Seems pretty strange for a chess engine of 1.4 MB to consist of 95% data, a decryption engine, and a small set of Winboard commands.
I guess that Uri was right.
I also extract the string table from a running Stelka, or at least what was readble (Don't wonder about the PV in the stringtable )
http://www.homer-chess.com/temp/strings.txt
It seems this guy added also some protection against debugger like F3 interrupt shows to halt command of the cpu or the debugger himself
Best,
Daniel
-
- Posts: 3707
- Joined: Thu Mar 16, 2006 7:10 pm
Re: Something 'Fishy' about Strelka
I am always amazed at the technical talent available on these forums. Very impressive indeed.
-
- Posts: 267
- Joined: Fri Mar 17, 2006 8:01 am
- Location: Russia
- Full name: Vladimir Medvedev
Re: Something 'Fishy' about Strelka
Igor Korshunov (author of WildCat) wrote on KasparovChess guestbook (my translation):
In Russian: http://kasparovchess.crestbook.com/view ... d=1629&p=5"...try to find the following sequence of bytes in Strelka:
AD 8E 57 4E 87 11 E7
You can find it ONLY in Strelka and in all versions of Rybka"