CodeSOD: JavaScript Obfuscation

We have to be careful about the articles we publish on TDWTF. We have a responsibility to our submitters, to protect their identity and anonymize the details of their stories. We have a responsibility to our readers- mostly to be entertaining.

Last week's JSF-k story failed one of our readers. Poor Blazej didn't find it entertaining- it gave him upsetting flashbacks to his own experience with a similar event.

You see, Blazej was pitching in on a file uploading site, specifically meant to share videos. While he did some backend work, the front-end developers wanted to make sure that it was impossible to ever learn the actual URL of a video, to prevent people from downloading it. They wrote some JavaScript to obfuscate that URL, but that introduced a new problem: somebody could just read their JavaScript!

Using the same principles as JSF-k, but coupled with JavaScript's unicode support, they produced this:

i3/4Ii3/4i3/4= /iii1/4i3/4 ~a"a"a" //*ai*/ ['_']; o=(i3/4ii3/4) =_=3; c=(i3/4Ii3/4) =(i3/4ii3/4)-(i3/4ii3/4); (i3/4D"i3/4) =(i3/4Ii3/4)= (o^_^o)/ (o^_^o);(i3/4D"i3/4)={i3/4Ii3/4: '_' ,i3/4Ii3/4i3/4 : ((i3/4Ii3/4i3/4==3) +'_') [i3/4Ii3/4] ,i3/4ii3/4i3/4 :(i3/4Ii3/4i3/4+ '_')[o^_^o -(i3/4Ii3/4)] ,i3/4D"i3/4i3/4:((i3/4ii3/4==3) +'_')[i3/4ii3/4] }; (i3/4D"i3/4) [i3/4Ii3/4] =((i3/4Ii3/4i3/4==3) +'_') [c^_^o];(i3/4D"i3/4) ['c'] = ((i3/4D"i3/4)+'_') [ (i3/4ii3/4)+(i3/4ii3/4)-(i3/4Ii3/4) ];(i3/4D"i3/4) ['o'] = ((i3/4D"i3/4)+'_') [i3/4Ii3/4];(i3/4oi3/4)=(i3/4D"i3/4) ['c']+(i3/4D"i3/4) ['o']+(i3/4Ii3/4i3/4 +'_')[i3/4Ii3/4]+ ((i3/4Ii3/4i3/4==3) +'_') [i3/4ii3/4] + ((i3/4D"i3/4) +'_') [(i3/4ii3/4)+(i3/4ii3/4)]+ ((i3/4ii3/4==3) +'_') [i3/4Ii3/4]+((i3/4ii3/4==3) +'_') [(i3/4ii3/4) - (i3/4Ii3/4)]+(i3/4D"i3/4) ['c']+((i3/4D"i3/4)+'_') [(i3/4ii3/4)+(i3/4ii3/4)]+ (i3/4D"i3/4) ['o']+((i3/4ii3/4==3) +'_') [i3/4Ii3/4];(i3/4D"i3/4) ['_'] =(o^_^o) [i3/4oi3/4] [i3/4oi3/4];(i3/4Ii3/4)=((i3/4ii3/4==3) +'_') [i3/4Ii3/4]+ (i3/4D"i3/4) .i3/4D"i3/4i3/4+((i3/4D"i3/4)+'_') [(i3/4ii3/4) + (i3/4ii3/4)]+((i3/4ii3/4==3) +'_') [o^_^o -i3/4Ii3/4]+((i3/4ii3/4==3) +'_') [i3/4Ii3/4]+ (i3/4Ii3/4i3/4 +'_') [i3/4Ii3/4]; (i3/4ii3/4)+=(i3/4Ii3/4); (i3/4D"i3/4)[i3/4Ii3/4]='\\'; (i3/4D"i3/4).i3/4Ii3/4i3/4=(i3/4D"i3/4+ i3/4ii3/4)[o^_^o -(i3/4Ii3/4)];(oi3/4ii3/4o)=(i3/4Ii3/4i3/4 +'_')[c^_^o];(i3/4D"i3/4) [i3/4oi3/4]='\"';(i3/4D"i3/4) ['_'] ( (i3/4D"i3/4) ['_'] (i3/4Ii3/4+(i3/4D"i3/4)[i3/4oi3/4]+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (i3/4Ii3/4))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ (!+[]+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (o^_^o))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+(-~-~(!+[]+!+[]))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~1)+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (o^_^o))+ (!+[]+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (i3/4Ii3/4))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ (-~-~1)+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~1)+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ (!+[]+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((c^_^o)+(c^_^o))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (!+[]+!+[])+ (!+[]+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (o^_^o))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((c^_^o)+(c^_^o))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (o^_^o))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ (!+[]+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (o^_^o))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (o^_^o))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (o^_^o))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (o^_^o))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~1)+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (i3/4Ii3/4))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ (!+[]+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (o^_^o))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (i3/4Ii3/4))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (i3/4Ii3/4))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (o^_^o))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ (-~-~1)+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (!+[]+!+[])+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ (!+[]+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (!+[]+!+[])+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (+!+[])+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (o^_^o))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (o^_^o))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ (!+[]+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+(-~-~(!+[]+!+[]))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (o^_^o))+ (-~-~1)+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (i3/4Ii3/4))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (o^_^o))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+(-~-~(!+[]+!+[]))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((o^_^o) +(o^_^o) +(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (+!+[])+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ (-~-~(!+[]+!+[]))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((i3/4ii3/4) + (i3/4Ii3/4))+ ((i3/4ii3/4) + (i3/4Ii3/4))+ (i3/4D"i3/4)[i3/4Ii3/4]+(+!+[])+ ((o^_^o) +(o^_^o) +(c^_^o))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((o^_^o) +(o^_^o) +(c^_^o))+ (-~-~(!+[]+!+[]))+ (i3/4D"i3/4)[i3/4Ii3/4]+(-~-~(!+[]+!+[]))+ ((i3/4ii3/4) + (o^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+(-~-~(!+[]+!+[]))+ ((c^_^o)+(c^_^o))+ (i3/4D"i3/4)[i3/4Ii3/4]+((i3/4ii3/4) + (o^_^o))+ (-~-~1)+ (i3/4D"i3/4)[i3/4oi3/4]) (i3/4Ii3/4)) ('_');

My feelings on this? (aTM"aTM )

[Advertisement] Universal Package Manager - ProGet easily integrates with your favorite Continuous Integration and Build Tools, acting as the central hub to all your essential components. Learn more today!