Just wanted to understand the exact math behind something in a game. It’s built in Godot (which is great btw), and Godot lets developers encrypt the packed game file to make reverse-engineering harder. But the game still has to decrypt that file client-side, so the key has to be somewhere. Now you can just tell a SOTA AI agent to use Ghidra and recover it. While security through obscurity was never real security, the idea of wasting enough of the reverser's time until they gave up was effective. In the era of AI, it's completely useless as you are not wasting a human's time anymore, you're wasting AI inference time which is almost free. Some traditional "security" assumptions were really assumptions about the price of human labor and are completely breaking down now.