(untitled)

Did Lain anons see that ghidra has a debugger default now in 10.0?

>>16281 I'm hard as fuarrrking diamonds rn. God damn, ghidra is so good. Though, windbg preview is going to be difficult to beat for me.

>>16281 Any idea why are they giving the code away for free? Are they thirsty for developers or something?

>>16281 Great news, I am learning x86 assembly these days aiming to learn some reverse engineering. My next step is ghidra.

>>16284 They likely keep their plug-ins to themselves, and just harvest whatever they can get from the community. It is modular software after all.

hard pass NSA

>>16289 "Yes, let's embed secret telemetry into an open source reverse engineering project. Surely the world's reverse engineers won't pour through the NSAs reverse engineering tool for secret things. Not like Russia, China, Iran, etc would pay teams to reverse it and would ruin the reputation (lol) of the NSA by exposing anything sketchy!" Imagine believing this.

>>16281 Oh man finally, ghidra is so damn good.

>>16306 So they just don't hide the telemetry or create buggy code on purpose. You can't honestly think that the "world's reverse engineers" care about privacy and anonymity right? Cert + Product is much more important to them than doing things The Right Way. >Not like Russia, China, Iran, etc would pay teams to reverse it and would ruin the reputation (lol) of the NSA by exposing anything sketchy "The enemies of the government will pick up a white hat codemonkey job and start disclosing vulns in some random tool that they may not even use to say that it has bugs/unadvertised behavior, this is the power of open soros" Imagine believing this.

>>16306 happened with systemd

>>16321 >>16331 You're likely running compromised hardware so you should be doing all your reverse soykaf on an airgapped machine anyway.

>>16332 whats the goal there? Depending on how deep you wanna dive its futile because the compiler and decompiler can both be compromised. There's a famous guy who wrote how to hide your malware through making the compiler inject it and the decompiler blind to it already in the 90s. Im sure that option got explored.

>>16331 Are you talking about this? https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/issues/10 2018 feels so long ago I can't remember specifically what it was but it was found, named, and shamed as it should have been. >>16333 I know you're not replying to >>16306 but this is more or less my point. To what end? It's the most in/famous intelligence agency releasing an open source tool to the world. If there was anything malicious, it would be immensely valuable to US opposition to expose it. It could also be said that they'd be better served withholding that information for a rainy day, and to that point I don't really have an argument. I just find it really hard to believe that the world's RE community hasn't looked for anything amiss with the NSA's RE toolsuite, nor that they'd stay silent if they did. >>16321 I was being a snide asshole when I made that reply, I'm sorry. I see your point and perspective, and I somewhat agree, but I just think occam's razor is more applicable here. Or is that what they want me to think...

>>16340 >To what end? It's the most in/famous intelligence agency releasing an open source tool to the world. Actually, now that I think about it, I could see them ignoring "bugs" that are exploitable in very complex circumstances.