(untitled)

is anyone else excited about the NSA releasing GHIDRA for free in march?

I'd say I am. I definitely didn't see it coming from the NSA but I think that this sort of move is really only to get public support.

>use our backdoor people, ITS FREE Yea, thanks no thanks. Their brand name alone doesn't pull me in.

>>6840 I'm going to guess there's a backdoor in it.

>>6846 >>6851 it's opensource, if they put a backdoor in it, it would be found.

>>6853 >neurosuggesting open source software didn't have backdoor in it before nice try you glow in the dark

it was already leaked in Vault 7 https://wikileaks.org/ciav7p1/cms/page_51183656.html >>6851 >>6846 >open source >backdoored if you get backdoored from a opensource piece of software you most likely deserve it

>>6858 Here is another link https://wikileaks.org/ciav7p1/cms/page_9536070.html

>>6853 I can see the glow all the way over here

>>6858 >you most likely deserve it As if you read every line of your linux distro Stop talking out of your ass

>>6846 The fact that it's coming from the NSA will automatically bring it under close scrutiny by other security researchers. The NSA of course is aware of this, so why should they consider placing backdoors in their own software at the risk of being exposed (reminder that companies and other US agencies use NSA software such as SE Linux) when they can backdoor virtually every open source project by infiltrating them as some random open source developer? I'm not telling you whom you should trust or not. All I'm saying is that NSA software is not more untrustworthy than any other open source project.

>>6862 This is not how anything works. No single individual has to read every single line in a piece of software, for two important reasons: 1. This is not how software works. You can't write "backdoor!" and get a backdoor, your software must behave in a very specific way and at some point receive or send request packets that shouldn't be there. Those are easily spotted, specially when something comes from the NSA. This is not a movie where things just happen, software has predictable and observable structure. 2. Multiple people will work in multiple parts of the codebase. All it takes is one person to look at a strange section of code and ask "Is this normal?" Now get the fuarrrk off unless you have something to contribute besides uninformed conjecture.(Argue in good faith.)

>>6862 It's kinda funny as a concept already >bugs >coders can't keep code errorfree and everyone complaints about it knowing there's always something >backdoors >people believe coders can spot intentional bugs made with effort to be well hidden

>>6864 >uninformed conjecture >multiple examples of "trusted" open source contributors adding backdoors to open source projects lmao sure thing buddy

>>6866 Leaving your firefox plugin on github doesn't imply in a project under scrutiny. If you have specific examples you wanna use, post them. This is not 4chan for you to greentext your way out of your own stupidity.

>>6864 a backdoor can be just cleverly put vulnerability, those can live in open source projects such as linux or openssh for decades also http://www.underhanded-c.org/

>>6868 My point isn't that it's physically impossible, but it's also not something to cynically sneer at. A tool released by NSA implies in the scrutiny of the entire infosec community, anyone who finds a vulnerability that could be meaningfully used as a backdoor to identify, feed information or receive data is gonna make motherboard headlines for the entire month. And, if you work in infosec, you know that means a lot of clients raining on your door. Is it impossible for it to have a backdoor? No, it isn't. But it's also not an easy task for random mcfacefuck to greentext it as if the community was dumb. Living in the real world requires nuance, not irony.

>>6869 Do you have any real life other than posting diatribes on the internet and asking others about citation?

>>6872 Didn't intend to be a dick, just don't see the point of drowning a valid discussion in greentext because your block youtube comments plugin was hacked. Makes no sense and turns the discussion into a circle.

It is not considered good to start a thread with a single sentence. You have put in a minimum of effort and have not even included any links to this material. You're free to make a better thread concerning this topic if you want. This thread is locked.