21–30 of 425 posts
Earlier quoted context omitted.
Bad actors have been using IDA this entire time. So no, not really.
You mean there is nothing new here? Then why is this news? I am not wondering about the concept of reverse engineering but the specific (and hopefully novel) feature set that this may enable.
I am going to sound pessimistic here, but isn't there a real danger of having this technology available to bad actors and is there any value to keeping such things confidential if it plays a role in national security? If someone was releasing malicious software to hijack the power grid as an example, wouldn't they be first able to use this to try to improve the robustness and invisibility of their attack ? Or is the…
Earlier quoted context omitted.
Bad actors have been using IDA this entire time. So no, not really.
You mean there is nothing new here? Then why is this news? I am not wondering about the concept of reverse engineering but the specific (and hopefully novel) feature set that this may enable.
I am going to sound pessimistic here, but isn't there a real danger of having this technology available to bad actors and is there any value to keeping such things confidential if it plays a role in national security? If someone was releasing malicious software to hijack the power grid as an example, wouldn't they be first able to use this to try to improve the robustness and invisibility of their attack ? Or is the…
I am going to sound pessimistic here, but isn't there a real danger of having this technology available to bad actors and is there any value to keeping such things confidential if it plays a role in national security? If someone was releasing malicious software to hijack the power grid as an example, wouldn't they be first able to use this to try to improve the robustness and invisibility of their attack ? Or is the…
Bad actors have been using IDA this entire time. So no, not really.
This is cool because:
- It's legal and free - It's open source
Earlier quoted context omitted.
You mean there is nothing new here? Then why is this news? I am not wondering about the concept of reverse engineering but the specific (and hopefully novel) feature set that this may enable.
It's a competitor to IDA's monopoly, basically. It might be better in certain aspects.
Also found this community edition linked on twitter: https://ghidrace.github.io/
Download: https://ghidra-sre.org/ GitHub: https://github.com/NationalSecurityAgency/ghidra
Download from the NSA without open source software... anyone else virtualizing three layers deep to get to this?
(And if not I'm sure the community will reconstitute it)
It appears that it isn't actually available as of now. Apparently, the NSA is going to release it at RSA Conference 2019, so it'll probably actually be published within the next couple of days.
- Ghidra is basically the first real competitor to IDA Pro, the extremely expensive and often pirated state-of-the-art software for reverse engineering. Nothing else has come close to IDA Pro.
- Ghidra is open-source, IDA Pro is not.
- Ghidra has a lot of really cool features that IDA Pro doesn't, such as decompiling binaries to pseudo-C code.
- It's also collaborative, which is interesting because multiple people can reverse engineer the same binary at the same time -- something IDA only got VERY recently.