61–70 of 425 posts
Earlier quoted context omitted.
I don't think they would burn some 0-days for this, one container should be enough.
I think you're underestimating the value of intel on people who know how to get intel or at least interested in the topic.
I'm definitely excited for this, considering I couldn't fork out the thousand of dollars needed for using IDA. I can't really justify that on a small hobby project (reverse engineering games).
Earlier quoted context omitted.
For which they charge a per-CPU fortune https://www.hex-rays.com/cgi-bin/quote.cgi
It's a funny situation, though: decompilation probably should cost a small fortune. If you're in a line of work that needs it, the quality of your decompiler is probably a huge factor in how valuable an hour of your time is, and many [most?] fields where people routinely decompile stuff are very highly compensated. IDA has always had a weirdly low price point given the bill rates of people who use it, and it's intere…
Perhaps they would benefit from some type of "free/cheap for noncommercial use" license?
Aaaaaand: https://twitter.com/hackerfantastic/status/11030878690637045...
Also, you have to explicitly run it in debug mode for this to happen, which probably only a small percentage of end users will do. Kind of seems like the equivalent of running Flask apps in debug mode, which by default will handle exceptions by showing a traceback with an interactive debugger that can be used to execute arbitrary code.
There could be some backdoors in it, but I'm leaning towards that not being an intentional one. (But I definitely could be totally wrong; you never know when it comes to intelligence agencies.)
Download: https://ghidra-sre.org/ GitHub: https://github.com/NationalSecurityAgency/ghidra
Download from the NSA without open source software... anyone else virtualizing three layers deep to get to this?
Earlier quoted context omitted.
Not at all,this helps analyze malware not create it. There is no security obtained by preventing reverse engineering of a binary. If anything this makes adversaries ability to hide their methodoligies harder,a strategic advantage for someone like the US government.
I am not sure I completely agree. If I know how my adversary detects and studies stealth code, I may be able to design better stealth code that is better at evading their methods of detection. I mean the evolution of stealth tech in military has followed a similar path. As radar systems improve over decades, they keep on working on new ways to evade detection for aviation/missile tech. I understand the high level poi…
Annndddd, it's ugly as fuck. Well, I'm not going to install something made by the NSA on my machine but I'd be interested in feedback.
Earlier quoted context omitted.
It's a funny situation, though: decompilation probably should cost a small fortune. If you're in a line of work that needs it, the quality of your decompiler is probably a huge factor in how valuable an hour of your time is, and many [most?] fields where people routinely decompile stuff are very highly compensated. IDA has always had a weirdly low price point given the bill rates of people who use it, and it's intere…
It depends on what you're doing. I imagine a lot of people use IDA pro for modding video games, which often/usually provides no monetary compensation. Perhaps they would benefit from some type of "free/cheap for noncommercial use" license?