Live data from Hacker News

A first look at Ghidra’s Debugger – Game Boy Advance Edition

wrongbaud.github.io

1–10 of 17 posts

Re: A first look at Ghidra’s Debugger – Game Boy Advance Edition

#5
When I try and connect to gdb (In-VM GNU gdb local debugger, /usr/local/bin/gdb) on MacOS (Big Sur, 11.0.1) I get the following exception:

java.util.concurrent.CompletionException: java.io.IOException: Could not detect GDB's interpreter mode --------------------------------------------------- Build Date: 2020-Dec-27 1528 CST Ghidra Version: 9.3 Java Home: /Library/Java/JavaVirtualMachines/jdk-11.0.2.jdk/Contents/Home JVM Version: Oracle Corporation 11.0.2 OS: Mac OS X 10.16 x86_64

Re: A first look at Ghidra’s Debugger – Game Boy Advance Edition

#6
Off topic but I have to ask. Does anyone else wonder if there are backdoors in NSA projects like this? It seems like a way you could get a foothold into lots of interesting places.

Edit: Spelling.

Also, I recognize this particular program may not be the best target, but SELinux for example, or any of their projects. As for the "It's open source argument", if they provide binaries, do they have instructions for reproducible builds?

Re: A first look at Ghidra’s Debugger – Game Boy Advance Edition

#7

Off topic but I have to ask. Does anyone else wonder if there are backdoors in NSA projects like this? It seems like a way you could get a foothold into lots of interesting places. Edit: Spelling. Also, I recognize this particular program may not be the best target, but SELinux for example, or any of their projects. As for the "It's open source argument", if they provide binaries, do they have instructions for reprod…

I can't imaging a project aimed at reverse engineers would be the best place to try to hide that sort of thing. Ghidra is open source, you are free to audit and build it yourself if you are concerned.

Re: A first look at Ghidra’s Debugger – Game Boy Advance Edition

#8

Off topic but I have to ask. Does anyone else wonder if there are backdoors in NSA projects like this? It seems like a way you could get a foothold into lots of interesting places. Edit: Spelling. Also, I recognize this particular program may not be the best target, but SELinux for example, or any of their projects. As for the "It's open source argument", if they provide binaries, do they have instructions for reprod…

An open source project used by people capable of analyzing the network and disk I/O of binaries they run doesn't sound like a good target -- if something was found it would have massive consequences.

Re: A first look at Ghidra’s Debugger – Game Boy Advance Edition

#9
post #7

Off topic but I have to ask. Does anyone else wonder if there are backdoors in NSA projects like this? It seems like a way you could get a foothold into lots of interesting places. Edit: Spelling. Also, I recognize this particular program may not be the best target, but SELinux for example, or any of their projects. As for the "It's open source argument", if they provide binaries, do they have instructions for reprod…

I can't imaging a project aimed at reverse engineers would be the best place to try to hide that sort of thing. Ghidra is open source, you are free to audit and build it yourself if you are concerned.

Not to take away from your point, but a lot of "career" reverse-engineers are no more knowledgeable about the details of their tools or the low-level than developers.

Re: A first look at Ghidra’s Debugger – Game Boy Advance Edition

#10
post #8

Off topic but I have to ask. Does anyone else wonder if there are backdoors in NSA projects like this? It seems like a way you could get a foothold into lots of interesting places. Edit: Spelling. Also, I recognize this particular program may not be the best target, but SELinux for example, or any of their projects. As for the "It's open source argument", if they provide binaries, do they have instructions for reprod…

An open source project used by people capable of analyzing the network and disk I/O of binaries they run doesn't sound like a good target -- if something was found it would have massive consequences.

Backdoors from TLAs don't look like backdoors.
Post reply on HN