3 ms·

I always chuckle when I come across this tool, ghidra reads like غدر which means "betrayal of trust" in Arabic.

boxfire 4y ago
Which is prescient... this is a tool by the NSA after all. I would be disappointed if it wasn't back-doored... Anybody working on a feature-parity FOSS alternative from scratch?
- brian-armstrong 4y ago
  The source is freely available on Github. Show us where the backdoor is.
- mikepurvis 4y ago
  What would a back door look like in a tool like this? Silently returning incorrect results for certain binaries? Perhaps I lack imagination but I’m having trouble picturing what that could be good for or how it could even be hidden. This isn’t like a crypto constant that you can pretend is random but secretly has known factors.
- saagarjha 4y ago
  Releasing backdoored software to people who are experts in finding software backdoors would definitely be a strategy
  - uni_rule 4y ago
    One of the strategies of all time
- SXX 4y ago
  Like, come on. How it's can be back-doored if it can work just fine in offline VM? Also there are only small percent of specialists who even know this tool exist let alone have know-how to use it. And since it heavily used for mailware reverse engineering it's gonna be laughtable to put any "secret backdoors and exploits" in it. Might be worth it as hacker contest for finding good hiring candidates, but certainly not at spying attempt. No sane person who able to use this software gonna run it on PC containing some important secrets.
- lo_zamoyski 4y ago
  To what end? The risk of it being discovered is high and would only cause scandal.
- Fnoord 4y ago
  FWIW, an RCE was found in it. It was fixed. Either way, you probably don't want to do binary analysis on a networked computer.
lobstersammich 4y ago
For folks who are curious, here's a translation. Scroll to the bottom of the dictionary page. In the left-hand column there is an entry under `gadara`: https://ejtaal.net/aa/#hw4=793,ll=2323,ls=5,la=3216,sg=766,ha=530,br=685,pr=111,aan=447,mgf=641,vi=270,kz=1840,mr=463,mn=997,uqw=1159,umr=778,ums=656,umj=574,ulq=1277,uqa=312,uqq=261,bdw=635,amr=463,asb=694,auh=1141,dhq=400,mht=657,msb=175,tla=78,amj=566,ens=1,mis=1560 https://ejtaal.net/aa/#hw4=793,ll=2323,ls=5,la=3216,sg=766,h...

Which is prescient... this is a tool by the NSA after all. I would be disappointed if it wasn't back-doored... Anybody working on a feature-parity FOSS alternative from scratch?

brian-armstrong 4y ago
The source is freely available on Github. Show us where the backdoor is.
mikepurvis 4y ago
What would a back door look like in a tool like this? Silently returning incorrect results for certain binaries? Perhaps I lack imagination but I’m having trouble picturing what that could be good for or how it could even be hidden. This isn’t like a crypto constant that you can pretend is random but secretly has known factors.
saagarjha 4y ago
Releasing backdoored software to people who are experts in finding software backdoors would definitely be a strategy
- uni_rule 4y ago
  One of the strategies of all time
SXX 4y ago
Like, come on. How it's can be back-doored if it can work just fine in offline VM? Also there are only small percent of specialists who even know this tool exist let alone have know-how to use it. And since it heavily used for mailware reverse engineering it's gonna be laughtable to put any "secret backdoors and exploits" in it. Might be worth it as hacker contest for finding good hiring candidates, but certainly not at spying attempt. No sane person who able to use this software gonna run it on PC containing some important secrets.
lo_zamoyski 4y ago
To what end? The risk of it being discovered is high and would only cause scandal.
Fnoord 4y ago
FWIW, an RCE was found in it. It was fixed. Either way, you probably don't want to do binary analysis on a networked computer.

lobstersammich 4y ago

For folks who are curious, here's a translation. Scroll to the bottom of the dictionary page. In the left-hand column there is an entry under `gadara`: https://ejtaal.net/aa/#hw4=793,ll=2323,ls=5,la=3216,sg=766,ha=530,br=685,pr=111,aan=447,mgf=641,vi=270,kz=1840,mr=463,mn=997,uqw=1159,umr=778,ums=656,umj=574,ulq=1277,uqa=312,uqq=261,bdw=635,amr=463,asb=694,auh=1141,dhq=400,mht=657,msb=175,tla=78,amj=566,ens=1,mis=1560 https://ejtaal.net/aa/#hw4=793,ll=2323,ls=5,la=3216,sg=766,h...