4 ms·
If there is a set of organizations that would consider using this tool that could be the justification for releasing it. It's a tool to reverse engineer binarie
by soheil 4y ago
If there is a set of organizations that would consider using this tool that could be the justification for releasing it. It's a tool to reverse engineer binaries so it's likely to also reverse engineer whoever is foolish enough to run it in a production environment against an adversary thus putting the NSA in the driver's seat.
- saagarjha 4y agoAre you familiar with how Ghidra works? You run it own your own computer on a binary that you feed it. It’s not like it talks to the NSA to exfiltrate things.
- ackbar03 4y agoHe's not completely wrong though, you do want to be careful when your using something developed by someone like the NSA. It's the same reason you want to be careful using cracked versions of IDA since the guys that can crack IDA can probably do other stuff to it. I think thats part of the reason NSA open sourced the code for it so people could see no backdoor are in there. So in this particular case maybe less of a concern
- saagarjha 4y agoThe NSA would suffer reputational damage by doing this. Random cracker might do so too but it’s definitely a different market.
- soheil 4y agoThat's the point. If you suspected anything then the tool wouldn't be useful, not too dissimilar to the Underhanded C contest [0]. [0] http://www.underhanded-c.org/ http://www.underhanded-c.org/