3 ms·
I'm not sure why this is framed as an issue for security teams. Transpiling software has been a thing for ages. Especially in the JS world. Decompiling has been
by viraptor 2y ago
I'm not sure why this is framed as an issue for security teams. Transpiling software has been a thing for ages. Especially in the JS world. Decompiling has been a bit harder without automation, but unless you have black box tests, this process will take ages to verify that the result has matching functionality.
So why would the blue teams care beyond "oh fun, a new tool for speeding up malware decompilation"?
Edit: To be clear, I get the new reverse engineering and reimplementation possibilities got much better and simpler. But the alarmist tone seems weird.
- Avicebron 2y agoIt seems like "red-teaming" and "security research" have become more socially prominent recently, so people naturally aligned with grift, e.g. making things seems alarmist and that they are the only ones in the know, are trying to seem part of the club?
- SebFender 2y agoOn point. We're not really interested in these things. Yeah we take a look at it and stay informed but the main focus remains bypass of controls and data itself. With decent backend controls - apps don't/shouldn't do much in the end. Once you show information on a screen consider it potentially gone.
- giancarlostoro 2y agoAgreed. Are we supposed to stop developing all software as a result? Ask for LLMs to censor reverse engineering? Someone else wont care and will build another LLM to bypass limitations.
- sbarre 2y agoI read the blog post (especially in combination with the end bit) at least in part, as an advertisement for the author's capabilities and services. That makes the tone make a bit more sense to me.