News for hackers. Stuff that matters.

A comment on Ghidra, NSA's reverse-engineering tool. Parent comment

Re:Ghidra, NSA's reverse-engineering tool by Goz3rr on Wednesday March 06, 2019 @05:14AM (#19317778)
I hope you don't use Linux, because the NSA contributes to quite a lot of OSS. They also created SELinux for instance.
[ Parent | on HN ]
Re:Ghidra, NSA's reverse-engineering tool by mattigames on Wednesday March 06, 2019 @07:55AM (#19318504)
Those changes on OSS are reviewed by a lot of people, this here is just released and reviewed by themselves only.
[ Parent | on HN ]
Re:Ghidra, NSA's reverse-engineering tool by AnIdiotOnTheNet on Wednesday March 06, 2019 @09:39AM (#19319195)
Sure, the ones officially contributed by the NSA. What you have to wonder is how much code was contributed by some seemingly normal community member that is actually a front for the NSA to introduce subtly flawed code that they can use to their advantage while being plausibly just a bug?

There are those who suspect Heartbleed came about this way.

[ Parent | on HN ]
Re:Ghidra, NSA's reverse-engineering tool by AsyncAwait on Wednesday March 06, 2019 @08:29AM (#19318702)
- SELinux has been free-software for over a decade, with many open-source contributions.

- Many people don't use SELinux, especially on distros like Arch, Gentoo etc. where it (luckily) doesn't come as part of the package, SELinux is far from universal.

[ Parent | on HN ]