Ghidra: A software reverse engineering suite of tools developed by the NSA

Re:Ghidra: A software reverse engineering suite of tools dev... by barkingcat on Wednesday July 14, 2021 @08:27AM (#27832290)

I would expect there to be self-mutating code such that when the open source code is compiled with a particular compiler it activates a different code path (written into the compiler itself) such that the final resulting binary does not correspond to the source code if it were compiled with another compiler.

And if this resulting binary is distributed, audits of the source code wouldn't catch these modifications.

[ Parent | on HN ]

Re:Ghidra: A software reverse engineering suite of tools dev... by Godel_unicode on Wednesday July 14, 2021 @10:50AM (#27833672)

1) There are many java compilers with diverse origins. Try more than one.

2) The binary (or jar) can't lie about what it contains. Take it into an air gap and reverse engineer it, what's there is there. This includes compilers.

3) see posters comment about the impracticality of stopping someone with the money, talent, skills, and patience of the NSA :)

[ Parent | on HN ]