News for hackers. Stuff that matters.
Re:Ghidra: A software reverse engineering suite of tools dev... by cies on Wednesday July 14, 2021 @08:45AM (#27832410)
> Besides, if the NSA really wants to install some software on your computer, they can probably do it themselves without your involvement.

Running Linux with very few binblobs, I expect they will not be able to.

Running any OS published by $tax_evading_big_corp, I expect they can.

Re:Ghidra: A software reverse engineering suite of tools dev... by kaba0 on Wednesday July 14, 2021 @01:02PM (#27835351)
Running linux* that has basically no security at all, good luck! A rouge extension/bash script can install whatever backdoor it wants without problem.

* under linux I mean mainstream distro here. Unless you use qubes os, it will not have good sandbox, everything runs as your user and can easily modify eg. .bashrc and start up a key logger to get sudo password.

Re:Ghidra: A software reverse engineering suite of tools dev... by imwillofficial on Wednesday July 14, 2021 @08:56AM (#27832489)
Have you seen the crazy stuff the NSA does?
Re:Ghidra: A software reverse engineering suite of tools dev... by cies on Wednesday July 14, 2021 @09:27AM (#27832759)
Link please? I know they collect data, and have Windows backdoors.
Re:Ghidra: A software reverse engineering suite of tools dev... by imwillofficial on Wednesday July 14, 2021 @01:16PM (#27835544)
> Documents obtained by Der Spiegel reveal a fantastical collection of surveillance tools dating back to 2007 and 2008 that gave the NSA the power to collect all sorts of data over long periods of time without detection. The tools, ranging from back doors installed in computer network firmware and software to passively powered bugs installed within equipment, give the NSA a persistent ability to monitor some targets with little risk of detection. While the systems targeted by some of the “products” listed in the documents are over five years old and are likely to have been replaced in some cases, the methods and technologies used by all the exploit products could easily still be in use in some form in ongoing NSA surveillance operations.

https://arstechnica.com/information-technology/2013/12/insid...

Reading their processes is so fascinating.