News for hackers. Stuff that matters.

A comment on Software reverse engineering suite developed by NSA's Research Directorate. Parent comment

Re:Software reverse engineering suite developed by NSA's Res... by boxfire on Sunday October 16, 2022 @03:13PM (#33226336)
Which is prescient... this is a tool by the NSA after all. I would be disappointed if it wasn't back-doored... Anybody working on a feature-parity FOSS alternative from scratch?
[ Parent | on HN ]
Re:Software reverse engineering suite developed by NSA's Res... by saagarjha on Sunday October 16, 2022 @03:21PM (#33226405)
Releasing backdoored software to people who are experts in finding software backdoors would definitely be a strategy
[ Parent | on HN ]
Re:Software reverse engineering suite developed by NSA's Res... by uni_rule on Sunday October 16, 2022 @04:16PM (#33226823)
One of the strategies of all time
[ Parent | on HN ]
Re:Software reverse engineering suite developed by NSA's Res... by SXX on Sunday October 16, 2022 @03:24PM (#33226437)
Like, come on. How it's can be back-doored if it can work just fine in offline VM?

Also there are only small percent of specialists who even know this tool exist let alone have know-how to use it. And since it heavily used for mailware reverse engineering it's gonna be laughtable to put any "secret backdoors and exploits" in it.

Might be worth it as hacker contest for finding good hiring candidates, but certainly not at spying attempt. No sane person who able to use this software gonna run it on PC containing some important secrets.

[ Parent | on HN ]
Re:Software reverse engineering suite developed by NSA's Res... by brian-armstrong on Sunday October 16, 2022 @03:28PM (#33226463)
The source is freely available on Github. Show us where the backdoor is.
[ Parent | on HN ]
Re:Software reverse engineering suite developed by NSA's Res... by mikepurvis on Sunday October 16, 2022 @03:19PM (#33226383)
What would a back door look like in a tool like this? Silently returning incorrect results for certain binaries?

Perhaps I lack imagination but I’m having trouble picturing what that could be good for or how it could even be hidden. This isn’t like a crypto constant that you can pretend is random but secretly has known factors.

[ Parent | on HN ]
Re:Software reverse engineering suite developed by NSA's Res... by lo_zamoyski on Sunday October 16, 2022 @03:33PM (#33226507)
To what end? The risk of it being discovered is high and would only cause scandal.
[ Parent | on HN ]
Re:Software reverse engineering suite developed by NSA's Res... by Fnoord on Monday October 17, 2022 @06:47AM (#33231822)
FWIW, an RCE was found in it. It was fixed.

Either way, you probably don't want to do binary analysis on a networked computer.

[ Parent | on HN ]