Cheat Engine

[Channel GannoK]

Brolock is into kids I'm pretty sure, so taking talix's word means pretty much nothing

[mdthr]

[atom0s]

[br0l0ck]

Im not basing my entire view off of that single bug. I understand that the circumstances for the remote code to be executed had to be under the debug mode and had to be sent a corrupted file in order for it to start listening for traffic.

"Again, take a minute to actually look into things rather than just rehash what others say. "
YOU were the one saying the software is clean and has had extensive testing, I was using this bug as an example that what you have said is false, as the software was only released for a couple days and then this bug was found. This means its possible there's more to be found.

I don't think its fair to say its contradicting to believe Snowden while distrusting the NSA. There was already information about what the NSA was doing before Snowden, so it is not blindly trusting him, its using the information he provided to confirm what was already being said.

"This tool wasn't released for braindead morons that will open anything that is sent their way."
I think this is where youre wrong and not seeing the NSA's intent. I dont think Ghidra has to directly have something malicious in it where it does something like just send back to the NSA exactly what the user is doing. It could have 0 malicious code and could still be being used by the NSA for a malicious purpose.

2 situations where malicious code would be used:

There is 100% situations where the NSA would want some entity, maybe a foreign government, to have this program on their systems. A spy or someone working with the NSA internally could then enable this debug mode and open the ports, and it is possible that security will not see anything wrong with this because the Ghidra program will already be trusted. The NSA can then easily backdoor that system and spread it to other ones, imagine Stuxnet that I mentioned earlier.

Another situation: some braindead moron in russia or the ukraine wants to begin replicating or stealing things from commercial products to implement in his own product or sell on the black market. Instead of the NSA simply just going after the guy, they would backdoor his system and continue to monitor him and see if the person has any ties to any people with actual power in the scene (higher ups in the black market)

Now imagine that the software is 100% clean. you can still ask the question of what the NSA has to gain when releasing something like this to the public:
Do you think the amount of open source contribution can make up for the amount of people that will use ghidra for illegal purposes?

Do you think that the NSA with their massive budget actually needs contributions from the open source community?

If what ghostmane is true and IDA is better, why would the NSA not use that instead of wasting their own resources making a competitor? I think this one has to do with the fact that IDA was created by a russian and is under a foreign company.

I dont have answers to these questions, id have to think more about what the intention is of the NSA when releasing this. but I do want to ask these questions because I dont think you should trust the software and NSA just because it doesnt contain malicious code. There's more questions you could ask as well, and all of these add up to the reasons as why not to trust it, so its not a blind hate.

[Mania Guy]

it's the NSA what could go wrong?

[clash of clans hacks]

[atom0s]

Source code was released this morning.
https://github.com/NationalSecurityAgency/ghidra

[Cheat Engine User]

Not to be blunt Brolock, but would it kill you to respond decently?

[Channel GannoK]

[mdthr]

[atom0s]