Hacker News new | ask | show | jobs
by jbosh 762 days ago
Downloading random exes from the internet is real scary. Jamming this into another tool feels like a better way to go.
3 comments

You are just kicking the can down the road. Then the tool would be the same random exe attack vector. Even then, if the tool is designed to run random game code then the gamecode is still an attack vector.

Trust in software is a huge issue, but that is a totally separate conversation.

The difference is, you can audit the emulator once and verify that you have the correct original game binary. You can't audit unique binary files generated without code nearly the same way.
I understood that they'll release the source for the decompiled project, so you can build it yourself or compare hashes.

Of course it would be a lot easier to hide malicious code in such a decompiled mess of symbols.

Almost everything people use are exe's from the internet.