Hacker News new | ask | show | jobs
by calebfenton 67 days ago
The thing protecting your software's secrets wasn't encryption. Tt was that almost nobody could read compiled code. Now AI can. For dollars. In minutes.

The few thousand people worldwide who could reverse engineer binaries were the entire moat protecting IP, firmware security, and software as a discipline. That scarcity is gone.
1 comments
saidnooneever 67 days ago
few thousand? this binaries being a protection has been changing for a long time already by drm, sgx and other means. there has been a steady increase in complexity and effectiveness in hiding stuff through drm/encryption and other schemes.

just that some LLM calls it a moat or rare skill is nonsense. there are whole industries in which its normal dayjob for people to reverse engineer binaries let alone for the thousands upon thousands that graduate technical programs each year and can do proper RE. then ofc many thousands of hobby people who are likely some of the most sharp RE people out there.. huge communities reversing games, consoles, firmwares....

AI promoting AI

link
calebfenton 67 days ago
I would say I'm not AI but that's what AI would say, right? There are 3 R's in strawberry!

There are several products on the market that are automating reverse engineering. Think of what people do: they orchestrate tools, build tools, read code, run things in emulators / sandboxes. All of that can be done with an agent in the middle. Building the tools is hard, knowing how to use them is kind of hard.

If the code isn't obfuscated / packed / etc, claude code and a ghidra mcp server is better than most of the reverse engineers out there and way, way faster. You can work to get other tools in the mix for claude code.

Are models getting dumber or smarter? Is code getting easier or harder to write? The writing is on the wall.

link
saidnooneever 66 days ago
im not sure really. i do not think claude with an MCP is better than reverse engineers. I think that is taking some bad baseline of what reverse engineers are capable of.

Claude instructed by a highly skilled engineer might outperform a poor engineer, this is simple to see.

The innovation would be that claude guided by a shit engineer (or just a sales guy or my mom..) would outperfor a senior engineer. Senior in skills and experience, not title.

and RE is a vast field with an extreme wide skill tree. many of which skills are undocumented and not publicly shared,.using even tooling not available to these models...

its not just some dudes with ghidra lookin at firefox .. thats the rarer case :S

link