Also just want to add to your points that the NSA didn't have to admit they developed this. Putting their name to it basically guaranteed that everyone would pour through the code and assume the worst. So it get hyper scrutinzed. So if they had wanted to put a back door in it they would have released it without saying they made it.
comments
That's fair. I just thought that it was a very prolonged back and forth between you two for a small thing. I only added it to it though, lol.
No, it's pretty grindy. Well, unless I am doing it wrong too!
why is it useless
That doesnt change anything about my original point. They are conflicting missions, whether you add certain or not.
And no matter what you call it, backdooring ghidra defeats the point of both, it means no one will use it, which allows malware to run rampant. (Ghidra was released during the height of the cryptolocker craze, it allowed reversing those crypto lockers to be done by anyone, effectively neutering many of them).
And when it gets caught its immediately attributable to the malware division, which they dont want either.
There is zero point backdooring ghidra. Now XZ? *sshole? Thats the level of sophisticated backdoor I would expect from the NSA.
Only true if they can abuse the backdoor, if its tied to NSA infrastructure (which a competent backdoor would be), they couldn't use it. There is also precedence, the Germans didnt hesitate to publicise that Angela Merkel's phone was hacked, they could have used the malware to feed false information instead. Stuxnet was exposed to embarrass the US/Israel.
Cyber security companies would also have no qualms about publicising it. Finding a NSA backdoor would put them on the map, and they have no use for a backdoor.
+1 to that, mindustry is tons of fun and has builds for most devices. I have personally sunk way too much time into it
I had to uninstall it to protect myself from losing my job after I realized I played for 8 hours in two days. This shit is addictive as hell
I tried that one, but the grinding was enormous. Is the game like that, or did I do something wrong?
Seconding Simon Tatham's Puzzles, I've had a lot of fun with it
Battle for Wesnoth
Hex, turn-based, fantasy game.
Tons of campaigns.
https://f-droid.org/packages/org.wesnoth.Wesnoth/
Luanti (previously named minetest)
Block-builder engine, with 100s of game modes.
Has excellent quirky humour, from being community built.
Also, make sure to equip some gear. Otherwise, zero combat skills.
I agree a half finished game isn't what OP is looking for, and a lot of the gameplay (especially later) revolves around finding your way through what are effectively mazes.
I play it one handed though. It's turn based combat and when out of combat you just put your finger on the screen and it walks towards it? I didn't even know a d-pad option existed 😅
I wonder if mobile version of Cataclysm-DDA is open-sourced, like the desktop one. It is probably the most mechanically complex zombie-survival roguelike you can find
Not entirely and with absolute certainty, but more than any proprietary software in general. The more eyes on it the better.
At the end of the day, you have to trust someone and a few black boxes in between as soon as you connect to the internet. So if there's something I'd really rather not let out into the world, it's either on an airgapped encrypted system or a piece of paper hidden where my keys get lost.
Mindustry, its open source, free, has campaign and multiplayer mode, also available on pc. You can even support devs by buying steam version of the game
don't really have to be one to know how past reverse engineering cases have gone
Tried this out on your recommendation and it's a lot of fun! Thanks!
If there is a healty sized developer group contributing. I tend to just install.
If there's just single developer, not much history and mayde AI involved, I'll just skip the software.
I don't have time to review the code and I don't think the developer wants me to feed the code to AI.
If AI is one of the developers and already involved, AI review is an option, if I really need to run it.
Yeah, fair, The controls are a bit clumsy. I would argue that the story is quite polished though. Having a story-driven game like this is rather rare for open-source games.
Can you prove that there is a backdoor?
I didn't say there is, I only ask for proofing your point. Remember: Not able to find anything is not the proof of absence. You can only proof something you can find. All I am saying is, if even Linux Kernel ALMOST got hid by a backdoor that was extremely sophisticated, it could happen to Ghidra as well. I'm not saying Ghidra is unsecure or anything like that.
if China, Russia, NK or any other nation state could find a backdoor
Then they would most likely use it to their advantage without telling anyone. Shaming a nation is not as lucrative like abusing a backdoor.
Just add certain.
Hack certain humans. Protect certain capital
Simon Tatham's Puzzles is my long-time favourite and recently I got really hooked on Water Sort (though that one is a bit lackluster in custom game generation). I don't know if these meet the progression or even deep gameplay requirements, but at least they are challenging and more or less polished.