@Feynman @nixCraft I learned it by writing stuff and disassembling it, then trying to understand what it's doing. And yes, absolutely still relevant, even though a lot of enterprise software is Java, almost all of it has a bit of compiled code and that's usually where bugs live
If you check out the various work I did on https://skullsecurity.org/cv you'll see a ton of reversing
@nixCraft In a similar way, minified JavaScript can be considered to be open source…
Understanding and modifying it seems to be too much of a chore for me to even try. (Applies to both.)
But it still not free/libre :(
@nixCraft *source available
(Sorry 🤣)
@nixCraft hate to ruin the fun, but:
- That's not open-source. Don't believe me? Read the definition for yourself: https://opensource.org/osd/
- It's not actually the real source code.
- A lot of EULAs actually don't allow reverse-engineering, so to do it legally you would have to fall under one of the situations where the law would override that (iirc security research is one of them)