I read the binaryaudit post few days ago, and despite #radare2 winning the opensource reversing tools benchmark i was surprised that IDA was faster.. but didn’t really checked how they were running it until now 🤦‍♂️ so here i am once again sharing the same basic tips:

- do not install radare2 from debian, their package was updated 5 years ago 👉 use last release deb files or build from source
- do not use aaaa unless you dont care about time 👉 there are many specific analysis
- pdc is not a decompiler, it’s a pseudodisassembler 👉 use r2dec, decai or r2ghidra instead

Let’s dig into these 3 details a little 👇

I can’t really compare how much faster, safer and reliable is r2-6.1 against Ubuntu’s 5.5.

The story about why Debian not packaging r2 is complex and long (several maintainers disappeared without notice).

They decided to remove the package after me rejecting to backport fixes for a 4 year old copy of the project to address some CVEs. CVEs usually are a 5% of the real issues for projects like this, just git log|grep crash for a full list.

I refuse to maintain abandoned software that’s not even distributed in its pure source form. Debian ships custom patches that are never reported upstream.

Ubuntu keeps shipping a the last version packaged by Debian, for an unknown reason. Almost no modern plugins like r2ghidra will work.

I have good conversations with Debian maintainers and their release cicle won’t fit what r2 users would need. We move fast, debian expects stability over time, both approaches are fine but unfortunately incompatible.

I did huge advances in r2 about perforance, stability, code quality and security. But its a huge codebase and two hands and two eyes can’t do as much as I wished, so still, after 20 years I recommend everyone to use r2 from git if possible

On Linux you can install radare2 in many ways:

- take the .deb files from github’s release page
- use the rpm spec for fedora/redhat/..
- use snap or flatpak packages
- build from source (make or meson), yes, i maintain both build systems, in your home or system wide
- use r2env to switch between many versions

For dockers and ci jobs i usually take the deb