šØLEGENDARY DROP TOMORROW... Pancake š¤ Paulās Security Weekly
Reverse engineering, radare, and NowSecure - you won't want to miss this one
| Pronouns | she/her |
| Random stuff (mostly in spanish) | @astralia |
| I also enjoy taking pictures | @[email protected] |
šØLEGENDARY DROP TOMORROW... Pancake š¤ Paulās Security Weekly
Reverse engineering, radare, and NowSecure - you won't want to miss this one
RE: https://infosec.exchange/@pancake/116149396451709086
Absolutely and completely true.
On Linux you can install radare2 in many ways:
- take the .deb files from githubās release page
- use the rpm spec for fedora/redhat/..
- use snap or flatpak packages
- build from source (make or meson), yes, i maintain both build systems, in your home or system wide
- use r2env to switch between many versions
For dockers and ci jobs i usually take the deb
I canāt really compare how much faster, safer and reliable is r2-6.1 against Ubuntuās 5.5.
The story about why Debian not packaging r2 is complex and long (several maintainers disappeared without notice).
They decided to remove the package after me rejecting to backport fixes for a 4 year old copy of the project to address some CVEs. CVEs usually are a 5% of the real issues for projects like this, just git log|grep crash for a full list.
I refuse to maintain abandoned software thatās not even distributed in its pure source form. Debian ships custom patches that are never reported upstream.
Ubuntu keeps shipping a the last version packaged by Debian, for an unknown reason. Almost no modern plugins like r2ghidra will work.
I have good conversations with Debian maintainers and their release cicle wonāt fit what r2 users would need. We move fast, debian expects stability over time, both approaches are fine but unfortunately incompatible.
I did huge advances in r2 about perforance, stability, code quality and security. But its a huge codebase and two hands and two eyes canāt do as much as I wished, so still, after 20 years I recommend everyone to use r2 from git if possible
I read the binaryaudit post few days ago, and despite #radare2 winning the opensource reversing tools benchmark i was surprised that IDA was faster.. but didnāt really checked how they were running it until now š¤¦āāļø so here i am once again sharing the same basic tips:
- do not install radare2 from debian, their package was updated 5 years ago š use last release deb files or build from source
- do not use aaaa unless you dont care about time š there are many specific analysis
- pdc is not a decompiler, itās a pseudodisassembler š use r2dec, decai or r2ghidra instead