Geof25

I will give you one better - encrypt the variables and move the secrets to a different server running hashicorp. Then load the secrets and keep them only in RAM.

So people will be running reverse engineering through openrouter and similar or local inference while Anthropic is severely crippling cyber security usefulness of their products. Feels like own goal.

Foldables to me look like a fad. People are using them now because it looks cool, but I have seen people to return back to normal phones due to unreliability of foldables.

I have noticed that too. Even here on hacker news people are bragging to burn through 100usd of tokens per hour while I know about friend who has forced Claude Code to write complete MCU emulator with peripherals including HSM just from leaked firmware and reference manual for less than 50Eur whole project.

I agree with reliability of software getting so much better. I still remember Windows Millennium (Something between 98 but not Windows 2000) and it has been a mess.

Further more I still remember software developers in the 2000s who just refused to do any kind of testing on produced software, because it is just a waste of time. It compiles? It ships!

Not many people are such cowboys today.

Claude Code for coding and DeepSeek + opencode for reverse engineering at this point.

DeepSeek will break the binary into code and Claude will search for problems. Now you have most of exploitation chain.

ISA - iOS subsystem for Android

I confirm, first down for me after 4 years of usage. Got little scared at first that I had my account blocked...

I am in a similar bucket like you. I like reverse engineering but the tedious and boring stuff between an idea and implementation made me drop so many projects.

Like I see a hole in a firmware and I want to dump the firmware, but then I start hitting the bland stuff like what is the ABI for this hole, how should you compose payload without watchdog kicking me out. Oh this datasheet is garbage. This reference manual makes no sense. Ok that's because it is for a same processor, different lockstep. Why am I fighting with stack on this processor? When you should use star and ampersand for manipulation of pointers in C? Oh writing a linker script a little frustrating horror. No ld we don't have RO data, only code, stop inserting it. Now let's strip it and I have payload.

This would take me days to get through while with AI I can make dozens of iterations in matter of one day.

You can buy FRAM (Ferroelectric RAM) which are effectively the same thing just in smaller package. But I have seen them only about few kB. However the amount of R/W operations is effectively unlimited,

Surely such people does not have 100usd/hour budget?

By not using existing tools and one shooting everything through the API - I.e. instead of decompile via Ghidra they will try to get source via capstone genersted assembly.

It is like putting a jet engine on a shipping container and wondering why it needs to be constantly kept in afterburner to at least scrape on the road while smarter users put wheels on the shipping container.

And yet there is much more successful sabotages than prevented ones. It turns out that one can't see into a mind of other person.

99% of saboteurs won't do string of such stupid mistakes. So it is a vanishing chance bordering on luck that intelligence will prevent anything and it will be possible to apply conspiracy charges.

How else would you like to discover a conspiracy if the saboteur is a tourist coming from abroad? Or of a saboteur is a child who got promised 1000eur for it?