4 2 1 Christopher Domas The future of RE Dynamic Binary Visualization

Thank you for the explanation. But initially I posted that in answer to link where someone asked about if it would make sense to clone/reimplement somthing like Genera. And I pointed out that maybe the next best thing would be link With the intent to not having to start from scratch, not necessarily using it as is, but to take inspiration from. Or not, and really pushing it forward instead, but that depends on so many factors. However, it is possible. Besides that, did you really have the impression 'innocent people' had to be warned of the consequences, wasted time, whatever? ;-) Furthermore, either Common Lisp is Common Lisp, or not. So what does it matter, if only few people ever used that? As soon as it's getting graphical there is nothing besides the two commercial vendors(so proprietary), and old McCLIM. So who really cares? There is Movitz and Mezzano, why should there be no effort to make Medley modern? Would McCLIM on steroids be better for SBCL and Clozure? Who knows? I for my part like to look deep into such things, to see how I can adapt the concepts(not necessarily code) into my dabblings on FPGAs. Sometimes I had my mind blown, by things I haven't seen before, didn't even know the possibility thereof. Learning new concepts, applying them. Like this ▶ this video (not related to topic) Anyway, I like to go back into the roads not taken, to at least partially re-branch from there. There is much to learn from. From that what we have now, not so much.

This demo does a fairly decent job of explaining how you'd use these kinds of visualizations: ▶ this video Batelle's CantorDust combines the visualization concept with a convenient UX for selecting blocks of code graphically and zooming in on the corresponding hex, or vice-versa. The "devil is in the details" with respect to the UX for these kinds of tools. The visualization or 2D image by itself is somewhat less useful without being able to snap to the corresponding part of the hex or IDA/Ghidra disassembly. I do think adding a 3rd dimension to the visualization probably adds somewhat more utility as well. The recently released open source package for CantorDust seems to omit the 3D visualizations which were shown in the demo linked here.

This is my favorite version of it: ▶ this video Some people have taken this concept very far. Batelle's CantorDust (was?) a pretty fully developed 3D visualization software for binary packages utilizing many different views and filters with convenient UX for selecting blocks of code graphically and zooming in on the corresponding hex, or vice-versa. Edit: I looked very hard for this software about 6-12 months ago and couldn't find anything...it appeared to be vaporware. However, 'LargoLasskhyfv posted in this thread tree at the exact same time I did and noted that it was just released about 3 months ago as a plugin for Ghidra. I'm very excited to play around with it.

You might want to have a look at Bossard's presentation from defcon20 (2012?), "Hardware backdooring is possible": link He's done a few of these, so I might be getting them mixed up -- but the message is basically that x86 (and by extension amd64) is hopelessly broken due to legacy crap that sort of hides between the cpu, ram and devices (the software running on your cdrom drive, on the network or sound card...). Also related: 4 2 1 Christopher Domas The future of RE Dynamic Binary Visualization ▶ this video [ed2: Skip to ~14-15 minutes to get to the good stuff, then go back and watch the whole thing :) software home page and demo download (I don't think there's anything new published): link link ed: More recent presentation, looks to be the same: link ] Again related to (but as far as I remember does not reference [edit: I was wrong, he does indeed reference this]): Black Hat USA 2010: Voyage of the Reverser: A Visual Study of Binary Species 1/5 link #HITB2013AMS D2T1 Sebastien Kaczmarek - Dreamboot - A UEFI Bootkit link