Ghidra: Is there any Backdoors or Monitoring Services behind GIHDRA?

Created on 6 Mar 2019 · 4Comments · Source: NationalSecurityAgency/ghidra

As the software was released to the public free of cost and its from NSA, common comments we get over some YouTube videos are this question title.
Is there any sort of Backdoor or Any other Monitoring Services in the Software ?

Question

Source

ghost

Most helpful comment

It's going to be open-source on the full release, so you can inspect and compile the code for yourself.

oldmud0 on 6 Mar 2019

👍5

All 4 comments

It's going to be open-source on the full release, so you can inspect and compile the code for yourself.

oldmud0 on 6 Mar 2019

👍5

If someone finds something related to this topic, what will be the NSA's reply?

ghost on 6 Mar 2019

A strikingly similar question was asked and answered on https://github.com/NationalSecurityAgency/qgis-searchlayers-plugin/issues/6#issuecomment-367773492

In short:

the license disclaims any express or implied warranties (status quo for any open source project, not unique to NSA)
you're free to inspect and compile the code yourself (you don't need to trust the code's authors)
if you find anything you think is a problem, you are welcome to report it as a bug

ctubbsii on 6 Mar 2019

👍1

They said in their talk that there are no backdoors in this application, but you can always just decompile it and look for yourself until the source is out.