[tor-bugs] #5837 [Quality Assurance and Testing]: Use IDA Pro and/or BinDiff to inspect releases

[Tor Bug Tracker & Wiki]

#5837: Use IDA Pro and/or BinDiff to inspect releases
-----------------------------------------------+-------------------------
     Reporter:  mikeperry                      |      Owner:  cypherpunks
         Type:  project                        |     Status:  new
     Priority:  major                          |  Milestone:
    Component:  Quality Assurance and Testing  |    Version:
   Resolution:                                 |   Keywords:  volunteer
Actual Points:                                 |  Parent ID:  #5292
       Points:                                 |
-----------------------------------------------+-------------------------

Comment (by cypherpunks):

 Is this ticket still actual for reproducible builds? Probably to transform
 this to analysis of decompilated binaries, as long as they are
 reproducible but not true deterministic yet. If all compilers in the whole
 universe was tampered to tamper only specific target then no test case
 could help to find it, only independent reverse engineering of bundle
 could help.

 Lets to fill ticket by links to open-source tools with academic background
 or free ones at least.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5837#comment:27>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online