How REA Cracked Closed-Source Software Wide Open — Transcript

Full transcript

1. 0:00Two weeks ago, a free repository called
2. 0:02REA, short for reverse engineer
3. 0:05anything, quietly went nuclear on
4. 0:08GitHub, exploding past 115,000
5. 0:12stars and 25,000 forks in a matter of
6. 0:15days. With a single terminal command, it
7. 0:18connects AI coding agents directly into
8. 0:21the US National Security Agency's binary
9. 0:23decompiler, allowing anyone to take a
10. 0:26locked, [music]
11. 0:26closed-source .exe app or video game and
12. 0:30strip-mine it back into clean C++ source
13. 0:33code in less than 48 hours. Developers
14. 0:36are already using it to mass decompile
15. 0:38commercial games and crack proprietary
16. 0:40hardware. But when independent
17. 0:42researchers ran 482 controlled tests on
18. 0:46this tool just days ago, they uncovered
19. 0:48a twist that proves closed-source
20. 0:50software isn't just vulnerable, it might
21. 0:53already be dead.
22. 0:58>> [snorts]
23. 0:59>> Up until this month, if you wanted to
24. 1:01use AI to clone a piece of paid
25. 1:03software, you had to vibe code it.
26. 1:07You showed an AI a screenshot of
27. 1:09Photoshop or a video game, and the AI
28. 1:11tried to guess how the code worked from
29. 1:13the outside.
30. 1:14For simple apps, that worked. But the
31. 1:17moment an application had complex game
32. 1:19physics, custom audio engines, or
33. 1:22encrypted network checks, the AI hit a
34. 1:24brick wall. Because it couldn't see the
35. 1:27actual source [music] code locked inside
36. 1:29the .exe file.
37. 1:31Normally, when a studio finishes writing
38. 1:33a program, they run it through a
39. 1:35compiler that strips away every folder,
40. 1:38every variable name, and every human
41. 1:40word, crushing the code down into
42. 1:43millions of lines of raw machine
43. 1:45assembly.
44. 1:46Even if you drop that file into elite
45. 1:48forensic tools like IDA Pro or the NSA's
46. 1:51Ghidra decompiler, all you got back was
47. 1:54a scrambled maze of anonymous memory
48. 1:56addresses that took human hackers years
49. 1:58to decipher by hand.
50. 2:01REA bypassed that human bottleneck
51. 2:03overnight.
52. 2:04Built by a developer named Moluto, the
53. 2:07tool uses the model context protocol, or
54. 2:10MCP, to give AI agents like Claude code,
55. 2:13OpenAI Codex, and Cursor direct hands-on
56. 2:17control over Ghidra, IDA Pro, Binwalk,
57. 2:20and live network interceptors.
58. 2:23Instead of a human staring at nameless
59. 2:25assembly code for 6 months, the AI agent
60. 2:28opens the binary inside Ghidra
61. 2:30headlessly, traces thousands of function
62. 2:33calls across the memory graph in
63. 2:34seconds, and rewrites the unreadable
64. 2:37assembly back into clean C++ or [music]
65. 2:39Rust.
66. 2:41Even crazier, it doesn't guess.
67. 2:44In a test on the classic PC game DX
68. 2:46Ball, the agent extracted a compiled
69. 2:48[music] x86 audio routine, rebuilt it in
70. 2:52clean C, tested it against 3,205
71. 2:55execution states, and matched 63 out of
72. 2:5963 original compiled bytes with 100%
73. 3:02accuracy.
74. 3:04And within hours of that demo going
75. 3:06live, the gaming underground turned it
76. 3:08loose on commercial games.
77. 3:14Wait until you see what happened when
78. 3:16game modders got their hands on this
79. 3:18workflow.
80. 3:20Historically, decompiling a single video
81. 3:22game back into native source code was
82. 3:25one of the hardest feats in computer
83. 3:27science. When fans manually decompiled
84. 3:30Super Mario 64 and Zelda: Ocarina of
85. 3:33Time, it took teams of programmers years
86. 3:36of agonizing work. Therefore, only a
87. 3:39handful of legendary games were ever
88. 3:41decompiled. Two weeks ago, that
89. 3:44multi-year barrier collapsed into a
90. 3:46single [music] weekend.
91. 3:48Look at a viral project called Isaac
92. 3:50Reborn. The original 2011 version of The
93. 3:53Binding of Isaac was built inside dead
94. 3:56Adobe Flash code, permanently trapped at
95. 3:59a laggy 30 frames per second and a
96. 4:01blurry low resolution. A developer
97. 4:04pointed an AI decompilation pipeline
98. 4:06straight at the game's binary and
99. 4:08automatically translated the entire
100. 4:11codebase into native C++ in just days.
101. 4:15Right out of the box, a 15-year-old
102. 4:17Flash game was running natively on
103. 4:19modern PCs at 1440p and a locked 165
104. 4:24frames per second.
105. 4:25And Isaac Recomp was just the opening
106. 4:28shot. Within days, Hacker News and
107. 4:30GitHub were flooded with AI decompiled
108. 4:33game engines. One developer used AI and
109. 4:36Ghidra to reconstruct the proprietary
110. 4:39Refractor 2 engine from Battlefield 2
111. 4:41into modern C++ 20. Another extracted a
112. 4:45full 3D engine from Subway Surfers.
113. 4:48Another translated the cult classic
114. 4:50shooter Gun Z the Duel straight into
115. 4:53memory-safe Rust. [music] While a new
116. 4:55experimental project called NPS5
117. 4:58launched with a wild goal, using
118. 5:01automated binary translation to convert
119. 5:03PlayStation console executables [music]
120. 5:05straight into native PC ports.
121. 5:08For gamers, watching abandoned classics
122. 5:10get rescued from dead hardware looked
123. 5:12like a golden age. But within days,
124. 5:15developers realized this pipeline
125. 5:17doesn't just work on old video games.
126. 5:19[music] It works on physical gadgets and
127. 5:22live commercial software sitting on your
128. 5:24desk right now.
129. 5:28>> [snorts]
130. 5:30>> Look at what happened when a developer
131. 5:32pointed an AI reverse engineering agent
132. 5:35at the Plaud Note Pro, a popular
133. 5:37hardware voice recorder that normally
134. 5:39forces buyers to use a proprietary
135. 5:41mobile app and cloud ecosystem just to
136. 5:44manage their own audio files. By feeding
137. 5:47the device's traffic and companion
138. 5:48software into an AI-driven forensic
139. 5:51workflow, the developer
140. 5:52reverse-engineered the gadget's private
141. 5:55Bluetooth Low Energy protocol, decoded
142. 5:57its undocumented vendor commands, and
143. 5:59built a custom macOS app that pulls
144. 6:02audio recordings directly off the
145. 6:04hardware over Bluetooth, completely
146. 6:06bypassing the company's cloud lock-in.
147. 6:09Days later, another developer pointed
148. 6:12REA directly at Notion's commercial
149. 6:14desktop application. Because Notion runs
150. 6:17on Electron alongside compiled native
151. 6:19modules, its internal system calls are
152. 6:22normally hidden from users. The AI agent
153. 6:25unpacked the application bundle, mapped
154. 6:27out the compiled native clipboard
155. 6:29bridge, and documented the exact hidden
156. 6:32APIs Notion uses to communicate with
157. 6:34your operating system. From Android APKs
158. 6:37with encrypted network traffic to locked
159. 6:39Wi-Fi router firmware, tasks that
160. 6:42[music] used to require a $200,000
161. 6:44a year security researcher with a custom
162. 6:47debugger were suddenly happening inside
163. 6:49a standard terminal window.
164. 6:51And that was the exact moment
165. 6:53independent researchers decided to test
166. 6:56whether REA was really as [music]
167. 6:58powerful as the hype claimed, and
168. 7:00uncovered the biggest plot twist of the
169. 7:02entire story.
170. 7:06>> [snorts]
171. 7:08>> Remember that question from the
172. 7:09beginning of the video? Why did security
173. 7:12researchers run 482
174. 7:14controlled tests on REA just days ago?
175. 7:18Because as the repository blew past
176. 7:20115,000
177. 7:22stars, skeptics noticed something
178. 7:24strange. The star graph was growing
179. 7:26vertically, and researchers wanted to
180. 7:29know how much of the magic was actually
181. 7:31[music] coming from the REA tool itself
182. 7:33versus the underlying AI models. So, on
183. 7:37October 26th, researchers published two
184. 7:40pre-registered evaluations [music]
185. 7:41called Real Lab and Lean REA, testing
186. 7:44Claude code across hundreds [music] of
187. 7:46real binary reverse engineering
188. 7:48challenges.
189. 7:49When the results came back, they stunned
190. 7:51the security community. While REA solved
191. 7:5475 out of 75 reverse engineering
192. 7:57benchmarks, a stripped-down, bare-bones
193. 8:00command-line script connected to
194. 8:02standard tools like Ghidra and objdump
195. 8:05solved 74 out of 75, [music]
196. 8:07while finishing 38% faster and burning
197. 8:1035% [music] fewer AI tokens. Think about
198. 8:14what that benchmark actually proved. The
199. 8:17breakthrough wasn't a single viral
200. 8:19GitHub wrapper that companies could
201. 8:20easily ban or take down with a DMCA
202. 8:23notice. The benchmark proved that
203. 8:25frontier AI models themselves [music]
204. 8:27have quietly crossed a permanent
205. 8:29threshold. They can now natively read
206. 8:32disassembled machine code, reconstruct
207. 8:34control flow graphs, and compile
208. 8:37software almost autonomously. Even if
209. 8:40the RE repository disappeared tomorrow,
210. 8:43every developer with a terminal and a
211. 8:45copy of Ghidra now holds an industrial
212. 8:47grade decompiler on their laptop.
213. 8:52>> [snorts]
214. 8:54>> And that brings us to the dark reality
215. 8:56now facing every software developer and
216. 8:58game studio on the [music] planet.
217. 9:00On platforms like Steam, solo indie
218. 9:03developers spend three [music] or four
219. 9:05years coding a unique game from scratch,
220. 9:07and rely on releasing a free playable
221. 9:09demo months before launch to build wish
222. 9:12lists. Until now, releasing a demo was
223. 9:15safe because competitors only got the
224. 9:17compiled .exe file.
225. 9:20Today, a clone factory can download your
226. 9:22playable demo on Saturday [music]
227. 9:24morning, feed the executable into an AI
228. 9:26decompiler over the weekend, extract the
229. 9:29exact C++ gameplay math you spent three
230. 9:32years perfecting, wrap it in new 3D and
231. 9:36release a clone on the store before your
232. 9:38real game even comes out. Even worse,
233. 9:41copyright law has no idea how to stop
234. 9:44it. When one AI agent reads your
235. 9:46compiled binary inside Ghidra and writes
236. 9:49[music] a plain English specification of
237. 9:51how your software works, and a second AI
238. 9:53agent writes brand new C++ or Rust
239. 9:56[music] code from that description, it
240. 9:58automates what lawyers call clean room
241. 10:00reverse engineering.
242. 10:02Every variable name is new, [music] the
243. 10:04code structure is different, and proving
244. 10:06theft in court becomes nearly
245. 10:08impossible.
246. 10:10That is why cybersecurity analysts warn
247. 10:12we are entering the most [music]
248. 10:13aggressive DRM war in history. Because
249. 10:17if shipping a .exe file to your hard
250. 10:19drive means handing AI agents your raw
251. 10:21source code, software companies only
252. 10:24have two moves left. Either inject
253. 10:26invasive kernel level anti-tamper
254. 10:28rootkits into every app you install or
255. 10:31kill local downloads entirely, forcing
256. 10:34every future app and video game onto
257. 10:36locked [music] cloud servers where you
258. 10:38never own a single file on your PC.
259. 10:41If you want to see how modders already
260. 10:43used AI to turn PlayStation 5 games into
261. 10:46native PC apps or how Vibe Coded clones
262. 10:49are flooding the internet, click one of
263. 10:51the investigations on your screen right
264. 10:53now.