Am 24.06.2013 10:17, schrieb Armijn Hemel: > On 06/24/2013 09:19 AM, Matthias Bock wrote: >> What do you think, wouldn't that be useful ? >> ... comments, suggestions, disadvantages, drawbacks etc. ? > > Some people use binwalk to discover offsets (and possibly unpack, I > don't use it), other people use the Binary Analysis Tool ( > http://www.binaryanalysis.org/ ) for a fully automated scan (disclaimer: > I wrote it, so I'm biased).
Uh, your BAT looks awfully cool, wow! I did not know it (yet) and definitely will give it a try. While on the other hand I have to admit that the cases I currently dealt with did not need such a tool (yet). I most cases the companies / people bringing the device in question into public are either completely unaware of the issue or try to silently ignore it. Once they are made aware of it they pretty soon resolve the issue without the need to fully proof all and everything. But there are surely also cases where the manufacturer simply denies everything and then it will be super handy to have this tool! > You have to keep in mind that automated tooling is just used to gather > evidence for a *possible* GPL violation. Indeed. > armijn Cheers nils
