Don't cut off your nose to spite your face. But seriously, use whatever tool you like and be happy. IDA Home is the most affordable of our licenses, and as the replacement of IDA Starter it is great.
-
-
All of your licenses are horrific & overpriced af so either make them affordable again or maybe shut the entire thing down because ghidra is a thousand times better & that’s why I’m swapping.
2 replies 1 retweet 2 likes -
In what ways is Ghidra better? Genuinely curious what I'm missing here because I thoroughly enjoy IDA despite some annoying shortcomings that are typically associated with anti-RE strategies (so their mishandling makes sense).
3 replies 0 retweets 0 likes -
Well, IDA only has undo because Ghidra did and Hex-Rays went into panic mode to add that feature after decades of saying it was "too hard". So whether you use Ghidra or not, thank it for that :-) Really though, each one has its pros and cons.
1 reply 0 retweets 1 like -
No shit, everything comes with pros and cons. I've yet to see a comprehensive or even somewhat well constructed comparison of the two when I've asked why one is better than the other. I don't use Ghidra, but given this I'm tempted since I can never get a real answer out of users.
1 reply 0 retweets 1 like -
Personally, I haven't been doing a ton of RE lately so I can't point at little features, but what I find most interesting in Ghidra's design is the declarative processor definitions. It means you can write a spec for a processor's opcodes, and then it knows how to decompile it.
2 replies 0 retweets 1 like -
That's a great feature too. If that's unavailable in IDA as simply as it is in Ghidra then that would certainly be a +1 for Ghidra.
1 reply 0 retweets 0 likes -
As far as I know, for IDA you need to write actual code (e.g. most asm-only processor modules are IDAPython, and thus way slower than built-in or C ones), and I'm not sure if you can literally implement new backends for the decompiler that way. Certainly not in the past.
1 reply 0 retweets 0 likes -
Replying to @marcan42 @daax_rynd and
Example of how the declarativeness of Ghidra makes things easy: I ran into an issue with a Win32 stack check function being assumed to clobber the FP stack, breaking dataflow analysis for functions that return floats. Fixed by editing an XML file to add a new calling convention.
1 reply 0 retweets 0 likes -
Replying to @marcan42 @daax_rynd and
(I also filed a bug, because it would be much more convenient if that were a configurable override in the per-function calling convention UI, which requires actual code changes to implement, but the point is I *could* fix it without touching the code and keep reversing.)
1 reply 0 retweets 0 likes
On that note, I find Ghidra's UI experience for editing datatypes, calling conventions, and argument lists to be a lot nicer than IDA's. With IDA I was always stuck trying and failing to come up with a function prototype that was interpreted how I want. Ghidra has a nice editor.
-
-
It’s also extremely hard to write a constructed list whenever the licenses are so damn expensive I can’t even use one legally let alone a up to date one.
0 replies 0 retweets 0 likesThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.