Comments on Superimposing Nothing Nowhere: eEye's BinDiffing Suite for IDA Pro 5.1

I can't rant on it too much though since its free,...

2008-09-18T23:41:00.000-07:00

I can't rant on it too much though since its free, which is nice considering BinDiff is $1,080, and it does do a fairly decent job.

zibri: IDA Pro has its own key file that is placed...

2007-08-19T15:24:00.000-07:00

zibri: IDA Pro has its own key file that is placed in the directory you run it from. Best bet is to completely uninstall the versions you have, look for any other IDA folders and backup/delete them, then reinstall the latest.

If that doesn't work then go ask IDA - they support the software you bought, I just play with it. :)

Am I the only one to have this problem ?

ID...

2007-08-15T08:28:00.000-07:00

Am I the only one to have this problem ?

IDA PRO 5.0 when starting up says it detected (?) another copy of IDA and to change my license.

But 5.0 is the only copy of IDA on my pc..
I installed and uninstalled many different versions and trials..

How can I clean my pc for ida 5.0 not to complain ?

IDA is a work of art ;) I only started reversing r...

2007-07-21T18:47:00.000-07:00

IDA is a work of art ;) I only started reversing recently and so I pretty much learned on it, but the more I use it, the more I fall in love with it. I am always finding fun new things it does to make life a little easier. I found some new feature on Thursday while reversing one of the MS patches and freaked out, all my coworkers were staring, but it cut my analysis time down significantly and I was thrilled :p

I am hoping to get my hands on a BinDiff license soon, I'll be curious to hear your opinions of it. I've heard that it is pretty much the best for diffing, but I'll be curious to see what your opinion of it vs. EEDS is, especially before I drop $1k on it.

Some of the more complex diffs will be a problem n...

2007-07-21T18:11:00.000-07:00

Some of the more complex diffs will be a problem no matter what you use. Compilers can do some strange things in the name of optimization. These tools are great to help direct you to where the changes are, you'll still have to make additional decisions.

The more I keep using IDA the more I really do love it. I just wish it was a better debugger but OllyDbg does a great job. I can't wait to see what Immunity has in order for their Debugger release at Blackhat/Defcon.

I wish I could say that I had the same great exper...

2007-07-21T09:09:00.000-07:00

I wish I could say that I had the same great experiences with it :/

In some cases it works great, but I was doing a diff of a few MS Tuesday patches last week and the number of false positives was astonishing. It doesn't handle large binaries very well unfortunately. I can't rant on it too much though since its free, which is nice considering BinDiff is $1,080, and it does do a fairly decent job.

Since you are lucky enough to get a BinDiff license (*sniff*), take a look at the 2.0 beta. I posted a video of it below[1] and it looks to be VERY promising.

[1]http://www.sabre-security.com/files/schannel.swf