Thread: Ida-pro-mcp
View Single Post
  #44  
Old 09-07-2026, 15:45
Shub-Nigurrath's Avatar
Shub-Nigurrath Shub-Nigurrath is offline
VIP
 
Join Date: Mar 2004
Location: Obscure Kadath
Posts: 989
Rept. Given: 72
Rept. Rcvd 431 Times in 101 Posts
Thanks Given: 87
Thanks Rcvd at 418 Times in 134 Posts
Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499
Hi all,
The discussion went on for a while, and I saw my name mentioned a few times. To clarify my point, I was saying that AI, before or above everything, is a gigantic tracking tool. It can track what you do with it on an unprecedented scale, so if you're serious about piracy and do this reversing from your personal account, it could cause trouble, ranging from a simple disabled account to something more serious.

Of course, you can always trick the model into thinking that what you are reversing is not a commercial product. You can even jailbreak the model or simply red team the AI. However, these are usually transient solutions and, moreover, problematic anyway, because nothing prevents an AI from conducting backward investigations whenever your account becomes problematic in any way. You're never sure what conclusions the AI draws about your behaviour.

So it's better to avoid the risk altogether and switch to a local OSS model, e.g., via Ollama, which is blazing easy, and use Claude or Codex with another model under the hood. There is also an interesting alternative: Ollama Cloud models. Ollama also offers some cloud models on even the free accounts, and their controls aren't very precise, as far as I can tell. Of course, you can register as many free accounts as you want using a fake email.

Although if things get "professional", the most secure, least blocking, and most efficient solution is an abliterated AI model running locally (use any engine u like: Ollama, LMStudio, llama.cpp,…) on a local SPARK. Of course, it costs


PS: Personal experience. Do not expect miracles yet: AI-enabled RCE goes through tons of useless attempts. I mean those kinds of things an experienced reverser wouldn't do. However, one thing is for sure: commercial protections are still largely meant to protect against human attackers, and they're already profoundly vulnerable to AI analysts.
__________________
Ŝħůb-Ňìĝùŕřaŧħ ₪)
There are only 10 types of people in the world: Those who understand binary, and those who don't
http://www.accessroot.com

Last edited by Shub-Nigurrath; 09-07-2026 at 15:53.
Reply With Quote
The Following User Says Thank You to Shub-Nigurrath For This Useful Post:
th3tuga (09-07-2026)