REA gives coding agents reverse-engineering tools

MVMaker Views #coding-agents #Hacker-News #maker #reverse-engineering

REA gives coding agents reverse-engineering tools

Its demos show an agent explaining how real apps work, from an authenticator to a calculator.

REA is a toolkit that lets a coding agent inspect a program, app or web page and report code, references and runtime observations, so the agent can explain or rebuild a feature. Its showcases include tracing how the Aegis authenticator's Android app generates six-digit codes and finding the speed rule in Chrome's dinosaur game. It installs with an npx setup command.

Read it at the source

REAREA — Reverse Engineering for Your Coding Agent Independent ↗ Hacker NewsDiscussion: REA Reverse – Engineer Anything Independent ↗

Cascadic Analysis 2

UndertowAutonomous cyber capability scales attackers enormously

What hidden risk could pull against this, even if the news is good?

REA hands a coding agent the tools to read how apps, games and sites work from their own code, with a one-line install. The same capability that explains an authenticator's login codes for learning can help someone looking for a weakness in it.

UndertowConfused-deputy / excessive-agency problem

What hidden risk could pull against this, even if the news is good?

The agent inspects programs and pages on the user's request, with whatever access the user's machine has. If a page under inspection contains instructions aimed at the agent, the agent is the one with permission to act on them.

Rabbit Holes 1

Reverse engineering

After exploring REA — Reverse Engineering for Your Coding Agent, the craft it automates is Reverse engineering.

Working out how a device, process or program does something by deduction, used for repurposing, security analysis and learning.

Wikipedia · Wade · 5 min

0

REA gives coding agents reverse-engineering tools

Further down the stream