REA: The Fastest-Rising Repo Is a Little Scary (And a Real Test)
Rob Shocks (Switch Dimension) puts REA ("Reverse Engineer Anything", morluto/rea — MIT, 28.5K stars and climbing) to a real test: he builds his own "vault" app with a hidden unlock code, compiles it with every function name stripped, hands it to an agent running REA + Ghidra, and watches it find the check-unlock function among 242+ stripped functions, decompile it to C-like pseudo-code, and write a code generator that produces a working code (AGNT-1001). The nuance he stresses: REA doesn't recover source code (it's gone after compilation) — it returns pseudo-code, assembly, call paths, and network activity with evidence (source, confidence, unknowns), then the agent understands the logic and writes something new. The scary thesis: reverse engineering's friction was its protection, and REA deletes it — so "the code was never really the moat"; your moat is data, users, cloud security, ship speed, taste, and server-side logic. He pushes back on planes-falling doom and gives three warnings: legal (interop RE is generally protected but ToS often ban it, DRM is separate), it's not a sandbox (runtime capture runs with your permissions), and the repo is moving fast. Testbrite (sponsor) and Switch Dimension (self-promo) flagged. This complements the earlier Signal Coders deep-dive of the same repo with a hands-on, security-flavored angle.