Déjà Vu: Uncovering Stolen Open-Source Algorithms in Commercial Products
Patrick Wardle and Tom McGuire expose commercial security vendors who covertly copied open-source macOS security tools into commercial enterprise products.
Summary
The Ethics of Open-Source Security Software
Open-source security tools (such as Objective-See macOS utilities) are created for the public good, but commercial vendors often incorporate them without attribution or license compliance.
Discovering Code Plagiarism via Reverse Engineering
Patrick Wardle and Tom McGuire reverse engineer commercial macOS endpoint security products, identifying identical disassembled functions and decompiled logic.
Comparing Open-Source Engines with Commercial Binaries
The speakers present side-by-side binary diffing analysis demonstrating that proprietary endpoint agents directly lifted open-source behavioral monitoring engines.
Community Accountability and Legal Ramifications
The authors discuss intellectual property protection, GPL license enforcement, and building ethical accountability across the cybersecurity industry.
Related talks
Demo Labs·31 min
A demonstration of Mobile Security Framework (MobSF) for performing automated static and dynamic security analysis of mobile apps.
Briefings·38 min
Marco Casagrande · Daniele Antonioli
Presents a broad security and privacy assessment of the internals of two popular Xiaomi e-scooters: the M365 (2016) and Mi3 (2023).
Main Stage·47 min
Hugo Gonzalez · Caleb Howell
Deconstructs the anti-cheat and runtime integrity mechanisms in Pokemon Go, demonstrating mobile reverse engineering and integrity bypass tradecraft.