{"slug": "to-thwart-reverse-engineering-by-agents-dev-proposes-blinding-them", "title": "To thwart reverse engineering by agents, dev proposes blinding them", "summary": "Developer and student Timo Zhang released Blind LLM Agents (BLA), a protection layer that applies renaming, lane splitting, seed-derived string encryption, build polymorphism, WASM export renaming, decoys and self-seal integrity checks to shipped binaries to raise the cost of LLM-driven reverse engineering. Zhang told The Register that \"coding agents can reverse-engineer shipped packages, CLIs, and WASM in minutes,\" and that BLA hardens existing code without writing app code, with behavior kept equivalent while recovery cost goes up. Zhang said red-teaming and CrackMe challenges, plus runs of the Reverse Engineer Anything (REA) agent against hardened builds, show BLA is effective, though the project does not claim protection against interactive tools like Ghidra or Frida.", "body_md": "# To thwart reverse engineering by agents, dev proposes blinding them\n\n[The Register](https://www.theregister.com)\n\nA poke in the AI with a sharp stick\n\nNow that LLMs can help analyze commercial software binaries and recreate their functionality, one software developer and student has created a project designed to make this process more difficult.\n\nTimo Zhang's [project](https://github.com/qybaihe/bla) is called [Blind LLM Agents](https://bla.tools/) (BLA), and as its name suggests, it attempts to interfere with efforts by AI agents to scrutinize app code.\n\n\"Coding agents can reverse-engineer shipped packages, CLIs, and WASM in minutes,\" Zhang told The Register in an email. \"Classic obfuscation was built for humans and static tools, not LLMs that reason about meaning. Blind [LLM](https://www.machinebrief.com/glossary/llm) Agents is a protection layer for that threat model.\"\n\nSuch agents can also help developers build alternatives to existing commercial software.\n\nLast month, [Artcraft](https://getartcraft.com/), a two-person development shop, released seven open-source apps that aim to be replacements for Adobe's commercial apps Photoshop, Illustrator, Premiere Pro, Lightroom, After Effects, InDesign, and Acrobat Pro. Artcraft claims these apps are \"clean-room reimplementations\" written from scratch in Rust using [Anthropic](https://www.machinebrief.com/glossary/anthropic) Opus 5.5. \n\nSetting aside [the question](https://www.plagiarismtoday.com/2026/10/14/copyright-and-the-vibe-coded-adobe-clones/) of whether enlisting an AI model to reimplement an app really immunizes the creator from legal risk, those making apps face the possibility that someone will have an LLM probe published app binaries and reconstruct them through reverse engineering. There's in fact a framework for this, [Reverse Engineer Anything](https://rea.tools) (REA).\n\nZhang has faced some [criticism](https://x.com/TeosVerdi/status/2119355649977143530) on social media for creating a limited barrier to copying other people's work (which at this point might simply be the work of another LLM). But not everyone accepts that all publicly accessible binaries should be easily available for review and reuse. BLA cannot prevent committed reverse engineering efforts, but it may add a bit of friction to the process when LLMs are involved.\n\n\"It doesn't write app code — it hardens what you've already built,\" Zhang said. \"A transform pipeline (plus [MCP](https://www.machinebrief.com/glossary/mcp) tools / an agent Skill) applies renaming, lane splitting, seed-derived string encryption, build polymorphism, WASM export renaming, decoys, self-seal integrity checks, and a coverage matrix that won't claim protection it can't prove. Behavior stays equivalent; recovery cost goes up.\"\n\nZhang said various evaluations like [red teaming](https://www.machinebrief.com/glossary/red-teaming) and CrackMe challenges to recover keys or flags from hardened artifacts show that BLA is effective. \n\n\"We also drive REA (a reverse-engineering agent) against those builds,\" he said. \"Fail-to-break is the pass. CI tracks defense score, self-verifies integrity coverage, and checks functional equivalence. We raise the cost — we don't claim it is unbreakable.\"\n\nThe project website says as much, noting that it raises the effort for analysis and adds decoy code, but doesn't promise protection against traditional interactive reverse engineering tools like Ghidra or Frida.\n\nZhang said he's aware of other software projects that aim to interfere with AI, such as [Poison Fountain](https://www.theregister.com/software/2026/01/11/ai-insiders-seek-to-poison-the-data-that-feeds-them/4349990) for poisoning [training](https://www.machinebrief.com/glossary/training) data and Anubis for deterring bots and scraping. BLA, he said, is different. It's for hardening shipping code against reverse engineering and LLM-aided analysis. ®\n\nGet AI news in your inbox\n\nDaily digest of what matters in AI.\n\n## Key Terms Explained\n\n[Anthropic](https://www.machinebrief.com/glossary/anthropic)\n\nAn AI safety company founded in 2021 by former OpenAI researchers, including Dario and Daniela Amodei.\n\n[LLM](https://www.machinebrief.com/glossary/llm)\n\nLarge Language Model.\n\n[MCP](https://www.machinebrief.com/glossary/mcp)\n\nModel Context Protocol (MCP) is an open standard created by Anthropic that lets AI models connect to external tools, data sources, and APIs through a unified interface.\n\n[Red Teaming](https://www.machinebrief.com/glossary/red-teaming)\n\nSystematically testing an AI system by trying to make it produce harmful, biased, or incorrect outputs.", "url": "https://wpnews.pro/news/to-thwart-reverse-engineering-by-agents-dev-proposes-blinding-them", "canonical_source": "https://www.machinebrief.com/news/to-thwart-reverse-engineering-by-agents-dev-proposes-blindin-y8pq", "published_at": "2026-11-10 20:35:11+00:00", "updated_at": "2026-11-10 21:51:20.595649+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-tools", "developer-tools"], "entities": ["Timo Zhang", "Blind LLM Agents", "The Register", "Anthropic", "Reverse Engineer Anything", "Artcraft", "Ghidra", "Frida"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/to-thwart-reverse-engineering-by-agents-dev-proposes-blinding-them", "markdown": "https://wpnews.pro/news/to-thwart-reverse-engineering-by-agents-dev-proposes-blinding-them.md", "text": "https://wpnews.pro/news/to-thwart-reverse-engineering-by-agents-dev-proposes-blinding-them.txt", "jsonld": "https://wpnews.pro/news/to-thwart-reverse-engineering-by-agents-dev-proposes-blinding-them.jsonld"}}