BLA releases hardening tool against AI reverse engineering agents
Understand this story
BLA has released a set of hardening tools for software authors and security teams, designed to prevent AI reverse engineering agents from extracting the core logic of binary, JS, and Python programs. Its methods include resource exhaustion, decoy payloads, and self-sealing mechanisms. BLA states that after hardening, each analyzer triggers deterministic resource limits and simulates 300×–2,800× token amplification; 14/14 built-in benchmark targets pass input-output equivalence tests. This tool is for defensive use only and must be installed from the official channel qybaihe/bla or the npm package bla-agents. Two features are disabled by default: in-band prompt decoys require adding --llm-directives to enable; signed attestation requires generating a manifest with --manifest, then signing it with --sign-manifest, and verifying the ed25519 signature and artifact SHA-256 via bla verify-manifest.
AI overview based on source reports · Updated 2 days ago
Coverage timeline
Follow the coverage to explore different perspectives.
- Hacker News AIAdversarial defense for binaries/JS/Python against AI reverse-engineering agents
BLA is a defensive tool for software authors that hardens build artifacts (JavaScript/TypeScript, Electron .asar and fuses, WASM, SQLite, Safetensors, GGUF, Go buildinfo, PE, Flutter/Dart, BEAM, EVM, PCAP, Python, PTX, and others) against AI reverse-engineering agents by planting decoys, tripping analyzer resource limits, and entangling sibling artifacts. It ships as a CLI (`npx bla-agents harden .`), an MCP/Skill setup for coding agents, and Vite/Rollup/Webpack/esbuild plugins, and reports 14/14 bundled benchmark targets passing input/output equivalence checks. The project states its empirical REA results were recorded on commodity hardware and that token/cost multipliers are internal estimates.
Activity for this story
- Current comparable activity
- 3
- Peak comparable activity
- 10Nov 12 19:00
- Change in the past 24 hours
- -51%
Trends compare the same fully observed participants, which may cover fewer participants than current activity. Move the pointer or tap the chart to inspect hourly activity; use the left and right arrow keys with a keyboard.