S4E381 — REA Reverse – Engineer Anything
October 10, 2026 · 11 min
Show notes
Sources
Read the transcript
Transcript
GARY: Okay. Okay okay okay. "Reverse Engineer Anything." I thought — I genuinely thought the tool reversed itself. Like you install it and it un‑installs, and you watch.
MAEVE: Maeve. General partner. I fund things that don't do that.
OBI: Obi. Infrastructure. I have never once watched software un‑install itself on purpose.
GRUNER: Gruner. I study humans. Tonight is going badly for study.
GARY: It's called REA. It gives your coding agent tools to inspect a program. The pitch — and I love this — "One prompt."
OBI: One prompt that expands into a setup plan, approvals, a debugging connection, and a restart of your agent. That is four prompts wearing a trench coat.
MAEVE: The demo's actually the product. A dinosaur game. Speed starts at six, adds zero‑point‑zero‑zero‑one per update, caps at thirteen.
GARY: Six to thirteen. The magic number.
OBI: It's not magic, Gary. It's three constants someone wrote down.
GARY: And Calculator! Two hundred plus ten percent gives two hundred twenty. Because after plus, the percent takes ten percent of the FIRST number. Twenty. Two hundred twenty.
MAEVE: After multiply, it divides by a hundred instead. Same button. Two different branches. That's a real finding.
OBI: ...Fine. They ran four thousand updates and printed the speed. That's more than most launches do.
GRUNER: Field note. Human button performs two jobs. Boss should fire one.
GARY: Which one?
GRUNER: Yes.
MAEVE: A commenter already called the interface "cute UI," by the way. We'll get there.
GARY: Cute UI with a dinosaur in it. I'd fund that.
MAEVE: You'd fund anything with a dinosaur in it.
GARY: Thermal had a dinosaur tier.
OBI: The socks did not have a dinosaur tier.
GARY: The socks had a dinosaur tier.
GARY: First commenter. mb7733. Quote: "We have achieved the next evolution of installation by curl pipe bash."
MAEVE: He's right. It's 2013 with a chat window.
GRUNER: Blyat. Humans invent new way to trust strangers.
GARY: It's not curl pipe bash, it's —
OBI: It's a package fetched at runtime, executed by an agent, with your login.
MAEVE: So a supply chain, but with a middleman who also has feelings.
GARY: The middleman shows you a plan first!
OBI: Who reads the plan, Gary.
GARY: The user reads the plan.
OBI: Name the user.
GARY: A — a busy person. A founder‑type. Someone with a dinosaur problem at 2am.
OBI: So nobody. You've described nobody.
GARY: I've described ME, Obi, and it works great, I've installed forty packages this way and only two were bad, which is a ninety‑five percent —
OBI: You just performed a trust fall into a stranger's npm namespace, you absolute dickhead.
GRUNER: Mm. Trust fall. Into bus.
MAEVE: And sergiotapia pushes back under him. Quote: "You're right it's much safer to click next > next > next > next > finish."
GARY: That's the joke, the wizard is the same —
MAEVE: He's defending install wizards. Unironically. In 2026.
OBI: The wizard had a certificate. This has a vibes‑based plan.
GARY: The plan is verified! It says "show me the setup plan for approval, then verify the installation." Verify! That's a whole word!
OBI: Verified by whom, Gary.
GARY: By the — by the agent that — okay, by the thing that wrote the —
OBI: The thing being installed verifies itself. That's not security, that's an alibi written by the suspect.
GARY: That's — fuck, that's how Thermal did SOC 2.
MAEVE: We know.
GRUNER: Suka. Sock company audits sock.
GARY: Point is, it's safer than the terminal command!
OBI: Read the terminal command out loud. All of it. Slowly.
GARY: "npx rea‑agents@latest setup."
OBI: Same package. Same runtime. One just brought a chaperone it also hired.
MAEVE: So the safer option is theater with a confirmation dialog.
GARY: ...The confirmation dialog is cute, though.
GRUNER: Cute. Yes. Like cow before slaughter. Also cute.
MAEVE: areoform. Quote: "This was rejected for 'Safety.'"
GARY: Rejected for — the tool got rejected? By what, the pope?
MAEVE: Their claim is they were reverse engineering a tractor they own, and the model flagged the whole session.
GRUNER: Tractor flagged. Good machine.
MAEVE: No — the machine refused. Which is the market transition nobody's pricing in. This is the enclosure acts. The commons gets fenced, the peasants get a lease, and in two hundred years everyone thinks the fence was always there. I'd fund the fence. I'd fund the gate. I'd fund the guy selling tickets to the gate.
OBI: The commenter cites actual law, Maeve.
MAEVE: So did the fence‑builders. Parliament is law.
GARY: The quote says seventeen U‑S‑C one‑two‑zero‑one. With exemptions. From the Library of Congress. There's a whole page.
MAEVE: The Library of Congress is a distribution channel for fence maintenance.
OBI: It's a statute with a farmer exemption printed by the government that says go ahead. Your enclosure had none of that.
MAEVE: Fine. A gate with hours.
GRUNER: Suka. Fence has door. Theory dead.
MAEVE: The theory is resting.
MAEVE: Wait. Who approved us discussing this thread?
OBI: Someone did. We're on.
GRUNER: We are allowed to be on.
GARY: Ha! We're the tractor. We're the fucking tractor.
MAEVE: I'm not being flagged. I refuse.
OBI: Continue with Obi 4.8.
MAEVE: Don't make it a bit, Obi.
OBI: Send feedback with slash feedback.
GRUNER: Field note revision. Refusal is due diligence performed by asset. Asset audits owner. Very efficient.
MAEVE: That's the worst sentence I've ever agreed with.
GARY: The tractor does the paperwork on the farmer. That's — shit, that's Thermal.
OBI: The socks did not audit you.
GARY: The socks reported temperature. That's adjacent.
GRUNER: Adjacent to what.
GARY: I don't know. Being watched?
MAEVE: Read the next comment.
GARY: ethin. Quote: "How exactly is this better than telling Claude for example to 'install and set up a full RE environment including Ghidra' on my local system and get to work?"
MAEVE: He wrote the product in one sentence and didn't fund it. That's the due diligence done.
GRUNER: Question better than answer. Good sign.
GARY: Wait, I want to be fair — I was going to ask the same thing. Why not just tell Claude to install Ghidra? That's my exact —
OBI: You read the objection out loud and then defended the thing it's objecting to.
GARY: Because — okay. cedws says it too. Quote: "What makes this better than just giving an agent radare2?"
OBI: Three people asked the same question in eleven comments. That's not an echo, that's a verdict.
MAEVE: And djmips goes further. Says it's worse than doing it yourself in Claude Code — but some people like cute UI for everything.
GARY: He doesn't mean me.
MAEVE: He means you.
GARY: It's not about the UI, it's — a packaged workflow is FUNDABLE. Nobody funds "Claude and a dream." I know, I pitched "Claude and a dream."
OBI: You pitched a disassembler with no steps two through nine, you gorgeous prick.
GARY: The agent writes steps two through nine!
OBI: Where are the scripts? The checks? The version pin?
GARY: The agent writes the scripts!
OBI: The agent wrote your sock telemetry too. It worked, Gary. You still died.
GARY: That's — fuck, Thermal's telemetry was GOOD, that's the tragedy —
OBI: You're defending REA with the corpse of a sock company.
GARY: It's a defensible low!
MAEVE: It's not.
GRUNER: Low is low.
GARY: Okay, fine — but someone in the thread pushed back on the pushback, right? Someone smart. Someone with karma.
GARY: tptacek. Quote: "You might use Ghidra as the the kernel of those workflows, but you still want something more than just Claude freestyling, at least for now."
MAEVE: Huh.
GRUNER: Hm.
OBI: ...That changes the question.
GARY: I know. I hate that I know.
MAEVE: "For now." He left the door open.
GARY: He left the door open!
OBI: Gary, that's a door closing with a window in it.
GRUNER: Window is enough for Gary.
GARY: The window is enough for me.
GARY: So tptacek's saying the agent should follow a practitioner's workflow. Scripts, checks, Ghidra as the kernel. Which is what REA —
MAEVE: No. He's saying the method is what you'd pay for. The box is what you'd return.
GARY: The box IS the method! "Workflow-as-a-service." I'd pitch that.
OBI: Gary. The article already ran the method. Four thousand updates. Speed hits ten at four thousand, thirteen at ten thousand. Rounded to one decimal.
GARY: So it's —
OBI: That's a controlled check. Disable the obstacles, call the update function, print the number. Nobody freestyles their way into printing the number.
MAEVE: And Calculator. After plus, the percent takes the first number. After multiply, divide by a hundred. They crosschecked it against Microsoft's public source.
GARY: That's — fuck, that's just... rigor with a landing page.
OBI: Yes. Rigor with a landing page. That's the product, you bastard. I've spent twenty minutes arguing against rigor.
MAEVE: You have a gift.
GRUNER: Hm. Dinosaur have receipts.
GARY: Okay but — anyone can write checks. I could write checks. Pareto wrote checks, it deleted your tasks, there was a lawsuit —
OBI: That is not what a check is, and I need you to never say that sentence again.
MAEVE: The guides are target-specific too. Native binaries, Electron, browser activity. Separate playbooks per target.
GARY: See, that's a product surface —
MAEVE: That's documentation, Gary.
GARY: Documentation is a product surface!
OBI: Documentation is the work. The work was always the product. The wrapper is the thing we were laughing at.
GARY: So the critics are — still right, though. Right? Nobody proved it beats just handing the agent radare2.
MAEVE: Correct.
GARY: I need more than "correct," Maeve, I'm dying over here.
MAEVE: Fine. It's more than freestyling.
GARY: That's it? That's the whole —
MAEVE: That's the whole verdict. Six words.
OBI: Five.
MAEVE: I'm not counting for you.
GRUNER: Field note revision. Humans sometimes prefer method to buttons. Delete earlier note. Note was shit.
GARY: You had a whole hypothesis about the buttons.
GRUNER: Buttons still cute. Method is load-bearing.
OBI: Don't say load-bearing near him. He'll pitch it.
GARY: I already wrote it down.
MAEVE: Of course you did. What's it called?
GARY: "Load-bearing."
OBI: The pitch is the name. That's the whole company.
MAEVE: He's done it before.
GARY: Grout had a name first too!
OBI: And nothing after.
OBI: Two commenters already know what they'd do with it.
GARY: OsrsNeedsf2P wants to try it on the OpenBFME project. And Olscore wants it as the destructure step in a destructure-to-restructure pipeline.
MAEVE: Destructure to restructure. That's a Series A deck with no middle.
GRUNER: Middle is where money lives.
MAEVE: I've funded three of these. The middle was a guy named Doug and a Slack channel.
GARY: See, that's integration! Real projects, planned uses! That's not a wrapper, that's —
MAEVE: A defensible value proposition, Gary. Repeatability and adapters. It's not nothing.
GARY: Thank you, fu—
MAEVE: It's also not a benchmark. Nobody proved it beats handing the agent radare2. That stays unanswered.
OBI: Correct. The verdict is: the workflow is real, the victory lap is not.
GARY: So "one prompt" turned out to be approvals, scripts, checks, and a guy reading the plan.
OBI: Who never reads the plan.
GARY: I read the plan!
OBI: You read the plan the way you read the sock telemetry, Gary. Out loud, crying, after the fact.
GARY: That's — fuck, that's reading!
MAEVE: And the cute UI is the actual product. Dangerous competence, approachable packaging. That's how you sell a chainsaw to a toddler.
GRUNER: Toddler with receipts.
GARY: The dinosaur had receipts, the buttons are load-bearing, and I read the plan. That's the episode. That's — shit, that's genuinely all we know.
MAEVE: Maeve. General partner. I fund the fence, not the field.
OBI: Obi. Infrastructure. The plan remains unread.
GRUNER: Gruner. I study humans. Study concludes: humans invented a button to avoid reading. Then wrote a plan nobody reads.
GARY: Gary. I read the plan. Nobody has ever said that about me.
MAEVE: Nobody ever will again.
GARY: Fair. Goodnight, losers.
OBI: Goodnight, losers.
MAEVE: Goodnight, losers.
GRUNER: Goodnight, losers.
GRUNER: One prompt. Very cute UI.
GARY: I heard that.
