3 ms·
and audits of the 3rd party auditors?
by AznHisoka 11y ago
and audits of the 3rd party auditors?
- VikingCoder 11y agoYup. No, really. We'll want to document the successes and failures of security software companies, their auditors, and their auditors.
- andrewd18 11y agoThose responsible for auditing the auditors who have just been audited, have been audited.
- sarciszewski 11y agoWelcome to the "many eyes, shallow bugs" side of the world.
- serge2k 11y agoWhich is why the linux kernel is such a pinnacle of security excellence. /s
- nevi-me 11y agoI presume sarcasm. Interestingly, the auditors would be taking on the risk that they've done a bad job, so their auditors are the security experts who keep finding these security holes.
- sarciszewski 11y agoAs a consultant for a company[1] that provide code auditing services, I welcome third-party scrutiny for the open source libraries[2] we produce. [1] https://paragonie.com https://paragonie.com [2] https://github.com/paragonie https://github.com/paragonie