3 ms·
I think if we get into the technical side, there's a lot of question too. It doesn't seem like they are very good at code review or testing, for example: http
by cthalupa 9y ago
I think if we get into the technical side, there's a lot of question too.
It doesn't seem like they are very good at code review or testing, for example:
https://twitter.com/marcan42/status/724745886794833920?lang=en https://twitter.com/marcan42/status/724745886794833920?lang=...
And when called out on this, they simply block the people saying it.
I'd personally be very skeptical of any security company that values their own tolerance for dealing with people telling them their code sucks over finding out that their code sucks and fixing it. And a lack of good code review and testing is of huge import when it comes to security, at least in my opinion.
Then there's also their weird crusade against (e)BPF without any supporting evidence beyond "It adds more features so that's more attack surface and thus shouldn't ever be added or attempted and we don't believe anyone involved could ever make it secure so there."