4 ms·
Business opportunity for EU devs provide Australian businesses with PR and code review to ensure their software isn't backdoor'd
by dbetteridge 8y ago
Business opportunity for EU devs provide Australian businesses with PR and code review to ensure their software isn't backdoor'd
- brokenmachine 8y agoAnd if it is, then what? Good idea though. Maybe some kind of Certification?
- dbetteridge 8y agoWell ideally you get in early and catch it in a mandatory PR process, all PR's pass through EU devs who are the only ones who can merge. Otherwise yes, security certification process to review existing code and then maintain as above.
- missjellyfish 8y agoAs if certifications would prove anything. Just look at what the German tüv certifies secure. They are missing even the most basic XSS stuff. I have no hope here.
- davedx 8y agoMore like, biz opportunity to make products competing with Jira, Confluence et al. Wonder how many banks and other security sensitive orgs use Jira and store all their tech specs in there. All of them?
- based2 8y agohttps://www.jetbrains.com/youtrack/specials/compare/jira-vs-youtrack https://www.jetbrains.com/youtrack/specials/compare/jira-vs-... https://www.xwiki.org/xwiki/bin/view/Main/WebHome https://www.xwiki.org/xwiki/bin/view/Main/WebHome
- stephen_g 8y agoIf an Australian developer was served with a Technical Capability Notice to build a backdoor, and then submitted code to be analysed by a third party who found it, the developer would literally be liable to be jailed for 15 years and a $50K fine for individuals or $10 million for companies. The law requires us to deliver exploits secretly and lie to everybody about it.
- Ajedi32 8y agoMaybe set up your release process so that independent code review _can't_ be bypassed? (Review company handles building and signing the application.)
- dbetteridge 8y agoThis is what I meant yes, the aussie arm of developers have no build and issue access at all