4 ms·
What gives you the low degree of confidence MS engineers couldn't do a complete scan of TikTok's codebase?
by mikkelewis 6y ago
What gives you the low degree of confidence MS engineers couldn't do a complete scan of TikTok's codebase?
- rectang 6y agoI don't have confidence about scans in general against novel attacks. Scans are effective against the threat model of off-the-shelf attacks, not a threat model of highly motivated, highly-skilled attackers capable of inserting subtle defects anywhere in a giant codebase.