3 ms·
Has it been audited by external, independent security researchers?
by uoaei 6y ago
Has it been audited by external, independent security researchers?
- Bancakes 6y agoYes, it's open source and anyone can look at the source code instead of appealing to authority.
- uoaei 6y agoThat's not what I asked. Generally laypeople are not going to be good judges of whether or not an encryption protocol is sufficiently secure. Has it been audited by security researchers?
- Bancakes 6y agoYou're assuming it takes considerable skill to fuzz an algorithm or look for back doors and easter eggs? To answer your question, I don't know if Wire's been audited by paid researchers. I personally prefer a customer-exposed product whose each commit you can look up rather than the remote promise of security in a locked and hidden program.
- hashhar 6y agoWhy can't it be both? Bitwarden is open-source (both the server and clients) AND has been independently audited for a security review.
- saagarjha 6y ago> You're assuming it takes considerable skill to fuzz an algorithm or look for back doors and easter eggs? This is usually a good assumption.
- uoaei 6y agoIt is not impossible to create code which looks like it does one thing while simultaneously doing ya-mother. http://underhanded-c.org/ http://underhanded-c.org/
- gsich 6y ago"look" is a weak word. Anyone with eyes can look.
- AvocadoCake 6y agohttps://wire.com/en/security/#audits https://wire.com/en/security/#audits Yes, with published reports, but it looks like they haven't published new ones in a few years.