5 ms·
NCC Group is a legit outfit, a public company in fact, so this comment is not warranted.
by romanhn 5y ago
NCC Group is a legit outfit, a public company in fact, so this comment is not warranted.
- encryptluks2 5y agoYou may not think so, but I know of equally reputable firms that have overlooked things as blatant as software that allows third parties to pipe scripts without any notification to the user. Look at the recent NPM discussion for example, and that isn't even the one I am referencing. So, yes.. they may be a "legit" outfit but that doesn't prevent them from ignoring obvious security issues.
- dancemethis 5y agoThere is no proof what they tested was actually what's in people's phones. It's most likely a separate "cleaned-up" build/codebase for looks. And chances are against users.
- crummy 5y agoIf you were involved in checking their security, what would you do to verify what you're looking at is what end users are getting?
- tptacek 5y agoAnd this isn't just NCC Group; it's NCC Crypto, a particularly hardcore practice inside of NCC. Marie-Sarah Lacharité's name is on this, and she's not messing around.