3 ms·
These are pen-tests and black-box security audits. While they're definitely better than nothing, and they would show that their security is better than LastPass
by acatton 4y ago
These are pen-tests and black-box security audits. While they're definitely better than nothing, and they would show that their security is better than LastPass', the code was never audited.
- bendiksolheim 4y agoAre we reading the same reports? At least the two latest reports by Cure53 mentions "source code audit". In addition, the audits by ISE and AppSec explicitly mentions code review as part of the audit. I am in no way familiar with these kinds of reports, but does this not mean that (at least parts of) the source code was audited?