2 ms·
Then there's the followup question: Who trusts the auditors?
by jasonjayr 3y ago
Then there's the followup question: Who trusts the auditors?
- idkyall 3y agoWell - since it's open source, theoretically you can build it yourself and "trust but verify" the audit, although there we're also assuming you trust your own judgement or that of your security team.
- jasonjayr 3y agoWell, right, of course. My comment is more along the lines of "paying for an audit implies putting faith in those auditors to do a good enough job"
- xyst 3y agoIt’s open source. I’ll inspect the source myself. Cross check against auditor findings. Build from source