4 ms·
100% of closed code is not inspected
by spywaregorilla 2y ago
100% of closed code is not inspected
- sodality2 2y agoBy you. Three comments above references "independent audits". Meaning professional cybersecurity firms
- jeroenhd 2y agoFrom. what I can tell, Apple doesn't actually provide the source code itself, or provides the (cryptographically verified) binaries and VMs to run it. Reverse engineering will still need to take place, it seems.
- theshrike79 2y agoI have been involved in security audits for 110% closed code, code that's secret even within the company. Auditing helps the company writing it, the auditors are usually experts in breaking stuff in fun ways, and it's good for business - we could slap "code security audited by XXX" on the sales pitch.
- spywaregorilla 2y ago> and it's good for business - we could slap "code security audited by XXX" on the sales pitch. You're on the precipice of discovering the problem of incentives when it comes to audits. Audits are good, but they're inferior to source available