4 ms·
I thought cryptocat was independently audited. Who audited it and why didn't they find these problems?
by autodidakto 13y ago
I thought cryptocat was independently audited. Who audited it and why didn't they find these problems?
- nichols 13y agoIt was probably "audited" by the NSA, or whatever other three-letter agency paid for this trainwreck of an ECMAScript to be shat out upon the world.
- afreak 13y agoCryptocat was audited by Veracode but it is my understanding that they just audited the functionality of it (IE: the interface and all that is related) but not the cryptography, as it was out of scope.