I usually take a pretty skeptical attitude on this blog when it comes to Internet security. For the most part we do things wrong, and I used to think most people didn’t care. The fact is that I was wrong. If the response to our audit call is any evidence, you do care. You care a lot.
With our lives increasingly moving online, privacy and security are more important than ever. We have to be confident in the primitives we rely on for this protection. I’d love to see more audits like this of other popular open source software.
I’d love to see more audits like this of other
popular open source software.
This is why security people are so sceptical of closed-source security
systems, and why hardware security systems are problematic. They’re much
more difficult to audit with a serious reverse engineering effort.
With our lives increasingly moving online, privacy and security are more important than ever. We have to be confident in the primitives we rely on for this protection. I’d love to see more audits like this of other popular open source software.
This is why security people are so sceptical of closed-source security systems, and why hardware security systems are problematic. They’re much more difficult to audit with a serious reverse engineering effort.