News for hackers. Stuff that matters.
Re:CA Comodo used broken OCR and issued certificates to the ... by ethbro on Friday October 21, 2016 @12:27PM (#12761766)
Or more specifically, do security auditors have red teams authorized as part of their audit?
Re:CA Comodo used broken OCR and issued certificates to the ... by thenewwazoo on Friday October 21, 2016 @01:08PM (#12762291)
In my limited experience (infosec for a big 4 firm), the answer is no. The audits are done as cheaply and as quickly as possible. I worked alone, in fact, and essentially did process testing (read: document review).