News for hackers. Stuff that matters.

A comment on 1Password for Open Source Projects. Parent comment

Re:1Password for Open Source Projects by davidcuddeback on Wednesday April 11, 2018 @07:21PM (#16816707)
I've been interested in migrating to bitwarden for a while, but I've been hesitant because I don't know how much I can trust it. Mostly, I was looking for an independent security audit. I took another look today and found a GitHub issue on the subject [1] and they're working with researchers on HackerOne [2].

[1] https://github.com/bitwarden/core/issues/27

[2] https://hackerone.com/bitwarden

[ Parent | on HN ]
Re:1Password for Open Source Projects by tptacek on Wednesday April 11, 2018 @09:06PM (#16817218)
Running a bug bounty is not the same thing as getting an independent security audit.
[ Parent | on HN ]
Re:1Password for Open Source Projects by koolba on Wednesday April 11, 2018 @09:16PM (#16817268)
That's quite the understatement.
[ Parent | on HN ]
Re:1Password for Open Source Projects by davidcuddeback on Wednesday April 11, 2018 @09:23PM (#16817295)
Yes, but there's discussion in the issue that I linked to about raising funds for an independent audit.
[ Parent | on HN ]