News for hackers. Stuff that matters.

A comment on I've spent the last two years building a new email client. Parent comment

Re:I've spent the last two years building a new email client by progx on Wednesday May 02, 2018 @05:16AM (#16975219)
Tust is everything.

What does it change if you have an c53 audit of Version 1.0.0 and 1.0.1 has malicious code?

[ Parent | on HN ]
Re:I've spent the last two years building a new email client by dogma1138 on Wednesday May 02, 2018 @07:54AM (#16976045)
That is correct but it's a slightly different threat model that I don't want to tackle here.

I'm not going to make claims that a developer would maliciously embed code into their own product but I do care about the quality of their code and their security practices at large (specifically how secure is their code promotion and binary distribution supply chain).

[ Parent | on HN ]