Re:Leaked phone number of Mark Zuckerberg reveals he is on S...
by uoaei on Tuesday April 06, 2021 @02:34AM
(#26708670)
Has it been audited by external, independent security researchers?
[ Parent
| on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S...
by AvocadoCake on Tuesday April 06, 2021 @06:33AM
(#26710238)
https://wire.com/en/security/#audits
Yes, with published reports, but it looks like they haven't published new ones in a few years.
Re:Leaked phone number of Mark Zuckerberg reveals he is on S...
by Bancakes on Tuesday April 06, 2021 @02:37AM
(#26708693)
Yes, it's open source and anyone can look at the source code instead of appealing to authority.
Re:Leaked phone number of Mark Zuckerberg reveals he is on S...
by uoaei on Tuesday April 06, 2021 @02:40AM
(#26708728)
That's not what I asked. Generally laypeople are not going to be good judges of whether or not an encryption protocol is sufficiently secure.
Has it been audited by security researchers?
Re:Leaked phone number of Mark Zuckerberg reveals he is on S...
by Bancakes on Tuesday April 06, 2021 @02:44AM
(#26708760)
You're assuming it takes considerable skill to fuzz an algorithm or look for back doors and easter eggs? To answer your question, I don't know if Wire's been audited by paid researchers. I personally prefer a customer-exposed product whose each commit you can look up rather than the remote promise of security in a locked and hidden program.
Re:Leaked phone number of Mark Zuckerberg reveals he is on S...
by saagarjha on Tuesday April 06, 2021 @07:08AM
(#26710445)
> You're assuming it takes considerable skill to fuzz an algorithm or look for back doors and easter eggs?
This is usually a good assumption.
Re:Leaked phone number of Mark Zuckerberg reveals he is on S...
by hashhar on Tuesday April 06, 2021 @02:50AM
(#26708816)
Why can't it be both?
Bitwarden is open-source (both the server and clients) AND has been independently audited for a security review.