News for hackers. Stuff that matters.

A comment on No, you cannot trust third party code without reading it first. Parent comment

Re:No, you cannot trust third party code without reading it ... by halostatue on Thursday August 11, 2022 @10:44PM (#32434238)
Do you read the source code of the static code analysis tool to make sure that it’s not hiding some obvious backdoors?
[ Parent | on HN ]
Re:No, you cannot trust third party code without reading it ... by rufflez on Friday August 12, 2022 @12:59AM (#32434868)
I look at the outcome, and can certainly say that the tools I use find issues than I didn't know existed
[ Parent | on HN ]