News for hackers. Stuff that matters.

A comment on Vaultwarden: Unofficial Bitwarden compatible server written in Rust. Parent comment

Re:Vaultwarden: Unofficial Bitwarden compatible server writt... by cyrnel on Wednesday August 14, 2024 @11:26PM (#41252891)
Actually yes, most of those things are required for SOC 2 which is verified by an independent auditor and visible in their report.
[ Parent | on HN ]
Re:Vaultwarden: Unofficial Bitwarden compatible server writt... by marcus0x62 on Thursday August 15, 2024 @08:18AM (#41255049)
1) I’m going to go out on a limb and guess Lastpass, Okta, et al., WERE and ARE SOC2 type II certified. Didn’t stop them from getting breached.

2) SOC2 is defined by the American Institute of Certified Public Accountants. That it is held up as some sort of exemplary cyber security standard is absolutely ridiculous.

[ Parent | on HN ]