News for hackers. Stuff that matters.

A comment on A story on home server security. Parent comment

Re:A story on home server security by smarx007 on Sunday January 05, 2025 @10:34AM (#42602444)
To be fair, I would also be alarmed, albeit not by OTP. "sign an electronic document" and "built with COTs libraries in a single sprint" is essentially begging for a security review. Signatures and their verification are non-trivial, case in point: https://news.ycombinator.com/item?id=42590307
[ Parent | on HN ]
Re:A story on home server security by talkin on Sunday January 05, 2025 @12:23PM (#42603285)
Nobody said you shouldn’t do any due diligence. But 1 sprint vs 2 months of review really smells like ‘processes over people’. ;)
[ Parent | on HN ]
Re:A story on home server security by normie3000 on Sunday January 05, 2025 @02:03PM (#42604088)
A more positive view would be that the security team may have had different priorities to the product team.
[ Parent | on HN ]
Re:A story on home server security by robertlagrant on Sunday January 05, 2025 @07:11PM (#42606213)
Two months of review after the work would be a lot more useful than before.
[ Parent | on HN ]