Re:CryptoCat iOS Application Penetration Test [pdf]
by sneak on Wednesday April 02, 2014 @09:07PM
(#7520204)
Why use donated money to pay for an audit of software that has known bugs and isn't ready yet? That's wasteful. The point of an audit is to find bugs you don't already know about.
[ Parent
| on HN ]
Re:CryptoCat iOS Application Penetration Test [pdf]
by ibmthrowaway218 on Thursday April 03, 2014 @04:53AM
(#7521657)
It can be a useful technique for testing the quality of the audit.
At a previous company we had to have words with a company that performed a software audit as they failed to find two issues we'd planted to test them. (Of course, they did find several things we didn't know about.)