12
Password manager Keyhollow publishes a full third-party audit, warts and all
Read the "medium severity" section; that's where the real lessons are.
Keyhollow released a 90-page independent audit listing two medium and nine low-severity issues, all fixed. It is the first time the company published an audit unredacted.
Read it at the source
Cascadic Analysis 1
Signal CheckPublishing audits is the trust signal
How much is substance, and how much is paid or hype?
Any vendor can say they are audited. Few publish the findings. That is the difference to look for.
-1
Rabbit Holes
-
What a security audit does and does not coverScope is everything. · Patchwork Security · Wade · 5 min0