![](/static/253f0d9b/assets/icons/icon-96x96.png)
![](https://fry.gs/pictrs/image/c6832070-8625-4688-b9e5-5d519541e092.png)
“drink a verification can to continue”
“drink a verification can to continue”
yes so you’re agreeing with me
Yup, but you have to think “how would malicious software/spyware/whatever get in our source code and if it does, how would we detect it?”
that’s where ISO and SOC II add value and give some assurance that detective, preventative and corrective controls exist and are working to prevent an issue.
If the company maliciously inserts back doors into closed source code and sells it like that, no amount of external audit is going to defend against that because they’ll just hide the code from the auditors.
the closest you’ll get is probably SOC II Type 2 or ISO 27001. While nowhere near perfect, those certifications validate that organisational controls such as change management, employee background screening, SDLC and production access controls functioned over the past 12 months. An external audit by an accredited specialist is required to obtain those certifications.
it’s pro hoc, not cum hoc. which is to not say that it is not objectively, very funny.
*prick
I’d love a small box with a button that literally just calls my phone, has a mic and speaker and nothing else, no screen, no software, no proprietary lock-in. just a button.
i don’t think there are any. priority is based on how much you think you could take rival vehicles in a fight.
… we got sweat and pain,
you make that comment, in a week where we have had a megacorp public assassination of a whistleblower and cypherpunk crypto money has risen to a record high value versus government money?
deleted by creator
the cat should be allowed to make their own mistakes