Story

Audit of TrueCrypt disk encryption software reveals low source code quality

Preview

this is where open source (Score: 1)

by rocks@pipedot.org on 2014-04-17 04:01 (#13M)

Probably ought not to mean free or volunteer only. I definitely feel that government agencies globally should be pushing for adoption of open source software with free licenses, but where public money is paid to drive forward the development and auditing and such.

Re: this is where open source (Score: 1, Interesting)

by Anonymous Coward on 2014-04-17 14:42 (#13S)

I think it goes a step further: it shows a need for extremely stringent code analysis to be done by *qualified* people. We need more Theo de Raadts looking at code that affects internet security. These people exist, but most of them are either looking at software that powers your car or airplane, or they are in the military, reviewing code that's used in weapons. These are places that don't have much leeway when it comes to errors. I don't understand why encryption protocols should be any different.

Moderation

Time Reason Points Voter
2014-04-18 13:54 Interesting +1 rocks@pipedot.org

Junk Status

Marked as [Not Junk] by evilviper@pipedot.org on 2015-01-04 19:15