pull down to refresh
Not nobody, but it's a real wakeup call: not enough active reviewers. I remarked yesterday that me being surprised at Evan being surprised that I am reviewing Zeus, was wishful thinking on my part that there's actually someone else looking, let alone spend time. Delusional opti.
This is why in legacy payments, card terminals, processors etcetera have mandatory audit. Trust without verification is blind trust. Blind trust is bad.
Good news: things can be automated now.
reply
“Sufficiently” is doing a lot of work in my statement.
reply
you would think the manufacture of the software/hardware would be 'financially motivated' if not 'reputationally motivated'
reply
or motivated. Nobody (but an attacker!) is, let's say, financially motivated to scrub through lots of code to find an error somewhere. (This is a gold-mining type process: endless days of no result, until one day ka-ching!)