14
How to evaluate software security? (lemmy.ml)
submitted 11 months ago by to c/asklemmy@lemmy.ml
6 comments fedilink hide all child comments
 

Without going through the whole source code. You can just look up the information on the web, but how do you know whether to trust that information?

(Assuming no security audit has been listed on the website, or the audit seems outdated.)

you are viewing a single comment's thread
view the rest of the comments
[โ€“] 1 point 11 months ago

we either put it in virustotal, spin up a VM, and run the thing without network access, and just hope for the best

  • permalink
  • fedilink
  • source
    •