Security audit of the source code?

Follow

Daniel

• March 31, 2021 13:58

Has there been any security audit done on the source code?

0

• 

  Firewalla

  • March 31, 2021 16:48
  • Edited

  Well, code audit is a huge topic;  it depends on the code and it also depends on how (human vs. tools).   Which ones are you interested in?

  And of course, if you are in the camp that says "security bugs are just bugs in software", then we do have a very big test team that looks at everything... and with this huge team ($$$),  often causes releases to be slow. (example 1.972)

  1

  Comment actions Permalink
• 

  Daniel

  • March 31, 2021 18:34

  I was mostly interested if any external security researcher have done a review of the code.

  Or if any penetration tester have reviewed the box itself.

  0

  Comment actions Permalink
• 

  Firewalla

  • March 31, 2021 20:44

  Yes, we do have a lot of people with various backgrounds looking at different parts, and they were kind enough to work with us on the potential findings/issues. 

  0

  Comment actions Permalink
• 

  Daniel

  • March 31, 2021 21:02

  Sounds great, but nothing publicly available?

  0

  Comment actions Permalink
• 

  Firewalla

  • March 31, 2021 22:40
  • Edited

  We do have a few who wrote papers, which may be publicly available.  We also have people use our box to test other devices, not sure if you are interested in such, https://www.nytimes.com/wirecutter/blog/smart-home-security-privacy/

   

  1

  Comment actions Permalink
• 

  Daniel

  • April 01, 2021 13:37

  Anything that’s publicly available is interesting!

  0

  Comment actions Permalink

Please sign in to leave a comment.