Code audit for the Tor Project completed by 7aSecurity | Tor Project

7aSecurity conducted a comprehensive code audit for several tools we use to monitor the health of the Tor network. This blog post outlines key recommendations and links to the full report.

Chuyên gia cứu hộ dự án chia sẻ về kiểm toán mã React Native: Mã nguồn 'không thể cứu vãn' từ agency 'Junior Farm'. Lỗi nghiêm trọng: dùng JS thay TS (2024), logic trộn UI, nhiều thư viện trùng lặp. Khuyên founder không chuyên nên làm code audit trước khi thanh toán cuối cùng để tiết kiệm chi phí lớn.

#CodeAudit #SoftwareDevelopment #TechTips #LậpTrình #KiểmToánMã

https://www.reddit.com/r/SaaS/comments/1pd0rn4/i_just_had_to_tell_a_founder_his_15k_mvp_is/

Why are XSS still a thing? Why do we have div-soups instead of semantic markup? Why is the web app slow?

Frontend engineering is complex and requirements are high. Consider using external input to improve the quality of your products.

https://helloanselm.com/writings/on-seniority-and-understanding-the-web-vs-knowing-how-to-use-frameworks
#codeaudit #freelance #frontend

On seniority and understanding the Web vs. knowing how to use Frameworks — Anselm Hannemann

Anselm Hannemann — helloanselm.com
Use open-source software when you can.
It’s harder to audit what you can’t see.
#FOSS #Transparency #CodeAudit

I’m looking to get a code audit done for my current project (written in PHP) since it’s the first one I’ve put this much effort into AND made it publicly available on GitHub.

Anybody happen to know a person or group who they’d recommend for such an audit?

I’d prefer to hire somebody who works with the #FOSS community as a way to help support their efforts.

#codeaudit #softwareaudit #infosec #FediHire

AWS and the Rust Foundation is offering cash rewards to formally verify unsafe functions in the Rust standard library. Apparently there's 7.5k unsafe functions in Rust's standard library.😬
https://devclass.com/2024/11/21/aws-will-pay-devs-to-verify-rust-standard-library-because-of-7500-unsafe-functions-and-enormity-of-task/

#rust #codeaudit

AWS will pay devs to verify Rust standard library because of 7,500 unsafe functions and enormity of task • DEVCLASS

AWS, in collaboration with the Rust Foundation, is crowdsourcing an effort to verify the Rust standard library, by […]

DEVCLASS
#swDevTermOfTheDay A #CodeAudit is a formal analysis of the whole source code in a programming project with the intent of discovering bugs, security breaches or violations of programming conventions.