> Spoiler alert: This applies to all software. This is why security preaches defense in depth.
Thank you Mr/Mrs Pedant.
However this is a VPN product I am talking about which has an integral part in the defence in depth of which you speak.
Therefore it is only right and proper that I, and others, should be able to trust them to a greater degree. Never 100% of course, as you say. But if you are selling me a security product then you should be able to demonstrate you have put some damn effort into securing it.
"insecure argument handling" in a security product is not a good look. It stinks of sloppy coding practices followed up by a lack of security auditing.
Thank you Mr/Mrs Pedant.
However this is a VPN product I am talking about which has an integral part in the defence in depth of which you speak.
Therefore it is only right and proper that I, and others, should be able to trust them to a greater degree. Never 100% of course, as you say. But if you are selling me a security product then you should be able to demonstrate you have put some damn effort into securing it.
"insecure argument handling" in a security product is not a good look. It stinks of sloppy coding practices followed up by a lack of security auditing.