You would not believe the # of times I've proposed this to clients and been shot down. Everyone just wants a report. https://guidovranken.wordpress.com/2017/06/21/the-openvpn-post-audit-bug-bonanza/ …
I've proposed modifying build scripts and dev'ing app-specific fuzzers to the same non-profits that funded OVPN audits. Answer is always no.
-
-
Typical answer: "we'd rather pay to train the developers (through a report) than fund a bug finding CI tool that does it for them."
-
Seems like there's a way to spin the CI tool as auto-generated reports, but it's hard to tell people what they think they need isn't right
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.