Hacker News Reader

Comment by dbetteridge | Hacker News Reader

Business opportunity for EU devs provide Australian businesses with PR and code review to ensure their software isn't backdoor'd

View on HN

If an Australian developer was served with a Technical Capability Notice to build a backdoor, and then submitted code to be analysed by a third party who found it, the developer would literally be liable to be jailed for 15 years and a $50K fine for individuals or $10 million for companies.

The law requires us to deliver exploits secretly and lie to everybody about it.

Maybe set up your release process so that independent code review _can't_ be bypassed? (Review company handles building and signing the application.)

This is what I meant yes, the aussie arm of developers have no build and issue access at all

More like, biz opportunity to make products competing with Jira, Confluence et al.

Wonder how many banks and other security sensitive orgs use Jira and store all their tech specs in there.

All of them?

https://www.jetbrains.com/youtrack/specials/compare/jira-vs-...

https://www.xwiki.org/xwiki/bin/view/Main/WebHome

And if it is, then what?

Good idea though. Maybe some kind of Certification?

Well ideally you get in early and catch it in a mandatory PR process, all PR's pass through EU devs who are the only ones who can merge.

Otherwise yes, security certification process to review existing code and then maintain as above.

As if certifications would prove anything. Just look at what the German tüv certifies secure. They are missing even the most basic XSS stuff. I have no hope here.

Reply on news.ycombinator.com