Return to Question

I remember reading an article mentioning, that third party services and code should not be trusted, meaning blind trust.
So, i was thinking, everyone uses third party code in software development daily, even high profile IT security companies, and some of us take it for granted that the code they just used is trusted, meaning secure and tested.

Questions:

• What's the basis for trusting third party code and services in software development?
• What measures are taken by IT security companies before granting that trust?
• What measures are taken by IT security companies to maintain that trust?

Both open-source and closed-source.

Thanks!

I remember reading an article mentioning, that third party services and code should not be trusted, meaning blind trust.
So, i was thinking, everyone uses third party code in software development daily, even high profile IT security companies, and some of us take it for granted that the code they just used is trusted, meaning secure and tested.

Questions:

• What's the basis for trusting third party code and services in software development?
• What measures are taken by IT security companies before granting that trust?
• What measures are taken by IT security companies to maintain that trust?

Both open-source and closed-source.

For example, think of:

• The web hosting company to host your or your client's application and data

• The piece of software you didn't write but work with.

Thanks!

I remember reading an article mentioning, that third party services and code should not be trusted, meaning blind trust.
So, i was thinking, everyone uses third party code in software development daily, even high profile IT security companies, and some of us take it for granted that the code they just used is trusted, meaning secure and tested.

Questions:

• What's the basis for trusting third party code and services in software development?
• What measures are taken by IT security companies before granting that trust?
• What measures are taken by IT security companies to maintain that trust?

I remember reading an article mentioning, that third party services and code should not be trusted, meaning blind trust.
So, i was thinking, everyone uses third party code in software development daily, even high profile IT security companies, and some of us take it for granted that the code they just used is trusted, meaning secure and tested.

Questions:

• What's the basis for trusting third party code and services in software development?
• What measures are taken by IT security companies before granting that trust?
• What measures are taken by IT security companies to maintain that trust?

Both open-source and closed-source.

Thanks!

I remember reading an article mentioning, that third party services and code should not be trusted, meaning blind trust.
So, i was thinking, everyone uses third party code in software development daily, even high profile IT security companies, and some of us take it for granted that the code they just used is trusted, meaning secure, tested and perform-ant.

mistakenly posted, finishing the post.

I remember reading an article mentioning, that third party services and code should not be trusted, meaning blind trust.
So, i was thinking, everyone uses third party code in software development daily, even high profile IT security companies, and some of us take it for granted that the code they just used is trusted, meaning secure and tested.

Questions:

• What's the basis for trusting third party code and services in software development?
• What measures are taken by IT security companies before granting that trust?
• What measures are taken by IT security companies to maintain that trust?