ente.io Community

125 readers

3 users here now

ente is a photos app with a focus on security and privacy. For support queries, please raise a ticket with team@ente.io.

founded 2 years ago

MODERATORS

httpjames@sh.itjust.works

Ente completes CERN sponsored audit (ente.io)

submitted 4 months ago by lazycouchpotato@lemmy.world to c/ente@sh.itjust.works

1 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] SnoringEarthworm@sh.itjust.works 8 points 4 months ago

Ente, specifically the server side - both code, and infrastructure on which it runs - was audited by a team of 5 researchers from the German cybersecurity firm Cure53 over a period of 2 weeks as part of a CERN sponsored audit. No data integrity issues were found, and 12 of the 15 security related issues were fixed by the Ente team during the audit itself.

The audit covered all the apps - Photos, Auth, and the upcoming Locker - since the same code and infrastructure powers the entire platform. You can read Cure53's full report here. All changes are already in the latest Docker image.

CERN is a heavy user of Ente, and we are grateful for them both for being one of our earliest trendsetting customers, and for taking the initiative to improve the security of the open source ecosystem by sponsoring the audit.

We'd also like to thank Cure53 - working with them was a lot of fun!

Saved you a click. That's the whole post.