Quote from: vv181 on April 27, 2018, 01:43:37 PM

Quote from: blockaudit on April 27, 2018, 12:25:19 AM

Nice project folks!

Wondering if you all have had a formal code audit or pen-test of the LBC application and media player... seems like a lot of cool features and therefore attack surface to cover.

Do you all regularly perform security code reviews in the dev process or penetration test engagements on the app and/or infrastructure side?

I doubt the LBRY had ever done any formal code audit or pen-test as you said. But I believe @jiggytom could explain better. The only information about security I can find on the website is this: https://lbry.io/faq/security.

The media player runs in a sandboxed environment, but precautions should always be taken with antivirus solutions. If you do find a way to exploit it, please let us know and we'll tip you!