lbryio / lbryio/wallet-sync-server

Auditing

Open
#8 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
1
Forks
2
PR merge metrics
No merged PRs in 30d

Description

With enough time we'd like to audit this. Until then, we'll have @lyoshenka look over my work and warn users that it's not been audited yet.

The source code has lots of notes for the auditor. Also have them look at SDK's wallet encryption while they're at it - I have some notes on this for when the time comes.

If the only distribution is github, adding the warning to the README should probably suffice.

  • @lyoshenka looks over my work
  • Add warning to user about lack of audit
  • Perform audit

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Read the source-code notes for the auditor and the SDK wallet-encryption notes first, then review the README's distribution context. Done means the work has been reviewed, users are warned that it is unaudited, and the audit itself is completed.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
documentation, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.