> "iSEC did not identify any issues considered "high severity" during this testing. iSEC found no evidence of backdoors or intentional flaws. Several weaknesses and common kernel vulnerabilities were identified, including kernel pointer disclosure, but none of them appeared to present immediate exploitation vectors. All identified findings appeared accidental."
This seems matter-of-factish to me as long as they can defend it. (Hey, some of the code tha I've written to save people time and money does not have a very polished style, -that is a matter of fact and I'm fine with that.)
I was just pointing it out since it wasn't really necessary to even include in the report. I agree though. I've written some God awful code that gets the job done, but would be hell to try and refactor.
> "iSEC did not identify any issues considered "high severity" during this testing. iSEC found no evidence of backdoors or intentional flaws. Several weaknesses and common kernel vulnerabilities were identified, including kernel pointer disclosure, but none of them appeared to present immediate exploitation vectors. All identified findings appeared accidental."