A question about apps

[TheBlackAdder]

10. Should use what securities firms use... RSA. Many apps are built with virus-plagued freeware.

.

Contrary to the touted position, freeware is the most insecure software, as many of the application groups have been taken over by hackers, and nation state actors to inject code into the builds. Freeware proponents claim that their code is reviewed by multiple people, when in reality the only ones doing it are university academia, hackers and nation security teams. The latter do not reveal holes in the code, and since the code is in open source, they don't have to figure out how to disassemble it, since good firms use their own compilers and assemblers to generate unique object decks.

Many of these apps just borrow functions from open-source sites, to perform specialized functions. Most of the people generating the code cannot read the a dump of their own code, without using some form of interactive development tool.

RSA SecurID along with a cell phone or laptop VPN provides an acceptable level of security. Now, this is just to connect to the network of the site you are going to, then an external security manager userid/password structure controls further access.

.