U.S. officials say they have warned firms about the risks of allowing the Russians to review their products’ source code, because of fears it could be used in cyber attacks. China sometimes also requires source code reviews as a condition to import commercial software, U.S. trade attorneys say. Without the source code approval, Symantec can no longer get approval to sell some of its business-oriented security products in Russia. TRUSTED LABSOver the past year, HP has used Echelon to allow FSTEC to review source code, according to the agency’s records. In a statement, McAfee said the Russia code reviews were conducted at “certified testing labs” at company-owned premises in the United States.
Source: Huffington Post June 23, 2017 23:37 UTC