←back to thread

1895 points _l4jh | 1 comments | | HN request time: 0s | source
Show context
bogomipz ◴[] No.16729876[source]
>"And we wanted to put our money where our mouth was, so we committed to retaining KPMG, the well-respected auditing firm, to audit our code and practices annually and publish a public report confirming we're doing what we said we would."

It's worth pointing out that KPMG was Wells Fargo's independent auditor while the bank recently committed fraud on a massive scale by creating more than a million fake deposit accounts and 560,000 credit card applications for customers without their knowledge or approval.[1]

Calling KPMG a "well-respected auditing firm" when they failed to detect over a million fake bank accounts is a joke. See:

https://www.reuters.com/article/wells-fargo-kpmg/lawmakers-q...

[1] https://www.warren.senate.gov/files/documents/2016-10-27_Ltr...

replies(10): >>16729897 #>>16730009 #>>16730105 #>>16730119 #>>16730193 #>>16730271 #>>16730746 #>>16730782 #>>16731153 #>>16731246 #
jumelles ◴[] No.16730105[source]
Genuinely asking, what are some companies that would be a good choice for this sort of thing?
replies(2): >>16730326 #>>16730442 #
chrissnell ◴[] No.16730326[source]
Many privacy activists believe that the best proof of a no-logging assertion is for a court to order a provider to turn over logs and for the company to be unable to do so.
replies(3): >>16730486 #>>16730540 #>>16730791 #
1. biot ◴[] No.16730486[source]
And to prove that they are unable to do so, would they need to get audited?