Section 10 seems more mobile than web

[jmanico]

From: https://github.com/OWASP/ASVS/blob/master/5.0/en/0x18-V10-Malicious.md

All of section v10 seems way more mobile than web and should be discarded.

The first item of 10 is already submitted as a problematic issue here https://github.com/OWASP/ASVS/issues/1200

...and the rest of 10 seems very mobile-specific and should possibly be revisited.

[danielcuthbert]

I've never liked this sentence

"Does not have back doors, Easter eggs, salami attacks, rootkits, or unauthorized code that can be controlled by an attacker" As someone who's written many a backdoor/malicious code, it's not exactly obvious and this is ambiguous at best.

[tghosth]

Agree that there are a lot of tricky points in this section, I think we need to discuss what stays if anything from this section