4 ms·
Who would you say has the creme de la creme of software security talent, and can you with a straight face say that they have not been compromised at some level?
by hrayr 10y ago
Who would you say has the creme de la creme of software security talent, and can you with a straight face say that they have not been compromised at some level?
Security is hard, but I wonder if it's P VS NP?
- tptacek 10y agoGoogle, Facebook, Apple, Microsoft. And, no.
- capote 10y agoJust the tech giants have the best security people? How about large banks, hedgefunds and other financial services, security contractors/private military and governments?
- ivl 10y agoWe have large banks blocking pasting in password fields [1], and suggesting users not use password managers. I'd actually say security research firms have pretty high quality security people, however, and not just the tech giants. 1. http://www.iphoneincanada.ca/news/1password-open-letter-banks/ http://www.iphoneincanada.ca/news/1password-open-letter-bank...
- capote 10y agoThis doesn't mean all financial institutions are bad at security. Some are cutting edge and hire some of the best.
- fizbin 10y agoGoldman Sachs - they're way far ahead of any other large bank or financial services company.
- capote 10y agoCitadel is one I know for sure is pretty cutting edge, and I'd wager their security can rival any large tech company.
- peterwwillis 10y agoNo mention of Intel, IOActive, Matasano, Rapid7, FireEye, CheckPoint, Trend Micro, Kaspersky Labs, UCF, JHU, APL, MITRE, and of course, NSA? Sure, the ones you mentioned have the biggest paychecks. But they won't give you indemnity and extended resources to find weaknesses in critical infrastructure. Some people like breaking bigger toys.