4 ms·
Yeah, sure. Thats the company which according to Google (March) has a huge mess in own nest of Certification Authority resulting in google chrome removing their
by rdslw 9y ago
Yeah, sure. Thats the company which according to Google (March) has a huge mess in own nest of Certification Authority resulting in google chrome removing their certs: https://arstechnica.com/information-technology/2017/03/google-takes-symantec-to-the-woodshed-for-mis-issuing-30000-https-certs/ https://arstechnica.com/information-technology/2017/03/googl...
- micaksica 9y agoThis. I would trust most non-security tech CEOs to give better security advice than the executives at Symantec.
- nwatson 9y agoThe Symantec CEO has been in that position only since Symantec acquired Blue Coat last year, where they were CEO previously. The Symantec CA happened well before their current term.
- pgeorgi 9y agoBlue Coat. Has problems with foreign governments being unfriendly? I guess what goes around comes around: http://surveillance.rsf.org/en/blue-coat-2/ http://surveillance.rsf.org/en/blue-coat-2/
- hetspookjee 9y agoWhat a fantastic website is that! To add to your point: Amazing how skewed ones morals can be if they believe they're doing the right thing by providing those countries these kinds of tools.
- axonic 9y agoMore reasons "trust us" isn't acceptable anymore. https://en.m.wikipedia.org/wiki/Unethical_human_experimentation_in_the_United_States https://en.m.wikipedia.org/wiki/Unethical_human_experimentat...
- megous 9y agoIn case of Syria, this must have been used to help the regime identify people to be disappeared, for sure.
- chris_wot 9y agoHe's doing a bang up job so far then!
- kccqzy 9y agoThey have already divested their certificate business. http://investor.symantec.com/About/Investors/press-releases/press-release-details/2017/DigiCert-to-Acquire-Symantecs-Website-Security-and-Related-PKI-Solutions/default.aspx http://investor.symantec.com/About/Investors/press-releases/...
- bradknowles 9y agoYup. The tire fire of the security industry is saying that letting other people look at the code is a security risk. Personally, I think maybe they got scared that someone might figure out that their code is worse than everything else on the planet, and so they want to try to put the clothes back onto the Emperor.
- averagewall 9y agoNot sure that applies in this case. If the only party you allow to look at your code is one that's heavily invested in secretly hacking it, then you're probably going to give them some zero-days which they'll use maliciously. It's different if you let everyone look at it, since a white-hat might find something helpful. But this isn't a choice between everyone and no-one, it's between a known black-hat and no-one.
- KSteffensen 9y agoWhy is it not a choice between everyone and no-one?