4 ms·

shrug Without evidence we're both just guessing. Perhaps someone else will chime in with direct knowledge of how FB works.

by harryh 9y ago

mehrdadn 9y ago
> shrug. Without evidence we're both just guessing. Do I understand correctly that you just admitted that your (extremely confident!) factual statement here: > most companies have pretty strict internal controls for this sort of thing was actually "just guessing"?
- harryh 9y ago
  I'm guessing based on: 1) my direct knowledge of similar companies 2) the fact that no large scale leak from internal sources has happened from FB which is evidence that they have at least some internal controls or procedures to prevent one
bigiain 9y ago
Evidence suggests it wasn't true at the NSA five or so years back... It's _probably_ true that things in general have gotten better since then, and it's probably true that they're better at _some_ companies like Google, Facebook, and Amazon - but I'd tend to agree that it's very unlikely to be true for "most companies".
- sulam 9y ago
  The Snowden case is an interesting example. He went out of his way to get access to information, going so far as to transfer into a role that had more access (I don’t recall all the details but I remember that much). Every company has some category of employee whose job it is to ensure enforcement of policies, for instance, and if these people set out to subvert the system you should expect them to be able to do so. The watching watchers onion does eventually run out of skin (and it’s not even that deep most places).
  - spc476 9y ago
    The right person with the right access can do a tremendous amount of damage. 14 years ago some servers I was hired to maintain (marketing sites for a gambling site out of Costa Rica) were wiped out as part of an inside job: http://boston.conman.org/2004/09/19.1 http://boston.conman.org/2004/09/19.1 Who watches the watcher indeed.
pwneduser 9y ago
I believe it's true of Facebook as well. Source: I interviewed with their security team once and got a fair idea of how their various security teams are organized.

shrug Without evidence we're both just guessing. Perhaps someone else will chime in with direct knowledge of how FB works.

by harryh 9y ago

shrug Without evidence we're both just guessing. Perhaps someone else will chime in with direct knowledge of how FB works.

mehrdadn 9y ago

> shrug. Without evidence we're both just guessing. Do I understand correctly that you just admitted that your (extremely confident!) factual statement here: > most companies have pretty strict internal controls for this sort of thing was actually "just guessing"?

harryh 9y ago
I'm guessing based on: 1) my direct knowledge of similar companies 2) the fact that no large scale leak from internal sources has happened from FB which is evidence that they have at least some internal controls or procedures to prevent one

bigiain 9y ago

Evidence suggests it wasn't true at the NSA five or so years back... It's _probably_ true that things in general have gotten better since then, and it's probably true that they're better at _some_ companies like Google, Facebook, and Amazon - but I'd tend to agree that it's very unlikely to be true for "most companies".

sulam 9y ago
The Snowden case is an interesting example. He went out of his way to get access to information, going so far as to transfer into a role that had more access (I don’t recall all the details but I remember that much). Every company has some category of employee whose job it is to ensure enforcement of policies, for instance, and if these people set out to subvert the system you should expect them to be able to do so. The watching watchers onion does eventually run out of skin (and it’s not even that deep most places).
- spc476 9y ago
  The right person with the right access can do a tremendous amount of damage. 14 years ago some servers I was hired to maintain (marketing sites for a gambling site out of Costa Rica) were wiped out as part of an inside job: http://boston.conman.org/2004/09/19.1 http://boston.conman.org/2004/09/19.1 Who watches the watcher indeed.

pwneduser 9y ago

I believe it's true of Facebook as well. Source: I interviewed with their security team once and got a fair idea of how their various security teams are organized.