3 ms·
A Google security manager told me at a conference when chatting about this in 2016. They were thinking of staffing a breach team, but did not have one then.
by kerng 9y ago
A Google security manager told me at a conference when chatting about this in 2016. They were thinking of staffing a breach team, but did not have one then.
- mehrdadn 9y agoI thought Project Zero tries to find vulnerabilities in Google stuff too?
- kerng 9y agoProject Zero is different compared to performing end to end breaches. A breach team might use 0-days of Project Zero to actually compromise Google's internal assets to see if their defenders can detect an adversary. FB has such a team and they gave public presentations (one was at RuxCon 2016) how they compromise for instance their domain controllers and stuff.