3 ms·

Here’s a hard reality: The people who can fix the security problem are the ones who are already working on it. There’s no magic dust or elite squad of cyber sec

Here’s a hard reality: The people who can fix the security problem are the ones who are already working on it. There’s no magic dust or elite squad of cyber security professionals that are going to walk through the doors of a FAANG and turn things around. Security is hard, and security at global scale is still an unsolved problem that no one has the answer for. What I do know from working in the valley is that neither the government nor the media has the damndest idea of what they’re talking about when it comes to technology, and they certainly wouldn’t know how to secure Google let alone keep search running globally for a night.

fulafel 8y ago
Most people working on security don't have much power, and are reduced to tinkering with small incremental improvements that don't break anything. case in point: If you look at the history of malware infactions in organisations, one vector historically stands out since the early 2000's: office/pdf attachments in emails. It's been obviously a catastrophic combination to feed untrusted, unauthenticated complex office formats to insecure productivity applications, but nothing was done about it despite weekly new public vulnerabilities and pwnage continuing over 20 years.