5 ms·

The fact that they hired Alex Stamos and probably just spent a bunch of money on buying Keybase seem like a sign that things are changing. They prioritized eas

The fact that they hired Alex Stamos and probably just spent a bunch of money on buying Keybase seem like a sign that things are changing. They prioritized ease of use above all to get adoption before. This is appalling to me, but I believe they are seeing enough pressure to change course. It’s believable to me that they would intend to as they have already captured much of the consumer (non-B2B) market mind share and can afford to invest in this area. Will I be using it now? Still a no. Maybe I’m time though.

purple-dragon 6y ago
> The fact that they hired Alex Stamos and ... Call my cynical, but "hiring" a bunch of infosec celebrities and critics as part-time consultants or contractors should be considered nothing but a (brilliant and silencing) PR move until the day that product updates and analyses reveal otherwise.
- djrogers 6y ago
  > until the day that product updates and analyses reveal otherwise. The product (and their poor installer practice) has been updated several times in the past few months alone, and each move has made Zoom a more secure product, with the vast majority of the hubbub having been addressed. So are you simply ignoring that, or are you setting your own personal goalposts?
  - purple-dragon 6y ago
    I'm doing neither. I'm pointing out a logical fallacy in the parent comment. Hiring people part-time and buying a company does not, on its own, convey anything about improvements to product quality, security, or the corporate culture of either. I can only infer from your comment that you might think I have some beef or issue with Zoom. I said no such thing.
    - wutbrodo 6y ago
      Sure, but it's not "on its own", it's in the context of the investment in security mentioned by the parent comment.
      - purple-dragon 6y ago
        At this point, I'm confused, and I'm not sure what point you or the other commenter are looking for me to concede. Zoom is paying some security consultants, pushed out some product updates, and bought Keybase, so it's a story book ending?
        wutbrodo 6y ago
        Just as your comment was aiming to narrowly point out a logical fallacy in the parent comment, I'm pointing out a flaw in your own: I disagree with your claim that investing in security practices is just theater, and that more concrete efforts in the same direction are irrelevant. The concrete efforts are Bayesian evidence that the newer investments are more than theater.
        purple-dragon 6y ago
        I didn't claim that. I believe in investing in security. I'm a security professional.
        albedoa 6y ago
        You said that those things are theater until the day the product updates. We are beyond the day when that happened. So for it to be a fallacy you have to reject the context in which it was presented, which nobody but you is doing.
        purple-dragon 6y ago
        It's a SaaS world, baby. Product updates (can) happen everyday. I'm not sure what that proved.

purple-dragon 6y ago

> The fact that they hired Alex Stamos and ... Call my cynical, but "hiring" a bunch of infosec celebrities and critics as part-time consultants or contractors should be considered nothing but a (brilliant and silencing) PR move until the day that product updates and analyses reveal otherwise.

djrogers 6y ago
> until the day that product updates and analyses reveal otherwise. The product (and their poor installer practice) has been updated several times in the past few months alone, and each move has made Zoom a more secure product, with the vast majority of the hubbub having been addressed. So are you simply ignoring that, or are you setting your own personal goalposts?
- purple-dragon 6y ago
  I'm doing neither. I'm pointing out a logical fallacy in the parent comment. Hiring people part-time and buying a company does not, on its own, convey anything about improvements to product quality, security, or the corporate culture of either. I can only infer from your comment that you might think I have some beef or issue with Zoom. I said no such thing.
  - wutbrodo 6y ago
    Sure, but it's not "on its own", it's in the context of the investment in security mentioned by the parent comment.
    - purple-dragon 6y ago
      At this point, I'm confused, and I'm not sure what point you or the other commenter are looking for me to concede. Zoom is paying some security consultants, pushed out some product updates, and bought Keybase, so it's a story book ending?
      - wutbrodo 6y ago
        Just as your comment was aiming to narrowly point out a logical fallacy in the parent comment, I'm pointing out a flaw in your own: I disagree with your claim that investing in security practices is just theater, and that more concrete efforts in the same direction are irrelevant. The concrete efforts are Bayesian evidence that the newer investments are more than theater.
        purple-dragon 6y ago
        I didn't claim that. I believe in investing in security. I'm a security professional.
        albedoa 6y ago
        You said that those things are theater until the day the product updates. We are beyond the day when that happened. So for it to be a fallacy you have to reject the context in which it was presented, which nobody but you is doing.
        purple-dragon 6y ago
        It's a SaaS world, baby. Product updates (can) happen everyday. I'm not sure what that proved.