> This is obviously false reductio ad absurdum given the existence of managers doing exactly that right now. Managers don’t know the details of any system unle

> This is obviously false reductio ad absurdum given the existence of managers doing exactly that right now. Managers don’t know the details of any system unless they wrote it when they were an engineer (and it hasn’t been modified). They are trusting their engineers’ interpretation of the system, which is a game of telephone up the management chain. > CEOs are not testifying to congress about exploiting side channels in hypervisor memory management. On one level, they're offering industry viewpoints on policy issues; on another, they're actors in a political game. The largest account takeover incident recently was an unsophisticated social engineering attack executed by a 17 year old. I’d argue most system and data vulnerabilities aren’t sophisticated or complicated yet companies like the idea of this because it makes them seem more improbable. Vulnerabilities happen because security guarantees and understanding cost time and time is limited when shipping a product faster than a competitor. In reality if Congress wants an expert they need to have a team of engineers at the company performing audits and code reviews.