5 ms·
Apple has never devoted enough care, resources, or money to cybersecurity. It’s just a fact. They’ve also never devoted enough care, resources, or money to net
by iJohnDoe 6y ago
Apple has never devoted enough care, resources, or money to cybersecurity. It’s just a fact.
They’ve also never devoted enough care, resources, or money to network architecture and how important availability is (with fairness, they have improved in this area in the last couple of years due to the major iCloud outages they had).
Apple doesn’t hire mainstream IT people and cybersecurity people from the enterprise realms. There is a vast amount of talented people and knowledge they simply ignore because the Apple culture is too hip and cool for that.
Steve Jobs is primarily the blame for all the above. He treated the departments and any person that cared about enterprise like dirt. Steve Jobs always said Apple is a consumer company. This philosophy has obviously carried on.
- Quarrelsome 6y agobut which tech companies do devote enough care, resources and money to cybersecurity? I always figured the industry never really rewarded those things over aspects (e.g. time to market).
- marcan_42 6y ago"Cybersecurity" is a meaningless buzzword, but I can give you more specific statement. Which tech companies devote enough care and have competent personnel working on embedded consumer device security? Answer: Apple and Microsoft (Xbox group). (Google is nowhere close because they don't design their own silicon, and the OEMs they rely on are incompetent in this field, so their efforts can only go so far, no amount of hiring competent sec folks will fix that problem).
- jnwatson 6y agoThey absolutely do hire cybersecurity folks from enterprise companies. Source: I know them.
- iJohnDoe 6y agoThat is wonderful news. Thanks for the update.
- mjg59 6y agoEvery Apple security developer I've interacted with has been astonishingly competent. Unfortunately Apple's corporate policies mean they're very rarely in a position to publicly discuss things they're working on, so their visibility is significantly diminished (one of the reasons I wouldn't work there)
- lawnchair_larry 6y agoApple has some of the top security people in the business. If “enterprise” experience is your bar, they have former Microsoft, Amazon, Google people ranging from junior engineers to VPs, including their current CISO. They have also hired non-enterprise people who wrote exploits like the one NSO used, as well as other prominent hackers.
- marcan_42 6y agoSome of my most competent security friends work or used to work for Apple. They are, indeed, not "IT people and cybersecurity people from the enterprise realms", because those would be wholly unqualified to work on iOS security. The people actually working on iOS security are hackers and embedded security experts. As they should be. The enterprise cybersecurity world has approximately nothing to do with something like security of a mobile device (e.g. the people in that field wouldn't know the slightest thing about cutting edge exploit mitigations or hardware assisted countermeasures like pointer authentication, memory protection and IOMMUs, etc).