21 ms·
No, read the article. What can they do if someone from KGB will apply to a junior dev position and get the job? They will hand them all their keys.
by sydd 6y ago
No, read the article. What can they do if someone from KGB will apply to a junior dev position and get the job? They will hand them all their keys.
- tptacek 6y agoAnd there are teams, a very few of them large, where internal segmentation is strong enough to survive a compromised developer machine. But that's an extraordinarily high bar to clear and very few companies, even those with strong security teams, really manage to clear it.
- dilyevsky 6y agoI’ve been hearing this argument for over 10 years now about nsa, idf, china and now the kgb. The truth is internal audits are quite effective at catching these. If nsa could just place a plant why did they spend so much effort to tap into companies’ inter-dc fibers?
- ukj 6y agoIt's not an XOR.
- benlivengood 6y agoBecause mass surveillance is useful to identify targets and moles are useful to dig up the rest of the information on targets.