4 ms·

Otter.ai, collector of potentially incredibly sensitive user recordings, despite perhaps having a good privacy policy, has... 81 employees and no cybersecurity

Otter.ai, collector of potentially incredibly sensitive user recordings, despite perhaps having a good privacy policy, has... 81 employees and no cybersecurity team from what I can tell. linkedin[.]com/company/otter-ai/people/?keywords=security Security and privacy isn't a tool, it's a set of tools in a logical stack and used according to correct processes. This is why focused newsroom security teams are so critical, but NYT fired their rep a few years ago and WSJ had or has generic security hires double-timing in that role. It sucks that Khashoggi wasn't more of a watershed moment for this. I wouldn't worry about privacy, I'd worry about threat actors popping otter and it's 0 security team to expose sources.

radicaldreamer 5y ago
They're likely already compromised and definitely will be after this story... they should hire a security lead and harden their systems right away.
- dogman144 5y ago
  Personal opinion is it's irresponsible to exist since 2016 and have not hired someone for it yet, especially after these last years re: Solarwinds. The careers page is hiring a software eng - security which means someone who can build tooling, but won't have any policy/process power beyond what a VP Eng allows them. So good luck deploying necessary changes that that impact dev/product flows. This is the sort of stuff that gets security/privacy people upset at ex-Googler SV tech. Lot of hubris.