Having work at comcast at the highest levels (as a programmer at least), I can tell you it's a dumpster fire over there for security. I've had to get new apps a

Having work at comcast at the highest levels (as a programmer at least), I can tell you it's a dumpster fire over there for security. I've had to get new apps approved by security at Comcast and I'd tell them that I knew they weren't testing known holes and they were like "Well... We're just required to run this pen testing software and that's it". Uhh okay... Now comcast is a massive company with so many divisions and remnants of many merged companies but I worked at the main office and the stuff that would happen there was a comedy of errors. I once had someone pretty high up (reported to the C Level) tell me to add a feature to our software that was just completely insecure. I told the guy this was real dangerous idea. He said do it anyway. I was on an email chain with the head of the legal department. I responded there that I was going to do it but they should be aware that it's going to open up the company to litigation and since they were now aware of it, it could be a big problem. Head of legal stepped in and squashed the idea. But that's the level of stupidity we are dealing with.