4 ms·

> Sticking to principles like Data Security, Privacy, Isn't that something Europe has but the US chose not to (at least regarding computer/ad/tech industry) ?

alephnerd 2y ago
European regulators talk big, but European companies (German+French) have really horrid internal security practices. I don't want to name names as it can affect me professionally, but I would never trust a European (German+French) digital platform developed by one of their traditional conglomerates - even a stereotypically non-technical American F500 like Home Depot has way better technical and security practices than some of the European (German+French) conglomerates I've dealt with. These are organizations where managing ACLs are a brand new practice.
- sofixa 2y ago
  If we're sharing anecadata, I've interacted professionally with organisations of all sizes and types (from startups to big banks to public sector) from all around the world, and I strongly disagree. Legacy companies exist everywhere. Big banks with weird "security" practices exist everywhere. There's nothing special about French or German companies' digital security. If anything, they're often better than American ones because there's regulations forcing them to deal with some things like securing private data, meanwhile companies like Equifax can leak everything about everyone and not care in the slightest.
  - alephnerd 2y ago
    I wasn't talking about European financial companies - they're actually pretty decent at security because European financial regulators actually have teeth, and the internal platforms for a Deustche Bank or BNP Paribas are fairly forward facing (or at least as forward facing as very large and old conglomerates can be). The companies I'd be worried about are outside the financial sector. I know it's all anecdotal so we're just randos on the internet yelling at each other, but actual enforcement of European data and security regulations (outside of the financial sector) are minimal, and more critically, very basic platform security practices haven't percolated. That said, I can safely say that Equifax has completely revamped their infra to prevent a leak like the one they previously faced. They had a complete rearchitecture and heads rolled.
    - sofixa 2y ago
      And I'm not talking about financial sector exclusively either. All sorts of companies, even centuries old ones, are taking security seriously and even if there often is lots of legacy stuff, there's no material differences with Indonesian or American or Brazilian companies

alephnerd 2y ago

European regulators talk big, but European companies (German+French) have really horrid internal security practices. I don't want to name names as it can affect me professionally, but I would never trust a European (German+French) digital platform developed by one of their traditional conglomerates - even a stereotypically non-technical American F500 like Home Depot has way better technical and security practices than some of the European (German+French) conglomerates I've dealt with. These are organizations where managing ACLs are a brand new practice.

sofixa 2y ago
If we're sharing anecadata, I've interacted professionally with organisations of all sizes and types (from startups to big banks to public sector) from all around the world, and I strongly disagree. Legacy companies exist everywhere. Big banks with weird "security" practices exist everywhere. There's nothing special about French or German companies' digital security. If anything, they're often better than American ones because there's regulations forcing them to deal with some things like securing private data, meanwhile companies like Equifax can leak everything about everyone and not care in the slightest.
- alephnerd 2y ago
  I wasn't talking about European financial companies - they're actually pretty decent at security because European financial regulators actually have teeth, and the internal platforms for a Deustche Bank or BNP Paribas are fairly forward facing (or at least as forward facing as very large and old conglomerates can be). The companies I'd be worried about are outside the financial sector. I know it's all anecdotal so we're just randos on the internet yelling at each other, but actual enforcement of European data and security regulations (outside of the financial sector) are minimal, and more critically, very basic platform security practices haven't percolated. That said, I can safely say that Equifax has completely revamped their infra to prevent a leak like the one they previously faced. They had a complete rearchitecture and heads rolled.
  - sofixa 2y ago
    And I'm not talking about financial sector exclusively either. All sorts of companies, even centuries old ones, are taking security seriously and even if there often is lots of legacy stuff, there's no material differences with Indonesian or American or Brazilian companies