3 ms·
I loved security training at Microsoft. I remember one time Satya said the red teams reported to him which Microsoft services they were currently in. He would
by breck 2y ago
I loved security training at Microsoft.
I remember one time Satya said the red teams reported to him which Microsoft services they were currently in. He would then ask the heads of those services if they had detected any breaches. Sometimes there would be services that had been breached for years, undetected. Must have been hard for Satya to keep a straight face.
One phrase that struck with me from their security training: "Assume Breach".
- selimthegrim 2y agoThis sounds like China Miéville.
- Thorrez 2y agoThe red team would beach them then wait years before telling them? The goal the the red team should be to increase security. Waiting years before telling them means there's a years-long delay before security can be improved. That goes against the goal.
- Aaronstotle 2y agoMaybe they should have warned them after some time, because Microsoft has gotten breached a few times in the last few years.
- renewiltord 2y ago> Be me: security researcher on Death Star > hired to find flaws in space station > find that exhaust port has flaw > single blast to it would lead to reactor > would blow whole station > tell my boss > he asks engineers if there's flaw > they say no > he snickers behind their back > "we know better, don't we anon?" > doesn't tell engineers > mfw blown up by Luke Skywalker