A few observations: Google headcount: ~49k MS headcount: ~130k There is going to be a huge difference in speed based on size alone, but MS also has a much gre

A few observations: Google headcount: ~49k MS headcount: ~130k There is going to be a huge difference in speed based on size alone, but MS also has a much greater commitment to regression testing than Google ever has. Google has embraced an engineering culture where the security team can contribute fixes directly to their own projects. I imagine this creates an unreasonable prejudice culture about how easy it is to implement fixes without concern for regression issues. You can see examples of this in recent e.o.y will not fix bug closures in AOSP. Those savants are going to set the usability vs security debate back a decade by by marking all http connections as insecure. Finally, don't forget that Eric Schmidt agreed to a recruiting cease fire. For. All of their pride and arrogance, those Google security engineers are never going to escape the fact that they have compromised their own potential maximum value so they can sneer at other companies cultures. Toxic and stupid.