Live data from Hacker News

Zuckerberg Takes Steps to Calm Facebook Employees

nytimes.com

1–10 of 274 posts

Re: Zuckerberg Takes Steps to Calm Facebook Employees

#2
I feel like someone should also give Zuckerberg the memo that it's only a matter of time before an insider also goes rogue and abuses data access (edit: or otherwise; see below). Facebook fundamentally seems to trust itself way too much, and it worries me that it thinks the only threats are external entities... to me, this is another silently ticking time bomb.

EDIT: And don't forget that going rogue is just one scenario. Another is just a bigger attack surface: the more insiders have broad system access, the more credentials there are that can be phished by/leaked to/stolen by outsiders. Really, it would be completely missing the point of security to have arguments about how exactly insiders' credentials might get compromised.

Re: Zuckerberg Takes Steps to Calm Facebook Employees

#4
post #2

I feel like someone should also give Zuckerberg the memo that it's only a matter of time before an insider also goes rogue and abuses data access (edit: or otherwise; see below). Facebook fundamentally seems to trust itself way too much, and it worries me that it thinks the only threats are external entities... to me, this is another silently ticking time bomb. EDIT: And don't forget that going rogue is just one scen…

Who says it hasn't happened already? How would we ever know? For that matter, how would Zuck?

Re: Zuckerberg Takes Steps to Calm Facebook Employees

#5
post #2

I feel like someone should also give Zuckerberg the memo that it's only a matter of time before an insider also goes rogue and abuses data access (edit: or otherwise; see below). Facebook fundamentally seems to trust itself way too much, and it worries me that it thinks the only threats are external entities... to me, this is another silently ticking time bomb. EDIT: And don't forget that going rogue is just one scen…

You'd think so, but most companies have pretty strict internal controls for this sort of thing. Access is also carefully logged so a leaker is pretty much guaranteed to get caught at which point they'd immediately lose their job and likely face criminal prosecution.

With so much to lose and so little to gain internal leaks of this sort are extremely rare.

Re: Zuckerberg Takes Steps to Calm Facebook Employees

#7
These performances by CEOs before their employees to “calm” them reminds me of Jonestown or some other cult.

Everyone kind of knows the leaders are corrupt liars and false prophets. It’s all a scam. But they’ve invested so much of their lives and identities into the ideology, there’s not really any turning back. It’s like some “When Prophesy Fails” inflection point for the whole industry.

https://en.wikipedia.org/wiki/When_Prophecy_Fails

Re: Zuckerberg Takes Steps to Calm Facebook Employees

#9
post #5
post #2

I feel like someone should also give Zuckerberg the memo that it's only a matter of time before an insider also goes rogue and abuses data access (edit: or otherwise; see below). Facebook fundamentally seems to trust itself way too much, and it worries me that it thinks the only threats are external entities... to me, this is another silently ticking time bomb. EDIT: And don't forget that going rogue is just one scen…

You'd think so, but most companies have pretty strict internal controls for this sort of thing. Access is also carefully logged so a leaker is pretty much guaranteed to get caught at which point they'd immediately lose their job and likely face criminal prosecution. With so much to lose and so little to gain internal leaks of this sort are extremely rare.

> You'd think so, but most companies have pretty strict internal controls for this sort of thing. Access is also carefully logged so a leaker is pretty much guaranteed to get caught at which point they'd immediately lose their job and likely face criminal prosecution.

That's not enough by any means (edit: and as [1] pointed out, I don't even think it's true). There needs to be more to security than mere deterrence. I'm pretty sure at Google, etc. it's simply impossible for a single rogue employee to mess with customer data (except for a few in very privileged positions), and my impression has been that Facebook is not like this at all (unless it has changed recently).

[1] https://news.ycombinator.com/item?id=16675494

Re: Zuckerberg Takes Steps to Calm Facebook Employees

#10
Facebook is an enabler for individuals to successfully undermine our democratic mechanisms. It shouldn't feel nice to work for a company that has to explain itself in front of the government. The employees of Facebook should be aware of what monster they are building.
Post reply on HN