31–40 of 274 posts
Earlier quoted context omitted.
OK you're right that I overstated when I said "most companies." What I meant to say was most companies of the size and sophistication of Facebook that have a significant amount of private user information. Sorry for not being clear.
If you add "and notoriety" to that list of qualifiers, I agree with you!
Earlier quoted context omitted.
If you add "and notoriety" to that list of qualifiers, I agree with you!
I'm comfortable with such a qualification. Glad we can violently agree. ;-)
I'd also say it's the norm among most Fortune 500 non-tech companies.
I feel like someone should also give Zuckerberg the memo that it's only a matter of time before an insider also goes rogue and abuses data access (edit: or otherwise; see below). Facebook fundamentally seems to trust itself way too much, and it worries me that it thinks the only threats are external entities... to me, this is another silently ticking time bomb. EDIT: And don't forget that going rogue is just one scen…
(Or perhaps we have, and whichever trusted journalists they've chosen to share with are franticly poring over the exfiltrated data working out how best to angle the story without throwing the whistleblower and/or innocent FB users under the bus...)
I feel like someone should also give Zuckerberg the memo that it's only a matter of time before an insider also goes rogue and abuses data access (edit: or otherwise; see below). Facebook fundamentally seems to trust itself way too much, and it worries me that it thinks the only threats are external entities... to me, this is another silently ticking time bomb. EDIT: And don't forget that going rogue is just one scen…
Earlier quoted context omitted.
> You'd think so, but most companies have pretty strict internal controls for this sort of thing. Access is also carefully logged so a leaker is pretty much guaranteed to get caught at which point they'd immediately lose their job and likely face criminal prosecution. That's not enough by any means (edit: and as [1] pointed out, I don't even think it's true). There needs to be more to security than mere deterrence. I…
That sort of access limitation is what I meant by "pretty strict internal controls." Having never worked there, I can't speak to how it works at FB but I would imagine that there are a lot of limitations on what rank and file employees can do. I guess I could be wrong. Perhaps someone with direct knowledge will chime in.
Cool, now read this: https://news.ycombinator.com/item?id=16675503
Any changes to your thoughts?
I feel like someone should also give Zuckerberg the memo that it's only a matter of time before an insider also goes rogue and abuses data access (edit: or otherwise; see below). Facebook fundamentally seems to trust itself way too much, and it worries me that it thinks the only threats are external entities... to me, this is another silently ticking time bomb. EDIT: And don't forget that going rogue is just one scen…
Earlier quoted context omitted.
I believe it's true of Google! I do not believe it's true in general.
shrug Without evidence we're both just guessing. Perhaps someone else will chime in with direct knowledge of how FB works.
It's _probably_ true that things in general have gotten better since then, and it's probably true that they're better at _some_ companies like Google, Facebook, and Amazon - but I'd tend to agree that it's very unlikely to be true for "most companies".
Earlier quoted context omitted.
I'm comfortable with such a qualification. Glad we can violently agree. ;-)
That's a really short list of companies, though! There are a lot of companies that each independently hold a ghastly amount of information about random people that have virtually no meaningful controls over this stuff. "No meaningful controls" is the norm. I'd also say it's the norm among most Fortune 500 non-tech companies.
You sell and use people’s data to get money: this is the business plan. Full stop.
Connecting people can definitely be lucrative and useful in other ways but facebooks particular implementation is impression based not action/outcome based.