Live data from Hacker News

Announcing Project Zero

googleonlinesecurity.blogspot.com

1–10 of 87 posts

Re: Announcing Project Zero

#3

> Security is a top priority for Google Can't take this seriously any more. Used to like Google, not any more. Remember this was a company co-operating with the NSA.

> Can't take this seriously any more. Used to like Google, not any more.

> Remember this was a company co-operating with the NSA.

I don't have the same suspicions you do, and I don't know of any evidence of Google willingly co-operating with the NSA beyond their legal obligation to, but it might make more sense for Google to spin off this team into a non-profit organization that they fund. Project Zero would get more credibility and independence, and maybe more publicity and contributions from the community. Maybe there's some kind of financial benefit for Google separating it out of it's org, but I don't understand corporate structures or finance even a little.

Re: Announcing Project Zero

#5
Time for some trust-building with the community, after that um, unpleasant discovery that NSA has been up in that Google, and Google willingly accepted.

About Google, Facebook, Apple, Microsoft etc, we have seen the list, Ive got to say, scumbags.

They sold us all out and threw us under the bus.

Lavabit - a simple company put up more of a fight than a multi billion dollar giant.

Never forget.

Re: Announcing Project Zero

#7
post #5

Time for some trust-building with the community, after that um, unpleasant discovery that NSA has been up in that Google, and Google willingly accepted. About Google, Facebook, Apple, Microsoft etc, we have seen the list, Ive got to say, scumbags. They sold us all out and threw us under the bus. Lavabit - a simple company put up more of a fight than a multi billion dollar giant. Never forget.

I don't doubt that their cooperation with the government played a role in them getting a slap on wrist in the wage fixing conspiracy as well.

Re: Announcing Project Zero

#9
This sounds like a new name (and possibly more executive support) for what those guys have been doing for years now.

The guys in that article have been working on finding bugs in non-Google products for a little over two years and you can see their past results through the advisory credits they've received at Microsoft and Adobe as well as from open source projects like FFmpeg.

For example see Ben Hawkes on this list of Google CVEs in other companies' products: https://www.google.com/about/appsecurity/research/

Re: Announcing Project Zero

#10
post #5

Time for some trust-building with the community, after that um, unpleasant discovery that NSA has been up in that Google, and Google willingly accepted. About Google, Facebook, Apple, Microsoft etc, we have seen the list, Ive got to say, scumbags. They sold us all out and threw us under the bus. Lavabit - a simple company put up more of a fight than a multi billion dollar giant. Never forget.

"unpleasant discovery that NSA has been up in that Google, and Google willingly accepted." [citation needed]

Specifically for the willingly accepted part.

Post reply on HN