Live data from Hacker News

Amazon insiders sound alarm over security

politico.eu

11–20 of 63 posts

Re: Amazon insiders sound alarm over security

#11

It’s odd to see security issues at a company revealed by a whistleblower instead of a breach. Usually I’d expect if an insider working in security notices problems, that’s good for their career because it’s their job to find and fix that stuff. Obviously if it doesn’t work that way at Amazon, that’s a huge problem.

Yeah...this speaks to endemic corruption within the company as well as just a completely rotten management.

It is unfortunate but true that with successes come a certain develish breed of human, as well as encouraging some of the worst behavior in otherwise decent folk. Whenever you get a certain level of money involved you can be sure you are dealing with criminals, two bit liars, and psycopaths.

Sounds like the mgmt psycos over at amazon have rediscovered the old red tape as a quick way to keep costs down. Just another reason these big biz need proper regulatory oversight, the psychos will still come but at least it should get easier to throw them in a cell when they are discovered.

Re: Amazon insiders sound alarm over security

#12
Its good they are sounding the alarm, for example, Crypto AG had their cryptographer employees continually find security flaws only to have upper management tell them to work on something else, only to find out after 50 years that it was a CIA operation selling backdoored products to nation states.

With nothing being outside the realm of possibility, removing the need for trust should be priority number one.

Re: Amazon insiders sound alarm over security

#13

Every time I read articles like these, I get dissapointed about the state of the internet. The only thing you know that is likely to be true is that someone got fired from Amazon, and thats it. You don't know if they are telling the truth. You don't know if they were in the right. You don't know if Amazon was fixing the problem, and they decided to be an asshole and go over their bosses because they felt that not eno…

The only thing you know that is likely to be true is that someone got fired from Amazon.

From the article:

> The warnings about privacy and compliance failures at Amazon come from three former high-level information security employees — one EU-based and two from the U.S.

So 3 employees involved with security and not 1 employee. Also, they were pushed out AFTER alerting about security issues.

Re: Amazon insiders sound alarm over security

#14

Every time I read articles like these, I get dissapointed about the state of the internet. The only thing you know that is likely to be true is that someone got fired from Amazon, and thats it. You don't know if they are telling the truth. You don't know if they were in the right. You don't know if Amazon was fixing the problem, and they decided to be an asshole and go over their bosses because they felt that not eno…

Erm did you read it?

Several U.S./EU employees saying strikingly similar things, especially regarding certain HR BS which is often employed against employees by way of exploitive control.

Court records are often at least public record, may be sealed but it is trivial to go check this stuff...

Re: Amazon insiders sound alarm over security

#16
post #13

Every time I read articles like these, I get dissapointed about the state of the internet. The only thing you know that is likely to be true is that someone got fired from Amazon, and thats it. You don't know if they are telling the truth. You don't know if they were in the right. You don't know if Amazon was fixing the problem, and they decided to be an asshole and go over their bosses because they felt that not eno…

The only thing you know that is likely to be true is that someone got fired from Amazon. From the article: > The warnings about privacy and compliance failures at Amazon come from three former high-level information security employees — one EU-based and two from the U.S. So 3 employees involved with security and not 1 employee. Also, they were pushed out AFTER alerting about security issues.

> So 3 employees involved with security and not 1 employee. Also, they were pushed out AFTER alerting about security issues.

How much credibility do you put in such testimonies though? Especially if everyone is a "anonymous source", you can basically invent just about anything and publish it and pretend for it to be a genuine article without any fact under the hood.

Re: Amazon insiders sound alarm over security

#17
> Imagine if a company the size of Amazon had a breach?

Is it hard to imagine? Does it really matter anymore? There are [non-Amazon] breaches every few years with 100m+ records.

It will happen and people will be shocked and outraged and then it will happen again. Wash, rinse, repeat.

Re: Amazon insiders sound alarm over security

#18
post #16
post #13

Earlier quoted context omitted.

The only thing you know that is likely to be true is that someone got fired from Amazon. From the article: > The warnings about privacy and compliance failures at Amazon come from three former high-level information security employees — one EU-based and two from the U.S. So 3 employees involved with security and not 1 employee. Also, they were pushed out AFTER alerting about security issues.

> So 3 employees involved with security and not 1 employee. Also, they were pushed out AFTER alerting about security issues. How much credibility do you put in such testimonies though? Especially if everyone is a "anonymous source", you can basically invent just about anything and publish it and pretend for it to be a genuine article without any fact under the hood.

How much credibility do you put in Amazon's?

Re: Amazon insiders sound alarm over security

#19
post #16
post #13

Earlier quoted context omitted.

The only thing you know that is likely to be true is that someone got fired from Amazon. From the article: > The warnings about privacy and compliance failures at Amazon come from three former high-level information security employees — one EU-based and two from the U.S. So 3 employees involved with security and not 1 employee. Also, they were pushed out AFTER alerting about security issues.

> So 3 employees involved with security and not 1 employee. Also, they were pushed out AFTER alerting about security issues. How much credibility do you put in such testimonies though? Especially if everyone is a "anonymous source", you can basically invent just about anything and publish it and pretend for it to be a genuine article without any fact under the hood.

This is a really good point and an example of how real investigative journalism is not present in this story.

Was the journalist approached by a co-ordinated group of three former Apple high-level security execs in order for them to Greenwald&Snowden-style inform the public, themselves openly inviting massive career risk (even when "anonymous"), with real skin in the game and thus with real credibility worthy of maybe oh even up to government investigation?

Or did this journalist have a python script that emailed every single public address of all ex-employees of every BigTech corp, looking for responses, robotically fishing out clickbait headlines that harbour the feintest enough outline of what integrity might look like?

Obviously, there's a wide range between these two extremes, including Real Investigative Journalism that oftentimes co-ordinates the investigation itself. But, that is extinct, and since provenance is not established well in the article, my default is, assume the worst, in every case. Yes, literally, bots wrote this article, it means exactly nothing. Fugazi.

Re: Amazon insiders sound alarm over security

#20
post #16
post #13

Earlier quoted context omitted.

The only thing you know that is likely to be true is that someone got fired from Amazon. From the article: > The warnings about privacy and compliance failures at Amazon come from three former high-level information security employees — one EU-based and two from the U.S. So 3 employees involved with security and not 1 employee. Also, they were pushed out AFTER alerting about security issues.

> So 3 employees involved with security and not 1 employee. Also, they were pushed out AFTER alerting about security issues. How much credibility do you put in such testimonies though? Especially if everyone is a "anonymous source", you can basically invent just about anything and publish it and pretend for it to be a genuine article without any fact under the hood.

Presumably if you trust the reputation of the newspaper or journalist writing the article, you trust the testimony.
Post reply on HN