Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Michał Zalewski, Director Information Security Engineering, leaves Google

twitter.com

Post reply on HN
Print view View original

21–30 of 41 posts

Re: Michał Zalewski, Director Information Security Engineering, leaves Google

#21

Post by tptacek »

jfasi wrote: post #3

@jvanegue: > there is a CISO position to fill at @facebook I hear @lcamtuf: > Waiting for NYTimes to tell me why I am leaving Google first. This little exchange speaks volumes about what's happening in the the media regarding the tech industry: one company behaves badly and then all get tarred and feathered. Facebook's security leadership starts jumping ship, and when someone analogous from Google, a completely diffe…

You say that line speaks volumes, I say it's a throwaway joke very much in character with Zalewski's twitter feed.

This is part of the problem of linking directly to individual tweets as front page news on HN.

Re: Michał Zalewski, Director Information Security Engineering, leaves Google

#23

Post by raverbashing »

pjf wrote: post #15
dmix wrote: post #2

If you don't know who this is, he wrote one of my favourite books on web (browser) security: "The Tangled Web" [1]. Another lesser known book by him is also worth a read: "Silence on the Wire" that takes a look at the full information security stack from the keyboard you type on, to the wires the data transits, to the internet protocols, etc [2] and looking at how each stage exposes/protects data. And has quite an in…

If you don't know who this is, read his CV: http://lcamtuf.coredump.cx/cv-web-en.pdf

yeah I think it's feeling the HN effect already

(a bit ironic that it doesn't have https enabled)

Re: Michał Zalewski, Director Information Security Engineering, leaves Google

#24

Post by elorant »

dmix wrote: post #2

If you don't know who this is, he wrote one of my favourite books on web (browser) security: "The Tangled Web" [1]. Another lesser known book by him is also worth a read: "Silence on the Wire" that takes a look at the full information security stack from the keyboard you type on, to the wires the data transits, to the internet protocols, etc [2] and looking at how each stage exposes/protects data. And has quite an in…

That's funny because there is another book [1] with exactly the same title and also about computer security, although it predates the one you mention by a decade.

[1] https://www.amazon.com/Tangled-Web-Securing-Modern-Applicati...

Re: Michał Zalewski, Director Information Security Engineering, leaves Google

#25

Post by AceJohnny2 »

pjf wrote: post #15
dmix wrote: post #2

If you don't know who this is, he wrote one of my favourite books on web (browser) security: "The Tangled Web" [1]. Another lesser known book by him is also worth a read: "Silence on the Wire" that takes a look at the full information security stack from the keyboard you type on, to the wires the data transits, to the internet protocols, etc [2] and looking at how each stage exposes/protects data. And has quite an in…

If you don't know who this is, read his CV: http://lcamtuf.coredump.cx/cv-web-en.pdf

Wait, this is lcamtuf? Wow.

I've always been in awe of his AFL fuzzer:

http://lcamtuf.coredump.cx/afl/

https://lcamtuf.blogspot.com/2014/11/pulling-jpegs-out-of-th...

Re: Michał Zalewski, Director Information Security Engineering, leaves Google

#26

Post by dpark »

dpark wrote: post #8
dmix wrote: post #6

Earlier quoted context omitted.

I think you're missing the joke here...

I don’t. Nothing about jfasi’s comment reads like a joke.

Waited too long and can't edit:

jfasi works at Google and seems to be expressing his honest opinion when he says that they have a "different (i.e. existent) moral compass". He's not making the joke that Google is the same as Facebook and the reason Zelewski is leaving must be a data scandal.

Re: Michał Zalewski, Director Information Security Engineering, leaves Google

#27

Post by alethiophile »

dmix wrote: post #2

If you don't know who this is, he wrote one of my favourite books on web (browser) security: "The Tangled Web" [1]. Another lesser known book by him is also worth a read: "Silence on the Wire" that takes a look at the full information security stack from the keyboard you type on, to the wires the data transits, to the internet protocols, etc [2] and looking at how each stage exposes/protects data. And has quite an in…

I just got one of those periodic "wow, those are the same person?" Internet moments; I've both used AFL a fair bit, and read Tangled Web, but never connected the two.

Impressive fellow.

Re: Michał Zalewski, Director Information Security Engineering, leaves Google

#28

Post by jonny_eh »

antirez wrote: post #20
jfasi wrote: post #3

@jvanegue: > there is a CISO position to fill at @facebook I hear @lcamtuf: > Waiting for NYTimes to tell me why I am leaving Google first. This little exchange speaks volumes about what's happening in the the media regarding the tech industry: one company behaves badly and then all get tarred and feathered. Facebook's security leadership starts jumping ship, and when someone analogous from Google, a completely diffe…

> a completely different (i.e. existent) moral compass You mean, the company which basically turned "free services for all your data and info" something at massive scale?

It's all relative. A compass is still a compass.

Re: Michał Zalewski, Director Information Security Engineering, leaves Google

#29

Post by sigjuice »

raverbashing wrote: post #23
pjf wrote: post #15

Earlier quoted context omitted.

If you don't know who this is, read his CV: http://lcamtuf.coredump.cx/cv-web-en.pdf

yeah I think it's feeling the HN effect already (a bit ironic that it doesn't have https enabled)

Not as ironic as the OpenBSD Foundation asking for donations via an http site

Re: Michał Zalewski, Director Information Security Engineering, leaves Google

#30

Post by asveikau »

raverbashing wrote: post #23
pjf wrote: post #15

Earlier quoted context omitted.

If you don't know who this is, read his CV: http://lcamtuf.coredump.cx/cv-web-en.pdf

yeah I think it's feeling the HN effect already (a bit ironic that it doesn't have https enabled)

>> http://lcamtuf.coredump.cx/cv-web-en.pdf

> (a bit ironic that it doesn't have https enabled)

That sounds like an interesting trick... MITM the CV of a famous security person in order to land a security job?

Post reply on HN