Video download link | md5sum ac3236ee212e511a0874c1eecac90893 Insecure About Security Status Creative Commons Attribution-No Derivative Works 4.0



Summary: At Sirius ‘Open Source’, which we left 8 days ago, security had been neglected for years; at the moment the company brags about "ISO" and other three- (or four-) letter acronyms, but many of the basic practices are conveniently ignored

THE sad reality is that when it comes to security many people and corporations prey on perception rather than reality. They indulge in what they can tell the public (or clients). For instance, Microsoft uses media "plugs" to pretend Microsoft is some sort of security expert with many security gurus whilst actively pursuing back doors for the NSA and others. In my latest job (almost 12 years) I witnesses customers suffering security breaches; we're not meant to tell people about clientele covering up such incidents because it might result in fines or erosion of confidence.

"...in healthy workplaces the problem would be security lapses, not the people who talk about them."Worse yet, highlighting that some company is failing when it comes to security (as happened at Twitter earlier this year; their security chief had become a whistleblower) is seen as the real problem; in healthy workplaces the problem would be security lapses, not the people who talk about them.

Aside from the above video I still have plenty to say and to show (without infringing the privacy or people or naming any companies). ⬆