H4CK1NG G00GL3

1

Google Site Reliability Engineering

#Developer Tools #DevOps Tools #Education & Reference 84 social mentions

2

YouTube Party Playlist

Summary: Covers Google Bug Bounty program including interviews with staff and the top bounty hunters. Response: As mentioned in the video, Knuth’s bounty program was largely to help him feel better about publishing a book with errors; checks are largely symbolic and rarely cashed, since they’re only worth few dollars. Similarly, black market for bugs continues to offer higher payouts than white hat markets. It’s an issue and building communities alone around bug bounties will neither fix it, nor stop true adversaries from developing talent and technology that exceeds current capacities, capabilities, etc. Obviously, complex problem, but if Google is going to market and position themselves as a community resource for protecting people, they need to be direct and honest about the limits of reality and the constraints they’re forced to work within; for example, that their interests, nation states, etc - frequently have security concerns that conflict with user security. _______________________ Links related to video: - https://wikipedia.org/wiki/Bounty_(reward) - https://wikipedia.org/wiki/The_Art_of_Computer_Programming - https://wikipedia.org/wiki/Knuth_reward_check - https://securitymagazine.com/articles/95726-google-launches-bug-hunters-community - https://wikipedia.org/wiki/Market_for_zero-day_exploits _______________________ Meta: YouTube bug to playing video with audio is fixed. Also, appears this is last full episode in the series; full playlist is now up here: https://m.youtube.com/playlist?list=PL590L5WQmH8dsxxz7ooJAgmijwOz0lh2H.

#Music #Music Streaming #Audio Player 47 social mentions

3

Google Cloud Platform Security Overview

Hacking Google to Defend Enterprises - YouTube - https://m.youtube.com/watch?v=dhdz5VZ4S88 Summary: Chief Information Security Officer of Google Cloud, Phil Venables, covers all the teams listed in prior videos and describes how Google Cloud helps secure its customers. Response: As an outsider watching video series, while it is possible I misunderstood, appears the Google Cloud CISO is the highest-level security leadership role within Google, which might be confusing to random outsider, since generally the public thinks of Google being Google, not Google Cloud. Lastly, as evident by my posts, really wish this had been accompanied by blog posts with links. These videos are obviously targeting general public and potential hires, but Google neither links to job opportunities or submit security issues, nor provides a way generally speaking to engage them with feedback, questions, etc - of the series or Google Security in general. _________________ Related links from video: - https://www.google.com/search?q=google.cloud+ciso+phil+venables - https://cloud.google.com/security - https://www.google.com/appserve/security-bugs/m2/new - https://bughunters.google.com/.

#Security #Online Services #Monitoring Tools 4 social mentions