Slashdot Mirror


Inside the Private Event Where Microsoft, Google, Salesforce and Other Rivals Share Security Secrets (geekwire.com)

News outlet GeekWire takes us inside Building 99 at Microsoft, where security professionals of the software giant, along with those of Amazon, Google, Netflix, Salesforce, Facebook (and others), companies that fiercely compete with one another, gathered earlier this week to share their learnings for the greater good. From the story: As the afternoon session ended, the organizer from Microsoft, security data wrangler Ram Shankar Siva Kumar, complimented panelist Erik Bloch, the Salesforce security products and program management director, for "really channeling the Ohana spirit," referencing the Hawaiian word for "family," which Salesforce uses to describe its internal culture of looking out for one another. It was almost enough to make a person forget the bitter rivalry between Microsoft and Salesforce. Siva Kumar then gave attendees advice on finding the location of the closing reception. "You can Bing it, Google it, whatever it is," he said, as the audience laughed at the rare concession to Microsoft's longtime competitor.

It was no ordinary gathering at Microsoft, but then again, it's no ordinary time in tech. The Security Data Science Colloquium brought the competitors together to focus on one of the biggest challenges and opportunities in the industry. Machine learning, one of the key ingredients of artificial intelligence, is giving the companies new superpowers to identify and guard against malicious attacks on their increasingly cloud-oriented products and services. The problem is that hackers are using many of the same techniques to take those attacks to a new level. "The challenge is that security is a very asymmetric game," said Dawn Song, a UC Berkeley computer science and engineering professor who attended the event. "Defenders have to defend across the board, and attackers only need to find one hole. So in general, it's easier for attackers to leverage these new techniques." That helps to explain why the competitors are teaming up.
In a statement, Erik Bloch, Director Security PM at Salesforce, said, "This is what the infosec and security industry needs more of. Our customers are shared, and so is our responsibility to protect them.

48 comments

  1. Re: Gibberish. by Anonymous Coward · · Score: 0

    Actually no. It was specific to security data science, and sharing novel methods of detecting abnormal behaviors, mixed with lessons learned from our combined years of trial and error.

  2. Kinda like inside the ... by CaptainDork · · Score: 1

    Sara Huckabee secret staff meetings and stuff.

    --
    It little behooves the best of us to comment on the rest of us.
    1. Re:Kinda like inside the ... by Anonymous Coward · · Score: 0

      People have meetings.

      News at 11

    2. Re:Kinda like inside the ... by Anonymous Coward · · Score: 0

      You're implying the Deity of Lying incarnate stitched together from many thousands of dishonest cow parts is somehow merely human? There is no evidence of that, maybe you've been reading too many long words lately.

    3. Re:Kinda like inside the ... by CaptainDork · · Score: 1

      And the fucking news at 11 is a reveal of the whole goddam secret meeting.

      --
      It little behooves the best of us to comment on the rest of us.
    4. Re:Kinda like inside the ... by Anonymous Coward · · Score: 0

      I had 3 meetings today. You *JUST* found out about them. Therefore they were a secret! I am not even going to tell you what the meetings were about. Making them even MORE secret.

      News at 11!

    5. Re:Kinda like inside the ... by Anonymous Coward · · Score: 0

      Maybe too many misogynistic remarks on the internet?

    6. Re:Kinda like inside the ... by Anonymous Coward · · Score: 0

      People have meetings.

      News at 11

      It was never "news at 11" because everyone knew the news was at 11. It was Film at 11. Back in those days it took time to transport the film and develop it.

  3. Re:Did anyone else immediately think: by Anonymous Coward · · Score: 0

    Kumbayah, Lord, Kumbayah.

  4. Spiral of Intelligence. by Anonymous Coward · · Score: 0

    Thank you but I prefer to call it my way.

    But really this is the bloomberg syndicate.

  5. Completely Normal for Engineers to talk by aberglas · · Score: 1

    I work on some standards bodies where engineers from competing companies are generally pretty good at reaching consensus. (As long as their product managers are not there.) Remember too, that these people move between companies. So I a sure it was very friendly.

    1. Re:Completely Normal for Engineers to talk by Anonymous Coward · · Score: 0

      We are not after friendly - we are after effective.
      Previously good enough was good enough. That is no longer the case, and Intel is working hard to avoid compensating for defective processors, given the nexus between speed and processor price. And NSA stayed silent about known defects/cves / flawed crypto.
      Both Intel and Facebook have suffered reputational scares affecting stock price and perceptions, and Microsoft may get to share some of that pain.
      It appears rather than say lets fix what we know as broke,but unlikely to be discovered, lets go on about PR damage control, rather than hire more engineers to actually fix things AND protect against the unknowns. Sounds like production testing is still 'in'.

  6. Here's one that BLOWS 'em away (lol)... apk by Anonymous Coward · · Score: 0

    See subject & APK Hosts File Engine 2.0++ 64-bit for Linux h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r L i n u x . z i p (remove spaces between characters & download).

    Yields more security/speed/reliability/anonymity vs. any SINGLE solution (99% of threats = hostnames vs. IP address (that most firewalls use)) more efficiently/FASTER + NATIVELY 4 less!

    (... Vs. "Bolt on 'MoAr' illogic-logic" competitors slowing you, hosts speed you up 2 ways (adblocks + hardcodes u spend most time @) vs. competition loaded w/ bugs (DNS/AntiVir) + their overheads (messagepass ('souled-out' to advertiser addons) + filtering drivers) & their complexity leads to exploitation).

    Created in FreePascal/Lazarus 1.8.2 using GTK3 on OpenGL 3.1 via KDE Plasma desktop on Kubuntu 18.04 plus patches.

    APK

    P.S.=> Enjoy - it's much better vs. the Windows model on many fronts (speed & efficiency, mostly (plus new "merge" feature))... apk

  7. Registered /.ers opinions of the Win64 model by Anonymous Coward · · Score: 0

    Your software is just fine - well written, functional... I'm going to continue using the Host File Engine by mmell February 17, 2017

    (APK's work), I've flat out said it's good by BronsCon February 11 2016

    his hosts program is actually pretty good by xenotransplant August 10 2015

    his hosts tool is actually useful for those cases in which one does indeed want to locally block stuff outright while consuming minimum system resources by alexgieg September 25 2015

    I like your host file system by Karmashock September 09 2015

    I do use APK's host file on all my systems at home by OrangeTide December 01 2017

    I personally use a HOSTS file blocker produced from a genius called APK by 110010001000 October 27 2017

    * See subject: Best part is this Linux 64-bit model is faster & more efficient (does 2x the work in 1/2 the time, literally)

    APK

    P.S.=> Enjoy a faster/safer/more reliable internet... apk

    1. Re:Registered /.ers opinions of the Win64 model by 110010001000 · · Score: 1

      I can vouch that APK Hosts File Engine is a fine piece of software. I use it daily.

  8. To MS & crew, all I can say, is this... apk by Anonymous Coward · · Score: 0

    See subject: Quoting the FLASH from Smallville "Tell ya what - IF you can catch me? I'll think about it" https://www.youtube.com/watch?v=NLYEExrAEJI/ as I KNOW who it is that impersonates/stalks (etc. "to break my will" lol, good luck that creampuffs from 'suburbia') me in advertisers/webmasters (dirty profiteers) & INFERIOR competitors that slow you (vs. hosts native ability via a PROVEN IP Stack since 1973) /. - bring Paul Vixie (arrogant smarmy one I already silenced on this years ago) here to debate it & I'll BURN HIM publicly on that note))!

    Bring their BEST PhD - I've already BURNT more than a few on other things - but on this? It'd be MY FINEST HOUR smoking them on the grill, publicly & EASILY (& they KNOW it). They run... always.

    APK

    P.S.=> Thanks - I just give people what they WANT ("big companies" have FORGOTTEN that basic sales tenet & instead cater to BIG (too big) gov't.))... apk

  9. Completely Normal for standards bodies to talk by Anonymous Coward · · Score: 0

    Operative words is standards body. Security is more like a loose confederation, that's why the bad guys win so many times.

  10. Nobody from the NSA? by Snotnose · · Score: 1

    Go home amateurs, the pros can not only clean your clock, they can make it look as dirty as they want.

    1. Re: Nobody from the NSA? by Anonymous Coward · · Score: 0

      Youâ(TM)re drastically overestimating the NSAâ(TM)s talent/capabilities. I work in InfoSec, have worked for a Silicon Valley halo tech firm (FAANG-ish), and have even interviewed for an NSA job... The top 1% of InfoSec (MIT PhDâ(TM)s, etc) end up in Silicon Valley, the next 25% at relativity prestigious companies (*ahem*), and the flotsam and jetsam that remain end up at three letter agencies (or little companies in their home town).

      The NSAâ(TM)s reach exists only because of Congress mandating cooperation by the big tech firms. Sans that decree, the NSA would probably shutter. They just donâ(TM)t have the budget compared to the Googleâ(TM)s and Amazonâ(TM)s of the world.

    2. Re: Nobody from the NSA? by AHuxley · · Score: 1

      Yet PRISM worked for years and nothing was detected, said by the super smart people in the prestigious companies.
      They did not notice the data moving out all day, every day?
      They got told it was FBI? DEA? and all ok?
      They did not notice the NSA deep in their networks and the junk crypto their brand was giving away/selling?

      --
      Domestic spying is now "Benign Information Gathering"
    3. Re: Nobody from the NSA? by phantomfive · · Score: 2

      Youâ(TM)re drastically overestimating the NSAâ(TM)s talent/capabilities. I work in InfoSec,

      Who else has destroyed their target's hardware across an air-gapped divide? EternalBlue shows that the NSA has a lot of hacking skill at their command. They also have the ability to gain physical access if they really need to.

      --
      "First they came for the slanderers and i said nothing."
  11. Re: To MS & crew, all I can say, is this... ap by Anonymous Coward · · Score: 0

    What the fuck did you just try to say?

  12. WTF? Really?? Bring their best... apk by Anonymous Coward · · Score: 0

    See subject: The video shows a challenge ("lil' ole' me" vs. "SuPeRCorPz" best 'supermen') on hosts & I'll cook their goose publicly.

    * Is your brain THAT dim you couldn't grasp it by video analogy?

    APK

    P.S.=> Seriously... it's pretty apparent what I said... apk

  13. Or as Adam Smith said: by Anonymous Coward · · Score: 0

    "People of the same trade seldom meet together, even for merriment and diversion, but the conversation ends in a conspiracy against the public, or in some contrivance to raise prices."

  14. Re: To MS & crew, all I can say, is this... ap by Anonymous Coward · · Score: 0

    I believe he was trying to say his work sucks ass and that APK is a lying spamming retard.

  15. "LIMITLESS" &, you know it... apk by Anonymous Coward · · Score: 0

    See subject LIMITED ones & this to even BEGIN to understand WHY I can call out the PhD "Supermen" (illusory) on hosts https://www.youtube.com/watch?v=4TLppsfzQH8

    * It puts me 50 moves AHEAD of you... along w/ PRACTICAL useful application that helps you get there via programs I manufactuer in DAYS time, rather easily, multiplatform (I'm on them all now in fact). Fear me advertisers (above ALL others, my main enemy).

    (Judging by your BOGUS methods vs. logical factual debate against me (which you've ALL lost many times vs. me on hosts)? I feel as if I am dealing w/ WHITE MICE, lol... I am).

    APK

    P.S.=> Every time... apk

    1. Re:"LIMITLESS" &, you know it... apk by Anonymous Coward · · Score: 0

      Can you even manage to string 2 words together in a cogent manner?
      Although you do have a long history of being a fucking retard on the internet, and not just here.
      Also sorting lists of strings is not a great accomplishment despite what your mother may have told you.

  16. PRISM by AHuxley · · Score: 1

    got an update thats going to stay a US secret.

    --
    Domestic spying is now "Benign Information Gathering"
  17. LOL! Thor SCHMUCK... apk by Anonymous Coward · · Score: 0

    Ask him WHY his false accusation of an old ware of mine was 1st taken down to NO threat & CA sold off the SHITTY antivir he sold (as a paid pawn of theirs) & afaik (after their main coder gave me SHIT on the phone no less pussy that he is) they are GONE, done. dead... lol!

    In fact: Lookup "CA Accounting Scandal" on Google - scumbags & THEIR BIRDS OF A FEATHER (2" dick thieves whose GOD is MONEY (shit with NOTHING really behind it, illusion) just go down vs. me everytime.

    * "How many of us KNOW what it's like to become the PERFECT version of ourselves?" (Kanye says my old name online AlecStaar in that limitless video I posted in fact (he's a GOOD black man who KNOWS it's a BIGGER plan)).

    APK

    P.S.=> No 1 man should have ALL THAT POWER (it's not me though - it's the grace of God for whatever reason I don't deserve it imo but anyone attacking me experiences HIS vengeance (see above as a single example thereof) - I guess I'm merely his instrument & I thank him everyday for his grace upon me YOU obviously don't possess)... apk

    1. Re: LOL! Thor SCHMUCK... apk by Anonymous Coward · · Score: 0

      Now this all makes sense. APK is a religious fanatic. He sucks jesus' dick so hard, he can't put together a proper sentence.

  18. Re: Gibberish. by Anonymous Coward · · Score: 0

    Actually no. It was specific to security data science, and sharing novel methods of detecting abnormal behaviors, mixed with lessons learned from our combined years of trial and error.

    God damn could you be any more vague? PHB's talk that way. Executives talk that way. Sales talks that way. Security researchers don't.

  19. any other buzzwords by phantomfive · · Score: 1

    Machine learning, one of the key ingredients of artificial intelligence, is giving the companies new superpowers to identify and guard against malicious attacks on their increasingly cloud-oriented products and services.

    And was their results-oriented work flow kept track of with block-chain?

    --
    "First they came for the slanderers and i said nothing."
  20. remember by Anonymous Coward · · Score: 0

    REMEMBER THE MURDER OF IAN MURDOCH, creator of Debian Linux and leading member of the Free Software community, killed Christmas 2015 by the notoriously corrupt San Francisco police department.

    1. Re: remember by Anonymous Coward · · Score: 0

      I member.

  21. Re: Gibberish. by Anonymous Coward · · Score: 0

    Jealous bro? Lol

  22. Collaboration by messymerry · · Score: 1

    This sort of collaboration between the giants of technology is really really scary. 'Security' is the 'most favoured' excuse to strip people of their freedoms. If these technology giants are collaborating on 'strong AI', and using security as an excuse, then we are all in a world of hurt. Does anybody have any sense of this possibility that these companies are collaborating on strong AI?

    --
    Dear Microlimp: I give you 2 valid product keys for win7 and you reject both of them. Piss off you wankers!!!
  23. Re: Did anyone else immediately think: by Anonymous Coward · · Score: 0

    My first thought was: where do they have the wage-fixing collusion meetings?

  24. Well... Somebody has to prop up the most vulerable by Anonymous Coward · · Score: 0

    Well... Somebody has to prop up the most vulerable system in common use...

  25. Re: Gibberish. by Anonymous Coward · · Score: 0

    No small wonder why the state of security is so poor. People want the prestige and high paychecks but not the knowledge, to solve problems, to help people, or even for the challenge. Anyone pointing out the emperor has no clothes gets downvoted and mocked.

    Expect more APT's more leaks, more Russia this China that, more troubles for everyone getting their identity and intellectual property stolen. There is no other way it could go until attitudes change.

  26. Isn't this what US-CERT is for? by Anonymous Coward · · Score: 0

    "The National Cybersecurity and Communications Integration Center’s (NCCIC) [aka the United States Computer Emergency Reponse Team at https://www.us-cert.gov] mission is to reduce the risk of systemic cybersecurity and communications challenges in our role as the Nation’s flagship cyber defense, incident response, and operational integration center.

    Since 2009, NCCIC has served as a national hub for cyber and communications information, technical expertise, and operational integration, and by operating our 24/7 situational awareness, analysis, and incident response center."

    And without that anti-trust concern that a private meeting between rivals has.

    1. Re:Isn't this what US-CERT is for? by najajomo · · Score: 1

      @Anonymous Coward": And without that anti-trust concern that a private meeting between rivals has."

      It's just a public relations exercise :]

  27. Re:Did anyone else immediately think: by AHuxley · · Score: 1

    The PRISM generation.
    Could not stop it.
    Could not find it.
    Did not secure their brands.
    Passed all that junk US crypto math as strong and fully tested.

    --
    Domestic spying is now "Benign Information Gathering"
  28. Somebody from Israel. by Anonymous Coward · · Score: 0

    They had Israeli help.

  29. Users here make you suck MY dick lol... apk by Anonymous Coward · · Score: 0

    Users here make you suck MY dick lol (& you LIKE the tasty flavor, lol - you keep coming back for more) https://it.slashdot.org/comments.pl?sid=12239008&cid=56792672/

    * I write just fine - especially code writing - it's just that YOU CAN'T READ ADD/ADHD dyslexic brain-added weirdo you are STALKING me by UNIDENTIFIABLE do-nothing ZERO "ne'er-do-well" lazy boy posts of yours...

    APK

    P.S.=> I do *TRY* live by the model Christ gave us, but I DO have trouble w/ "turn the other cheek" when NO GOOD BUMS like you give me guff, but then, even Christ got VIOLENT vs. the Pharisees he WHIPPED out of the temple (like I whip you everytime & BEST PART is that you make it easy by DEFEATING YOURSELF for me - I don't have to even TRY win when YOU DO THE JOB FOR ME, lol)... apk

  30. The biggest challenges in security? by najajomo · · Score: 1

    "The Security Data Science Colloquium brought the competitors together to focus on one of the biggest challenges", that being Microsoft Windows running on Intel hardware and the dangers of running your computing infrastructure on a monoculture.