Re:Zero-days in Cisco Discovery Protocol
by rodw on Friday February 07, 2020 @04:17AM
(#22264360)
I think the grandparent post isn't trying to say "a 100,000 employee company automatically makes secure software" but rather "anecdotal evidence from a year or two of personal experience may not be representative of a 100,000 employee company". Cisco has dozens (hundreds?) of global offices and is well known for growth-via-acquisition. There must be a million little micro-cultures in an organization that large, diverse and distributed.
[ Parent
| on HN ]
Re:Zero-days in Cisco Discovery Protocol
by atilaneves on Friday February 07, 2020 @05:35AM
(#22264748)
> There must be a million little micro-cultures in an organization that large
There are, and in those, good code can be written. They're the exception. Source: worked there for 7 years.
Re:Zero-days in Cisco Discovery Protocol
by PeterisP on Sunday February 09, 2020 @05:28PM
(#22284754)
That's kind of the problem - if you have a hundred little micro-cultures involved in a project, and 99 of these cultures value safety and one does not, then in the end you get an insecure product. A chain is as strong as its weakest link.