Re:Protecting Against Leakers
by joshfraser on Tuesday August 27, 2013 @11:48AM
(#6284156)
I can see why trust their people and their vetting process. They get to read your email and snoop through your browsing history before they hire you.
They put a lot of effort into screening staff, but they're also the most attractive target for well-funded adversaries (Russia, China, etc.).
The only stuff I've ever seen come out of NSA and actually used by anyone in government that hasn't been crap has been hardware. SELinux, etc. are a sideshow. Their OS protections as deployed elsewhere in government are primarily COTS or were developed by external contractors (HBSS, etc.), and are actually shittier in a lot of ways than best commercial practice.