Microsoft Recall is a good example of why cybersecurity is so lucrative. You have Microsoft, a 3 trillion dollar company, with a cybersecurity budget in the 10s, if not 100s of billions, that employs some of the smartest security experts on earth, yet it's hard to find a single shred of evidence that their product division is even aware those people exist. It took the company getting torn apart on social media by external cyber security and privacy professionals to consider that having an on-by-default feature that uses AI to record and store everything the user does on their system might not be a great idea. Tech is an endless cycle of companies rushing the most asinine and insecure technologies to market, then only seriously considering the advice of their security teams after everything goes wrong.
Zoerab T.
1mo
Personal AI assistant inside your device that knows you better than you know yourself is what drives this entire endeavour for Microsoft. It will be the next breakthrough akin to the creation of the internet and Microsoft knows it, but in order to get there first they need massive amounts of data, data about you. Recall is here to stay because it’s too important for them to retract it, and even if they do they will simply repackage it and push it out again.
It's a fundamental flaw of Microsoft's business model. They should have switched to subscriptions two decades ago, meaning the company goals would be much more aligned to the needs of their end users. Instead they're stuck in the OEM & sales cycle mindset, constantly forcing new and unwanted features and GUI changes on users in order to justify upgrades to the new version of windows and new hardware. It's a fundamentally broken business model that winds up with them looking for any way to monetize end users because they don't have any direct relationship with them, and hence the end users have no buying power, they're nothing more than a resource to be exploited. I saw this coming 20 years ago, and I'm quite frankly amazed that even today Microsoft haven't switched to a perpetual revenue model with subscriptions. The whole world would willingly pay a nominal fee for Windows and all the benefits it entails, instead Microsoft still have to expend enormous energy convincing people that reinventing the start menu for the 6th time is the most amazing thing ever.
Remember S3 buckets public by default…
Luis Vargas
1mo
Working in cybsersecurity gives you job security
Shubham K.
1mo
It’s because cyber is a cost center and not a revenue generator like software engineering pushing out features like recall. We need to change that
Artem Baranov
1mo
"Microsoft will make organizational changes and hold senior leadership directly accountable for cybersecurity as part of an expanded initiative to bolster security across its products and services." 🤔 https://www.darkreading.com/application-security/microsoft-will-hold-executives-accountable-for-cybersecurity
Sinisa Medic
1mo
In a world that orbits around shareholder value, it's exceptionally challenging to strike a balance where cybersecurity is genuinely prioritized. It seems that even at the C-level, there's a scarce incentive to focus on reputation sustainably. Engage daily with the experts, and you'll sense a growing weariness towards the buzz around 'AI'—despite its continuous echo in marketing campaigns. It begs the question: are we living in a bubble, or is the rest of the world?
Godha B.
1mo
I am sure some sensible security folks might have warned/discouraged/“recommended” not to do it but like it happens in the corporate world, they decided legal, PR, and “Insurance” have it all covered so the “risk” was lowered to a medium after “sign-off” from the bigwigs and lo and behold Marketing and Sales were happy that their projections and promises of unicorns and chocolate river were delivered. And project managers elated about delivering under budget, and on time with projected cost savings ✊🏼
Experienced Technology Leader | Expert in Data & AI | Thought-Leader in Digital Transformation and Innovation | Strategy and Solutions-Oriented | Empowering Integrity, Elevating Humanity | Open to New Opportunities
1moThe problem isn’t the idea but the implementation, lacking security, and some other factors. Add to that a company with damaged trust that hasn’t made changes to rebuild or repair the lost trust. So, my question to the cybersecurity experts - what’s the solution? The current system doesn’t work either. Is it better to give away the whole bank vault or a single account? Are we better off self-accountable and empowered or reliant upon others who keep failing to do their jobs, no transparency, everyone exposed and vulnerable with no choice, and the entire market taken advantage of?