[SamuelAdams]

Project Zero is a team of security analysts employed by Google tasked with finding zero-day vulnerabilities.

https://en.wikipedia.org/wiki/Project_Zero?wprov=sfti1

Don’t think of these folks as “google” employees. Think of them as “really good hackers with corporate sponsorship”. They look for flaws in everything - windows, apple, Linux, and google software. You should read some earlier blog posts, they’re really high quality.

[ushakov]

how does Google benefit from this?

[hn_throwaway_99]

A large percentage of the planet has personal sensitive data stored by Google. If that data leaks, even due to a bug in another company's product through which Google has no fault, Google suffers. Google greatly benefits by having a secure Internet.

[netizen-936824]

On this note, has google ever had a breach? I actually can't think of one off the top of my head, which is impressive for a company like google with so much data and such a large footprint

Either their security or PR is great (or both?)

[sophacles]

There was this one: https://en.wikipedia.org/wiki/Operation_Aurora

It seems that the level of access gained could have been used for a larger breach but fortunately the attackers had different motives.

[robocat]

Google banned Windows throughout the organisation in 2010 due to this (with some well fenced exceptions where Windows was unavoidable).

1. Google will do costly things to be secure.

2. At the time I did not hear of any other organisation following Google’s lead.

3. They did not reverse the ban later.

[joshuamorton]

Also, iirc P0 was created as a result of that breach.

[rodgerd]

> has google ever had a breach?

They've been completely breached by Chinese agencies in the past, and IIRC the revelations in the Snowden leaks prompted them to redo their entire internal networking layout because of concerns about state-level spying.

On the Android front they keep tightening up access (removing more power from root, more use of SELinux and other controls) because of breaches in one form or another.

[helsinki]

https://news.ycombinator.com/item?id=5982313

[RandallBrown]

Google makes money when people use the Internet. By making it safer to use the Internet, more people will use it and Google will make more money.

[rwaksmunski]

They are very often on the receiving end of state level shenanigans. Finding bugs in software they use, helps them stay secure. Not to mention the goodwill earned.

[exikyut]

Windows/macOS/Linux aren't the operating system any more, the browser is.

And the browser's job is to be constantly online the whole time and download and execute JavaScript that gets dynamically optimized for your CPU architecture using one of the fastest runtime compilers ever made (aNd WhiCh MiGhT HaVe BuGs iN iT), and then your CPU directly, blindly executes the result, with as little bounds-checking as the runtime compiler thinks it can get away with so it runs as fast as possible.

Zooming out somewhat, the new OS paradigm is the continuous download and execution of absolutely arbitrary code, all day, every day, from sources including hacked ad servers, successful social engineering campaigns and your blog.

And Chrome has like ~70% market share.

Because public company and "legally bound to create value for shareholders" and all that, it is very much in Google's interest that they maintain that market share because that lets them serve more ads.

So that's ultimately the reason. Google wants the world's most secure platform so they can guarantee their ads business.

[rodgerd]

The NSO are as much Google's enemy as Apple's.

[codezero]

Google employs a lot of people using Apple hardware.

[Juliate]

Among others, what jumps to me: more stability on the network and terminals (better for their business), goodwill, attracting talent.

[derwiki]

We’re talking about them right now

[ushakov]

they’re still evil though?