Who would you say has the creme de la creme of software security talent, and can you with a straight face say that they have not been compromised at some level?
Security is hard, but I wonder if it's P VS NP?
Security is hard, but I wonder if it's P VS NP?
I'd actually say security research firms have pretty high quality security people, however, and not just the tech giants.
1. http://www.iphoneincanada.ca/news/1password-open-letter-bank...
Sure, the ones you mentioned have the biggest paychecks. But they won't give you indemnity and extended resources to find weaknesses in critical infrastructure. Some people like breaking bigger toys.