#OSQUERY LOGO SOFTWARE#

The goal is to make the underlying security completely unnoticeable to the developer. In a more proactive sense, Facebook's security squad is always working to protect the underlying infrastructure, making sure that the data that developers are working with is secured on every level. When a developer flags a piece of the code they're working on as requiring review in Facebook's project management tracking tools, a security engineer rushes off to do a review as soon as they possibly can - while the developer is free to keep on hacking away at the code. There's a team of security pros at Facebook, Reed says, whose main job is to stand by until a call comes in. 'We put the burden on ourselves,' Reed says.įacebook's sheer size and scale makes it a target. But the next best thing is to lock everything down behind the scenes. If every developer at Facebook came to him whenever they got a suspicious e-mail, that would be ideal.

#OSQUERY LOGO SOFTWARE#

A crack teamįacebook software and security engineer Ted Reed says that the goal is to make security part of the normal workflow. 'You still have to move fast, there's now just a cost to moving fast,' says Facebook open source software engineer Christine Abernathy. So Facebook turned the usual security process on its head, so its developers can keep moving fast without breaking anything too serious. Developers want to move fast, but the security team needs to make sure that the code they're writing isn't introducing new risks into the system. 'Security' and 'moving fast' are usually exact opposites. Given that Facebook has a well-known mandate to 'move fast and break things,' this presents a dilemma.

Thanks to its sheer scale, there are many potential avenues for hackers to attack.Īnd thanks to its tremendous global reach, there are also many well-funded bad guys who would take advantage of any chinks in Facebook's armor. Account icon An icon in the shape of a person's head and shoulders.

Osquery logo