Alex Stamos

I generally use 'threat intelligence' when I'm talking about a product packaged and sold by a dedicated commercial entity and 'information sharing' as something that happens between security teams at trusted parties without renumeration.

A lot of the people who are hacking on behalf of governments are doing so on a contract basis. And they also do other things. They will hack on behalf of spammers, and will just be hired for a specific job.

I have spent my career building and improving secure, trustworthy systems, and I am very proud to be working on security at Yahoo.

I think... all of the best public cryptographers in the world would agree that you can't really build back doors in crypto. That it's like drilling a hole in the windshield.

Developing safe products for people around the world will mean accounting for a much wider variety of devices, networks, infrastructure, and political environments.

Almost every OS X server service offers weak or broken authentication mechanisms.

There are a lot of Yahoo users who live in countries where their freedom of expression and freedom of association is not respected and where the government is trying to put malware on their computers to track them.

Yahoo is a global technology company that provides personalized products and services, including search, advertising, content, and communications in more than 45 languages in 60 countries. As a pioneer of the World Wide Web, we enjoy some of the longest-lasting customer relationships on the Web.

While preventing the distribution of malware through advertising is one part of the equation, it's important to address the entire malware ecosystem and to fight it at each phase of its life cycle.

I think anybody who uses email in the center of our life needs encryption.

If you break into an oil company and you're able to find out what gas leases they're interested in, that could be a multi-billion dollar swing in value for one company over another a multi-decade period.

For most companies, they don't want to ever talk about security unless it's an absolute emergency and they've had a breach. And I think that's a mistake.