The New York Times chronicles Yahoo’s internal battle to boost its cybersecurity efforts, according to several current and former employees who asked to remain anonymous. Yahoo’s security team, named the “Paranoids,” made requests for financing to boost the tech company’s security infrastructure, but were often denied by Yahoo’s CEO, Marissa Mayer, they contend. The report also details the company’s hesitance to adopt security protocols based on fears it would harm the user experience. “Ms. Mayer also rejected the most basic security measure of all: an automatic reset of all user passwords, a step security experts consider standard after a breach. Employees say the move was rejected by Ms. Mayer’s team for fear that even something as simple as a password change would drive Yahoo’s shrinking email users to other services,” the report said. Yahoo was also late to start bug bounty programs and to react to the 2013 Snowden leaks, the report states. (Registration may be required to access this story.)
Full Story