Google has released a documentary video series on YouTube called Hacking Google..
No, it's not a masterclass in breaching security defenses at Google, but rather an insight into how security teams within Google protect the business from cyber attacks: the Threat Analysis Group, Project Zero, and the Red Team.
The latter actually does hack Google, or attempt to, using the same techniques that real attackers would. There are six episodes in all, none of which run for longer than 20 minutes.
Don’t chloroform the security guards
My favorite episode, because truth be told, I'm definitely a hands-on hacking kind of a person, is the third: Hacking Google - Red Team. This 17-minute video is a great insight into how this particular security team is employed by Google to hack Google from the inside. Don't think these folk spend their days performing vulnerability scans or performing run-of-the-mill penetration tests.
Nope, a red team gets to play (almost) as the real threat actors play. The brief is a fairly broad one, trying and compromise the security of Google products and services by (almost) any means necessary. So, what's with the almost?
