Netflix Open Sources Internal Threat Monitoring Tools 20
alphadogg (971356) writes Netflix has released three internal tools it uses to catch hints on the Web that hackers might target its services. "Many security teams need to stay on the lookout for Internet-based discussions, posts and other bits that may be of impact to the organizations they are protecting," wrote Andy Hoernecke and Scott Behrens of Netflix's Cloud Security Team. One of the tools, called Scumblr, can be used to create custom searches of Google sites, Twitter and Facebook for users or keywords.
Re: (Score:1)
Unfortunately, the NSA is the threat, and there is nobody monitoring them.
I wonder why they released these. (Score:2)
Does Netflix have a tradition of free / open source software contribs?
Re: I wonder why they released these. (Score:5, Interesting)
Their github account has 3 pages worth of stuff and they put a lot back into FreeBSD, too.
Re: (Score:2)
Good to know; nice to see more companies giving back to the opensource community.
I wonder why they released these. (Score:4, Informative)
Yes. They just keep releasing one neat tool after the other as open source:
https://github.com/Netflix/
Re:I wonder why they released these. (Score:5, Informative)
I work at Netflix (and manage a software development group).
The general approach to OSS can generally be summarized as "if it's not core product (algorithms, recommendations, etc), why haven't you open-sourced it yet?"
It's one of the (very many) nice parts of the job.
Re: (Score:2)
That's great to hear; wish my own company thought that way. We have talented developers but limit them to writing mostly reporting, integration & user interface code and spend megabucks buying commercial software when solid, stable free / open alternatives already exist.
Re: (Score:3)
For all you know, he's on the team that's trying to stop you from using chromium on netflix.
The biggest risk to Netflix (Score:1)
Is Netflix, Amazon AWS and Xbox. Taken together any fucking thing you can imagine will or won't happen.
Netflix in news (Score:2, Interesting)
Why is it this is the only article I can really find online about Netflix petitioning the FCC to now allow the Comcast TWC merger?
http://www.engadget.com/2014/08/26/netflix-fcc-petition-time-warner-cable-comcast/
Re: (Score:2)
Huh? You've linked to an article of Netflix asking for the merger to be blocked.
The three tools (because TFA article is, well...) (Score:5, Informative)
#1: Scumblr: Ruby-based, web-configured application that allows searching the Internet for sites and content of interest. Includes libraries for sites like Google, Facebook, and Twitter.
#2: Workflowable: Ruby gem that routes different kinds of detections from Scumblr to specific processes.
#3: Sketchy: takes screenshots of web finds for Scumblr.
(I might be a little off, but the Karma gods will surely reward me.)
Only problem is the name (Score:1)
Honestly they couldn't change the name before open sourcing it?
I cannot see any company saying oh yeah let's use scumblr. And it might even be a good tool, who knows.
I wouldn't even want to propose it, and my customer actually uses similar systems.
Re: (Score:1)
So fork it and rename it to CorporateGoodwillProtector, then suggest that to your customer.
Re:Only problem is the name (Score:4, Informative)
It's an artifact of how Netflix does OSS: If you're the engineer who open-sources a product, you're the person who names the product. Sometimes that works better than others :)
Re: (Score:1)