Re: Firewalls
"We do not rely on internal network segmentation or firewalling as our primary security mechanisms"
Doesn't say they don't use firewalls. Just says they're not 1990s about it like the arrogant believers in eggshell security. Willing to bet Google are at the forefront of automated incident response. None of this "nothing can get through MY defenses" machismo. Instead: "things WILL get through, but we have crazy quarantine and RCA responses automated into every layer".
You know, like actual security experts would approach things. Anyone who uses firewalls as the primary security mechanism either doesn't have an adequate budget, or doesn't care enough about the data...
(Hell, even salting and hashing your passwords in a database is accepting that firewalls can and do fail to keep the bad guys out. C'mon!...)
Biting the hand that feeds IT
