Skip to content

Dark Capabilities: When Tech Companies Go Offensive

Greg ContiTom Cross

Explores the structural, offensive technical capabilities inherent in modern tech platforms and the risks posed when companies, insiders, or nation-states weaponize them.

Summary

The Latent Power of Modern Tech Platforms

Global technology companies operate cloud infrastructures, mobile operating systems, and connected consumer hardware with pervasive administrative capabilities. Beyond their intended commercial functions, these platforms possess immense structural power to conduct targeted surveillance and digital operations.

Examples of Platform Reach and Data Access

Real-world glimpses illustrate this capability: cloud providers scanning private customer storage, rideshare platforms tracking user location beyond active rides, robotic vacuums mapping internal home layouts, and endpoint agents deploying software updates globally within minutes.

Weaponization by Insiders and Adversaries

The architectural access built into centralized technology platforms represents an attractive target for malicious insiders, coerced employees, and advanced state-sponsored threat actors seeking widespread access without developing traditional zero-day exploits.

Policy, Governance, and Platform Accountability

Mitigating systemic risks from tech platform power requires robust technical oversight, independent auditing, decentralized trust architectures, and regulatory frameworks governing administrative data access.

Related talks