Alex Stamos and 19 people who knew him professionally over the course of his career talk about his work at various startups, Yahoo, Facebook, and now, Stanford
@alexstamos http://finance.yahoo.com/... Jason Kint / @jason_kint : This entirely misses the point. The CA issue is FB had a consent decree to report this and has obfuscated, covered-up decision-making and knowledge around it. Data was harvested by 3rd party, propped up by CA, then sold and used for paid advertising on FB. That's nuts. http://twitter.com/... Mathew Ingram / @mathewi : Fascinating profile of Alex Stamos, former head of security at Facebook — lots of in-depth info about Russian activity, which Stamos discovered and alerted senior management about, only to be ignored and/or criticized http://finance.yahoo.com/... Mathew Ingram / @mathewi : From Stamos: “There are twenty Cambridge Analyticas that still exist, they're just not dumb enough to steal data from Facebook. They legally buy it from Equifax and Transunion and Acxiom, and Facebook and Google allow them to then hypertarget ads.” https://finance.yahoo.com/... Katie Moussouris / @k8em0 : Longread: Good @alexstamos profile. Fun to read quotes from AtStake pals too. Fascinating to see which of my quotes made it. “I thought of [Yahoo] as the crumbling aqueducts of Rome,” says Moussouris, of Luta Security “Securing it was going to take years.” http://finance.yahoo.com/... Daniel Roberts / @readdanwrite : 3 days after the election, Zuckerberg said “I think the idea that fake news on Facebook influenced the election is pretty crazy.” Alex Stamos tells @YahooFinance, “It was clear to me then that he had not been getting briefed on anything we were finding.” http://finance.yahoo.com/... http://twitter.com/... Thanks: @jpmanga
Context & Ripple Effects
This profile closes a loop that began with Stamos's tenure as Yahoo's CISO securing properties serving over a billion users, and runs through his time as Facebook's security chief. By 2018 he was publicly disputing the company's account of his own departure, telling the Washington Post that no one blocked him from examining Russian interference but that Facebook's comms strategy of minimization and denial was wrong — and that Zuckerberg wasn't being briefed on what the security team found.
The Yahoo Finance piece, built from 19 professional colleagues, lands between his move to Stanford and the launch of the Internet Observatory there, later backed in part by $5M from Craig Newmark. It matters because it frames Stamos himself as the through-line: the insider who discovered Russian activity, was ignored, left, and now studies platform abuse from academia — a trajectory he continues to defend and refine in later Q&As on Zuckerberg's free-speech positions and on whether disinformation's impact has been overstated.
First-order effects
- Stamos gains an independent academic platform at Stanford from which to narrate the Facebook security story on his own terms, directly contesting the company's minimization-and-denial account.
- Facebook faces renewed scrutiny over the Cambridge Analytica episode, with Jason Kint arguing the real issue is the company's consent-decree reporting obligations, not just third-party data harvesting.
Second-order effects
- The data-broker layer — Equifax, TransUnion, and Acxiom legally selling data that flows into Facebook and Google hypertargeting — gets pulled into the accountability conversation alongside the platforms themselves.
- Facebook's handling of internal security findings becomes a template case that shapes how other platforms' security leadership communicates — or declines to — about politically sensitive discoveries.
Third-order effects
- If the Stamos arc is representative, senior security executives are becoming an independent accountability layer: leaving platforms for funded university observatories that monitor online abuse the companies themselves won't examine.
- The pattern points toward platform trust disputes being settled less by internal comms and more by a standing ecosystem of ex-insiders, academics, and regulators with subpoena power — with the consent-decree question at Facebook a likely precedent.
The trend: Platform security leadership is migrating from inside companies to funded academic observatories, turning former insiders into the independent watchdogs the platforms' own communications strategies preclude.