Hackers Were Inside Citrix for Five Months

Re:Hackers Were Inside Citrix for Five Months by chaps on Wednesday February 19, 2020 @03:29PM (#22369713)

Oh my, yes. I've had very similar privileges, and it's almost universally a complete shitshow. It doesn't really ever matter what the age, size, skillsets, etc, of the company are, either. It's just.... all bad.

Example: one of the first questions I try to ask when starting a new job is, "Can I have an accurate list of the physical hosts and the IP of the management NIC?", and the answer is usually some form of, "We don't maintain a list like that, you'll have to grab everything from [pick two]: (DNS|Spreadsheets|Monitoring System|Configuration Management|nmap|ARP tables).". Then, because of course, lists don't match with each other, so literally no source of truth for what hosts exist in a network exists. Even for production! It's truly maddening.

[ Parent | on HN ]

Re:Hackers Were Inside Citrix for Five Months by jiggawatts on Wednesday February 19, 2020 @03:49PM (#22369906)

My follow-up question is: "If you don't have a list, how do you apply critical security updates to the lights-out management firmware?"

Answer: "The light-ou... what?"

[ Parent | on HN ]

Re:Hackers Were Inside Citrix for Five Months by anchpop on Wednesday February 19, 2020 @10:45PM (#22372518)

I think I'm missing the pun here, can someone explain?

[ Parent | on HN ]

Re:Hackers Were Inside Citrix for Five Months by chaps on Wednesday February 19, 2020 @11:24PM (#22372659)

Not a pun - OP's talking about these[1], which essentially gives an IP address to a serial port, often internet-facing. The joke is about how clueless management is about their infrastructure.

https://en.wikipedia.org/wiki/HP_Integrated_Lights-Out

[ Parent | on HN ]

Re:Hackers Were Inside Citrix for Five Months by chaps on Wednesday February 19, 2020 @04:41PM (#22370380)

I'm stealing that. :)

[ Parent | on HN ]