News for hackers. Stuff that matters.

A comment on U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise. Parent comment

Re:U.S. Treasury, Commerce Depts. Hacked Through SolarWinds ... by mcguire on Monday December 14, 2020 @01:27PM (#25421167)
Willy-nilly dropping tools into core infrastructure is largely how government IT works.

Corporate IT, too, from what I've seen.

[ Parent | on HN ]
Re:U.S. Treasury, Commerce Depts. Hacked Through SolarWinds ... by notabee on Monday December 14, 2020 @02:15PM (#25421843)
That's very true, In my limited experience, they are tools sold to non-technical leadership that are either thrown to technical staff to deal with and implement or require letting yet another vendor have network access to manage. It adds up to a hot mess.
[ Parent | on HN ]
Re:U.S. Treasury, Commerce Depts. Hacked Through SolarWinds ... by mcguire on Monday December 14, 2020 @02:24PM (#25421944)
My favorite comment from a (authentication system) vendor, during a meeting where we were trying to figure out why users were having trouble logging into an internal app: "Do I have a charge code for this?"
[ Parent | on HN ]